Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/363ecc-2aa1-4281-95b1-8b0fc07858d6/1/LdWWwep-y7G-F3f8DTjtBspA6r4.mft
File: LdWWwep-y7G-F3f8DTjtBspA6r4.mft (raw, json)
Hash identifier: 7Dm22XbW957lZ+f6m8VXZpGgOkMZZgTzMwEDxNbZWRU=
Subject key identifier: 4E:76:83:2B:2A:AF:20:CF:05:50:6B:EF:95:D5:11:26:98:E5:89:3A
Authority key identifier: 2D:D5:96:C1:EA:7E:CB:B1:BE:17:77:FC:0D:38:ED:06:CA:40:EA:BE
Certificate issuer: /CN=2dd596c1ea7ecbb1be1777fc0d38ed06ca40eabe
Certificate serial: 0196C8E7B4FA0D8233BD6512EA0E7FF514DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LdWWwep-y7G-F3f8DTjtBspA6r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/363ecc-2aa1-4281-95b1-8b0fc07858d6/1/LdWWwep-y7G-F3f8DTjtBspA6r4.mft
Manifest number: 0EF8
Signing time: Tue 13 May 2025 09:09:10 +0000
Manifest this update: Tue 13 May 2025 09:09:10 +0000
Manifest next update: Wed 14 May 2025 09:09:10 +0000
Files and hashes: 1: LdWWwep-y7G-F3f8DTjtBspA6r4.crl (hash: RFNIqbBP5YZ2kV6dvnxzljz+tv9EKahwnfCmgnzsMVI=)
2: lPP1CTZE_I869rs5FvdeSS4FA3k.roa (hash: qLXwzivmvmSSh7sbcIlPZozy/8eLL4zZEt9Q9nGGudc=)
3: uLAHNi7rmoHRh_D54NFn7mSRJKY.roa (hash: v1waYeM99XoJRaEbp2nkSCeaz2Y1P/V5tFFutQv8UbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/363ecc-2aa1-4281-95b1-8b0fc07858d6/1/LdWWwep-y7G-F3f8DTjtBspA6r4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/363ecc-2aa1-4281-95b1-8b0fc07858d6/1/LdWWwep-y7G-F3f8DTjtBspA6r4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LdWWwep-y7G-F3f8DTjtBspA6r4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c8:e7:b4:fa:0d:82:33:bd:65:12:ea:0e:7f:f5:14:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dd596c1ea7ecbb1be1777fc0d38ed06ca40eabe
Validity
Not Before: May 13 09:09:10 2025 GMT
Not After : May 14 09:09:10 2025 GMT
Subject: CN=4e76832b2aaf20cf05506bef95d5112698e5893a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:85:76:e2:6a:75:a7:68:99:8d:23:6d:b9:49:
93:08:6e:a6:0c:62:e5:db:ba:98:27:35:af:44:55:
88:19:ce:4f:78:ab:49:34:f4:de:d7:a0:63:d4:96:
25:9a:eb:f4:1b:cf:60:e2:d2:1e:13:4b:73:4d:f4:
c1:1b:a0:43:52:80:be:11:14:66:b3:b0:8d:93:d1:
6a:e6:36:de:aa:33:9a:a2:9e:71:81:8f:5d:80:28:
24:bb:5b:ff:bb:12:05:64:6c:5d:84:11:cb:88:ea:
41:02:aa:8a:cb:06:9f:1f:3e:17:25:84:32:01:42:
c2:9d:f6:05:2f:f3:9e:4d:d4:b3:92:96:90:b7:72:
71:61:19:28:93:8d:fb:57:01:04:0f:1e:31:c9:8b:
c5:17:9f:d4:69:a0:4f:29:97:6a:6d:92:63:ba:2b:
3f:30:e8:78:65:5e:09:f3:cd:a0:2d:db:b8:88:2a:
19:cb:37:87:aa:d1:10:7c:12:00:3e:9f:19:a3:27:
19:91:ea:3f:40:47:ef:79:ab:30:f6:de:c9:c3:e2:
a9:a1:32:65:3c:59:ef:7f:0e:37:3c:54:2c:36:4e:
38:28:90:38:02:2b:36:81:ae:11:54:35:d3:4f:cc:
38:1b:ec:f5:cd:de:aa:fc:56:57:0b:d0:0d:fc:9b:
3c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:76:83:2B:2A:AF:20:CF:05:50:6B:EF:95:D5:11:26:98:E5:89:3A
X509v3 Authority Key Identifier:
keyid:2D:D5:96:C1:EA:7E:CB:B1:BE:17:77:FC:0D:38:ED:06:CA:40:EA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LdWWwep-y7G-F3f8DTjtBspA6r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/363ecc-2aa1-4281-95b1-8b0fc07858d6/1/LdWWwep-y7G-F3f8DTjtBspA6r4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/363ecc-2aa1-4281-95b1-8b0fc07858d6/1/LdWWwep-y7G-F3f8DTjtBspA6r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:2a:6c:3b:d7:10:5d:67:4e:5b:46:9e:b4:af:18:58:82:f0:
e5:7f:d0:0f:aa:37:d7:aa:85:53:dd:24:d1:ec:6f:64:4f:99:
4f:a4:8f:63:af:13:86:be:09:45:35:96:b1:ff:fc:d0:c9:ca:
10:cd:d9:01:1f:6d:2a:78:15:11:ab:cb:b7:8b:ce:6b:4e:5e:
8f:83:70:e7:96:44:94:d6:4e:05:70:cc:1d:7e:15:97:bc:6b:
03:83:5f:d4:2d:3e:dd:39:cf:6a:da:52:05:47:07:67:7c:7b:
d3:f5:a3:d6:47:6f:91:b3:1c:ee:c9:81:43:29:39:bb:17:e7:
4f:03:02:c4:27:38:65:f7:3d:a4:e2:c9:e7:c3:1a:89:ca:5a:
e9:f0:61:52:1b:d6:e0:2b:9c:3c:a2:23:71:8b:43:0e:5a:3b:
a5:32:b6:23:fe:da:e7:af:d9:07:e9:2c:75:e4:7a:89:23:b1:
aa:0d:5c:60:09:89:67:02:6a:a9:f6:53:07:9f:fe:fa:42:78:
1c:ba:89:d4:2d:f4:ca:a2:29:7f:74:74:65:a2:4c:fa:0e:dc:
0d:c2:e8:e2:0d:a8:9d:ba:cb:71:e6:73:49:29:af:5a:78:ec:
fd:d3:35:91:48:de:13:3f:f9:7c:4a:19:40:56:5c:4a:33:28:
1a:95:b0:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 13:40:28 2025 by rpki-client