Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/c73b3b-5b5c-4a77-8b80-d2b697aefa02/1/LudClvzo0gvvoYeZ2ubseDHWHFo.mft
File: LudClvzo0gvvoYeZ2ubseDHWHFo.mft (raw, json)
Hash identifier: 4r8UVR9ZioO+/QYGY8BrBGsJrtpNn+9zUxa8gsdFUqM=
Subject key identifier: BD:64:A0:6D:BA:F4:20:EC:11:4D:1A:6E:13:8B:BB:A0:71:28:13:65
Authority key identifier: 2E:E7:42:96:FC:E8:D2:0B:EF:A1:87:99:DA:E6:EC:78:31:D6:1C:5A
Certificate issuer: /CN=2ee74296fce8d20befa18799dae6ec7831d61c5a
Certificate serial: 0199FBEB4F0A717E428D307E635E19A5F3E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LudClvzo0gvvoYeZ2ubseDHWHFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/c73b3b-5b5c-4a77-8b80-d2b697aefa02/1/LudClvzo0gvvoYeZ2ubseDHWHFo.mft
Manifest number: 1223
Signing time: Sun 19 Oct 2025 10:02:06 +0000
Manifest this update: Sun 19 Oct 2025 10:02:06 +0000
Manifest next update: Mon 20 Oct 2025 10:02:06 +0000
Files and hashes: 1: LudClvzo0gvvoYeZ2ubseDHWHFo.crl (hash: OWlL9sYI1UtiSYrl2huUutzS+5iWuiTP7fJs0YFIRyY=)
2: Rb7F4D-VQenGCJGFIQ0pL_-8SdI.roa (hash: KCwYXkc96nmO8iiK2Z3c2R72L9yE00WdCTlXlazDdHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/c73b3b-5b5c-4a77-8b80-d2b697aefa02/1/LudClvzo0gvvoYeZ2ubseDHWHFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/c73b3b-5b5c-4a77-8b80-d2b697aefa02/1/LudClvzo0gvvoYeZ2ubseDHWHFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/LudClvzo0gvvoYeZ2ubseDHWHFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:4f:0a:71:7e:42:8d:30:7e:63:5e:19:a5:f3:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ee74296fce8d20befa18799dae6ec7831d61c5a
Validity
Not Before: Oct 19 10:02:06 2025 GMT
Not After : Oct 20 10:02:06 2025 GMT
Subject: CN=bd64a06dbaf420ec114d1a6e138bbba071281365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0a:f8:44:7f:97:63:79:19:53:75:90:8b:cb:
37:f2:4a:e5:e3:e2:69:1d:46:4a:55:26:ba:ff:1f:
4d:a7:b9:7b:de:51:13:04:58:65:94:9a:e0:b4:d6:
05:a0:8a:95:e6:8e:b9:30:0a:b0:ac:48:2f:60:3c:
0b:77:d6:c0:bb:5a:77:c6:90:bb:db:a7:25:18:ea:
4e:fd:b8:2a:9a:00:ee:16:d7:ba:1e:30:71:76:ea:
93:6e:cf:ec:c4:2c:9a:52:0d:bb:b7:d5:6f:68:12:
32:50:f8:62:02:36:56:6d:9b:8a:81:ab:52:6d:6b:
10:25:18:b4:7c:6f:48:1b:31:bf:f2:6c:ec:b3:de:
f6:7f:55:ed:65:b1:b7:d9:b1:74:39:c0:1a:c4:f4:
dc:62:7d:79:a9:17:db:f7:3f:60:f3:86:4a:9d:56:
45:78:a0:82:36:21:2f:2c:6d:ef:ba:c2:55:2d:bf:
de:62:ab:4f:53:e3:df:a7:04:42:27:f8:a1:e4:e0:
20:ee:37:9e:94:c7:7a:59:97:b9:58:ee:73:9d:bc:
a7:10:d0:3f:f7:d5:0f:22:41:90:4e:d0:77:91:6c:
09:a0:62:a6:01:9b:57:e5:1e:dc:77:b3:43:4e:95:
17:6c:bf:80:ea:95:3b:7a:40:4c:fd:83:c2:62:60:
24:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:64:A0:6D:BA:F4:20:EC:11:4D:1A:6E:13:8B:BB:A0:71:28:13:65
X509v3 Authority Key Identifier:
keyid:2E:E7:42:96:FC:E8:D2:0B:EF:A1:87:99:DA:E6:EC:78:31:D6:1C:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LudClvzo0gvvoYeZ2ubseDHWHFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c73b3b-5b5c-4a77-8b80-d2b697aefa02/1/LudClvzo0gvvoYeZ2ubseDHWHFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c73b3b-5b5c-4a77-8b80-d2b697aefa02/1/LudClvzo0gvvoYeZ2ubseDHWHFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:28:7a:e8:0f:4a:5f:0c:30:7c:26:fa:b4:39:64:bd:cb:e3:
31:b8:6b:1c:af:9f:4a:e5:88:ad:d5:5c:7b:d5:10:a3:59:15:
86:92:1a:43:f3:33:cb:57:84:4e:a8:cd:f8:5c:74:c6:cd:e3:
49:a1:72:41:e8:94:cb:69:fc:50:29:74:40:c7:f6:85:57:14:
73:56:f6:e4:bd:4d:42:5c:b0:2a:07:27:8d:80:8b:8a:15:44:
a3:c2:1a:45:f0:5a:3b:03:51:a6:09:78:31:f4:a2:2d:eb:90:
00:48:77:43:b5:8a:1e:7e:4d:40:1b:cf:db:9e:16:8b:ac:e9:
95:4c:04:03:48:93:a4:72:22:66:b6:c1:ba:47:2f:65:5e:8c:
5d:c6:c5:7d:c3:76:e0:bb:77:21:a9:bb:70:41:90:88:45:8c:
fc:87:ba:ee:24:47:ee:02:93:56:40:38:72:c4:aa:31:7a:25:
8d:2b:c2:e1:73:22:ab:7b:21:86:33:6e:ff:41:94:91:ed:1b:
58:30:29:87:82:67:ab:9a:77:cf:fd:90:e7:a1:c9:c7:44:2c:
59:a0:50:a9:0a:0f:4d:4d:bf:f5:0b:fb:42:d2:da:ec:76:67:
e3:d2:05:a4:36:bc:73:a0:01:99:ec:e4:23:2f:ae:a1:97:a6:
99:a7:c4:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:56:42 2025 by rpki-client