Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/363ecc-2aa1-4281-95b1-8b0fc07858d6/1/LdWWwep-y7G-F3f8DTjtBspA6r4.mft
File: LdWWwep-y7G-F3f8DTjtBspA6r4.mft (raw, json)
Hash identifier: d8WtbeExdLirWBkgYaxLmgGYRWv2kOTP0GDIx0o21EM=
Subject key identifier: 5E:CA:E9:FC:BB:5A:18:7B:68:BF:D1:47:AD:43:9B:12:D5:9D:52:EA
Authority key identifier: 2D:D5:96:C1:EA:7E:CB:B1:BE:17:77:FC:0D:38:ED:06:CA:40:EA:BE
Certificate issuer: /CN=2dd596c1ea7ecbb1be1777fc0d38ed06ca40eabe
Certificate serial: 0199FE7DAFDAF575FA879DBE05C2D9909E6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LdWWwep-y7G-F3f8DTjtBspA6r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/363ecc-2aa1-4281-95b1-8b0fc07858d6/1/LdWWwep-y7G-F3f8DTjtBspA6r4.mft
Manifest number: 10A2
Signing time: Sun 19 Oct 2025 22:01:13 +0000
Manifest this update: Sun 19 Oct 2025 22:01:13 +0000
Manifest next update: Mon 20 Oct 2025 22:01:13 +0000
Files and hashes: 1: LdWWwep-y7G-F3f8DTjtBspA6r4.crl (hash: IFIzcDRQwIfO/Px71PhDzAP3RyX1LeXqi+UHma84D14=)
2: lPP1CTZE_I869rs5FvdeSS4FA3k.roa (hash: qLXwzivmvmSSh7sbcIlPZozy/8eLL4zZEt9Q9nGGudc=)
3: zanD_Us8dBGhViwVbHdjZ1KnOyY.roa (hash: 8YK5aDnlFgCf1IslrmnzJ2YHYk3ZAoh0qEssJ/f413k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/363ecc-2aa1-4281-95b1-8b0fc07858d6/1/LdWWwep-y7G-F3f8DTjtBspA6r4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/363ecc-2aa1-4281-95b1-8b0fc07858d6/1/LdWWwep-y7G-F3f8DTjtBspA6r4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LdWWwep-y7G-F3f8DTjtBspA6r4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7d:af:da:f5:75:fa:87:9d:be:05:c2:d9:90:9e:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dd596c1ea7ecbb1be1777fc0d38ed06ca40eabe
Validity
Not Before: Oct 19 22:01:13 2025 GMT
Not After : Oct 20 22:01:13 2025 GMT
Subject: CN=5ecae9fcbb5a187b68bfd147ad439b12d59d52ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a9:bd:fd:ec:d2:d8:3d:6b:a7:bc:64:d2:18:
0a:fb:51:1d:82:82:37:77:4e:0b:90:99:74:ea:a2:
c6:f8:70:26:8c:22:e6:47:a2:09:17:06:ee:75:00:
90:50:47:2b:09:c3:92:8a:3c:c1:f6:8c:b9:09:9f:
2c:2f:a5:9d:05:f9:ff:c6:40:02:7a:f8:40:ff:4f:
37:03:ae:e5:35:f8:8b:ad:9f:b7:94:25:a8:17:4d:
c0:4f:f9:17:60:68:9b:21:49:97:a3:ec:2f:df:f2:
a4:66:22:df:9f:4b:3d:35:d3:09:9a:89:83:05:1f:
81:35:4d:0d:c3:ab:93:08:33:34:0c:14:42:29:dc:
cc:46:ce:fa:75:08:b4:2c:53:5f:50:5b:74:65:46:
b5:6b:f5:d1:8d:a4:32:ec:a2:7a:fb:c6:dd:1e:83:
38:9d:11:8c:b7:9d:88:10:a4:a4:03:26:71:44:19:
cb:a3:8d:bf:3c:cc:e0:3c:73:b6:9f:47:89:04:be:
5e:07:ec:09:06:7b:35:64:2b:31:c4:ec:f2:d3:fe:
83:8a:9e:d9:b7:21:24:a3:37:13:74:81:dd:c2:c6:
40:07:ea:a7:ff:56:8e:f2:0a:e4:72:bd:12:59:b3:
69:4f:e1:52:1f:66:a1:0f:cc:e6:81:3d:91:e3:e9:
73:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:CA:E9:FC:BB:5A:18:7B:68:BF:D1:47:AD:43:9B:12:D5:9D:52:EA
X509v3 Authority Key Identifier:
keyid:2D:D5:96:C1:EA:7E:CB:B1:BE:17:77:FC:0D:38:ED:06:CA:40:EA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LdWWwep-y7G-F3f8DTjtBspA6r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/363ecc-2aa1-4281-95b1-8b0fc07858d6/1/LdWWwep-y7G-F3f8DTjtBspA6r4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/363ecc-2aa1-4281-95b1-8b0fc07858d6/1/LdWWwep-y7G-F3f8DTjtBspA6r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:f5:f2:5e:a8:fc:43:ce:10:b4:91:34:b8:81:c8:1a:ee:b0:
18:c3:15:05:87:94:3a:a4:b2:68:1f:30:54:de:da:e3:5a:d6:
1e:cd:0f:74:7b:01:a4:43:24:66:d0:5a:a8:c8:5e:b4:57:44:
6b:ae:25:c7:85:a3:d5:d4:ea:a2:74:7e:dd:cb:2b:62:23:d2:
04:73:2c:1e:4b:67:31:03:3d:44:fd:68:b5:e7:0a:a3:b7:60:
66:8c:5f:31:31:28:46:1b:80:cc:6f:55:a8:19:d2:52:db:3a:
b8:56:36:18:0f:0f:8b:f3:5e:39:ed:3c:e7:68:4c:07:ce:f9:
38:e1:58:81:93:60:e0:38:74:39:26:b4:82:0a:3f:d4:bd:1b:
19:44:80:fb:47:60:e8:fa:11:2f:69:df:61:b9:05:b3:16:55:
43:b3:15:d3:34:0e:90:40:18:89:fd:8c:85:84:d3:70:b3:cb:
04:eb:bb:b7:77:81:df:7d:a6:f6:bc:65:08:5e:ee:bb:4a:2f:
60:12:9c:5f:23:3e:24:b8:52:2a:36:ae:1e:63:b4:f8:d3:02:
de:e1:39:0c:9d:f1:7e:fe:5f:6c:e3:ae:ce:8b:40:96:06:11:
d0:03:d3:cc:e1:12:81:c8:64:69:70:89:64:a0:f3:5c:10:c8:
6f:34:22:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:58:23 2025 by rpki-client