Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.mft
File: llRz1oVy6iI4vdh1r6cloEBd5IM.mft (raw, json)
Hash identifier: 9Mkri76Q90bNgQQc7BRfGPKxK8FgRd+6Mk5KcLs+UWI=
Subject key identifier: 76:7F:DE:5F:C0:DE:67:72:66:62:30:2F:2C:D5:13:47:03:0F:0C:F7
Authority key identifier: 96:54:73:D6:85:72:EA:22:38:BD:D8:75:AF:A7:25:A0:40:5D:E4:83
Certificate issuer: /CN=965473d68572ea2238bdd875afa725a0405de483
Certificate serial: 0197462FD99500CAB489ABFB4DA95557B049
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/llRz1oVy6iI4vdh1r6cloEBd5IM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.mft
Manifest number: 157A
Signing time: Fri 06 Jun 2025 17:00:30 +0000
Manifest this update: Fri 06 Jun 2025 17:00:30 +0000
Manifest next update: Sat 07 Jun 2025 17:00:30 +0000
Files and hashes: 1: 83Gu0dtJuFZBe-loHFuPr5SJG_w.roa (hash: l+GbA3n02i+93pQcKbKkJrx1sOkT1XRYSXqoN31in0w=)
2: llRz1oVy6iI4vdh1r6cloEBd5IM.crl (hash: VV73RV6PoYW4vnk3c4C5ImUD579dUrSAqj10m6Yemeg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.mft
rsync://rpki.ripe.net/repository/DEFAULT/llRz1oVy6iI4vdh1r6cloEBd5IM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:2f:d9:95:00:ca:b4:89:ab:fb:4d:a9:55:57:b0:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=965473d68572ea2238bdd875afa725a0405de483
Validity
Not Before: Jun 6 17:00:30 2025 GMT
Not After : Jun 7 17:00:30 2025 GMT
Subject: CN=767fde5fc0de67726662302f2cd51347030f0cf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7c:a2:dc:c1:41:ae:d5:96:2b:0e:2e:6f:d3:
f5:12:65:d8:40:14:d0:c9:07:b7:2e:ba:d2:d7:55:
ca:50:97:c1:94:1a:a8:e2:78:97:aa:44:f0:00:e7:
6c:59:08:77:44:cd:0d:c8:5f:f4:2b:2a:34:18:2e:
ee:1b:3c:99:71:1b:65:99:d9:7a:04:c3:79:fb:8b:
9b:ca:57:5f:ae:ca:99:a2:ff:d4:c6:74:8b:5b:75:
46:b9:b3:8f:d3:c1:c4:7f:b6:e7:e4:9c:91:94:f6:
8f:52:4c:3e:fb:81:40:44:b0:04:c6:76:0f:b5:86:
c9:01:51:77:62:1b:a2:5e:e5:53:a2:74:e0:7e:b3:
90:2e:13:c0:f8:72:50:60:16:20:b7:b3:a2:01:9b:
e0:65:ac:cb:b6:06:dc:5e:74:a1:f5:86:6f:24:c8:
49:12:d6:4c:64:31:9f:51:a1:58:77:36:b2:a0:bc:
e7:f4:12:db:bc:e2:f4:9f:62:84:9d:80:11:e3:93:
8a:12:ed:e3:69:ec:a8:af:63:50:c4:bd:71:1f:e2:
6e:53:a2:28:ff:72:17:98:7c:40:4a:71:5d:87:02:
69:71:73:78:a3:37:d8:4e:f1:0d:6c:fe:5f:28:ad:
66:11:ca:b8:11:6c:3b:84:9a:4a:fe:24:ec:e4:5a:
f3:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:7F:DE:5F:C0:DE:67:72:66:62:30:2F:2C:D5:13:47:03:0F:0C:F7
X509v3 Authority Key Identifier:
keyid:96:54:73:D6:85:72:EA:22:38:BD:D8:75:AF:A7:25:A0:40:5D:E4:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/llRz1oVy6iI4vdh1r6cloEBd5IM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:56:de:dd:33:7e:80:91:49:1a:99:d8:b2:18:8b:b6:54:4b:
a1:cf:14:0e:08:52:39:73:a6:40:e9:d9:50:1f:84:61:78:54:
92:67:a7:f9:61:67:5a:6e:55:93:e0:1c:34:e3:a4:0d:b6:08:
42:6c:b2:45:02:3b:9b:91:3a:7f:0e:cc:f7:4a:3d:88:79:6e:
81:12:1d:53:98:5b:33:74:fc:09:15:e1:24:a7:fb:2a:78:17:
67:c5:a8:bb:15:29:2c:48:88:50:82:95:ae:27:86:1c:4a:a6:
71:ce:b5:34:92:7b:c1:cd:2a:f3:f1:85:b8:0a:67:4f:17:1b:
71:b8:59:a7:9b:7e:a9:71:ca:b3:c3:42:a4:49:17:98:ae:d9:
1e:42:73:a7:a7:74:97:2f:eb:23:9d:de:d6:02:79:bf:82:17:
91:e4:c7:cc:b9:1f:70:af:ed:65:ac:94:08:2d:db:02:22:ca:
04:a6:bf:14:a0:68:d2:c4:ca:f9:25:58:a3:31:b7:a9:b5:ca:
21:b1:7b:eb:69:17:39:4f:57:00:2d:27:d6:74:ed:cf:ba:ed:
39:45:52:4e:be:ee:14:95:a8:c2:0e:fe:12:3c:c5:45:fc:a6:
ed:65:4d:4a:37:50:2b:cd:72:a7:c2:08:1a:51:fb:93:e8:06:
19:0a:ad:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:02:21 2025 by rpki-client