Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/46d903-afda-421b-8a61-07ee242e136d/1/llE13UJRn92j3T_aqdszV4FfrXU.mft
File: llE13UJRn92j3T_aqdszV4FfrXU.mft (raw, json)
Hash identifier: dw1aYdkAmGEJ7Cm3ZrhK2RGqhs1HUSRGscbDPUio+1o=
Subject key identifier: 60:E4:88:9C:CE:C1:98:5D:11:7C:54:69:7C:06:0A:30:3C:29:77:31
Authority key identifier: 96:51:35:DD:42:51:9F:DD:A3:DD:3F:DA:A9:DB:33:57:81:5F:AD:75
Certificate issuer: /CN=965135dd42519fdda3dd3fdaa9db3357815fad75
Certificate serial: 019921E792ACC5125A8AC179CA9EB0E97A1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/llE13UJRn92j3T_aqdszV4FfrXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/46d903-afda-421b-8a61-07ee242e136d/1/llE13UJRn92j3T_aqdszV4FfrXU.mft
Manifest number: 13D8
Signing time: Sun 07 Sep 2025 02:00:48 +0000
Manifest this update: Sun 07 Sep 2025 02:00:48 +0000
Manifest next update: Mon 08 Sep 2025 02:00:48 +0000
Files and hashes: 1: eP_-uRGXRpi4WhMbX7jhB9aXd5g.roa (hash: Ij7xKzGQVqQU38kvjmTNToko/fNpur4SF9xRWlCB2/Q=)
2: llE13UJRn92j3T_aqdszV4FfrXU.crl (hash: zmdAWkhOPkz4GbMcbxXvfGOtEHeqsg3y4Y6Xi7yC9H8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/46d903-afda-421b-8a61-07ee242e136d/1/llE13UJRn92j3T_aqdszV4FfrXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/46d903-afda-421b-8a61-07ee242e136d/1/llE13UJRn92j3T_aqdszV4FfrXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/llE13UJRn92j3T_aqdszV4FfrXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:92:ac:c5:12:5a:8a:c1:79:ca:9e:b0:e9:7a:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=965135dd42519fdda3dd3fdaa9db3357815fad75
Validity
Not Before: Sep 7 02:00:48 2025 GMT
Not After : Sep 8 02:00:48 2025 GMT
Subject: CN=60e4889ccec1985d117c54697c060a303c297731
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d1:89:0f:a3:7a:89:98:34:76:ae:c7:75:16:
12:83:20:db:cc:b3:33:7b:51:b6:6f:c0:18:b1:be:
c3:66:16:e4:48:a6:98:15:cb:9a:e9:dc:08:62:92:
e8:0c:02:8b:dc:d5:6a:9d:9c:be:1b:34:f9:bc:8c:
e9:b4:c0:8d:64:67:f1:87:e1:c6:26:c9:d7:bd:b6:
08:27:a4:36:3d:83:2a:7a:f2:52:35:1b:ca:53:f9:
62:f0:24:32:80:2b:31:39:e0:8c:36:64:82:75:e5:
c9:5b:2f:5e:59:13:a1:96:b0:be:f2:38:60:a8:0c:
0c:8f:21:b1:c2:d0:d1:20:a8:66:ee:87:fa:a8:a6:
a1:3a:83:34:92:f0:10:75:a9:33:ea:b9:36:60:e9:
9a:a4:e1:8b:35:05:98:e5:fa:e5:92:6d:95:2b:a0:
9d:df:5e:1d:c0:6e:7b:13:cc:ba:ed:50:1a:24:21:
85:44:80:4e:d8:0a:24:6a:bf:fd:a6:ee:b4:09:7d:
e4:b8:17:73:ea:0c:dd:fe:34:6e:e8:c4:43:00:6f:
5a:6f:d4:96:23:50:62:b2:fe:96:34:57:a9:f0:2d:
d1:b4:0b:b8:bb:94:ee:b1:d9:bb:03:a6:36:f4:45:
1a:02:72:25:92:83:99:50:6a:72:41:2a:a3:87:76:
83:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:E4:88:9C:CE:C1:98:5D:11:7C:54:69:7C:06:0A:30:3C:29:77:31
X509v3 Authority Key Identifier:
keyid:96:51:35:DD:42:51:9F:DD:A3:DD:3F:DA:A9:DB:33:57:81:5F:AD:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/llE13UJRn92j3T_aqdszV4FfrXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/46d903-afda-421b-8a61-07ee242e136d/1/llE13UJRn92j3T_aqdszV4FfrXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/46d903-afda-421b-8a61-07ee242e136d/1/llE13UJRn92j3T_aqdszV4FfrXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:5f:c0:a5:b4:56:7d:a2:80:7e:9a:75:44:5d:23:24:1a:ec:
70:ba:96:f2:d6:07:be:ae:2f:22:bf:14:58:ea:4b:6c:3d:29:
cf:c7:99:6b:72:8e:bb:72:91:d6:9b:29:f4:41:2c:ef:a9:0b:
c2:69:05:75:55:4f:41:93:f3:d7:b4:00:67:5a:b6:61:d7:1c:
bd:93:f5:38:d3:2a:02:57:76:2a:bb:a8:b0:7b:4a:98:d5:6f:
f6:77:89:bf:79:85:26:b9:29:d7:58:96:bf:5f:6a:ac:4f:fa:
0f:05:0b:be:a7:f4:97:ed:8f:4d:f8:30:e4:e3:dd:5a:48:0e:
46:bd:0b:97:43:90:56:d3:23:d4:a7:5f:5c:39:f5:3b:3b:2d:
eb:9f:48:cc:3c:b3:2b:3e:23:59:2d:dc:6c:97:e1:7b:67:fd:
bb:52:8e:c7:52:6d:16:67:16:5d:5e:bb:ea:3f:3e:b9:9c:fc:
72:5f:c8:74:92:f6:80:0c:42:d3:3d:b2:01:b8:67:56:7b:93:
a4:fe:53:1b:27:df:b2:24:0f:a4:20:bd:d6:18:66:15:6e:5f:
7b:e6:b1:de:a7:f7:31:3e:d3:8a:19:c0:0b:ee:36:5e:e9:2f:
42:1a:ed:ec:67:82:07:7b:89:04:52:8e:1f:65:ac:eb:d5:45:
74:5a:53:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkh55KsxRJaisF5yp6w6XoaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2NTEzNWRkNDI1MTlmZGRhM2RkM2ZkYWE5ZGIzMzU3ODE1
ZmFkNzUwHhcNMjUwOTA3MDIwMDQ4WhcNMjUwOTA4MDIwMDQ4WjAzMTEwLwYDVQQD
Eyg2MGU0ODg5Y2NlYzE5ODVkMTE3YzU0Njk3YzA2MGEzMDNjMjk3NzMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldGJD6N6iZg0dq7HdRYSgyDbzLMz
e1G2b8AYsb7DZhbkSKaYFcua6dwIYpLoDAKL3NVqnZy+GzT5vIzptMCNZGfxh+HG
JsnXvbYIJ6Q2PYMqevJSNRvKU/li8CQygCsxOeCMNmSCdeXJWy9eWROhlrC+8jhg
qAwMjyGxwtDRIKhm7of6qKahOoM0kvAQdakz6rk2YOmapOGLNQWY5frlkm2VK6Cd
314dwG57E8y67VAaJCGFRIBO2Aokar/9pu60CX3kuBdz6gzd/jRu6MRDAG9ab9SW
I1Bisv6WNFep8C3RtAu4u5Tusdm7A6Y29EUaAnIlkoOZUGpyQSqjh3aDZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGDkiJzOwZhdEXxUaXwGCjA8KXcxMB8GA1UdIwQY
MBaAFJZRNd1CUZ/do90/2qnbM1eBX611MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGxFMTNVSlJuOTJqM1RfYXFkc3pWNEZmclhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS80NmQ5MDMtYWZkYS00MjFiLThhNjEt
MDdlZTI0MmUxMzZkLzEvbGxFMTNVSlJuOTJqM1RfYXFkc3pWNEZmclhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS80NmQ5MDMtYWZkYS00MjFiLThhNjEtMDdlZTI0MmUxMzZk
LzEvbGxFMTNVSlJuOTJqM1RfYXFkc3pWNEZmclhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJF/ApbRW
faKAfpp1RF0jJBrscLqW8tYHvq4vIr8UWOpLbD0pz8eZa3KOu3KR1psp9EEs76kL
wmkFdVVPQZPz17QAZ1q2YdccvZP1ONMqAld2KruosHtKmNVv9neJv3mFJrkp11iW
v19qrE/6DwULvqf0l+2PTfgw5OPdWkgORr0Ll0OQVtMj1KdfXDn1Ozst659IzDyz
Kz4jWS3cbJfhe2f9u1KOx1JtFmcWXV676j8+uZz8cl/IdJL2gAxC0z2yAbhnVnuT
pP5TGyffsiQPpCC91hhmFW5fe+ax3qf3MT7TihnAC+42XukvQhrt7GeCB3uJBFKO
H2Ws69VFdFpTUQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:09:27 2025 by rpki-client