Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/363ecc-2aa1-4281-95b1-8b0fc07858d6/1/LdWWwep-y7G-F3f8DTjtBspA6r4.mft
File: LdWWwep-y7G-F3f8DTjtBspA6r4.mft (raw, json)
Hash identifier: V5V0I6wI4wRlHMeWjOzMrbcz2q0VQBObCQf5c4+KbHM=
Subject key identifier: 95:11:46:F9:EF:7B:2C:4B:AC:92:4E:41:F4:B0:D2:6A:A4:FB:C4:12
Authority key identifier: 2D:D5:96:C1:EA:7E:CB:B1:BE:17:77:FC:0D:38:ED:06:CA:40:EA:BE
Certificate issuer: /CN=2dd596c1ea7ecbb1be1777fc0d38ed06ca40eabe
Certificate serial: 0197B745267417E0E1707AD6319DE4182308
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LdWWwep-y7G-F3f8DTjtBspA6r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/363ecc-2aa1-4281-95b1-8b0fc07858d6/1/LdWWwep-y7G-F3f8DTjtBspA6r4.mft
Manifest number: 0F74
Signing time: Sat 28 Jun 2025 16:00:51 +0000
Manifest this update: Sat 28 Jun 2025 16:00:51 +0000
Manifest next update: Sun 29 Jun 2025 16:00:51 +0000
Files and hashes: 1: LdWWwep-y7G-F3f8DTjtBspA6r4.crl (hash: HbQzb6GMpwJY1GYpTcZ4AEYbVKkJgR+1F16atR1UOIY=)
2: lPP1CTZE_I869rs5FvdeSS4FA3k.roa (hash: qLXwzivmvmSSh7sbcIlPZozy/8eLL4zZEt9Q9nGGudc=)
3: zanD_Us8dBGhViwVbHdjZ1KnOyY.roa (hash: 8YK5aDnlFgCf1IslrmnzJ2YHYk3ZAoh0qEssJ/f413k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/363ecc-2aa1-4281-95b1-8b0fc07858d6/1/LdWWwep-y7G-F3f8DTjtBspA6r4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/363ecc-2aa1-4281-95b1-8b0fc07858d6/1/LdWWwep-y7G-F3f8DTjtBspA6r4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LdWWwep-y7G-F3f8DTjtBspA6r4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:26:74:17:e0:e1:70:7a:d6:31:9d:e4:18:23:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dd596c1ea7ecbb1be1777fc0d38ed06ca40eabe
Validity
Not Before: Jun 28 16:00:51 2025 GMT
Not After : Jun 29 16:00:51 2025 GMT
Subject: CN=951146f9ef7b2c4bac924e41f4b0d26aa4fbc412
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c1:d8:a3:ac:a0:48:f7:be:e3:31:aa:7d:53:
a6:21:2c:ad:21:fd:d8:4c:4d:c4:9c:ac:5b:de:03:
bf:7b:be:8d:45:db:7c:98:c2:16:c5:4e:2d:e6:fc:
ce:fd:f2:25:46:71:f6:f4:b0:85:82:ef:f4:a0:a8:
80:34:93:0e:9f:41:f1:ec:af:72:5a:d1:23:22:31:
db:d6:39:e9:f1:3f:87:cf:fb:69:a5:8d:8d:56:8a:
b6:d7:6e:b9:d6:d9:0f:ef:3a:ba:ff:31:ae:56:7f:
91:ff:85:0f:79:43:5a:c5:d3:de:6b:10:31:31:62:
16:55:c7:54:79:8a:c3:53:8b:9a:26:98:fa:3a:cb:
eb:8d:c6:7d:d2:ae:2e:eb:ee:27:ca:61:7c:35:a0:
d2:9e:9f:8c:f0:91:a9:7e:e4:37:3d:61:b3:10:c7:
02:63:63:ac:22:20:fb:69:e5:b9:d3:50:30:3d:17:
f3:fc:df:b9:f8:ec:48:fd:72:4c:9a:eb:b2:60:38:
7a:14:f5:40:3b:90:0a:7e:b2:e2:59:48:79:8a:2b:
bd:c6:90:b3:95:b1:9a:fb:f5:9e:a4:2e:ac:3f:9e:
cb:21:b0:ac:ff:0e:4c:b8:fa:04:0a:ed:10:08:cc:
c4:06:6e:57:4c:35:6b:49:0f:bd:52:78:69:d0:22:
7d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:11:46:F9:EF:7B:2C:4B:AC:92:4E:41:F4:B0:D2:6A:A4:FB:C4:12
X509v3 Authority Key Identifier:
keyid:2D:D5:96:C1:EA:7E:CB:B1:BE:17:77:FC:0D:38:ED:06:CA:40:EA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LdWWwep-y7G-F3f8DTjtBspA6r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/363ecc-2aa1-4281-95b1-8b0fc07858d6/1/LdWWwep-y7G-F3f8DTjtBspA6r4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/363ecc-2aa1-4281-95b1-8b0fc07858d6/1/LdWWwep-y7G-F3f8DTjtBspA6r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:49:1a:61:9f:5e:f8:3d:52:78:24:53:e5:33:e7:47:be:24:
9f:a5:05:17:1c:b1:f7:b0:63:a1:78:fc:69:9a:26:ce:b6:69:
ac:ac:06:80:b3:0e:63:af:83:d1:88:50:8f:fd:ef:ab:66:ed:
77:a6:45:c6:59:a0:1f:d9:4d:23:39:76:7f:55:aa:a9:12:36:
e7:83:06:e8:d2:bd:db:79:74:62:b8:9d:6a:b1:ff:c9:c8:9c:
4b:9c:ad:9c:1a:da:4c:b3:a2:f9:5a:e7:09:a8:7b:d6:43:ad:
89:4b:8c:f6:02:b5:c3:41:9b:0d:eb:75:5c:0e:ac:00:8e:c3:
2d:d8:a6:b4:b3:b6:ca:38:d7:70:f8:58:12:d6:28:b1:85:d6:
a6:a0:b7:49:28:7d:48:e9:24:e1:f4:e1:36:5f:4d:16:c8:7d:
8e:ca:63:6f:20:67:43:3a:7b:7b:a6:55:f5:24:ba:6c:8d:44:
a9:e9:1e:03:6d:38:9c:aa:e2:79:a5:69:d9:22:a9:23:01:09:
6e:e1:cd:53:46:3e:2e:7c:c0:68:01:61:83:44:46:73:3c:aa:
79:33:77:80:18:7f:b4:46:90:a3:02:f2:5a:93:23:6b:09:a5:
26:ba:c1:4f:94:88:ed:98:c1:2d:13:c4:2b:7b:e4:42:e4:ef:
3c:ec:da:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:24:30 2025 by rpki-client