Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.mft
File: llpqv9sIdPL-wiYs3qM3Otyy3FU.mft (raw, json)
Hash identifier: uwSYacXJ6TGyULh/6wZPrMcsldYoIYKwiXg+hYRW6yQ=
Subject key identifier: 2D:0F:39:6C:E3:9D:FB:68:F6:7F:39:2E:14:52:E7:10:D3:B9:0D:F1
Authority key identifier: 96:5A:6A:BF:DB:08:74:F2:FE:C2:26:2C:DE:A3:37:3A:DC:B2:DC:55
Certificate issuer: /CN=965a6abfdb0874f2fec2262cdea3373adcb2dc55
Certificate serial: 0197537D7C66E0DF5E1CCF53C3052B906336
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/llpqv9sIdPL-wiYs3qM3Otyy3FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.mft
Manifest number: 0CE7
Signing time: Mon 09 Jun 2025 07:00:22 +0000
Manifest this update: Mon 09 Jun 2025 07:00:22 +0000
Manifest next update: Tue 10 Jun 2025 07:00:22 +0000
Files and hashes: 1: jx2XkRRJ1Pen6eLqWGsTXmBaP9o.roa (hash: yl4Uer3PsgYBYL8law/V2acfxxr/ONbHAHnzrh/MmEQ=)
2: llpqv9sIdPL-wiYs3qM3Otyy3FU.crl (hash: Rgcd45HFXK0ThZb+xLi1Uno3iozzakGzJLbyPekm7GA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.mft
rsync://rpki.ripe.net/repository/DEFAULT/llpqv9sIdPL-wiYs3qM3Otyy3FU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:7d:7c:66:e0:df:5e:1c:cf:53:c3:05:2b:90:63:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=965a6abfdb0874f2fec2262cdea3373adcb2dc55
Validity
Not Before: Jun 9 07:00:22 2025 GMT
Not After : Jun 10 07:00:22 2025 GMT
Subject: CN=2d0f396ce39dfb68f67f392e1452e710d3b90df1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a1:10:2e:7f:44:04:00:ae:a3:3d:01:9b:7f:
47:2b:10:ff:dd:0e:29:93:5a:c2:e8:21:d5:f8:47:
e6:73:91:3d:f9:1a:60:8c:5e:cc:fa:d2:a2:6c:1b:
7a:b9:e5:4d:0f:49:1d:0b:01:5f:50:52:e0:b6:e7:
97:be:26:d4:dc:5e:44:d1:8d:28:db:c2:66:aa:5a:
3e:01:fe:be:94:92:73:4a:e9:53:47:07:53:36:d7:
ab:ec:7a:82:9f:91:de:58:89:f8:96:bc:89:94:e9:
19:13:b4:78:85:8f:93:5b:e4:46:5e:74:a4:55:dc:
8b:f8:67:66:e1:86:e4:9e:47:1f:26:f9:16:05:93:
47:fa:e7:0b:75:d9:ff:30:df:d7:76:bd:33:f4:6d:
2f:d7:71:32:1a:3d:d2:34:f1:c7:29:45:65:96:4c:
90:87:9a:97:4b:cc:ea:e9:bb:8b:e6:39:4d:3f:75:
45:02:91:0b:8f:43:c4:b4:68:3a:eb:ea:8c:7a:12:
55:31:cb:b0:60:dd:6a:ff:43:9d:48:16:2f:fa:86:
36:76:1d:41:63:e0:ff:77:31:a7:d5:30:bd:44:9f:
67:99:09:81:8d:d1:3b:bd:ee:d8:52:cf:b7:5a:24:
99:48:15:8e:36:72:75:91:fc:7a:23:88:e3:b0:8c:
12:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:0F:39:6C:E3:9D:FB:68:F6:7F:39:2E:14:52:E7:10:D3:B9:0D:F1
X509v3 Authority Key Identifier:
keyid:96:5A:6A:BF:DB:08:74:F2:FE:C2:26:2C:DE:A3:37:3A:DC:B2:DC:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/llpqv9sIdPL-wiYs3qM3Otyy3FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:5b:a3:1b:a1:6e:fd:da:17:2f:46:3a:7e:6d:32:0b:18:67:
4e:86:cd:d8:a4:e4:f5:23:a3:55:75:88:4f:d4:e4:98:6b:e8:
d4:bc:54:7e:ce:01:0e:84:db:b8:32:b7:b8:7a:80:fd:39:45:
45:e2:84:4b:a2:1d:6f:72:6e:0e:da:20:fc:9b:50:4d:ee:5a:
76:97:2d:45:9e:4a:dc:6b:90:b4:78:79:8a:ee:52:47:d0:27:
4f:7f:02:a7:e5:32:17:ec:e1:97:f7:0d:4f:01:fa:42:1e:db:
37:38:85:86:45:71:8d:6d:3f:c8:d8:1e:84:c6:34:34:1d:34:
81:7f:f0:75:0e:58:ce:a1:c4:9b:da:82:a8:4e:ab:e5:de:24:
d4:ae:2c:63:ec:93:6c:4a:33:b2:65:07:32:2f:cf:c0:94:d0:
b7:57:84:05:60:9c:a2:27:86:8b:35:4e:a2:53:43:60:69:dc:
e5:72:15:60:d0:84:8a:7d:bc:4d:81:64:f0:f8:56:4d:8f:c9:
a1:db:9d:ef:9c:a7:fb:e6:45:09:c1:a8:e3:f8:6a:d2:4e:27:
51:c4:09:d9:03:9b:fc:8c:98:38:75:50:97:7e:bb:be:1c:a8:
95:e1:d3:e6:71:21:75:f2:e5:22:de:01:36:b6:c9:e7:37:dc:
d9:de:95:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 08:43:50 2025 by rpki-client