Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/LLA1cHIC1AE6RHm-URLX-iJ7cnU.mft
File: LLA1cHIC1AE6RHm-URLX-iJ7cnU.mft (raw, json)
Hash identifier: 0tuHGf+hqcpzEf0QTPrIjah2r7H79s3eaf9OinErcag=
Subject key identifier: 5E:44:FD:7B:07:2F:DB:5B:5C:5C:11:AF:A3:CC:4C:C2:8C:35:DF:E1
Authority key identifier: 2C:B0:35:70:72:02:D4:01:3A:44:79:BE:51:12:D7:FA:22:7B:72:75
Certificate issuer: /CN=2cb035707202d4013a4479be5112d7fa227b7275
Certificate serial: 019748554299EFC0D2F15F65516B81727F56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LLA1cHIC1AE6RHm-URLX-iJ7cnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/LLA1cHIC1AE6RHm-URLX-iJ7cnU.mft
Manifest number: 14E2
Signing time: Sat 07 Jun 2025 03:00:36 +0000
Manifest this update: Sat 07 Jun 2025 03:00:36 +0000
Manifest next update: Sun 08 Jun 2025 03:00:36 +0000
Files and hashes: 1: LLA1cHIC1AE6RHm-URLX-iJ7cnU.crl (hash: j7RwBBIo2OjUNgZmeKLmAafwg6S7nr9/a0XgfY1cQrE=)
2: aMqTYIPJtRefR0bitojO91iFNhw.roa (hash: OsvcsotFS3YcVfF2tEICtxMnztWh2PTqW1dy/KMi8wk=)
3: i_35ud5OERiEDAx-BasHnsgHc48.roa (hash: mSZd0LC2OMh83YslBHZYulpSTQBAbQlb9kFIbiISICE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/LLA1cHIC1AE6RHm-URLX-iJ7cnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/LLA1cHIC1AE6RHm-URLX-iJ7cnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/LLA1cHIC1AE6RHm-URLX-iJ7cnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 03:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:55:42:99:ef:c0:d2:f1:5f:65:51:6b:81:72:7f:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cb035707202d4013a4479be5112d7fa227b7275
Validity
Not Before: Jun 7 03:00:36 2025 GMT
Not After : Jun 8 03:00:36 2025 GMT
Subject: CN=5e44fd7b072fdb5b5c5c11afa3cc4cc28c35dfe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6a:b2:eb:81:19:2a:cb:4c:d6:d3:12:af:ea:
e3:2b:7d:f6:95:75:64:9c:1c:14:a7:29:11:0a:b3:
0b:6b:cd:81:46:a1:89:f8:47:06:67:7a:8f:f2:75:
75:9a:5e:5e:61:08:30:0e:8a:b9:ac:dd:05:30:68:
58:71:da:be:a8:1d:27:bf:0c:2d:f8:cb:5d:05:a8:
0b:63:17:22:dc:20:b6:28:86:d9:a4:1a:5e:c0:43:
d0:36:c8:86:6d:5a:62:f6:26:50:91:98:ec:8f:2a:
f7:7a:55:4f:38:f4:da:78:de:d4:cd:a8:4f:7f:c8:
44:2c:94:71:91:03:42:cf:f3:b4:2a:f8:6c:11:21:
f0:5a:fa:1b:59:f0:4c:4c:f6:f8:d3:ff:f8:c9:a9:
1e:9c:70:ba:e3:f0:56:a5:d4:a4:f2:d3:a0:a7:d2:
88:fa:9c:6b:37:fb:1a:78:46:41:ef:db:70:f3:a8:
69:e0:1b:64:39:0e:8b:ea:6b:54:74:c7:23:0a:c4:
6f:57:aa:08:ea:70:e3:ac:2e:0f:db:47:0b:81:8e:
7a:93:84:7c:ea:ab:d0:68:e8:37:ec:32:cd:1e:ac:
03:a7:6e:99:68:28:59:18:64:20:e5:e4:71:96:e1:
3e:d1:b4:71:ce:bf:ba:b6:8a:fb:02:95:bf:56:02:
b1:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:44:FD:7B:07:2F:DB:5B:5C:5C:11:AF:A3:CC:4C:C2:8C:35:DF:E1
X509v3 Authority Key Identifier:
keyid:2C:B0:35:70:72:02:D4:01:3A:44:79:BE:51:12:D7:FA:22:7B:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LLA1cHIC1AE6RHm-URLX-iJ7cnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/LLA1cHIC1AE6RHm-URLX-iJ7cnU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/LLA1cHIC1AE6RHm-URLX-iJ7cnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:74:4b:83:e9:57:93:8d:0b:7c:4e:05:b3:71:5e:64:45:16:
6b:53:1a:8b:aa:bc:09:a5:2c:d7:da:1a:d1:00:84:09:b0:e2:
16:84:58:b2:6d:2e:42:d4:97:6a:d4:6e:b0:34:cc:e4:f3:95:
3e:1c:4a:fc:77:70:7d:92:a2:ea:93:3e:78:c3:c5:69:42:e1:
85:8a:e4:97:35:13:a4:dc:7b:2b:d7:7f:92:06:64:c4:73:c9:
e2:9d:79:dd:44:4c:1a:fe:57:63:48:7b:c5:ab:80:63:d4:df:
6b:c9:24:df:d1:38:6d:17:cf:e1:c9:a5:02:96:3f:52:de:a8:
78:3b:9e:4d:6f:00:46:99:6d:de:d4:9f:0d:50:59:c6:94:71:
6e:81:f3:84:0a:6f:b2:ee:7c:7c:ca:3c:a7:dd:82:6c:02:f3:
cb:c0:c4:47:0f:cb:b0:42:4b:1b:2f:51:ce:d4:1e:29:4e:b4:
e0:79:b9:74:ce:c3:75:ef:45:37:e8:98:36:ed:da:c5:4a:c6:
14:82:20:a3:68:5e:38:bb:58:89:f9:55:3e:9e:b0:5b:8e:15:
2a:56:b8:3d:f9:04:80:b0:58:48:fc:7d:96:b1:98:08:ee:76:
2f:2e:68:29:99:ff:ab:f1:76:7b:91:dc:99:89:a3:c1:3e:e4:
ce:0e:f2:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 11:36:10 2025 by rpki-client