Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/LL12aIuHwDkUriouFJDC8ekUFmE.mft
File: LL12aIuHwDkUriouFJDC8ekUFmE.mft (raw, json)
Hash identifier: j7zupJp+5KUw9pvl2RK90IDRYbadf+lupCOy9VDjUXw=
Subject key identifier: 97:70:5C:42:F9:41:2C:3B:70:9D:D2:5D:8B:DE:BF:0D:78:F6:A2:FF
Authority key identifier: 2C:BD:76:68:8B:87:C0:39:14:AE:2A:2E:14:90:C2:F1:E9:14:16:61
Certificate issuer: /CN=2cbd76688b87c03914ae2a2e1490c2f1e9141661
Certificate serial: 0199FB0EE5D479D61A7E7561D6D2FA787154
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LL12aIuHwDkUriouFJDC8ekUFmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/LL12aIuHwDkUriouFJDC8ekUFmE.mft
Manifest number: 06BB
Signing time: Sun 19 Oct 2025 06:01:21 +0000
Manifest this update: Sun 19 Oct 2025 06:01:21 +0000
Manifest next update: Mon 20 Oct 2025 06:01:21 +0000
Files and hashes: 1: H-Yt5FoKzZFkLIkaFu-xWw_buGE.roa (hash: FOTFvdLDXstlOIfQpA+rMFC4iGbO8vZig/vCbn7JvL8=)
2: LL12aIuHwDkUriouFJDC8ekUFmE.crl (hash: nY9axTHg4oewaIacRJLSyxuKa439ySm0w+eExVLWUfk=)
3: Vl4-1Y5QnMxXeb8Ux6oMHZHD4uM.roa (hash: U+fPZyhr/WfWEB/lCPa7RbywJB7YzK5Ff1NgjRWLMzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/LL12aIuHwDkUriouFJDC8ekUFmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/LL12aIuHwDkUriouFJDC8ekUFmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LL12aIuHwDkUriouFJDC8ekUFmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0e:e5:d4:79:d6:1a:7e:75:61:d6:d2:fa:78:71:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cbd76688b87c03914ae2a2e1490c2f1e9141661
Validity
Not Before: Oct 19 06:01:21 2025 GMT
Not After : Oct 20 06:01:21 2025 GMT
Subject: CN=97705c42f9412c3b709dd25d8bdebf0d78f6a2ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:09:46:5f:05:38:25:e8:6c:29:0c:ed:e3:0a:
43:a7:19:1c:5e:88:fa:50:32:04:c8:5e:e3:09:10:
7f:3c:64:9e:01:d0:d6:61:30:19:65:64:52:21:5d:
12:97:b1:a5:e0:e0:93:25:b7:27:36:3d:d5:ae:bd:
92:93:9f:85:9f:aa:7b:58:79:94:56:3b:3d:d8:eb:
5f:6a:d1:63:8d:34:2c:6b:47:d4:0f:aa:cb:a2:a3:
a1:95:ab:63:f1:b5:b2:58:2b:c8:0a:48:54:58:7d:
5c:53:bb:9b:1e:11:0b:51:95:39:87:4b:f1:93:98:
a3:75:01:a0:66:1b:f7:4b:6d:11:06:1b:f4:e8:ab:
b6:c7:cf:1b:5f:93:6c:e8:e2:a6:ae:31:77:92:bd:
5f:70:f7:e2:db:cd:c6:b8:47:cf:0a:2e:af:a9:21:
15:49:bf:07:89:28:bd:6d:32:48:89:0d:96:83:fb:
63:e8:09:97:62:86:4c:80:4b:c5:b3:4b:ba:5d:de:
26:dd:c8:44:83:4e:53:53:b7:af:fc:50:e2:93:c1:
65:12:5b:db:c9:51:e9:73:c6:3c:ba:7b:d7:8e:d9:
60:05:50:82:6e:33:ba:c6:37:d3:b5:fa:90:97:12:
ee:3d:76:7d:8f:3a:b6:71:82:b1:45:02:63:96:55:
ab:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:70:5C:42:F9:41:2C:3B:70:9D:D2:5D:8B:DE:BF:0D:78:F6:A2:FF
X509v3 Authority Key Identifier:
keyid:2C:BD:76:68:8B:87:C0:39:14:AE:2A:2E:14:90:C2:F1:E9:14:16:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LL12aIuHwDkUriouFJDC8ekUFmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/LL12aIuHwDkUriouFJDC8ekUFmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/LL12aIuHwDkUriouFJDC8ekUFmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:06:82:64:b7:c0:ad:9b:1f:8b:0f:3a:c2:1b:00:ff:82:39:
85:41:e5:09:6e:f4:08:7d:45:db:aa:91:69:c1:65:ad:5e:92:
79:c8:91:6f:85:1f:5f:42:0c:64:80:bd:a5:6c:42:ef:01:e9:
16:ad:9c:6c:51:6b:8f:f7:0e:10:9a:5d:f7:d9:44:1a:47:b1:
20:d5:4a:6a:2f:1e:f4:39:71:ae:91:47:ba:9b:a8:bb:03:a8:
e3:df:b4:09:97:9d:80:d5:58:1e:d2:b1:4b:3b:0f:70:1a:31:
36:6b:62:f7:8a:a6:d9:56:d0:fd:47:d8:7b:6e:9f:c1:ba:3b:
0c:c9:87:fe:10:e5:22:e1:2d:3d:c6:05:bb:bf:ac:df:5e:ed:
23:28:70:20:1e:18:7f:d1:12:f6:65:32:77:3c:87:8c:12:b3:
08:29:e6:7c:06:a5:11:84:25:f6:0f:e8:20:7f:08:18:7f:0d:
ac:75:0a:2c:3f:ba:ad:1b:3c:11:1b:99:f2:30:50:95:9f:58:
fe:80:c4:49:39:f2:eb:ee:03:dd:78:1d:64:8f:e1:30:19:ad:
8a:33:ac:c5:e7:aa:c6:06:cf:d8:5b:31:a6:68:72:a6:eb:47:
c4:c2:78:7d:8a:cf:df:88:63:e5:ff:35:ab:f0:e8:c1:f5:22:
64:47:77:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:39:27 2025 by rpki-client