Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/363ecc-2aa1-4281-95b1-8b0fc07858d6/1/LdWWwep-y7G-F3f8DTjtBspA6r4.mft
File: LdWWwep-y7G-F3f8DTjtBspA6r4.mft (raw, json)
Hash identifier: XU9oHeAiMwXjLj/b/D52YXVjfm3uu17PP9IFyL0kXvQ=
Subject key identifier: 3C:E0:3C:FA:1F:2F:60:69:22:62:4D:53:F9:2D:86:5F:48:60:4D:CA
Authority key identifier: 2D:D5:96:C1:EA:7E:CB:B1:BE:17:77:FC:0D:38:ED:06:CA:40:EA:BE
Certificate issuer: /CN=2dd596c1ea7ecbb1be1777fc0d38ed06ca40eabe
Certificate serial: 0198D515860E85EFAFCCF5E90B7ACDD78374
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LdWWwep-y7G-F3f8DTjtBspA6r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/363ecc-2aa1-4281-95b1-8b0fc07858d6/1/LdWWwep-y7G-F3f8DTjtBspA6r4.mft
Manifest number: 1008
Signing time: Sat 23 Aug 2025 04:00:14 +0000
Manifest this update: Sat 23 Aug 2025 04:00:14 +0000
Manifest next update: Sun 24 Aug 2025 04:00:14 +0000
Files and hashes: 1: LdWWwep-y7G-F3f8DTjtBspA6r4.crl (hash: 1qlBcKdIAg2tWHWBJYBUpAuXwdpmmmL4sZvIoqzqyqc=)
2: lPP1CTZE_I869rs5FvdeSS4FA3k.roa (hash: qLXwzivmvmSSh7sbcIlPZozy/8eLL4zZEt9Q9nGGudc=)
3: zanD_Us8dBGhViwVbHdjZ1KnOyY.roa (hash: 8YK5aDnlFgCf1IslrmnzJ2YHYk3ZAoh0qEssJ/f413k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/363ecc-2aa1-4281-95b1-8b0fc07858d6/1/LdWWwep-y7G-F3f8DTjtBspA6r4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/363ecc-2aa1-4281-95b1-8b0fc07858d6/1/LdWWwep-y7G-F3f8DTjtBspA6r4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LdWWwep-y7G-F3f8DTjtBspA6r4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:86:0e:85:ef:af:cc:f5:e9:0b:7a:cd:d7:83:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dd596c1ea7ecbb1be1777fc0d38ed06ca40eabe
Validity
Not Before: Aug 23 04:00:14 2025 GMT
Not After : Aug 24 04:00:14 2025 GMT
Subject: CN=3ce03cfa1f2f606922624d53f92d865f48604dca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ff:d1:3f:2f:b2:aa:d3:d5:1e:b0:67:5c:54:
b0:02:73:de:4b:3c:ea:f0:52:6f:fc:ce:c4:16:50:
c7:fd:a7:46:c7:a1:27:8f:40:e0:a7:c3:05:83:5a:
45:6d:7a:a7:c9:3c:a3:80:65:00:78:a3:7c:31:e7:
57:0c:b5:e8:ef:12:74:3e:34:1c:6c:85:85:9f:7a:
6c:6b:c6:46:7b:1b:95:9d:6b:d8:bb:b8:90:d1:68:
85:5b:63:c7:c7:e4:c4:85:88:ff:40:85:e8:e5:7c:
8d:e3:4f:91:66:6d:3f:19:7d:64:87:11:fe:5a:09:
d2:95:c1:e6:f1:f3:88:c8:bb:e6:e3:dd:56:aa:16:
c4:f4:4b:9b:bd:a1:3f:8f:ee:64:cf:50:df:13:6f:
fe:5c:7a:7a:94:99:e1:cc:ca:7e:84:19:cc:4a:fb:
12:5a:be:cc:4e:2a:97:3d:2d:af:7e:e7:83:17:50:
b4:c5:c6:05:e0:9a:84:9f:ff:11:d3:39:70:56:f2:
88:53:d0:34:25:6f:a4:66:fe:2d:be:88:df:c0:1e:
5c:60:4a:30:17:59:1a:e9:f7:66:b0:86:a7:5a:ea:
42:87:f8:e8:cb:98:a6:ed:cb:fe:38:79:5d:45:c4:
f9:f7:74:be:f4:9a:15:8e:7b:a2:85:9e:0b:13:91:
75:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:E0:3C:FA:1F:2F:60:69:22:62:4D:53:F9:2D:86:5F:48:60:4D:CA
X509v3 Authority Key Identifier:
keyid:2D:D5:96:C1:EA:7E:CB:B1:BE:17:77:FC:0D:38:ED:06:CA:40:EA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LdWWwep-y7G-F3f8DTjtBspA6r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/363ecc-2aa1-4281-95b1-8b0fc07858d6/1/LdWWwep-y7G-F3f8DTjtBspA6r4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/363ecc-2aa1-4281-95b1-8b0fc07858d6/1/LdWWwep-y7G-F3f8DTjtBspA6r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:44:f7:df:95:de:ac:f9:80:76:3e:82:3d:45:ff:fa:47:4b:
92:a4:92:74:d7:fa:2d:cf:a6:02:06:2f:0e:72:a0:85:6a:87:
e6:0d:09:28:25:38:3d:03:58:95:9c:23:19:ff:27:aa:2d:eb:
b3:b3:33:2a:fc:94:21:de:a8:ad:76:58:49:7f:3f:d3:ea:41:
b6:85:ba:b2:12:6f:f8:bb:fe:26:16:bd:5a:9d:83:d1:0f:a2:
bb:de:2b:64:c9:5a:53:08:3e:3b:df:05:3b:50:63:d8:46:6c:
80:c5:8d:53:c1:ba:48:d5:1a:2d:ed:da:48:1e:2e:73:44:9b:
16:fb:81:2f:a9:00:40:d2:53:c2:35:fc:3d:95:63:f1:3e:ca:
f4:bf:c4:dd:19:ff:b3:72:6d:72:6d:4f:9e:4d:38:2d:93:31:
19:dd:d9:d4:ff:4b:9a:89:8e:79:7d:ea:c3:31:41:ce:fc:2f:
a6:f2:d7:68:1e:ff:51:4e:39:ed:02:4a:aa:50:41:37:bc:17:
b0:6d:e7:ca:61:6c:da:a9:ca:af:28:f7:6f:52:27:df:22:3e:
c5:fa:0a:f7:c2:db:44:f3:4d:68:8d:b6:b6:38:bd:4b:61:8e:
b1:d3:0c:b6:2e:b1:f2:b1:c3:9c:c2:01:11:b3:27:fb:80:c4:
0a:ac:d9:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:32:30 2025 by rpki-client