Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/eeb98f-cf11-449d-a9bb-8d44de54cfa7/1/llRbrTliWupnkD-Bg_n7uurGyI0.mft
File: llRbrTliWupnkD-Bg_n7uurGyI0.mft (raw, json)
Hash identifier: Kyi9J9H7uivlTEo/mf89B5G9YHVoz4xMj9Z0OAHgCDU=
Subject key identifier: 74:E1:89:85:83:81:4C:18:89:D2:F7:DA:A3:96:B2:1C:92:56:9B:81
Authority key identifier: 96:54:5B:AD:39:62:5A:EA:67:90:3F:81:83:F9:FB:BA:EA:C6:C8:8D
Certificate issuer: /CN=96545bad39625aea67903f8183f9fbbaeac6c88d
Certificate serial: 01992969FC070B93C929635D0B287A22EEBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/llRbrTliWupnkD-Bg_n7uurGyI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/eeb98f-cf11-449d-a9bb-8d44de54cfa7/1/llRbrTliWupnkD-Bg_n7uurGyI0.mft
Manifest number: 1677
Signing time: Mon 08 Sep 2025 13:00:35 +0000
Manifest this update: Mon 08 Sep 2025 13:00:35 +0000
Manifest next update: Tue 09 Sep 2025 13:00:35 +0000
Files and hashes: 1: llRbrTliWupnkD-Bg_n7uurGyI0.crl (hash: 5mNySNy4IqdHMwHHR27ZnAfHaHmuTXGkw5nlVu6Myl0=)
2: xB2QvC1lnSEbHZpo5CzUz22HzVs.roa (hash: iOoP9/OWnHogDFUgN5EWWw0h5813UdNcLLWGJLi6Jv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/eeb98f-cf11-449d-a9bb-8d44de54cfa7/1/llRbrTliWupnkD-Bg_n7uurGyI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/eeb98f-cf11-449d-a9bb-8d44de54cfa7/1/llRbrTliWupnkD-Bg_n7uurGyI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/llRbrTliWupnkD-Bg_n7uurGyI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 13:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:29:69:fc:07:0b:93:c9:29:63:5d:0b:28:7a:22:ee:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96545bad39625aea67903f8183f9fbbaeac6c88d
Validity
Not Before: Sep 8 13:00:35 2025 GMT
Not After : Sep 9 13:00:35 2025 GMT
Subject: CN=74e1898583814c1889d2f7daa396b21c92569b81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:aa:68:b2:0b:47:70:87:3a:43:ac:79:13:c2:
a4:23:5b:ee:56:46:34:b4:b8:21:78:da:6d:79:fe:
1c:89:29:bb:d6:8b:42:ab:67:3a:f7:62:86:87:c0:
0b:3f:dc:7e:d2:aa:d8:d8:32:0a:40:ca:b8:2a:d9:
33:79:0d:61:65:ad:ab:54:25:3b:33:f2:84:59:26:
e8:d4:8c:eb:25:04:ac:8a:c9:77:bc:3a:7d:ae:22:
ef:54:c5:c5:3f:7a:7b:a2:29:2c:79:df:0f:02:c7:
02:66:f9:0b:ab:7c:3a:e5:71:f6:80:8c:df:7c:2b:
58:0d:88:36:12:44:fd:a9:f6:a0:bc:38:38:f0:ea:
a5:52:33:68:02:39:0a:53:3d:f1:7e:6b:31:b8:58:
95:77:aa:5d:a3:9a:e7:a7:35:7e:9b:ee:dd:42:3b:
f6:21:6b:06:ad:42:61:62:87:17:c0:4b:ca:7c:13:
38:62:f1:5b:59:6c:db:b2:e2:f2:ea:48:52:81:95:
98:ae:57:1a:aa:57:88:fa:31:ec:17:99:0a:73:f3:
58:b0:1f:2e:11:38:f0:01:81:58:6b:05:71:d3:c8:
4a:f1:81:4a:f4:94:04:79:37:04:f5:2b:39:ae:f7:
e7:ce:d5:ca:4c:22:da:34:53:a5:7c:a3:5f:f1:49:
4e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:E1:89:85:83:81:4C:18:89:D2:F7:DA:A3:96:B2:1C:92:56:9B:81
X509v3 Authority Key Identifier:
keyid:96:54:5B:AD:39:62:5A:EA:67:90:3F:81:83:F9:FB:BA:EA:C6:C8:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/llRbrTliWupnkD-Bg_n7uurGyI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/eeb98f-cf11-449d-a9bb-8d44de54cfa7/1/llRbrTliWupnkD-Bg_n7uurGyI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/eeb98f-cf11-449d-a9bb-8d44de54cfa7/1/llRbrTliWupnkD-Bg_n7uurGyI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:87:37:56:ef:7c:fa:5b:0b:35:92:a7:bf:47:9d:3f:42:83:
d9:96:b0:6c:cf:8c:78:5e:3e:28:76:63:9e:f3:bc:a1:d5:ed:
41:23:3d:2b:82:0b:fa:b9:c8:ab:38:14:f6:22:64:8c:c5:d1:
6a:11:fa:a6:23:cd:a6:21:6a:86:a4:fc:3b:c6:22:f9:b1:fc:
53:d0:dc:86:2c:da:1b:a2:b6:58:ef:fb:65:88:e4:44:a0:5c:
b1:30:bb:27:53:0a:d5:bf:05:b1:9c:24:02:b6:63:a4:66:bc:
be:9a:75:9a:60:d3:a1:fb:53:99:86:33:c0:7e:2d:2c:ec:74:
44:ee:78:41:2d:17:ee:1a:3c:67:44:39:bb:1b:7c:a3:77:71:
88:d8:76:76:66:7b:07:45:e9:2f:07:7a:7a:10:a8:f6:db:ba:
82:aa:dc:5b:8d:ba:fe:52:6c:dc:07:fc:27:2d:b9:af:58:56:
ae:fb:26:e8:e5:67:e5:57:54:98:0a:dc:6f:25:76:b6:97:de:
5b:b7:9d:ca:3d:03:d4:cc:83:c0:11:c6:7c:9c:f6:51:27:b4:
ee:7b:d1:85:d0:5a:18:45:ee:7e:a6:7b:fc:2d:65:bc:92:b8:
58:08:2e:ac:52:d3:a6:a4:b8:16:42:69:8c:49:c5:96:5b:86:
ff:c1:22:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkpafwHC5PJKWNdCyh6Iu66MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2NTQ1YmFkMzk2MjVhZWE2NzkwM2Y4MTgzZjlmYmJhZWFj
NmM4OGQwHhcNMjUwOTA4MTMwMDM1WhcNMjUwOTA5MTMwMDM1WjAzMTEwLwYDVQQD
Eyg3NGUxODk4NTgzODE0YzE4ODlkMmY3ZGFhMzk2YjIxYzkyNTY5YjgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1KposgtHcIc6Q6x5E8KkI1vuVkY0
tLgheNptef4ciSm71otCq2c692KGh8ALP9x+0qrY2DIKQMq4KtkzeQ1hZa2rVCU7
M/KEWSbo1IzrJQSsisl3vDp9riLvVMXFP3p7oiksed8PAscCZvkLq3w65XH2gIzf
fCtYDYg2EkT9qfagvDg48OqlUjNoAjkKUz3xfmsxuFiVd6pdo5rnpzV+m+7dQjv2
IWsGrUJhYocXwEvKfBM4YvFbWWzbsuLy6khSgZWYrlcaqleI+jHsF5kKc/NYsB8u
ETjwAYFYawVx08hK8YFK9JQEeTcE9Ss5rvfnztXKTCLaNFOlfKNf8UlO6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHThiYWDgUwYidL32qOWshySVpuBMB8GA1UdIwQY
MBaAFJZUW605YlrqZ5A/gYP5+7rqxsiNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGxSYnJUbGlXdXBua0QtQmdfbjd1dXJHeUkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9lZWI5OGYtY2YxMS00NDlkLWE5YmIt
OGQ0NGRlNTRjZmE3LzEvbGxSYnJUbGlXdXBua0QtQmdfbjd1dXJHeUkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS9lZWI5OGYtY2YxMS00NDlkLWE5YmItOGQ0NGRlNTRjZmE3
LzEvbGxSYnJUbGlXdXBua0QtQmdfbjd1dXJHeUkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeoc3Vu98
+lsLNZKnv0edP0KD2ZawbM+MeF4+KHZjnvO8odXtQSM9K4IL+rnIqzgU9iJkjMXR
ahH6piPNpiFqhqT8O8Yi+bH8U9DchizaG6K2WO/7ZYjkRKBcsTC7J1MK1b8FsZwk
ArZjpGa8vpp1mmDToftTmYYzwH4tLOx0RO54QS0X7ho8Z0Q5uxt8o3dxiNh2dmZ7
B0XpLwd6ehCo9tu6gqrcW426/lJs3Af8Jy25r1hWrvsm6OVn5VdUmArcbyV2tpfe
W7edyj0D1MyDwBHGfJz2USe07nvRhdBaGEXufqZ7/C1lvJK4WAgurFLTpqS4FkJp
jEnFlluG/8Ei3g==
-----END CERTIFICATE-----
Generated at Mon Sep 8 16:08:50 2025 by rpki-client