Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/LLA1cHIC1AE6RHm-URLX-iJ7cnU.mft
File: LLA1cHIC1AE6RHm-URLX-iJ7cnU.mft (raw, json)
Hash identifier: 52XAQNBxgsxCG6OFlxXTm6iS0dJPf0ziVmCk66Mayww=
Subject key identifier: AE:E9:00:96:1E:B9:2D:52:A9:08:FC:EF:03:DC:43:C9:36:C0:78:EE
Authority key identifier: 2C:B0:35:70:72:02:D4:01:3A:44:79:BE:51:12:D7:FA:22:7B:72:75
Certificate issuer: /CN=2cb035707202d4013a4479be5112d7fa227b7275
Certificate serial: 01991808D68DFBE6AAC41CA13D345F5C82CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LLA1cHIC1AE6RHm-URLX-iJ7cnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/LLA1cHIC1AE6RHm-URLX-iJ7cnU.mft
Manifest number: 15D2
Signing time: Fri 05 Sep 2025 04:00:56 +0000
Manifest this update: Fri 05 Sep 2025 04:00:56 +0000
Manifest next update: Sat 06 Sep 2025 04:00:56 +0000
Files and hashes: 1: LLA1cHIC1AE6RHm-URLX-iJ7cnU.crl (hash: 6AnevqVcHL2DdnEg7Ae7dUBM7JVSHk0dmh8L/t1+gYE=)
2: aMqTYIPJtRefR0bitojO91iFNhw.roa (hash: OsvcsotFS3YcVfF2tEICtxMnztWh2PTqW1dy/KMi8wk=)
3: i_35ud5OERiEDAx-BasHnsgHc48.roa (hash: mSZd0LC2OMh83YslBHZYulpSTQBAbQlb9kFIbiISICE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/LLA1cHIC1AE6RHm-URLX-iJ7cnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/LLA1cHIC1AE6RHm-URLX-iJ7cnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/LLA1cHIC1AE6RHm-URLX-iJ7cnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:18:08:d6:8d:fb:e6:aa:c4:1c:a1:3d:34:5f:5c:82:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cb035707202d4013a4479be5112d7fa227b7275
Validity
Not Before: Sep 5 04:00:56 2025 GMT
Not After : Sep 6 04:00:56 2025 GMT
Subject: CN=aee900961eb92d52a908fcef03dc43c936c078ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7f:1d:29:1c:71:8f:bf:d6:79:3e:f6:81:35:
74:af:98:db:ac:e4:05:1b:9c:36:f6:d2:3e:d7:09:
4c:4d:ec:72:26:05:d8:a6:53:b3:f5:94:13:6b:7a:
c0:7f:4e:8f:7e:1a:46:bb:04:5f:2d:16:85:55:5e:
f0:c8:6d:73:30:c9:2e:ab:63:22:2d:ea:51:c5:53:
2f:3d:59:0f:6b:f8:b7:16:a8:68:32:e8:9f:dc:1a:
3f:55:e4:32:d6:32:68:1f:43:b3:1f:23:c8:90:78:
c5:d7:90:5e:9c:c1:7c:7e:1c:24:13:e5:8c:f1:f5:
66:7f:48:f2:6a:ba:30:b6:75:c1:53:40:6e:47:f7:
4b:d9:d3:23:f9:cc:8c:64:c6:28:1d:90:c2:54:14:
74:39:99:01:ab:2b:32:d5:6f:e1:62:be:8d:ce:9b:
57:60:4d:10:ca:a9:e1:5b:8b:5a:24:15:09:5d:f5:
67:ab:99:d4:e3:03:a1:d3:04:f8:89:1b:01:73:4e:
74:e4:4e:f8:61:ae:f4:66:ea:e2:75:7b:4f:e9:b9:
52:d0:db:24:46:26:1e:c6:bf:4a:1a:01:5e:f7:76:
bf:24:a2:3a:ad:00:dc:43:63:69:d0:7f:e5:8a:5a:
c5:f8:8c:22:a4:3a:2c:02:8e:f9:dc:3b:b6:90:8d:
93:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:E9:00:96:1E:B9:2D:52:A9:08:FC:EF:03:DC:43:C9:36:C0:78:EE
X509v3 Authority Key Identifier:
keyid:2C:B0:35:70:72:02:D4:01:3A:44:79:BE:51:12:D7:FA:22:7B:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LLA1cHIC1AE6RHm-URLX-iJ7cnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/LLA1cHIC1AE6RHm-URLX-iJ7cnU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/LLA1cHIC1AE6RHm-URLX-iJ7cnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:d5:b9:f6:95:d1:d6:99:a2:84:5b:6f:23:20:e8:7a:97:fd:
fc:f0:6c:dc:67:c0:34:53:48:79:a2:b1:ab:a5:cb:c1:c4:d1:
67:81:e0:99:28:d5:bd:f6:c4:1f:7b:aa:1d:7c:e2:66:ab:59:
1c:57:c8:6c:86:36:e4:e4:cd:a1:ff:1f:44:e2:54:69:ee:9f:
04:c0:59:27:41:88:1f:ee:1c:ce:13:64:44:80:54:03:c8:73:
b6:c7:17:f6:b5:e6:14:a5:e9:00:0c:d5:72:d3:d3:5d:c3:4c:
68:97:5d:74:83:b0:70:e4:c5:e4:36:3a:53:36:1d:24:f9:2e:
6e:d2:9f:97:2d:b3:aa:30:db:cd:ac:5b:32:d5:2e:2e:f2:d3:
c6:fc:da:6a:d5:fd:78:d4:34:45:52:dc:cc:a4:10:55:87:7b:
d5:e7:96:3f:81:8e:fb:8a:da:82:73:a8:88:23:d5:d5:8d:61:
c8:a4:cb:3b:82:e9:b2:b1:51:f3:58:68:c2:06:51:f9:2d:fe:
c8:75:b1:6b:4d:0b:81:eb:9f:a9:bf:d6:84:f8:39:3e:42:e7:
f9:93:79:16:0d:f2:1b:93:e5:57:08:9c:74:7a:bb:58:30:85:
f6:74:96:2a:01:db:44:97:de:89:ca:60:fe:66:ac:0f:76:84:
81:63:e4:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 05:54:46 2025 by rpki-client