Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.mft
File: llpqv9sIdPL-wiYs3qM3Otyy3FU.mft (raw, json)
Hash identifier: o4dSEfyxFuQndOYN8fL1E/lY7yfhARa0+ZToBqP1754=
Subject key identifier: E0:2A:3C:82:75:23:41:1D:9C:64:F4:EA:F1:93:F5:B6:8D:56:FF:28
Authority key identifier: 96:5A:6A:BF:DB:08:74:F2:FE:C2:26:2C:DE:A3:37:3A:DC:B2:DC:55
Certificate issuer: /CN=965a6abfdb0874f2fec2262cdea3373adcb2dc55
Certificate serial: 019848C0563E0306EE01C7D61A362449B236
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/llpqv9sIdPL-wiYs3qM3Otyy3FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.mft
Manifest number: 0D66
Signing time: Sat 26 Jul 2025 22:00:21 +0000
Manifest this update: Sat 26 Jul 2025 22:00:21 +0000
Manifest next update: Sun 27 Jul 2025 22:00:21 +0000
Files and hashes: 1: jx2XkRRJ1Pen6eLqWGsTXmBaP9o.roa (hash: yl4Uer3PsgYBYL8law/V2acfxxr/ONbHAHnzrh/MmEQ=)
2: llpqv9sIdPL-wiYs3qM3Otyy3FU.crl (hash: Pn0Ek98E6y98ElqhqfFL7e59lTu3Woj2rzbzbpWt96A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.mft
rsync://rpki.ripe.net/repository/DEFAULT/llpqv9sIdPL-wiYs3qM3Otyy3FU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 22:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:56:3e:03:06:ee:01:c7:d6:1a:36:24:49:b2:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=965a6abfdb0874f2fec2262cdea3373adcb2dc55
Validity
Not Before: Jul 26 22:00:21 2025 GMT
Not After : Jul 27 22:00:21 2025 GMT
Subject: CN=e02a3c827523411d9c64f4eaf193f5b68d56ff28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:24:47:09:69:3d:19:7e:a3:5c:2d:de:39:b6:
01:1f:1e:f3:4f:06:76:17:e8:b1:6e:11:d6:74:7e:
9a:7f:7f:52:86:62:3b:07:0a:1c:0b:29:77:88:76:
35:ff:3b:d7:bf:fd:c1:50:09:4e:51:bb:4a:bb:10:
4c:4b:65:dc:b5:37:d5:9e:8c:10:a5:93:00:a0:51:
72:9b:f0:b6:cf:8a:ca:be:38:ef:b0:99:91:b7:67:
86:98:5d:42:da:2a:4b:4f:07:0e:56:14:f9:eb:a6:
b1:58:92:b8:96:2e:4f:54:3c:10:cd:eb:b7:da:02:
b9:27:b5:22:98:87:e6:f8:8c:0f:c6:e3:d5:f5:66:
99:1a:79:44:87:98:8b:e5:ed:dc:82:57:78:24:ae:
ff:4e:01:61:fb:b7:72:be:c4:2e:0e:51:64:27:f4:
0f:d7:02:75:a2:32:4e:fe:b0:64:5a:0c:23:06:51:
f5:8c:5a:6d:7d:97:79:e4:ff:4b:78:9e:80:91:ec:
73:c5:e5:97:7e:75:e9:6d:ea:8d:6b:19:93:5b:52:
da:5e:9e:d9:1f:41:19:47:c4:24:aa:29:86:5c:08:
6e:dc:64:40:dd:9f:fa:f6:f1:00:14:b9:81:63:c6:
c7:19:9e:1a:5a:51:48:74:34:02:83:5d:2b:4d:6b:
0f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:2A:3C:82:75:23:41:1D:9C:64:F4:EA:F1:93:F5:B6:8D:56:FF:28
X509v3 Authority Key Identifier:
keyid:96:5A:6A:BF:DB:08:74:F2:FE:C2:26:2C:DE:A3:37:3A:DC:B2:DC:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/llpqv9sIdPL-wiYs3qM3Otyy3FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:61:d0:eb:52:a6:92:98:5a:27:b7:dc:6c:6a:0e:d5:27:45:
d6:66:93:69:02:dc:8b:4b:66:05:12:cb:34:3a:ec:f6:06:25:
d0:61:f3:4d:ea:39:bb:3c:68:0b:08:4b:c1:ac:dd:53:95:3b:
da:9a:6d:62:d6:e5:12:d0:e4:ea:ec:a4:11:ca:32:8a:2d:49:
d5:f7:6d:ee:5f:44:e2:c9:b3:55:80:e7:a4:6e:8e:38:bb:7b:
34:22:79:07:f7:6f:3a:ec:d9:73:51:14:18:6d:4f:0b:64:30:
33:dc:f1:e4:fb:98:18:a3:95:04:0b:ba:1e:67:f4:f2:1e:5c:
86:48:5c:11:9a:d1:f3:b8:d8:23:3d:53:92:bc:fa:f7:c0:f3:
de:59:ff:9f:de:0e:de:ab:01:6e:9d:5a:02:2f:c0:01:6d:1a:
93:2a:7c:83:b7:db:3c:61:39:92:3c:ea:ce:89:60:e2:ab:4e:
6c:eb:94:54:28:ab:5d:d0:47:b6:a3:3c:ce:c9:d7:60:5a:14:
ec:bf:8b:3b:8e:f8:2a:5d:dd:c0:ac:81:05:02:32:ec:91:38:
6e:83:5f:98:f3:d8:27:da:5c:2e:6c:69:71:34:ca:49:79:e1:
df:d9:f8:dd:38:67:cf:ec:c1:dd:8b:87:85:e5:f9:f0:9f:49:
ce:7b:71:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhIwFY+AwbuAcfWGjYkSbI2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2NWE2YWJmZGIwODc0ZjJmZWMyMjYyY2RlYTMzNzNhZGNi
MmRjNTUwHhcNMjUwNzI2MjIwMDIxWhcNMjUwNzI3MjIwMDIxWjAzMTEwLwYDVQQD
EyhlMDJhM2M4Mjc1MjM0MTFkOWM2NGY0ZWFmMTkzZjViNjhkNTZmZjI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwyRHCWk9GX6jXC3eObYBHx7zTwZ2
F+ixbhHWdH6af39ShmI7BwocCyl3iHY1/zvXv/3BUAlOUbtKuxBMS2XctTfVnowQ
pZMAoFFym/C2z4rKvjjvsJmRt2eGmF1C2ipLTwcOVhT566axWJK4li5PVDwQzeu3
2gK5J7UimIfm+IwPxuPV9WaZGnlEh5iL5e3cgld4JK7/TgFh+7dyvsQuDlFkJ/QP
1wJ1ojJO/rBkWgwjBlH1jFptfZd55P9LeJ6AkexzxeWXfnXpbeqNaxmTW1LaXp7Z
H0EZR8QkqimGXAhu3GRA3Z/69vEAFLmBY8bHGZ4aWlFIdDQCg10rTWsPMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOAqPIJ1I0EdnGT06vGT9baNVv8oMB8GA1UdIwQY
MBaAFJZaar/bCHTy/sImLN6jNzrcstxVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGxwcXY5c0lkUEwtd2lZczNxTTNPdHl5M0ZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8xMjQxN2YtNzY2NS00MDk4LWEzMzgt
NDk0OWIxZTJiNjBmLzEvbGxwcXY5c0lkUEwtd2lZczNxTTNPdHl5M0ZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC8xMjQxN2YtNzY2NS00MDk4LWEzMzgtNDk0OWIxZTJiNjBm
LzEvbGxwcXY5c0lkUEwtd2lZczNxTTNPdHl5M0ZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiWHQ61Km
kphaJ7fcbGoO1SdF1maTaQLci0tmBRLLNDrs9gYl0GHzTeo5uzxoCwhLwazdU5U7
2pptYtblEtDk6uykEcoyii1J1fdt7l9E4smzVYDnpG6OOLt7NCJ5B/dvOuzZc1EU
GG1PC2QwM9zx5PuYGKOVBAu6Hmf08h5chkhcEZrR87jYIz1Tkrz698Dz3ln/n94O
3qsBbp1aAi/AAW0akyp8g7fbPGE5kjzqzolg4qtObOuUVCirXdBHtqM8zsnXYFoU
7L+LO474Kl3dwKyBBQIy7JE4boNfmPPYJ9pcLmxpcTTKSXnh39n43Thnz+zB3YuH
heX58J9JzntxyQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 05:58:22 2025 by rpki-client