Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/b12604-b481-416d-b088-210767bd0ba2/1/LDe0vsl9YIq-I7xXujmCRszFd2A.mft
File: LDe0vsl9YIq-I7xXujmCRszFd2A.mft (raw, json)
Hash identifier: fWoz0xZ2viJGCjcd+OwFEbKZF+aCV1xoW5UtVwiwmFA=
Subject key identifier: 84:9C:13:8F:6C:96:06:8F:22:47:59:81:25:87:38:63:69:C2:01:ED
Authority key identifier: 2C:37:B4:BE:C9:7D:60:8A:BE:23:BC:57:BA:39:82:46:CC:C5:77:60
Certificate issuer: /CN=2c37b4bec97d608abe23bc57ba398246ccc57760
Certificate serial: 0199FF599447F652BFE08D1B47F51F0363D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LDe0vsl9YIq-I7xXujmCRszFd2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/b12604-b481-416d-b088-210767bd0ba2/1/LDe0vsl9YIq-I7xXujmCRszFd2A.mft
Manifest number: 16E4
Signing time: Mon 20 Oct 2025 02:01:24 +0000
Manifest this update: Mon 20 Oct 2025 02:01:24 +0000
Manifest next update: Tue 21 Oct 2025 02:01:24 +0000
Files and hashes: 1: 7BY_kFwL8OEGCGg4fffLBCGfbIk.roa (hash: wPQVbJEzFYU2FTuvcz3iiUbD5hpnYkEGB5yumpXFpQo=)
2: LDe0vsl9YIq-I7xXujmCRszFd2A.crl (hash: pynX0GWlxqgYfBF4Nc+z65R3gmBxXAYs1ZRz4U36ags=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/b12604-b481-416d-b088-210767bd0ba2/1/LDe0vsl9YIq-I7xXujmCRszFd2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/b12604-b481-416d-b088-210767bd0ba2/1/LDe0vsl9YIq-I7xXujmCRszFd2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/LDe0vsl9YIq-I7xXujmCRszFd2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 02:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:94:47:f6:52:bf:e0:8d:1b:47:f5:1f:03:63:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c37b4bec97d608abe23bc57ba398246ccc57760
Validity
Not Before: Oct 20 02:01:24 2025 GMT
Not After : Oct 21 02:01:24 2025 GMT
Subject: CN=849c138f6c96068f224759812587386369c201ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:dc:87:2f:a3:6d:f8:b9:02:bd:30:95:d0:b3:
d4:b6:14:a4:09:66:dd:4d:18:42:97:cd:7c:48:66:
b9:9c:01:9d:ad:1c:14:6f:cc:95:ed:cc:8d:75:26:
0f:72:23:ae:9f:ba:ad:e7:5c:d7:7a:90:fa:68:6f:
35:54:ab:38:bd:5e:e0:de:6a:53:3a:dc:c6:7e:71:
66:f2:2d:b1:35:56:27:b0:ac:a8:11:ce:c7:44:f3:
e4:6f:e5:2a:12:2d:a3:50:e1:42:c7:33:d1:23:a4:
65:86:92:62:76:14:90:a2:27:23:2b:71:d2:f6:0a:
e3:ac:97:81:2b:17:56:77:d5:fc:92:0c:33:3a:5c:
2f:1a:84:eb:f1:fa:bc:5e:03:54:3a:b6:4d:cf:34:
f2:35:54:d5:78:d2:8b:03:86:cd:e7:9f:b7:e3:a9:
dc:d6:d6:da:1f:ae:32:46:c9:5e:92:d1:82:17:f5:
f8:10:e8:6f:fc:c6:1c:ed:58:7d:42:3e:56:81:f8:
e9:3f:47:75:18:1e:df:66:cb:9c:c6:17:9e:15:ef:
9c:d0:a0:d9:34:ef:19:46:e5:4c:a3:7f:c3:c4:8f:
55:53:4e:bc:3f:3d:81:c9:95:76:b9:68:1a:63:d3:
f7:b5:29:00:97:4e:1d:c8:b2:37:24:66:19:53:da:
eb:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:9C:13:8F:6C:96:06:8F:22:47:59:81:25:87:38:63:69:C2:01:ED
X509v3 Authority Key Identifier:
keyid:2C:37:B4:BE:C9:7D:60:8A:BE:23:BC:57:BA:39:82:46:CC:C5:77:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LDe0vsl9YIq-I7xXujmCRszFd2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/b12604-b481-416d-b088-210767bd0ba2/1/LDe0vsl9YIq-I7xXujmCRszFd2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/b12604-b481-416d-b088-210767bd0ba2/1/LDe0vsl9YIq-I7xXujmCRszFd2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:06:7b:9c:bb:2b:54:dd:04:d7:17:fa:ea:3d:a3:9a:0b:b7:
70:44:b2:72:d9:da:04:6e:08:a7:12:79:14:05:ad:cd:16:60:
83:48:e7:2b:e3:02:48:0d:59:68:0d:c1:82:f6:c9:b5:86:00:
36:d6:db:22:d7:84:66:4d:69:2d:54:58:30:2e:be:d3:ec:68:
26:28:6b:5f:3f:bb:27:57:c2:00:55:ff:a1:4d:9c:ae:d2:e2:
4a:8b:bf:a4:f1:f9:c4:c7:f2:df:5a:c8:0d:86:6f:6b:7e:b3:
36:5a:c6:8d:08:85:e2:c5:67:a0:63:ec:ab:ff:7e:a7:68:b0:
68:4d:a2:07:84:3a:6a:3d:d9:29:cb:ef:19:1a:d5:61:a1:4c:
89:e9:31:8e:de:1c:2a:f6:18:a5:8b:ec:09:42:b8:47:75:a8:
c3:26:f5:cc:16:18:f4:ac:ba:31:2b:3a:14:f1:4b:dc:ac:4b:
5d:b9:7c:9e:7a:f1:97:ff:78:c2:aa:f5:cd:3b:37:cb:3e:8e:
20:1f:aa:16:25:01:91:84:36:65:1f:71:ae:85:02:55:a0:2a:
b8:15:37:c9:94:b4:e8:86:6b:e2:40:be:5b:bf:1d:d1:cc:88:
3b:bb:6d:12:71:05:67:58:0b:4e:5a:af:59:01:31:6e:13:59:
b5:93:24:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:15:26 2025 by rpki-client