Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.mft
File: llpqv9sIdPL-wiYs3qM3Otyy3FU.mft (raw, json)
Hash identifier: lfuUNzBwRcWUyiFsUo0wCWgRblKoLF43C7BWEzL60hU=
Subject key identifier: 56:DA:BA:2E:50:A7:71:FA:97:00:B3:EF:AD:E7:0B:14:23:C3:C0:53
Authority key identifier: 96:5A:6A:BF:DB:08:74:F2:FE:C2:26:2C:DE:A3:37:3A:DC:B2:DC:55
Certificate issuer: /CN=965a6abfdb0874f2fec2262cdea3373adcb2dc55
Certificate serial: 019A23D307019821045B02D8A3C51828CD1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/llpqv9sIdPL-wiYs3qM3Otyy3FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.mft
Manifest number: 0E5C
Signing time: Mon 27 Oct 2025 04:00:23 +0000
Manifest this update: Mon 27 Oct 2025 04:00:23 +0000
Manifest next update: Tue 28 Oct 2025 04:00:23 +0000
Files and hashes: 1: jx2XkRRJ1Pen6eLqWGsTXmBaP9o.roa (hash: yl4Uer3PsgYBYL8law/V2acfxxr/ONbHAHnzrh/MmEQ=)
2: llpqv9sIdPL-wiYs3qM3Otyy3FU.crl (hash: pKWNq1Wk2xQcBNtzdD62LWAx84tudtm9h54Gi78gudk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.mft
rsync://rpki.ripe.net/repository/DEFAULT/llpqv9sIdPL-wiYs3qM3Otyy3FU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 04:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:d3:07:01:98:21:04:5b:02:d8:a3:c5:18:28:cd:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=965a6abfdb0874f2fec2262cdea3373adcb2dc55
Validity
Not Before: Oct 27 04:00:23 2025 GMT
Not After : Oct 28 04:00:23 2025 GMT
Subject: CN=56daba2e50a771fa9700b3efade70b1423c3c053
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:71:e0:a2:f4:8f:7f:33:17:34:8e:b0:79:cd:
ac:e9:01:ba:32:73:e3:9c:1c:9a:3b:ce:51:7a:0d:
fd:1d:a4:1f:e4:95:ec:d2:39:42:c8:a2:0e:bf:5c:
e2:da:16:7e:5d:9c:49:72:53:a0:82:c1:69:03:ad:
29:a7:8c:1c:9f:cc:83:5c:d6:c3:f2:65:c5:a1:58:
1b:8d:71:b0:68:cb:94:2f:e0:48:8f:15:41:bb:6c:
9d:4b:10:e7:cb:15:73:e7:6a:bf:e7:86:3f:6e:d5:
fc:3e:81:bf:6d:91:47:44:e5:e9:45:52:c7:51:2c:
2d:82:ca:91:e2:85:30:69:7a:03:1a:9d:eb:05:ea:
54:7c:ac:b9:34:29:2c:55:84:58:c5:b7:8e:3d:bb:
3b:aa:9c:f6:79:06:d6:71:59:90:c3:8f:e3:07:e7:
aa:b8:c0:b5:61:e1:55:34:1e:2b:a0:a5:94:ef:8f:
0c:d8:7f:b4:8c:03:bd:68:fb:4f:9d:68:52:3e:c8:
7e:8a:ab:5c:70:07:85:5a:49:8a:61:6b:6f:18:66:
28:9d:2a:f9:6a:42:5a:39:a9:f2:a4:a2:8a:1d:b5:
ff:53:dd:02:f8:87:e4:35:ae:55:11:92:e7:a0:be:
4c:88:2a:f5:f2:5f:fc:2f:08:80:38:b9:b0:e2:0a:
e8:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:DA:BA:2E:50:A7:71:FA:97:00:B3:EF:AD:E7:0B:14:23:C3:C0:53
X509v3 Authority Key Identifier:
keyid:96:5A:6A:BF:DB:08:74:F2:FE:C2:26:2C:DE:A3:37:3A:DC:B2:DC:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/llpqv9sIdPL-wiYs3qM3Otyy3FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:a3:01:2b:f0:13:58:94:62:91:53:9c:e5:56:d9:e8:5c:70:
16:66:e2:bb:6e:61:17:8b:1e:84:09:d8:2c:14:21:0f:6c:3c:
60:e5:4c:2a:9e:24:08:8e:f0:4d:e9:e4:e7:fe:16:52:80:9f:
c7:fe:ea:8a:9d:a5:c1:6d:95:38:0d:8b:fe:34:68:59:68:bc:
a6:7e:08:8e:2f:19:ab:b9:fc:d7:7d:f9:91:35:ce:39:6b:c7:
39:c2:b5:b6:79:d5:5c:9d:d6:04:2e:db:8c:c2:f8:95:02:6f:
64:23:29:dd:43:d4:b9:fe:3e:82:ad:8d:8d:aa:d6:aa:6d:56:
e0:34:e7:bc:b5:18:61:06:39:f7:ec:76:0e:df:69:9c:49:fe:
9b:bc:aa:ed:b9:6d:76:bb:93:9b:14:52:c3:0e:75:7c:b7:a8:
e8:d7:9e:ff:d3:f1:8d:ad:72:94:ce:32:c6:60:55:d3:c6:20:
17:8a:e6:cc:33:01:45:be:d9:87:7c:39:53:2c:39:0d:d7:53:
ce:a0:ee:0d:5e:0b:a0:6a:aa:1e:65:40:34:ed:63:4e:48:76:
65:55:d9:1b:44:4f:c6:bc:a3:bd:f2:5a:37:5f:6d:b4:58:65:
f5:62:ab:29:3c:9a:a8:34:9e:7b:a7:a5:b9:1b:2d:f5:25:cf:
ae:34:74:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 09:22:57 2025 by rpki-client