Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/6fa6d0-f2c8-412c-9bc7-365c51a5f9ff/1/LLo1Vmm0-bkDXwWx-6IR74aWEB0.mft
File: LLo1Vmm0-bkDXwWx-6IR74aWEB0.mft (raw, json)
Hash identifier: IldKFsKMkuMTsLF9KIwS+l/sr/6ImDvanajNoS2Wspc=
Subject key identifier: FB:30:95:06:97:B4:CF:A9:62:E6:73:D2:8E:BE:AE:4D:72:96:AF:F8
Authority key identifier: 2C:BA:35:56:69:B4:F9:B9:03:5F:05:B1:FB:A2:11:EF:86:96:10:1D
Certificate issuer: /CN=2cba355669b4f9b9035f05b1fba211ef8696101d
Certificate serial: 019A71B915C4A6C33EA83CCB20B3E21FCF0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LLo1Vmm0-bkDXwWx-6IR74aWEB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/6fa6d0-f2c8-412c-9bc7-365c51a5f9ff/1/LLo1Vmm0-bkDXwWx-6IR74aWEB0.mft
Manifest number: 15ED
Signing time: Tue 11 Nov 2025 07:02:26 +0000
Manifest this update: Tue 11 Nov 2025 07:02:26 +0000
Manifest next update: Wed 12 Nov 2025 07:02:26 +0000
Files and hashes: 1: LLo1Vmm0-bkDXwWx-6IR74aWEB0.crl (hash: L4uL9RtsIT2ygclMgXt6x+buYHmCyQjZ52HRoJSp8oE=)
2: N2MMA2ajHovb9op5fyA_qeAVz_M.roa (hash: n+Qd6FGkBgmtsqN4tvP533FkHH2YOTsZsw1S1MXov80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/6fa6d0-f2c8-412c-9bc7-365c51a5f9ff/1/LLo1Vmm0-bkDXwWx-6IR74aWEB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/6fa6d0-f2c8-412c-9bc7-365c51a5f9ff/1/LLo1Vmm0-bkDXwWx-6IR74aWEB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/LLo1Vmm0-bkDXwWx-6IR74aWEB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:15:c4:a6:c3:3e:a8:3c:cb:20:b3:e2:1f:cf:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cba355669b4f9b9035f05b1fba211ef8696101d
Validity
Not Before: Nov 11 07:02:26 2025 GMT
Not After : Nov 12 07:02:26 2025 GMT
Subject: CN=fb30950697b4cfa962e673d28ebeae4d7296aff8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:46:e4:64:55:78:b7:e9:56:99:54:61:be:63:
91:05:20:38:89:ae:03:e4:99:e4:d0:19:04:2d:42:
85:69:78:54:9c:a6:5c:33:87:d9:71:cf:24:3d:24:
c2:15:ea:e4:8c:77:4a:55:00:51:1b:4d:30:eb:1a:
12:26:db:d5:ca:1e:97:b0:9f:1b:53:d0:05:87:7b:
58:d0:db:35:17:0e:7e:28:80:93:bf:65:f2:f0:ee:
5f:87:45:65:3a:34:69:0f:91:de:2a:5d:3c:6e:2c:
20:fa:49:00:b1:86:30:45:ba:c9:29:6c:8f:14:04:
ea:19:59:35:85:0a:8d:3f:84:2a:f6:b7:0b:a3:69:
08:3b:fa:21:da:9a:21:46:88:17:f4:8f:6a:1e:fe:
f0:9a:75:59:2e:89:c5:0e:d9:57:a2:28:63:57:7f:
48:3c:b2:a0:3c:07:b4:55:ca:67:84:f4:91:f8:ab:
0c:ac:81:bc:26:71:5b:bf:91:5f:70:11:be:56:a9:
dc:08:39:af:41:1c:6a:d1:49:4e:5b:e4:95:28:c1:
87:27:22:cd:1c:e3:6d:c8:70:0b:a3:17:ef:ae:33:
19:5c:67:3f:15:e8:ea:45:02:42:36:c5:a7:27:e0:
89:41:aa:aa:6d:c6:fc:e8:06:c4:14:45:82:c3:bc:
7d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:30:95:06:97:B4:CF:A9:62:E6:73:D2:8E:BE:AE:4D:72:96:AF:F8
X509v3 Authority Key Identifier:
keyid:2C:BA:35:56:69:B4:F9:B9:03:5F:05:B1:FB:A2:11:EF:86:96:10:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LLo1Vmm0-bkDXwWx-6IR74aWEB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6fa6d0-f2c8-412c-9bc7-365c51a5f9ff/1/LLo1Vmm0-bkDXwWx-6IR74aWEB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6fa6d0-f2c8-412c-9bc7-365c51a5f9ff/1/LLo1Vmm0-bkDXwWx-6IR74aWEB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:4b:f1:5d:86:1b:de:4c:27:cd:6e:08:3f:df:d6:ac:f7:f2:
10:7f:1a:c2:96:8e:9d:65:ff:c5:e3:d5:64:99:cf:41:c9:f9:
37:19:37:c4:29:b3:7c:20:74:ef:54:c4:32:17:8c:8b:50:41:
e1:1d:8f:b6:45:66:69:1c:0c:fb:5a:8e:2e:99:30:b7:95:ea:
06:52:10:33:c5:6e:33:64:ce:db:1e:89:3a:e3:cd:86:2f:b4:
d7:80:13:8a:38:49:fb:f6:f3:d6:eb:97:30:ab:ff:ed:cc:b4:
00:91:b3:d0:59:cf:46:77:7e:25:0d:31:21:ff:f1:85:fc:b0:
5d:fd:72:1d:51:6f:db:4b:60:54:dc:9b:c5:f5:39:26:c5:6b:
4d:a5:74:01:e2:8f:59:25:9d:fa:31:d4:eb:d8:1b:a9:18:ea:
62:73:2c:07:d1:28:a4:bd:97:85:0d:03:ad:21:07:43:33:8d:
8d:29:f4:35:54:5f:60:fa:15:a0:6f:a4:a0:1b:5c:31:b5:13:
e4:d9:08:12:f0:3c:e0:bf:54:b4:9e:92:b6:1c:97:48:ed:a6:
b0:93:d6:ed:5d:c6:4b:13:31:56:bd:da:f8:ef:0b:b9:34:79:
53:e1:0f:cd:4c:c9:8c:08:b1:25:be:8f:29:7a:72:2c:13:18:
08:a9:8f:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:38:54 2025 by rpki-client