Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/ldn8gV6QyoeSeQfF6rP-ecohXqo.mft
File: ldn8gV6QyoeSeQfF6rP-ecohXqo.mft (raw, json)
Hash identifier: tb74Wsc7i8r4CvKpYJbv/o/DZLOSu1mhhkShquy8zec=
Subject key identifier: 5E:21:D3:7A:6F:D1:26:19:9D:98:AC:7E:13:18:C7:81:EE:65:A9:04
Authority key identifier: 95:D9:FC:81:5E:90:CA:87:92:79:07:C5:EA:B3:FE:79:CA:21:5E:AA
Certificate issuer: /CN=95d9fc815e90ca87927907c5eab3fe79ca215eaa
Certificate serial: 0197C492D3B0672E84821CFE667981B17593
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ldn8gV6QyoeSeQfF6rP-ecohXqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/ldn8gV6QyoeSeQfF6rP-ecohXqo.mft
Manifest number: 02BE
Signing time: Tue 01 Jul 2025 06:00:46 +0000
Manifest this update: Tue 01 Jul 2025 06:00:46 +0000
Manifest next update: Wed 02 Jul 2025 06:00:46 +0000
Files and hashes: 1: A4UfYrXsQ6iSsiav-YeuLfimOTs.roa (hash: cPKqM44Z83MlRMbviQtgWddEZ3JyHZfP+3cvsuoyczI=)
2: WqCM--ZSqxtcqHxil1wItYtEpEM.roa (hash: CPcHuYLnfs1zjrIDaz07dO7we+nME2TOlwKRzyCU7gM=)
3: ldn8gV6QyoeSeQfF6rP-ecohXqo.crl (hash: JV5YPluy2R24SFk4PBPvQTvayFVbG67ZImmxAxixBp4=)
4: wkbm61J6JI58DzdO7MCd9o4dj-o.roa (hash: hSaua0y3ny5hOslQkyLJESOAWMtyf0RUHAd8EHcHySo=)
5: xhhJQqhM5sB1fU9J0vxm3RoZWw0.roa (hash: +YOuzWIZ++rhf1ENTPtE45w85KCzRIvAgoMtfwrZcLw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/ldn8gV6QyoeSeQfF6rP-ecohXqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/ldn8gV6QyoeSeQfF6rP-ecohXqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ldn8gV6QyoeSeQfF6rP-ecohXqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 06:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c4:92:d3:b0:67:2e:84:82:1c:fe:66:79:81:b1:75:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95d9fc815e90ca87927907c5eab3fe79ca215eaa
Validity
Not Before: Jul 1 06:00:46 2025 GMT
Not After : Jul 2 06:00:46 2025 GMT
Subject: CN=5e21d37a6fd126199d98ac7e1318c781ee65a904
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:12:67:6d:7c:03:e1:16:8c:9f:87:89:ad:73:
3a:86:c5:fc:af:bb:8b:d7:a0:7d:e9:87:b8:52:f3:
c3:4c:df:5e:5f:76:ae:d4:be:62:06:43:6d:f8:b4:
11:21:d2:06:fd:46:79:82:ff:cf:0e:5a:9c:d1:2b:
f1:ff:5e:f2:df:15:7d:46:bf:fc:80:55:73:e4:b7:
4a:84:b0:3a:13:8a:51:d3:3f:d4:c7:8d:09:55:8d:
66:a2:dc:fc:81:a6:9a:78:e8:4a:5c:94:0e:c0:dd:
91:17:a7:5c:f1:71:63:d0:a9:62:4d:02:bc:db:58:
4d:ba:36:d5:07:1d:db:37:c8:f7:91:d8:88:5c:5a:
7b:6d:36:f8:d8:8d:6e:7a:be:62:c5:69:ad:80:22:
b6:7c:d0:cd:e2:dc:50:8c:cd:31:a2:50:56:17:d7:
ed:8a:ea:74:30:13:09:f9:59:8f:23:6e:07:e0:e9:
0c:ee:31:0e:4f:f0:89:04:37:a9:a1:ee:95:d1:3d:
19:be:85:6f:d0:78:7f:72:b4:df:fc:49:af:91:a0:
65:d2:88:b1:af:14:2b:b7:1a:90:e3:e1:2b:af:05:
c2:1a:c2:e1:d6:6d:24:36:fc:2c:d9:40:41:be:92:
e0:93:a9:7c:70:72:ab:9f:03:da:1e:cd:9c:70:fa:
13:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:21:D3:7A:6F:D1:26:19:9D:98:AC:7E:13:18:C7:81:EE:65:A9:04
X509v3 Authority Key Identifier:
keyid:95:D9:FC:81:5E:90:CA:87:92:79:07:C5:EA:B3:FE:79:CA:21:5E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ldn8gV6QyoeSeQfF6rP-ecohXqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/ldn8gV6QyoeSeQfF6rP-ecohXqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/ldn8gV6QyoeSeQfF6rP-ecohXqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:4e:63:ed:66:8f:d2:f4:67:52:19:75:bf:6d:62:3c:b2:92:
34:a2:3a:c9:c1:43:2c:6c:57:d4:f8:ad:97:59:a1:2f:d7:fc:
9b:f7:6a:2a:81:13:ad:9c:7d:4e:38:36:6d:9e:1b:5a:de:b3:
eb:a4:11:8d:52:f4:e6:98:88:12:d3:38:1e:c8:a9:da:24:e6:
55:a8:83:28:ed:3e:7a:3f:63:0b:b3:25:2d:8a:b5:5d:93:ba:
d2:e0:f4:b1:e9:37:52:33:23:e6:d4:66:e4:30:ae:c8:04:33:
03:2e:bb:d3:b6:5a:04:45:e4:e7:56:68:72:2f:99:7d:90:c4:
00:36:d1:d9:88:15:66:05:1d:10:fb:d6:68:b3:62:d6:22:f9:
e4:7c:37:fd:0e:bf:62:16:b0:56:30:13:0c:27:44:dd:74:16:
02:a2:40:a6:9a:45:fa:bf:cc:7d:cf:8e:55:4c:2f:dc:87:7b:
75:69:82:63:db:a7:d1:e5:90:69:96:d3:01:be:6f:05:e8:84:
41:df:63:43:f8:84:49:ec:1a:81:a8:30:52:5d:91:e0:56:ca:
27:b0:48:30:94:c9:da:0d:9e:4c:71:39:93:2b:68:bf:ab:38:
ba:4c:3b:fa:9c:40:18:08:37:97:f0:b5:02:52:ae:df:b9:8a:
c4:0a:27:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 15:32:02 2025 by rpki-client