Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/c740e6-ce6b-4d1a-8ece-fe9edbfcc7ef/1/LLE1YlrAUaKAl39jBs8j1gxAa5A.mft
File: LLE1YlrAUaKAl39jBs8j1gxAa5A.mft (raw, json)
Hash identifier: sk+5zl0u52hb9liTj4Ta+73tMjMHXD+dPxTHDfm3oqI=
Subject key identifier: D9:3D:A2:49:E1:D4:56:29:E4:4F:9F:E1:A5:95:42:99:3E:B5:16:96
Authority key identifier: 2C:B1:35:62:5A:C0:51:A2:80:97:7F:63:06:CF:23:D6:0C:40:6B:90
Certificate issuer: /CN=2cb135625ac051a280977f6306cf23d60c406b90
Certificate serial: 0199225559AC274BD4BFF48976C2899F4DF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LLE1YlrAUaKAl39jBs8j1gxAa5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/c740e6-ce6b-4d1a-8ece-fe9edbfcc7ef/1/LLE1YlrAUaKAl39jBs8j1gxAa5A.mft
Manifest number: 1305
Signing time: Sun 07 Sep 2025 04:00:42 +0000
Manifest this update: Sun 07 Sep 2025 04:00:42 +0000
Manifest next update: Mon 08 Sep 2025 04:00:42 +0000
Files and hashes: 1: LLE1YlrAUaKAl39jBs8j1gxAa5A.crl (hash: 5lvNmVtFO46Hk3VlvBFHf4h1vfC59jCBo+FWSgxLToU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/c740e6-ce6b-4d1a-8ece-fe9edbfcc7ef/1/LLE1YlrAUaKAl39jBs8j1gxAa5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/c740e6-ce6b-4d1a-8ece-fe9edbfcc7ef/1/LLE1YlrAUaKAl39jBs8j1gxAa5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/LLE1YlrAUaKAl39jBs8j1gxAa5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:59:ac:27:4b:d4:bf:f4:89:76:c2:89:9f:4d:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cb135625ac051a280977f6306cf23d60c406b90
Validity
Not Before: Sep 7 04:00:42 2025 GMT
Not After : Sep 8 04:00:42 2025 GMT
Subject: CN=d93da249e1d45629e44f9fe1a59542993eb51696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ff:0d:87:17:5f:91:f7:2c:c8:73:a0:e2:9b:
81:12:33:56:bc:b5:85:c7:42:ef:93:41:3a:d9:7f:
4a:c2:29:ba:cc:b6:3f:d2:7b:69:df:71:d7:55:06:
8d:e2:3f:b4:23:11:c2:1c:92:86:f3:7f:1e:3f:fd:
be:70:0d:f8:47:b8:cb:11:f7:d5:56:3c:80:65:b8:
0b:70:fc:cd:d4:cc:38:68:ef:38:79:20:36:66:cb:
ae:4c:42:dd:23:d0:8c:58:1a:80:25:6d:0c:c0:10:
df:c8:c2:b0:6d:37:f9:fc:91:82:9e:cd:e2:8e:4c:
01:e0:be:8a:b3:85:d0:b9:34:3d:b0:b0:f1:e0:42:
49:c1:fa:78:b3:82:35:b9:18:4d:a9:21:4d:39:89:
12:3d:d5:56:a9:d4:fa:7b:c5:a0:e9:80:81:0d:42:
3c:50:a5:49:78:b9:1b:1f:a8:0a:0b:b8:ca:68:18:
a3:43:1a:36:f0:27:67:38:54:e1:29:9b:60:9b:45:
f0:fa:98:be:11:61:aa:26:9e:48:4d:82:e1:07:0d:
42:82:9a:84:16:5b:05:1e:8f:78:30:a5:98:19:5d:
67:24:d8:03:77:31:18:98:e7:d0:40:20:d3:5d:10:
2a:b6:ff:b4:dc:8b:dd:6a:de:d1:a9:ee:79:52:11:
57:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:3D:A2:49:E1:D4:56:29:E4:4F:9F:E1:A5:95:42:99:3E:B5:16:96
X509v3 Authority Key Identifier:
keyid:2C:B1:35:62:5A:C0:51:A2:80:97:7F:63:06:CF:23:D6:0C:40:6B:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LLE1YlrAUaKAl39jBs8j1gxAa5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c740e6-ce6b-4d1a-8ece-fe9edbfcc7ef/1/LLE1YlrAUaKAl39jBs8j1gxAa5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c740e6-ce6b-4d1a-8ece-fe9edbfcc7ef/1/LLE1YlrAUaKAl39jBs8j1gxAa5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:de:3c:86:1d:2d:99:34:5c:72:22:7f:c5:b9:26:f5:8b:22:
d9:ab:4f:4f:39:a9:bf:0a:60:14:76:be:99:fe:53:2a:58:37:
5d:6f:39:6f:cf:af:31:fa:59:c3:da:44:12:a4:a1:2b:f3:a4:
ce:c4:4e:ec:fe:12:19:21:5e:52:60:76:16:1d:c6:bf:95:fe:
52:b5:5b:cd:26:d8:08:17:c1:20:81:f6:ba:d4:09:e2:1e:18:
4b:ac:6d:11:c8:48:bd:45:ce:11:22:0a:cb:6e:93:8e:a0:fa:
d0:96:c3:d7:5d:d6:ed:1d:8e:b5:53:0c:49:72:81:22:21:79:
0d:db:12:f6:e4:6e:34:13:58:3c:f6:71:9f:5b:b4:7a:ce:f9:
86:88:16:00:f5:7f:7c:06:94:69:29:60:a5:2f:4e:89:a9:86:
8f:bf:95:a7:cc:43:79:eb:d2:37:02:83:64:3d:fb:69:d5:1e:
ae:ee:2d:11:1a:4a:fe:1c:ee:96:52:c6:cd:23:92:b8:57:24:
26:89:90:e5:ff:1e:42:e5:5f:46:83:ac:39:19:cb:b1:9a:b2:
30:88:e0:36:65:d3:c5:e7:cb:45:4a:24:c2:0f:91:d0:6a:10:
fb:e2:cb:73:1f:43:d9:cd:5c:10:65:03:3a:52:fa:3f:c2:03:
cf:e1:20:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:34:20 2025 by rpki-client