Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/c740e6-ce6b-4d1a-8ece-fe9edbfcc7ef/1/LLE1YlrAUaKAl39jBs8j1gxAa5A.mft
File: LLE1YlrAUaKAl39jBs8j1gxAa5A.mft (raw, json)
Hash identifier: ApIdbW+vyylFOP4DMFuGfoxKH8G6hSF2aow2gGPLxmk=
Subject key identifier: A4:E3:1B:79:85:9A:65:1A:6C:36:79:EC:6B:FD:D6:88:7D:8F:5A:02
Authority key identifier: 2C:B1:35:62:5A:C0:51:A2:80:97:7F:63:06:CF:23:D6:0C:40:6B:90
Certificate issuer: /CN=2cb135625ac051a280977f6306cf23d60c406b90
Certificate serial: 019A706DDDC8854287F14ABB6BA8F0065C3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LLE1YlrAUaKAl39jBs8j1gxAa5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/c740e6-ce6b-4d1a-8ece-fe9edbfcc7ef/1/LLE1YlrAUaKAl39jBs8j1gxAa5A.mft
Manifest number: 13B2
Signing time: Tue 11 Nov 2025 01:00:39 +0000
Manifest this update: Tue 11 Nov 2025 01:00:39 +0000
Manifest next update: Wed 12 Nov 2025 01:00:39 +0000
Files and hashes: 1: LLE1YlrAUaKAl39jBs8j1gxAa5A.crl (hash: G15CTPVMCStH0VkvkiFoIwgGnTzgWvLj5c6qPneovWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/c740e6-ce6b-4d1a-8ece-fe9edbfcc7ef/1/LLE1YlrAUaKAl39jBs8j1gxAa5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/c740e6-ce6b-4d1a-8ece-fe9edbfcc7ef/1/LLE1YlrAUaKAl39jBs8j1gxAa5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/LLE1YlrAUaKAl39jBs8j1gxAa5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6d:dd:c8:85:42:87:f1:4a:bb:6b:a8:f0:06:5c:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cb135625ac051a280977f6306cf23d60c406b90
Validity
Not Before: Nov 11 01:00:39 2025 GMT
Not After : Nov 12 01:00:39 2025 GMT
Subject: CN=a4e31b79859a651a6c3679ec6bfdd6887d8f5a02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5d:47:43:d6:f1:10:80:10:2f:1d:66:4f:29:
bb:cc:a8:50:29:2d:71:96:aa:57:19:d4:95:ca:2f:
12:f6:82:37:c4:01:67:33:b4:6e:5e:02:f3:36:7a:
4c:63:e0:89:12:a3:a5:e5:67:e4:f4:0a:29:fb:92:
98:94:f9:9d:7e:bb:4a:b5:be:cb:3b:c1:f3:18:f4:
db:a9:d9:48:c0:7e:7a:c4:da:03:97:5f:8f:51:fd:
cc:6a:c2:b1:9c:2a:ec:47:db:0f:2c:18:8d:55:b0:
d5:26:b1:99:08:31:dc:1d:b2:5c:fd:04:a9:d7:9b:
75:e6:c8:5b:5b:81:22:d6:f0:d7:f1:be:b5:38:94:
75:e7:60:34:e7:fe:c5:ec:4b:af:18:85:ac:e9:84:
26:3a:e4:25:b0:64:0b:20:b9:63:49:6e:c4:40:60:
59:e4:ab:97:64:b7:b9:08:93:16:ec:c9:f0:de:50:
bc:b1:ea:a7:6a:db:c2:46:7e:44:16:2d:5e:87:6c:
dd:94:cc:81:d9:65:62:cf:29:c7:3e:06:1b:8d:66:
60:a7:05:89:05:cb:28:34:ee:c1:ea:11:f7:53:d5:
6c:06:09:ed:d0:b5:7a:e8:d6:70:ec:cf:42:9c:df:
c1:d1:58:5e:ec:09:79:f2:57:c5:ba:53:9d:0e:de:
b0:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:E3:1B:79:85:9A:65:1A:6C:36:79:EC:6B:FD:D6:88:7D:8F:5A:02
X509v3 Authority Key Identifier:
keyid:2C:B1:35:62:5A:C0:51:A2:80:97:7F:63:06:CF:23:D6:0C:40:6B:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LLE1YlrAUaKAl39jBs8j1gxAa5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c740e6-ce6b-4d1a-8ece-fe9edbfcc7ef/1/LLE1YlrAUaKAl39jBs8j1gxAa5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c740e6-ce6b-4d1a-8ece-fe9edbfcc7ef/1/LLE1YlrAUaKAl39jBs8j1gxAa5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:00:8e:30:9a:59:56:ae:d1:e7:3e:8e:71:23:61:85:49:f6:
d9:c4:4c:15:1e:6b:49:d3:95:fe:53:83:cd:ff:d3:54:b5:0b:
57:48:6e:c3:8b:59:88:76:c8:ec:0e:58:e3:39:c7:5d:2b:62:
91:c5:a9:8b:35:66:d9:2b:94:c3:60:56:bc:5c:11:25:77:82:
3d:53:8a:9a:8f:94:77:29:f5:b5:a2:58:52:2d:d7:09:dc:bc:
9c:eb:82:33:27:b1:19:85:0f:a6:90:c5:95:b4:fd:56:04:10:
4f:2c:9c:7c:7f:41:8e:01:d9:d6:5c:d5:4a:23:b7:e5:96:3c:
85:62:e7:1e:9d:12:84:65:b6:c3:c2:a3:eb:2e:2b:1e:ae:f2:
94:29:4f:bc:b4:22:ec:d7:63:3a:36:7e:b0:cd:c7:1f:a2:82:
53:b5:ab:08:2b:81:37:4f:4e:cc:7a:dc:73:91:4c:0e:6f:69:
69:f3:bf:c6:ed:48:33:84:24:1a:3a:36:b6:d3:dc:01:3b:1b:
ad:d9:88:e6:22:7e:72:d3:32:38:c8:cf:13:ca:f1:71:e4:49:
2d:e4:e4:38:66:98:7b:b8:da:7f:95:b8:ce:87:00:00:1c:a3:
79:df:aa:67:3e:07:dd:fc:b1:a1:1b:79:a4:1a:e4:c3:55:d3:
42:58:7e:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:08 2025 by rpki-client