Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/c26261-e8ef-4fb7-8722-0ab475f9a9a3/1/llxaucCRqzxFBQaKkv_LAZhJqng.mft
File: llxaucCRqzxFBQaKkv_LAZhJqng.mft (raw, json)
Hash identifier: XNbU58li9tFU9TXA3lCByQqMTlVZlDWUAfiFIRVGU7w=
Subject key identifier: 24:C1:7F:FB:BE:D7:CB:52:19:6F:E3:E1:19:B5:45:13:D9:38:DD:0C
Authority key identifier: 96:5C:5A:B9:C0:91:AB:3C:45:05:06:8A:92:FF:CB:01:98:49:AA:78
Certificate issuer: /CN=965c5ab9c091ab3c4505068a92ffcb019849aa78
Certificate serial: 01975045EECCAFBB18BC7F52552BC8B7C6B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/llxaucCRqzxFBQaKkv_LAZhJqng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/c26261-e8ef-4fb7-8722-0ab475f9a9a3/1/llxaucCRqzxFBQaKkv_LAZhJqng.mft
Manifest number: 14E5
Signing time: Sun 08 Jun 2025 16:00:49 +0000
Manifest this update: Sun 08 Jun 2025 16:00:49 +0000
Manifest next update: Mon 09 Jun 2025 16:00:49 +0000
Files and hashes: 1: llxaucCRqzxFBQaKkv_LAZhJqng.crl (hash: 3rNEpIUv9VdgF0SYl7m2na3s3ZgDmg4kzrZyOJDpgYI=)
2: rHF1daiHavMGYa0v18HeRyOPIy4.roa (hash: 2UkzQwhMHZ2kO8ZqSfqH6Gvo+L0wbAUFPUcHU8Sig88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/c26261-e8ef-4fb7-8722-0ab475f9a9a3/1/llxaucCRqzxFBQaKkv_LAZhJqng.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/c26261-e8ef-4fb7-8722-0ab475f9a9a3/1/llxaucCRqzxFBQaKkv_LAZhJqng.mft
rsync://rpki.ripe.net/repository/DEFAULT/llxaucCRqzxFBQaKkv_LAZhJqng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:45:ee:cc:af:bb:18:bc:7f:52:55:2b:c8:b7:c6:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=965c5ab9c091ab3c4505068a92ffcb019849aa78
Validity
Not Before: Jun 8 16:00:49 2025 GMT
Not After : Jun 9 16:00:49 2025 GMT
Subject: CN=24c17ffbbed7cb52196fe3e119b54513d938dd0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:ac:29:79:ad:48:9e:ba:1e:70:0e:79:8a:a9:
e9:ce:67:ea:03:94:14:72:35:6d:f4:4c:04:5f:58:
d8:c5:be:e1:ec:68:eb:a9:85:63:ee:27:bc:41:95:
6b:e0:d5:cc:86:db:fe:a3:33:30:83:13:fd:d9:c1:
69:e2:ff:01:f7:34:32:02:13:70:de:28:91:39:8d:
a2:bb:33:7e:9a:9f:9e:41:2f:ca:5f:d7:a5:55:b0:
87:e6:a3:44:ab:98:9d:82:71:0d:d9:02:93:4c:6b:
15:6b:0e:31:99:27:11:88:17:fb:9e:bd:df:5f:d2:
97:5f:f4:c2:46:d5:01:8b:79:5a:1e:96:1a:f8:b2:
35:80:be:ba:61:6b:35:7d:43:7a:f2:6e:d0:36:f0:
0f:56:27:fa:11:e0:6a:51:d6:99:fd:69:df:8b:98:
46:2b:fc:9f:27:16:7c:2a:21:1f:77:7e:d7:7f:ab:
89:fb:4f:71:a7:7c:57:0d:34:bf:fd:b4:cd:ce:6b:
b7:56:5f:33:ce:d1:7d:43:f5:06:42:26:ba:d8:fa:
32:55:91:8a:99:4f:e9:7a:7b:98:80:1d:bc:72:26:
b4:06:31:e4:44:83:04:2d:33:8e:86:f4:65:3c:99:
58:a1:02:29:07:ea:28:57:d9:62:31:bd:5d:07:29:
06:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:C1:7F:FB:BE:D7:CB:52:19:6F:E3:E1:19:B5:45:13:D9:38:DD:0C
X509v3 Authority Key Identifier:
keyid:96:5C:5A:B9:C0:91:AB:3C:45:05:06:8A:92:FF:CB:01:98:49:AA:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/llxaucCRqzxFBQaKkv_LAZhJqng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c26261-e8ef-4fb7-8722-0ab475f9a9a3/1/llxaucCRqzxFBQaKkv_LAZhJqng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c26261-e8ef-4fb7-8722-0ab475f9a9a3/1/llxaucCRqzxFBQaKkv_LAZhJqng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:90:d9:38:bf:65:f9:31:e8:d8:ef:8a:d1:2f:5c:a8:25:2d:
83:ca:49:52:95:a3:22:fa:6f:6d:75:ad:6f:37:66:e7:d2:33:
86:b0:1a:48:ec:d6:4f:ec:c9:16:ee:e5:a8:2c:27:92:d6:56:
81:8b:52:ec:f9:39:e7:a1:a3:00:db:82:c1:37:b5:c6:e1:ec:
1f:e2:13:a8:50:9b:cb:8e:fb:c8:7a:ee:9a:c1:d2:7c:ee:8d:
77:02:ae:0b:a6:20:52:fd:a1:79:11:bc:b7:4c:2b:cf:e5:bb:
30:2f:71:d2:9f:cc:3b:1c:36:00:f8:da:49:4e:87:19:0c:36:
dd:74:7a:89:36:ed:82:b0:cb:2d:d3:99:86:38:81:c8:6a:9d:
98:88:1c:30:57:db:07:b2:4d:b8:b1:ce:f8:23:3d:1b:b3:cf:
2d:f9:22:28:b5:c0:96:25:80:bc:99:a2:2a:f9:8e:ec:ec:5e:
11:63:9e:45:0f:76:91:a6:18:f4:aa:1f:80:7e:7e:18:ea:0a:
3d:62:c2:13:90:10:33:91:b0:b6:28:e7:35:70:02:1d:f8:ff:
8c:b1:d6:a6:18:a3:39:ce:f5:f1:25:4b:bc:a8:e2:85:94:8d:
ac:f9:a8:d3:df:3f:db:d7:83:e6:f5:ab:ef:b9:8a:f4:fd:d5:
f7:bb:07:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdQRe7Mr7sYvH9SVSvIt8a1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2NWM1YWI5YzA5MWFiM2M0NTA1MDY4YTkyZmZjYjAxOTg0
OWFhNzgwHhcNMjUwNjA4MTYwMDQ5WhcNMjUwNjA5MTYwMDQ5WjAzMTEwLwYDVQQD
EygyNGMxN2ZmYmJlZDdjYjUyMTk2ZmUzZTExOWI1NDUxM2Q5MzhkZDBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+awpea1InroecA55iqnpzmfqA5QU
cjVt9EwEX1jYxb7h7GjrqYVj7ie8QZVr4NXMhtv+ozMwgxP92cFp4v8B9zQyAhNw
3iiROY2iuzN+mp+eQS/KX9elVbCH5qNEq5idgnEN2QKTTGsVaw4xmScRiBf7nr3f
X9KXX/TCRtUBi3laHpYa+LI1gL66YWs1fUN68m7QNvAPVif6EeBqUdaZ/Wnfi5hG
K/yfJxZ8KiEfd37Xf6uJ+09xp3xXDTS//bTNzmu3Vl8zztF9Q/UGQia62PoyVZGK
mU/penuYgB28cia0BjHkRIMELTOOhvRlPJlYoQIpB+ooV9liMb1dBykGUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCTBf/u+18tSGW/j4Rm1RRPZON0MMB8GA1UdIwQY
MBaAFJZcWrnAkas8RQUGipL/ywGYSap4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGx4YXVjQ1JxenhGQlFhS2t2X0xBWmhKcW5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9jMjYyNjEtZThlZi00ZmI3LTg3MjIt
MGFiNDc1ZjlhOWEzLzEvbGx4YXVjQ1JxenhGQlFhS2t2X0xBWmhKcW5nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS9jMjYyNjEtZThlZi00ZmI3LTg3MjItMGFiNDc1ZjlhOWEz
LzEvbGx4YXVjQ1JxenhGQlFhS2t2X0xBWmhKcW5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACpDZOL9l
+THo2O+K0S9cqCUtg8pJUpWjIvpvbXWtbzdm59IzhrAaSOzWT+zJFu7lqCwnktZW
gYtS7Pk556GjANuCwTe1xuHsH+ITqFCby477yHrumsHSfO6NdwKuC6YgUv2heRG8
t0wrz+W7MC9x0p/MOxw2APjaSU6HGQw23XR6iTbtgrDLLdOZhjiByGqdmIgcMFfb
B7JNuLHO+CM9G7PPLfkiKLXAliWAvJmiKvmO7OxeEWOeRQ92kaYY9KofgH5+GOoK
PWLCE5AQM5GwtijnNXACHfj/jLHWphijOc718SVLvKjihZSNrPmo098/29eD5vWr
77mK9P3V97sHVA==
-----END CERTIFICATE-----
Generated at Sun Jun 8 20:31:25 2025 by rpki-client