Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/c740e6-ce6b-4d1a-8ece-fe9edbfcc7ef/1/LLE1YlrAUaKAl39jBs8j1gxAa5A.mft
File: LLE1YlrAUaKAl39jBs8j1gxAa5A.mft (raw, json)
Hash identifier: ocNr3urGW4DgZdolwMMLfN6wM8779qc+vdbvjtGL9yU=
Subject key identifier: 0B:A2:18:3A:9C:4C:42:E2:7B:DD:30:AB:58:92:50:9A:07:D3:DF:EA
Authority key identifier: 2C:B1:35:62:5A:C0:51:A2:80:97:7F:63:06:CF:23:D6:0C:40:6B:90
Certificate issuer: /CN=2cb135625ac051a280977f6306cf23d60c406b90
Certificate serial: 01974B1F5B76B0A7B13A571E2B17EA4F1EF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LLE1YlrAUaKAl39jBs8j1gxAa5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/c740e6-ce6b-4d1a-8ece-fe9edbfcc7ef/1/LLE1YlrAUaKAl39jBs8j1gxAa5A.mft
Manifest number: 1211
Signing time: Sat 07 Jun 2025 16:00:35 +0000
Manifest this update: Sat 07 Jun 2025 16:00:35 +0000
Manifest next update: Sun 08 Jun 2025 16:00:35 +0000
Files and hashes: 1: LLE1YlrAUaKAl39jBs8j1gxAa5A.crl (hash: HpAwvJYCH7K+xMoHaq1adlrIxUoR6c+AQ5UhAMPrPKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/c740e6-ce6b-4d1a-8ece-fe9edbfcc7ef/1/LLE1YlrAUaKAl39jBs8j1gxAa5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/c740e6-ce6b-4d1a-8ece-fe9edbfcc7ef/1/LLE1YlrAUaKAl39jBs8j1gxAa5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/LLE1YlrAUaKAl39jBs8j1gxAa5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 16:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:1f:5b:76:b0:a7:b1:3a:57:1e:2b:17:ea:4f:1e:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cb135625ac051a280977f6306cf23d60c406b90
Validity
Not Before: Jun 7 16:00:35 2025 GMT
Not After : Jun 8 16:00:35 2025 GMT
Subject: CN=0ba2183a9c4c42e27bdd30ab5892509a07d3dfea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:cf:6b:a2:10:eb:87:0c:8a:dd:29:b0:06:a4:
a5:ea:6c:f6:d2:18:23:62:cc:31:07:38:1e:bb:3a:
31:9c:e9:7f:d7:d8:66:96:74:fd:c3:b5:f6:b4:3f:
34:d2:29:17:f0:7b:b7:b3:5a:d5:c9:a6:82:b7:58:
a3:e2:b9:c8:d3:21:10:c8:2b:bd:08:7a:4c:b1:77:
5e:f2:db:46:b7:31:59:77:96:ef:3e:0b:28:57:10:
35:2a:37:9e:c4:0d:04:b7:23:e2:a7:3e:52:51:a4:
e3:6d:c7:d7:9f:44:a7:20:d3:26:72:56:e2:38:f0:
6c:22:e3:22:b5:53:1d:47:6a:38:35:1c:40:2f:c0:
92:2f:fd:d6:4c:b2:c8:01:7a:6d:da:30:16:67:e5:
54:55:13:69:96:48:91:56:32:23:07:41:07:87:6e:
ea:b0:4e:3f:db:0f:bc:19:71:54:25:dd:09:3e:59:
31:3c:95:df:5a:e7:ce:9f:78:25:46:74:85:41:bd:
5a:63:4e:e1:11:e3:f1:2f:99:8b:11:60:5a:e3:82:
82:45:f4:9e:6b:e5:33:34:07:5b:3e:32:8a:a8:cc:
2c:c2:60:5c:af:91:b1:1b:52:52:23:cd:d0:56:b1:
8c:30:eb:90:01:db:2c:6d:38:ad:98:ff:39:f6:2b:
86:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:A2:18:3A:9C:4C:42:E2:7B:DD:30:AB:58:92:50:9A:07:D3:DF:EA
X509v3 Authority Key Identifier:
keyid:2C:B1:35:62:5A:C0:51:A2:80:97:7F:63:06:CF:23:D6:0C:40:6B:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LLE1YlrAUaKAl39jBs8j1gxAa5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c740e6-ce6b-4d1a-8ece-fe9edbfcc7ef/1/LLE1YlrAUaKAl39jBs8j1gxAa5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c740e6-ce6b-4d1a-8ece-fe9edbfcc7ef/1/LLE1YlrAUaKAl39jBs8j1gxAa5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:17:38:46:82:36:af:f6:3b:f5:2d:0c:f4:f0:ba:1f:a5:18:
2b:e3:41:29:20:d8:7d:40:5a:91:1f:54:10:26:b6:d6:48:23:
f1:8c:c5:01:95:0b:00:6e:d5:dc:a1:f2:6a:4e:4a:9a:38:10:
8e:d7:3a:09:91:aa:86:58:90:96:12:74:59:52:94:d1:2a:c1:
6c:93:5f:3b:fd:04:ca:17:45:17:a4:4b:2c:b3:47:02:0e:2d:
1e:ff:c5:fb:37:27:ee:43:0f:6e:fd:72:68:d0:5e:48:d4:ab:
c3:86:67:bb:07:08:e7:8e:b9:49:66:e4:4d:25:f7:54:8a:69:
ec:a4:16:d4:92:8c:dd:d2:cf:3f:44:ea:e6:9a:c1:b1:a4:b4:
61:32:2a:f5:82:e0:13:fb:da:96:cb:dd:b5:c1:c9:ea:71:fd:
d3:cd:da:ba:00:34:c1:2f:85:91:e3:55:35:b7:61:74:1e:c2:
e7:a2:c8:b0:73:65:43:24:5f:e7:d0:1b:04:9e:dd:47:a8:91:
39:87:20:46:46:19:18:91:e1:1e:be:fe:a6:0c:ff:d3:0f:af:
fb:ef:71:19:d5:a0:ac:5d:ad:09:c0:9f:e8:ec:97:63:eb:1d:
47:fb:0e:43:19:ff:65:a9:85:ef:7e:48:07:26:64:d1:0d:e5:
79:26:8b:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:19:50 2025 by rpki-client