Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/LL12aIuHwDkUriouFJDC8ekUFmE.mft
File: LL12aIuHwDkUriouFJDC8ekUFmE.mft (raw, json)
Hash identifier: PLM8bPYcTP53GDOVEotSeafcHSs9dMnfT+l0K8PJ8oQ=
Subject key identifier: 2A:58:6E:02:CB:97:55:59:F5:27:DE:19:29:20:BF:1D:AB:4E:11:C5
Authority key identifier: 2C:BD:76:68:8B:87:C0:39:14:AE:2A:2E:14:90:C2:F1:E9:14:16:61
Certificate issuer: /CN=2cbd76688b87c03914ae2a2e1490c2f1e9141661
Certificate serial: 01991CF86B348FC83BF05A5B8DA62D22FE6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LL12aIuHwDkUriouFJDC8ekUFmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/LL12aIuHwDkUriouFJDC8ekUFmE.mft
Manifest number: 0648
Signing time: Sat 06 Sep 2025 03:01:06 +0000
Manifest this update: Sat 06 Sep 2025 03:01:06 +0000
Manifest next update: Sun 07 Sep 2025 03:01:06 +0000
Files and hashes: 1: H-Yt5FoKzZFkLIkaFu-xWw_buGE.roa (hash: FOTFvdLDXstlOIfQpA+rMFC4iGbO8vZig/vCbn7JvL8=)
2: LL12aIuHwDkUriouFJDC8ekUFmE.crl (hash: nAwga7hziKn59e07D4+V2ul8JXwoj+uvxfzpvr9xKcg=)
3: Vl4-1Y5QnMxXeb8Ux6oMHZHD4uM.roa (hash: U+fPZyhr/WfWEB/lCPa7RbywJB7YzK5Ff1NgjRWLMzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/LL12aIuHwDkUriouFJDC8ekUFmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/LL12aIuHwDkUriouFJDC8ekUFmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LL12aIuHwDkUriouFJDC8ekUFmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 02:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1c:f8:6b:34:8f:c8:3b:f0:5a:5b:8d:a6:2d:22:fe:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cbd76688b87c03914ae2a2e1490c2f1e9141661
Validity
Not Before: Sep 6 03:01:06 2025 GMT
Not After : Sep 7 03:01:06 2025 GMT
Subject: CN=2a586e02cb975559f527de192920bf1dab4e11c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c1:ff:54:21:f3:ef:19:71:d3:08:a9:d1:19:
3d:c5:c8:04:31:3c:5f:7c:f8:9c:ae:e0:30:6e:f0:
0b:a4:70:c8:fd:37:bc:06:6c:ff:0a:cc:ec:83:18:
c1:58:69:dd:dc:a9:48:68:4b:06:33:51:1d:2f:13:
6c:65:20:b9:95:26:00:42:3d:e6:ca:28:e5:de:ba:
ed:7d:6d:d0:09:7f:fd:cd:3b:f0:a2:cb:9b:a5:d3:
fd:33:be:42:6b:e2:7c:7d:da:50:6f:44:35:e1:b1:
22:8d:e4:93:b4:72:2d:65:cf:e8:8d:52:b6:7d:45:
54:1e:65:63:52:03:9c:f5:cb:7b:73:57:ca:4f:97:
b5:46:d8:49:b8:e8:08:32:f2:43:74:11:28:7f:11:
fc:68:28:25:99:99:0c:7e:1f:b1:9b:7b:43:0c:d4:
16:30:bf:af:4d:f7:56:7b:94:68:dc:81:ab:ea:d0:
fa:b0:42:96:37:6f:51:13:42:af:67:c3:5e:1f:45:
f1:3a:ae:98:1f:07:1f:78:a3:25:a7:f8:2d:35:d3:
1c:b9:cc:a3:e2:3e:4f:ff:d5:e9:fc:2c:28:2b:5d:
71:ff:09:fc:ed:34:e2:75:9f:4f:df:22:26:d0:f0:
af:31:98:8b:c7:c6:13:c8:1e:53:4d:79:3c:0e:a7:
b2:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:58:6E:02:CB:97:55:59:F5:27:DE:19:29:20:BF:1D:AB:4E:11:C5
X509v3 Authority Key Identifier:
keyid:2C:BD:76:68:8B:87:C0:39:14:AE:2A:2E:14:90:C2:F1:E9:14:16:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LL12aIuHwDkUriouFJDC8ekUFmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/LL12aIuHwDkUriouFJDC8ekUFmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/LL12aIuHwDkUriouFJDC8ekUFmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:a8:89:30:b4:32:fa:1b:35:c4:7a:7b:38:93:a6:8e:c0:de:
a5:ad:c0:0a:52:2a:a1:a5:89:9b:b1:7b:53:26:82:86:dd:34:
57:d7:40:81:41:78:0f:cd:7a:b9:7b:df:d1:0f:ce:6b:14:dd:
43:06:f0:7d:80:5f:ab:fb:16:fd:45:ec:aa:fc:db:00:b1:93:
ce:0c:9a:a2:f5:92:9a:fc:c0:e8:31:2a:21:e9:2a:90:e9:b5:
a7:cb:c2:e3:b3:84:56:bf:0e:7c:e3:86:ba:b3:6c:11:7e:3d:
65:84:87:14:3e:87:98:15:3f:d1:35:5c:41:b9:37:17:d1:16:
7a:2f:c0:77:4b:89:4e:e0:57:1c:34:13:1d:6f:0c:8c:63:43:
33:f2:2b:89:98:f3:66:95:c6:eb:8c:c2:7f:1a:64:1e:d5:3a:
50:86:c5:f1:50:a5:ca:66:de:70:d6:85:9f:a8:fb:f3:db:93:
7e:30:d3:89:da:23:05:3e:ee:22:4c:d0:f0:ab:8c:b6:22:83:
49:17:ce:85:78:6c:54:c5:0e:83:a9:8c:98:1c:06:fa:d1:13:
5a:91:7e:3e:6b:6b:f9:4c:05:94:2b:39:c6:0d:a7:0a:3e:92:
4b:b7:d3:c6:8d:4d:b1:bd:8d:0a:ee:bf:7a:62:07:d6:1e:c8:
36:1c:be:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 08:15:07 2025 by rpki-client