Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.mft
File: llRz1oVy6iI4vdh1r6cloEBd5IM.mft (raw, json)
Hash identifier: n/uRF19vNBYHmERnMetl8MCoPiYbg+VyWOg+RCR+nWg=
Subject key identifier: 97:D4:5A:99:3A:87:09:6D:EE:18:38:EA:1A:09:E6:8C:D3:B6:8B:04
Authority key identifier: 96:54:73:D6:85:72:EA:22:38:BD:D8:75:AF:A7:25:A0:40:5D:E4:83
Certificate issuer: /CN=965473d68572ea2238bdd875afa725a0405de483
Certificate serial: 0198CA5B0CA6707E03E920CA52A08826D074
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/llRz1oVy6iI4vdh1r6cloEBd5IM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.mft
Manifest number: 1643
Signing time: Thu 21 Aug 2025 02:00:21 +0000
Manifest this update: Thu 21 Aug 2025 02:00:21 +0000
Manifest next update: Fri 22 Aug 2025 02:00:21 +0000
Files and hashes: 1: 83Gu0dtJuFZBe-loHFuPr5SJG_w.roa (hash: l+GbA3n02i+93pQcKbKkJrx1sOkT1XRYSXqoN31in0w=)
2: llRz1oVy6iI4vdh1r6cloEBd5IM.crl (hash: 3QKgjnsOHq/+OZ1bVB6EEdi/QIXgF+OeiKXYNapwXBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.mft
rsync://rpki.ripe.net/repository/DEFAULT/llRz1oVy6iI4vdh1r6cloEBd5IM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 23:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:ca:5b:0c:a6:70:7e:03:e9:20:ca:52:a0:88:26:d0:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=965473d68572ea2238bdd875afa725a0405de483
Validity
Not Before: Aug 21 02:00:21 2025 GMT
Not After : Aug 22 02:00:21 2025 GMT
Subject: CN=97d45a993a87096dee1838ea1a09e68cd3b68b04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:cf:91:47:c8:01:f3:70:47:c0:b7:8a:5a:49:
f6:f1:f4:af:db:0f:49:7c:40:20:4d:c3:6b:2e:15:
de:b0:e7:df:68:f8:6e:b1:af:d4:28:af:4f:9c:c6:
80:ef:16:74:2a:ab:91:0c:ce:2c:fe:f1:ff:b7:66:
06:ae:63:b7:bb:75:28:a4:29:c1:2c:d2:90:3d:9c:
ba:82:a7:eb:83:54:e1:37:02:ab:2f:07:a9:fd:61:
e7:37:4f:4e:97:2c:13:d2:49:0b:83:39:47:d0:99:
bb:cb:81:9e:54:39:90:0a:f3:d1:44:a8:32:2a:96:
64:b7:64:5c:cf:91:f8:26:3f:82:44:47:3f:20:15:
2d:97:1d:af:70:8e:83:44:36:54:e6:88:b9:53:ec:
89:cd:73:6d:87:59:e2:b0:68:20:9c:64:34:45:91:
83:47:e9:6f:c8:1f:e1:e7:fa:1e:fc:95:93:c4:3d:
cb:79:fd:bc:e1:6e:09:fe:39:58:3f:2b:41:45:26:
6c:e5:0f:76:82:51:7c:4f:3a:d3:1f:3f:87:bc:5d:
2e:de:b9:bd:2a:9e:df:37:c2:7c:0f:d3:2a:f9:2b:
8a:03:5b:dd:c0:f5:be:40:4f:0c:69:9c:c5:61:50:
2b:0e:50:1c:66:e4:39:ba:b6:c3:91:4a:eb:76:45:
ea:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:D4:5A:99:3A:87:09:6D:EE:18:38:EA:1A:09:E6:8C:D3:B6:8B:04
X509v3 Authority Key Identifier:
keyid:96:54:73:D6:85:72:EA:22:38:BD:D8:75:AF:A7:25:A0:40:5D:E4:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/llRz1oVy6iI4vdh1r6cloEBd5IM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:93:2f:6f:6c:3f:e0:e1:4d:d3:58:8e:c1:78:bc:54:0f:4e:
e3:bc:0b:b1:0f:67:77:a1:32:d4:63:0d:56:67:1a:a0:55:d8:
19:06:9a:83:cb:3e:27:83:b0:39:2d:c6:5e:56:58:c5:a5:3a:
e0:1f:3b:96:6d:51:ea:1b:bb:ec:c8:7c:78:af:9f:4f:18:e3:
85:48:49:b5:67:34:9f:e6:8e:d8:ce:8b:8f:08:16:82:7a:78:
25:ad:65:1c:e1:d0:d6:0e:78:78:37:85:16:68:d1:f3:e3:3c:
7b:c2:d9:72:2d:cb:74:5d:0c:89:80:a6:a9:56:a4:ea:d7:79:
98:e7:fa:3a:f5:51:65:94:47:e3:ec:e5:24:56:f4:d3:fe:dd:
36:a4:fb:c5:96:a2:c0:c4:b8:f4:8c:df:e2:ae:8a:b9:99:8d:
49:74:c9:9e:60:23:6a:53:ed:4d:9f:5f:95:d1:28:e0:84:37:
f2:d3:fc:8c:2d:f5:96:cd:64:b3:1f:f9:82:06:98:bd:e3:fc:
43:5c:73:8b:db:14:30:cf:8c:1b:92:03:96:46:c4:16:10:57:
31:af:25:66:fd:a3:a9:5d:e0:e6:25:01:71:e2:6f:87:c5:c0:
5b:7f:c8:d1:0d:92:21:29:d1:64:0c:ce:91:5e:7d:bd:26:5b:
23:ec:43:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 07:15:13 2025 by rpki-client