Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.mft
File: llRz1oVy6iI4vdh1r6cloEBd5IM.mft (raw, json)
Hash identifier: wy48Z25jGMh0YcX65H8v7M4aXOU6+v5qEY38dWtxlZk=
Subject key identifier: 45:6B:D6:4B:23:0E:1F:44:6C:2F:5D:12:39:C9:69:E2:BF:3F:E2:37
Authority key identifier: 96:54:73:D6:85:72:EA:22:38:BD:D8:75:AF:A7:25:A0:40:5D:E4:83
Certificate issuer: /CN=965473d68572ea2238bdd875afa725a0405de483
Certificate serial: 0199E2618561E807399F20430374A490CB86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/llRz1oVy6iI4vdh1r6cloEBd5IM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.mft
Manifest number: 16D4
Signing time: Tue 14 Oct 2025 11:01:05 +0000
Manifest this update: Tue 14 Oct 2025 11:01:05 +0000
Manifest next update: Wed 15 Oct 2025 11:01:05 +0000
Files and hashes: 1: 83Gu0dtJuFZBe-loHFuPr5SJG_w.roa (hash: l+GbA3n02i+93pQcKbKkJrx1sOkT1XRYSXqoN31in0w=)
2: llRz1oVy6iI4vdh1r6cloEBd5IM.crl (hash: jXpkDfXLEbTftnSP1is9Sb+1msf1tkHySqCXkgu2oUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.mft
rsync://rpki.ripe.net/repository/DEFAULT/llRz1oVy6iI4vdh1r6cloEBd5IM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 15 Oct 2025 11:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e2:61:85:61:e8:07:39:9f:20:43:03:74:a4:90:cb:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=965473d68572ea2238bdd875afa725a0405de483
Validity
Not Before: Oct 14 11:01:05 2025 GMT
Not After : Oct 15 11:01:05 2025 GMT
Subject: CN=456bd64b230e1f446c2f5d1239c969e2bf3fe237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:82:ac:6b:e8:c8:a7:50:57:0b:bd:d0:d7:94:
92:db:53:9f:91:6b:e1:52:05:b4:62:71:1a:7e:82:
0d:35:54:1e:be:89:7c:8e:8b:b4:14:09:c8:01:c5:
e8:b9:7a:f9:d2:18:2c:15:51:bb:91:0f:4e:13:b6:
c8:63:b7:cb:2c:f6:d0:82:43:e1:e1:07:49:ab:fc:
3a:ca:e1:8a:48:c1:1e:ca:4d:75:b4:b2:d1:58:b6:
6b:0e:14:17:b4:a9:53:29:9a:37:bc:10:6b:6e:0f:
93:fc:a7:01:67:79:90:5a:16:74:df:6d:f4:f0:c4:
a0:25:df:ca:4b:d5:64:89:5e:c4:6f:b1:59:45:6d:
ae:7b:c0:94:05:17:45:d9:86:e9:07:ab:21:77:2b:
80:f2:75:cf:5e:71:b3:66:2b:34:7e:a4:3f:84:3d:
ed:27:a0:1d:e5:82:08:e3:bb:38:ea:ea:5d:12:f1:
a8:11:66:b5:b0:51:fd:ce:60:43:c1:54:13:96:60:
fc:a7:9e:2a:93:5f:c4:cb:4d:78:e6:92:83:3b:4e:
62:9e:46:34:b0:ef:5f:ba:1c:55:ea:64:0a:f8:aa:
04:d0:ad:b3:3c:e1:1c:8d:63:35:cc:1e:4b:9e:36:
7c:1a:b5:2b:7f:a6:a1:fd:f0:f7:b0:11:b8:88:ec:
7a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:6B:D6:4B:23:0E:1F:44:6C:2F:5D:12:39:C9:69:E2:BF:3F:E2:37
X509v3 Authority Key Identifier:
keyid:96:54:73:D6:85:72:EA:22:38:BD:D8:75:AF:A7:25:A0:40:5D:E4:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/llRz1oVy6iI4vdh1r6cloEBd5IM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:7c:8b:a8:cd:a1:a9:87:c0:f4:55:d1:b6:97:30:b3:80:da:
17:ac:63:38:30:34:82:f0:bf:af:b3:2d:23:7e:9d:1f:a1:aa:
27:a6:98:1f:fb:77:60:6c:12:bb:28:40:59:e5:a8:e7:7d:11:
30:e9:11:6d:0e:1a:1f:5b:cd:22:46:b7:db:42:d0:39:36:93:
5c:24:e7:7e:1a:1c:ab:da:53:d4:81:ca:4f:09:99:9b:12:65:
59:ba:f1:cc:75:ca:7d:3b:22:90:62:18:a8:e3:a6:cf:61:82:
dc:4e:6f:63:72:91:3a:e2:93:39:d0:f1:89:99:9f:bf:72:5b:
a0:fc:be:5e:de:67:e9:5f:48:48:9a:03:e1:dc:62:85:25:57:
1e:4f:22:6e:43:c6:6f:fa:8d:8f:42:22:5f:d0:8a:4f:fd:6b:
d3:db:9b:f8:63:4f:87:32:37:8c:f3:0b:72:bb:42:6c:7a:aa:
0d:bf:97:5e:2a:29:44:46:a2:6d:5b:4a:20:e8:a9:86:1d:95:
8d:af:3e:a2:12:c6:e9:af:d1:10:0c:06:22:97:c6:e7:a0:5b:
98:a7:56:1a:55:4b:b1:aa:83:47:59:d7:28:e7:b3:24:03:98:
ad:21:6d:e2:27:c3:95:84:ea:23:fe:4b:99:d6:b8:2e:58:f8:
86:7b:b1:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 14 20:39:14 2025 by rpki-client