Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/c26261-e8ef-4fb7-8722-0ab475f9a9a3/1/llxaucCRqzxFBQaKkv_LAZhJqng.mft
File: llxaucCRqzxFBQaKkv_LAZhJqng.mft (raw, json)
Hash identifier: fXjC6MpUFhDiMGd1QuWCZ2v5a3W/dno9eIIkdcAlpxY=
Subject key identifier: 32:B0:80:DE:9F:65:7C:EE:EB:07:3B:91:8E:D1:70:92:C6:4C:73:3B
Authority key identifier: 96:5C:5A:B9:C0:91:AB:3C:45:05:06:8A:92:FF:CB:01:98:49:AA:78
Certificate issuer: /CN=965c5ab9c091ab3c4505068a92ffcb019849aa78
Certificate serial: 01984B53A781F940D0026916386E44F6752D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/llxaucCRqzxFBQaKkv_LAZhJqng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/c26261-e8ef-4fb7-8722-0ab475f9a9a3/1/llxaucCRqzxFBQaKkv_LAZhJqng.mft
Manifest number: 1567
Signing time: Sun 27 Jul 2025 10:00:30 +0000
Manifest this update: Sun 27 Jul 2025 10:00:30 +0000
Manifest next update: Mon 28 Jul 2025 10:00:30 +0000
Files and hashes: 1: llxaucCRqzxFBQaKkv_LAZhJqng.crl (hash: eHIhbP2QTgKKaMfkv7PRgBJiV/0ZJ+m4KQ3Ctfd/Gv4=)
2: rHF1daiHavMGYa0v18HeRyOPIy4.roa (hash: 2UkzQwhMHZ2kO8ZqSfqH6Gvo+L0wbAUFPUcHU8Sig88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/c26261-e8ef-4fb7-8722-0ab475f9a9a3/1/llxaucCRqzxFBQaKkv_LAZhJqng.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/c26261-e8ef-4fb7-8722-0ab475f9a9a3/1/llxaucCRqzxFBQaKkv_LAZhJqng.mft
rsync://rpki.ripe.net/repository/DEFAULT/llxaucCRqzxFBQaKkv_LAZhJqng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:53:a7:81:f9:40:d0:02:69:16:38:6e:44:f6:75:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=965c5ab9c091ab3c4505068a92ffcb019849aa78
Validity
Not Before: Jul 27 10:00:30 2025 GMT
Not After : Jul 28 10:00:30 2025 GMT
Subject: CN=32b080de9f657ceeeb073b918ed17092c64c733b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:ca:21:50:ce:64:fd:27:e4:12:e5:25:ea:b2:
7c:75:67:90:c7:ff:a7:d7:83:13:ce:84:5b:90:2a:
cf:33:6b:70:3d:53:0a:8a:dc:fd:9a:41:a6:e4:d4:
90:85:27:00:10:57:95:96:87:f4:d2:2e:8b:9b:b7:
01:0e:ec:c1:f5:5a:f3:7c:fd:41:c4:6e:17:6b:6c:
84:27:fb:ce:87:e4:27:d6:45:45:c3:87:3f:19:f1:
fa:4b:7d:bb:ba:53:cf:aa:16:00:ce:6e:80:5d:6c:
8f:06:ab:03:d6:90:0b:6d:2f:8f:f6:ea:e6:a8:ff:
4b:91:e9:d8:93:c0:9e:65:af:64:80:db:1b:3b:bd:
45:cf:07:54:a2:42:20:2b:ed:7a:62:ea:ef:57:46:
39:21:f4:0a:5a:62:2c:cb:c5:89:76:f7:b5:67:9a:
bc:00:4f:e3:3a:9a:69:31:5d:4e:b0:ec:02:24:ec:
2a:62:02:51:cd:e5:c7:4f:8f:84:23:43:be:9e:09:
fc:c9:f5:05:ee:ed:c9:8e:fc:55:7c:88:82:79:cc:
08:be:91:a2:6a:7d:e8:7d:c1:58:92:4a:81:87:8a:
6b:18:ad:f0:73:5e:a5:ba:a6:96:85:a8:12:0c:57:
11:25:1b:2f:1d:47:ba:97:bd:d6:53:a4:9c:7a:2a:
07:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:B0:80:DE:9F:65:7C:EE:EB:07:3B:91:8E:D1:70:92:C6:4C:73:3B
X509v3 Authority Key Identifier:
keyid:96:5C:5A:B9:C0:91:AB:3C:45:05:06:8A:92:FF:CB:01:98:49:AA:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/llxaucCRqzxFBQaKkv_LAZhJqng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c26261-e8ef-4fb7-8722-0ab475f9a9a3/1/llxaucCRqzxFBQaKkv_LAZhJqng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c26261-e8ef-4fb7-8722-0ab475f9a9a3/1/llxaucCRqzxFBQaKkv_LAZhJqng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:c6:9c:83:e5:69:39:aa:ff:cb:e3:26:53:80:66:1a:4b:19:
eb:f4:0d:82:b5:23:56:8c:90:49:95:78:81:88:66:89:57:e0:
8e:a9:6a:af:5d:8f:be:b4:89:a9:35:c4:ed:e7:81:28:3a:ea:
02:32:53:84:05:23:6a:cf:30:33:70:26:82:09:15:78:99:ef:
ef:08:dc:ff:82:27:62:ee:7a:cb:93:1b:14:49:34:a1:46:97:
ea:dc:b2:8e:c0:33:f0:a7:2d:5f:e9:20:9e:a3:73:09:fe:41:
a7:1a:3a:1b:8a:01:6d:48:3c:ae:b2:f1:7c:29:b9:b7:f1:53:
0f:04:d8:26:6f:24:72:e6:e1:54:8d:53:41:dc:f7:6c:44:e1:
d9:f0:4d:9d:4b:fd:ce:24:96:a8:b3:5e:c9:2f:3f:8a:20:fd:
07:0e:cf:15:c2:62:06:2e:83:50:36:c5:a3:8f:9e:e4:c0:55:
45:8c:3c:2d:00:cb:65:e1:c3:91:a9:f7:26:8f:d4:c8:fc:d0:
77:b0:ad:0b:6c:76:4a:02:ff:f1:a0:b4:18:cf:c8:a5:da:26:
dd:cd:4b:3d:18:20:d4:b0:a0:73:1e:87:5b:a3:1a:9d:04:ff:
fa:ff:f3:8a:ea:83:ff:d1:9a:63:06:d5:c9:94:c5:b0:ed:d8:
4c:dd:1e:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:13:47 2025 by rpki-client