Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/b12604-b481-416d-b088-210767bd0ba2/1/LDe0vsl9YIq-I7xXujmCRszFd2A.mft
File: LDe0vsl9YIq-I7xXujmCRszFd2A.mft (raw, json)
Hash identifier: Ua9JQwIoZeHis36v5Abw+prd3RSQc52DNmJP5cqmljA=
Subject key identifier: EE:77:C2:F8:13:3D:24:F3:40:2B:08:71:1E:EC:53:F7:6C:36:2B:E7
Authority key identifier: 2C:37:B4:BE:C9:7D:60:8A:BE:23:BC:57:BA:39:82:46:CC:C5:77:60
Certificate issuer: /CN=2c37b4bec97d608abe23bc57ba398246ccc57760
Certificate serial: 0198D5F1297FA91274BC947C4B43EAB124E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LDe0vsl9YIq-I7xXujmCRszFd2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/b12604-b481-416d-b088-210767bd0ba2/1/LDe0vsl9YIq-I7xXujmCRszFd2A.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 08:00:08 +0000
Manifest this update: Sat 23 Aug 2025 08:00:08 +0000
Manifest next update: Sun 24 Aug 2025 08:00:08 +0000
Files and hashes: 1: 7BY_kFwL8OEGCGg4fffLBCGfbIk.roa (hash: wPQVbJEzFYU2FTuvcz3iiUbD5hpnYkEGB5yumpXFpQo=)
2: LDe0vsl9YIq-I7xXujmCRszFd2A.crl (hash: yU+nlQzUzpHiwsLMtHYZSomLNxMertCA2DgBwf78N/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/b12604-b481-416d-b088-210767bd0ba2/1/LDe0vsl9YIq-I7xXujmCRszFd2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/b12604-b481-416d-b088-210767bd0ba2/1/LDe0vsl9YIq-I7xXujmCRszFd2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/LDe0vsl9YIq-I7xXujmCRszFd2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:29:7f:a9:12:74:bc:94:7c:4b:43:ea:b1:24:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c37b4bec97d608abe23bc57ba398246ccc57760
Validity
Not Before: Aug 23 08:00:08 2025 GMT
Not After : Aug 24 08:00:08 2025 GMT
Subject: CN=ee77c2f8133d24f3402b08711eec53f76c362be7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7e:dc:e4:3a:f3:05:db:1d:ba:63:5d:03:3b:
98:82:2c:ee:b5:19:6b:91:18:20:75:f5:9e:4e:49:
82:61:9b:a8:ff:08:f7:99:9b:e3:ad:4e:79:9d:64:
fd:df:fc:02:e7:f0:49:c8:46:a0:0a:61:ee:dc:e1:
02:f0:ab:c2:f5:55:0f:c7:2a:28:d5:44:35:89:e9:
38:72:d2:14:aa:0c:14:c2:1f:67:b6:4a:76:62:89:
3e:d7:ca:35:a6:0f:40:e9:d6:ec:34:25:5d:1e:e1:
2c:b5:16:3c:64:32:fd:42:34:9e:c9:e6:2d:f6:37:
5b:81:88:c8:85:84:15:95:9c:20:d5:6b:34:e2:0d:
f4:b0:26:62:aa:33:bb:18:ba:81:f5:e5:9e:46:5c:
ca:ad:c5:66:66:6a:4b:18:0d:62:97:25:eb:24:53:
61:36:68:df:f8:24:70:47:5d:64:b2:d6:e3:b3:df:
f6:3d:d3:05:be:ab:02:69:36:4a:14:1d:d6:37:99:
28:b1:ff:3e:9a:9b:5c:10:77:3b:71:87:f5:f8:44:
0a:9d:0b:06:4d:c6:c8:a2:4b:82:d1:aa:e5:b6:3a:
0e:5b:90:b9:8a:75:14:c7:7f:ad:15:4c:fb:d1:2e:
45:ad:53:a5:e4:69:1e:c6:a0:c8:7d:cc:ad:f2:b6:
58:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:77:C2:F8:13:3D:24:F3:40:2B:08:71:1E:EC:53:F7:6C:36:2B:E7
X509v3 Authority Key Identifier:
keyid:2C:37:B4:BE:C9:7D:60:8A:BE:23:BC:57:BA:39:82:46:CC:C5:77:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LDe0vsl9YIq-I7xXujmCRszFd2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/b12604-b481-416d-b088-210767bd0ba2/1/LDe0vsl9YIq-I7xXujmCRszFd2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/b12604-b481-416d-b088-210767bd0ba2/1/LDe0vsl9YIq-I7xXujmCRszFd2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:7a:83:83:b3:6a:37:e6:26:d4:3e:ea:57:d9:17:2a:d9:2d:
b6:a3:5b:97:06:62:02:ca:0c:35:9d:6a:f4:9b:d2:70:28:7a:
f1:0e:5f:6d:93:ab:04:04:ac:1c:2c:ec:8f:b0:9e:b1:54:cc:
cd:37:c0:82:2b:e5:e0:ec:18:30:05:8f:f4:95:d5:57:13:30:
40:06:98:2f:5c:1b:96:98:39:ca:ce:22:0c:ce:e2:ad:96:69:
b0:44:91:3b:a8:2b:b7:b1:90:da:95:75:b1:6c:6c:63:cc:2d:
c8:c5:76:ea:fc:a2:d2:96:af:4b:01:11:72:b2:ee:f5:ed:2a:
9a:e5:16:ef:5b:8b:dc:b1:76:34:20:4f:f9:67:eb:15:c8:39:
6b:00:4f:4d:a5:1e:f8:fa:18:f8:57:bb:b5:20:3c:10:2e:82:
86:a5:68:3a:dc:72:b6:4a:45:6f:03:d1:e2:0e:46:4b:6f:68:
d3:75:ce:20:01:11:e3:19:6a:a4:20:fb:1e:fe:19:57:7e:e8:
b3:e0:d4:c4:1d:fc:b4:00:71:12:f9:26:ca:29:5a:3c:e9:e0:
68:5a:bf:e4:97:90:45:81:f1:56:7e:f7:cc:b2:15:59:4f:9f:
74:33:49:e9:f9:c7:2d:da:2f:7c:6c:b4:57:2a:29:cd:ee:76:
38:18:9d:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:42:07 2025 by rpki-client