Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/LL12aIuHwDkUriouFJDC8ekUFmE.mft
File: LL12aIuHwDkUriouFJDC8ekUFmE.mft (raw, json)
Hash identifier: QeCj1rBcKLb1DZ0P3nrD5sIi0KhyRxQiOnVccSqf958=
Subject key identifier: E8:CB:DC:C9:1E:12:9A:01:F1:95:CB:AA:61:BE:AA:65:B3:65:C1:35
Authority key identifier: 2C:BD:76:68:8B:87:C0:39:14:AE:2A:2E:14:90:C2:F1:E9:14:16:61
Certificate issuer: /CN=2cbd76688b87c03914ae2a2e1490c2f1e9141661
Certificate serial: 01974F6A605F07AA15C34F50A79F5C306F19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LL12aIuHwDkUriouFJDC8ekUFmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/LL12aIuHwDkUriouFJDC8ekUFmE.mft
Manifest number: 0559
Signing time: Sun 08 Jun 2025 12:01:00 +0000
Manifest this update: Sun 08 Jun 2025 12:01:00 +0000
Manifest next update: Mon 09 Jun 2025 12:01:00 +0000
Files and hashes: 1: H-Yt5FoKzZFkLIkaFu-xWw_buGE.roa (hash: FOTFvdLDXstlOIfQpA+rMFC4iGbO8vZig/vCbn7JvL8=)
2: LL12aIuHwDkUriouFJDC8ekUFmE.crl (hash: QhpGQ6mFnsRPCshJgRPzKFy7+S8T4LESKMZKgf7fIzo=)
3: Vl4-1Y5QnMxXeb8Ux6oMHZHD4uM.roa (hash: U+fPZyhr/WfWEB/lCPa7RbywJB7YzK5Ff1NgjRWLMzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/LL12aIuHwDkUriouFJDC8ekUFmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/LL12aIuHwDkUriouFJDC8ekUFmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LL12aIuHwDkUriouFJDC8ekUFmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:6a:60:5f:07:aa:15:c3:4f:50:a7:9f:5c:30:6f:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cbd76688b87c03914ae2a2e1490c2f1e9141661
Validity
Not Before: Jun 8 12:01:00 2025 GMT
Not After : Jun 9 12:01:00 2025 GMT
Subject: CN=e8cbdcc91e129a01f195cbaa61beaa65b365c135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b0:84:f4:7e:48:05:2d:ce:75:d8:41:f7:2d:
d6:74:ca:9e:b9:b8:b2:5d:1f:29:13:2b:c7:44:d1:
5d:9f:50:fe:b1:89:06:fb:24:82:b4:eb:a4:e0:06:
6f:17:71:26:14:82:b7:f0:92:93:23:fb:e5:6d:7c:
81:c0:f8:9e:27:03:af:d7:bc:2f:e2:26:c2:3f:52:
51:11:49:35:c6:a5:d7:b5:be:eb:9c:ed:3b:4c:90:
bd:23:24:d4:6b:2d:4b:28:80:bf:c0:26:0f:ab:77:
41:3d:13:e9:d4:0a:e8:e1:aa:ee:72:c0:37:9a:68:
c8:4d:5e:aa:6f:f6:6a:33:31:ac:45:d6:ca:7c:f3:
7d:89:43:89:8f:c0:0b:fe:2e:50:af:8f:78:de:3c:
73:6d:60:ef:07:51:b3:79:bd:ec:aa:48:5a:4b:83:
04:0e:5d:e8:0b:3d:5a:c5:81:53:f3:2f:b8:93:32:
22:8c:73:95:a4:02:28:5b:e0:40:56:02:a7:f1:d1:
f4:93:87:ee:5d:83:8b:76:8f:a4:f6:7c:1d:b3:5b:
f7:97:79:f3:ca:b2:b3:9c:6a:aa:a1:06:81:79:3b:
ec:09:d3:6f:d7:30:ca:b2:8d:61:b3:a2:f3:81:fd:
88:0d:c4:4c:be:fd:13:dc:1c:b8:03:a9:e5:33:df:
c3:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:CB:DC:C9:1E:12:9A:01:F1:95:CB:AA:61:BE:AA:65:B3:65:C1:35
X509v3 Authority Key Identifier:
keyid:2C:BD:76:68:8B:87:C0:39:14:AE:2A:2E:14:90:C2:F1:E9:14:16:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LL12aIuHwDkUriouFJDC8ekUFmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/LL12aIuHwDkUriouFJDC8ekUFmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/LL12aIuHwDkUriouFJDC8ekUFmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:45:d5:4f:05:9b:ef:90:26:cb:7b:df:ad:80:bd:db:22:0e:
ab:60:ba:1e:89:b9:a6:68:61:b7:8f:a9:1e:ee:f4:2c:51:38:
4c:5a:d9:e6:3f:d6:ff:4d:5b:0f:59:81:bf:6b:3a:eb:0d:5b:
be:a5:9a:bb:1e:98:6f:de:63:9d:72:3c:4e:e6:2d:31:4d:39:
92:1c:9e:41:38:ff:a4:39:cb:39:e3:cb:fa:82:2a:85:48:98:
06:45:5a:bd:3e:2a:11:c7:05:f7:8a:fa:17:93:43:27:e6:45:
0e:90:fa:3d:0e:91:b0:63:c9:c3:db:28:c4:9e:07:ad:40:48:
24:4b:a6:65:e1:80:6f:4e:8c:5d:48:12:b4:1f:e2:88:dc:62:
70:dd:f6:50:ce:4c:36:6f:8c:fa:9a:ee:cc:f7:da:b3:a9:fc:
04:f2:ea:c8:5d:15:09:82:55:9c:28:1f:79:71:c4:c9:bf:5e:
0c:82:64:aa:82:67:03:65:a0:d6:87:65:74:5b:8d:ff:cc:5e:
5d:30:d0:0b:d4:d8:21:8d:a4:73:80:82:3c:af:21:2d:58:1e:
39:fa:05:13:9b:f4:58:5e:3f:40:79:f5:98:9d:16:95:b6:72:
56:7c:e6:df:a9:98:d5:33:51:64:eb:cc:c5:e7:7f:60:5d:28:
ac:65:e1:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 21:37:45 2025 by rpki-client