Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/f9684e-09e2-49cc-851d-af4c06f31aff/1/LLQpHfl5Y8WptzKxOW8PHIh1BNY.mft
File: LLQpHfl5Y8WptzKxOW8PHIh1BNY.mft (raw, json)
Hash identifier: GSPmmf6eBll0AfMMtqmfiw9VJwgh27ve3F5zD2E7Qfg=
Subject key identifier: 72:8D:7C:9E:B6:01:1E:97:E0:90:B0:B8:2E:6D:BB:62:24:4B:EA:1D
Authority key identifier: 2C:B4:29:1D:F9:79:63:C5:A9:B7:32:B1:39:6F:0F:1C:88:75:04:D6
Certificate issuer: /CN=2cb4291df97963c5a9b732b1396f0f1c887504d6
Certificate serial: 019A71EEA87F3F32745789B36E79A21328E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LLQpHfl5Y8WptzKxOW8PHIh1BNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/f9684e-09e2-49cc-851d-af4c06f31aff/1/LLQpHfl5Y8WptzKxOW8PHIh1BNY.mft
Manifest number: 0B4A
Signing time: Tue 11 Nov 2025 08:00:57 +0000
Manifest this update: Tue 11 Nov 2025 08:00:57 +0000
Manifest next update: Wed 12 Nov 2025 08:00:57 +0000
Files and hashes: 1: LLQpHfl5Y8WptzKxOW8PHIh1BNY.crl (hash: Q+pBG0UhV3bHJ8qwzjFeocCW/jwFdHxS/pzVRz2uvpA=)
2: jL298tdrN6lW-Z_FSTlwEHl5J2g.roa (hash: N+Czi4kLunJdxEq8yNGyCoMRtrtusytZ4W5vbX9rMgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/f9684e-09e2-49cc-851d-af4c06f31aff/1/LLQpHfl5Y8WptzKxOW8PHIh1BNY.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/f9684e-09e2-49cc-851d-af4c06f31aff/1/LLQpHfl5Y8WptzKxOW8PHIh1BNY.mft
rsync://rpki.ripe.net/repository/DEFAULT/LLQpHfl5Y8WptzKxOW8PHIh1BNY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:a8:7f:3f:32:74:57:89:b3:6e:79:a2:13:28:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cb4291df97963c5a9b732b1396f0f1c887504d6
Validity
Not Before: Nov 11 08:00:57 2025 GMT
Not After : Nov 12 08:00:57 2025 GMT
Subject: CN=728d7c9eb6011e97e090b0b82e6dbb62244bea1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:97:b4:3b:98:cc:d2:74:39:e9:0b:ec:f5:24:
27:e3:41:23:52:15:87:0e:91:90:c8:56:c2:92:d6:
4b:d7:b5:8d:70:c6:e4:9d:ad:7c:cf:72:e0:1e:ca:
d3:fd:2f:fe:da:f3:f7:b3:5c:8f:58:0a:4a:31:82:
d7:63:9b:e6:b7:16:68:72:46:2b:5b:8e:3a:ab:1f:
0d:cf:c9:d1:7b:09:62:2f:0f:ab:21:c7:6e:0e:0e:
93:e4:f2:cf:c6:7b:91:70:31:4b:6a:6a:d7:08:ed:
40:dc:ba:dc:1e:f2:e3:d0:d5:ca:bb:3f:7d:b3:9b:
37:0b:6f:79:dd:75:0b:e2:9b:44:d8:01:35:99:95:
47:b0:bd:6b:68:39:16:fb:18:91:58:2f:b8:24:ff:
ec:40:fa:a9:f3:3f:77:dc:20:50:62:59:e4:4f:cd:
e0:0a:27:43:18:2b:b7:4b:70:6b:cb:4f:4b:2a:36:
0b:cd:c6:eb:53:4a:8f:23:36:d4:a3:1a:d3:66:9d:
5b:c2:58:c0:cc:1c:5f:e3:9e:30:15:45:4e:c6:93:
04:d8:c7:e3:a5:b2:34:4b:58:5a:d2:6e:16:84:8d:
d5:ab:05:96:78:10:fc:91:2f:65:1b:cd:c0:cc:7a:
ed:71:e5:91:ab:60:5d:42:95:69:79:a8:8a:e9:ba:
20:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:8D:7C:9E:B6:01:1E:97:E0:90:B0:B8:2E:6D:BB:62:24:4B:EA:1D
X509v3 Authority Key Identifier:
keyid:2C:B4:29:1D:F9:79:63:C5:A9:B7:32:B1:39:6F:0F:1C:88:75:04:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LLQpHfl5Y8WptzKxOW8PHIh1BNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f9684e-09e2-49cc-851d-af4c06f31aff/1/LLQpHfl5Y8WptzKxOW8PHIh1BNY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f9684e-09e2-49cc-851d-af4c06f31aff/1/LLQpHfl5Y8WptzKxOW8PHIh1BNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:f6:f0:4e:5f:01:3c:8a:cf:1e:a8:d3:47:8d:57:40:31:9c:
c0:c1:29:0b:3a:a3:2b:0c:55:a4:4d:99:b2:ec:c5:81:f4:9f:
fa:e0:94:aa:0d:3f:0e:0c:76:b0:54:33:dc:4a:b7:33:28:34:
2e:cb:91:fd:32:8a:36:29:c4:7b:eb:63:11:5b:1b:00:c0:71:
18:92:b6:21:64:85:6f:4d:9b:ec:ab:c3:1c:52:48:4c:72:fb:
cd:78:e5:6a:85:b2:35:a7:bc:42:02:bb:57:12:d8:62:24:33:
87:90:9c:64:ad:34:44:6c:4e:ae:fc:d9:c9:1a:bd:55:85:a9:
4e:1b:6f:1c:7d:59:ab:ad:ce:de:54:71:b2:dc:1b:bf:ed:92:
8a:87:be:9e:f1:ec:e4:d7:e3:9f:9a:37:0e:55:fa:6e:cc:a2:
61:d4:c1:e0:25:8c:75:36:21:a7:ce:ba:de:27:23:b5:82:34:
b9:fc:2f:94:fe:ef:b2:ac:2e:e8:c1:c7:3b:7a:59:0f:1b:e5:
a8:3b:7b:4e:e6:78:36:98:ff:4f:e5:99:9b:ff:57:f1:32:d3:
d3:73:e8:ff:43:39:80:d8:96:95:0c:62:eb:9b:3d:2c:57:f2:
e6:59:62:c1:c7:ad:58:7a:b9:ed:0e:3d:2c:83:f2:c3:81:71:
2a:89:9a:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:13 2025 by rpki-client