Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.mft
File: LD4cA--i8tn_-dvsMyW8bDdpQlA.mft (raw, json)
Hash identifier: o1PRHCss3a7QW4l5vJh91rBhobq0m1jlJImmA6lwajQ=
Subject key identifier: 81:C3:E0:A8:A0:8D:93:58:07:A2:03:D9:1D:E6:F1:40:C3:BA:9E:29
Authority key identifier: 2C:3E:1C:03:EF:A2:F2:D9:FF:F9:DB:EC:33:25:BC:6C:37:69:42:50
Certificate issuer: /CN=2c3e1c03efa2f2d9fff9dbec3325bc6c37694250
Certificate serial: 0197B63312BF0DEA893B27FD1CACD000E224
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LD4cA--i8tn_-dvsMyW8bDdpQlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.mft
Manifest number: 1300
Signing time: Sat 28 Jun 2025 11:01:29 +0000
Manifest this update: Sat 28 Jun 2025 11:01:29 +0000
Manifest next update: Sun 29 Jun 2025 11:01:29 +0000
Files and hashes: 1: LD4cA--i8tn_-dvsMyW8bDdpQlA.crl (hash: aFbk26A257dLccljmt//qh7k02SD9bb6yIGJw80jDeo=)
2: P00v87nrou1jHf3IyWsCvn49wIw.roa (hash: 7G/m2+VXvGbn3QbXJwae3mt6bGUijMD8TCCAhr6uALc=)
3: SKVsL0dFPC8nQ8E0Sar1SVELQ-4.roa (hash: Wd6r5Q9d5JNbBO/CAcgZ9Q9+GeT6Xu5kC1/o/UnS0tI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LD4cA--i8tn_-dvsMyW8bDdpQlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 11:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:33:12:bf:0d:ea:89:3b:27:fd:1c:ac:d0:00:e2:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c3e1c03efa2f2d9fff9dbec3325bc6c37694250
Validity
Not Before: Jun 28 11:01:29 2025 GMT
Not After : Jun 29 11:01:29 2025 GMT
Subject: CN=81c3e0a8a08d935807a203d91de6f140c3ba9e29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8e:6e:e0:a1:fb:8f:e5:79:a2:a4:45:ca:3f:
13:ae:84:8d:00:31:66:d2:14:e6:f6:f7:fb:8f:60:
de:f5:ca:8a:05:e9:f0:d6:9f:0b:b1:83:7c:2b:67:
5d:71:fe:fb:28:06:85:13:27:c5:cd:d3:8e:e1:88:
25:36:bb:40:34:75:8c:0f:e9:ee:12:59:74:83:87:
73:32:3c:c1:13:6c:f3:e7:39:43:50:8a:1b:f4:bd:
2a:f6:d6:c8:48:58:a2:cb:f2:a8:01:a2:f9:0d:57:
65:3f:2d:0b:12:02:35:1a:77:9a:9e:24:1b:82:67:
21:98:e0:99:8a:73:a9:9e:b9:1a:8a:70:c6:95:90:
b1:28:6a:63:b6:a6:ec:25:20:5c:ce:b5:dc:3b:09:
67:84:fd:03:1d:67:2d:60:6e:09:ee:50:f5:52:ad:
b2:76:b4:6e:95:43:9a:71:d3:5d:af:17:2b:a4:83:
07:81:e8:af:90:4f:53:5a:0b:89:09:a9:b3:d6:98:
0d:21:97:c4:5b:f1:c1:31:03:c0:d0:d0:14:97:b4:
e5:50:9c:a6:1b:2c:b3:8c:ce:61:f6:0c:54:34:c9:
27:d8:e0:51:d0:e1:77:96:e9:42:85:16:9e:e4:42:
8d:fe:61:24:26:b1:e9:2f:92:5c:1c:2b:49:5d:6b:
02:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:C3:E0:A8:A0:8D:93:58:07:A2:03:D9:1D:E6:F1:40:C3:BA:9E:29
X509v3 Authority Key Identifier:
keyid:2C:3E:1C:03:EF:A2:F2:D9:FF:F9:DB:EC:33:25:BC:6C:37:69:42:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LD4cA--i8tn_-dvsMyW8bDdpQlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:25:f8:71:ab:4d:1a:30:0b:60:9a:53:35:af:3b:c2:66:c8:
15:d0:22:29:77:8b:be:a0:e3:51:6f:ad:6b:6e:cb:07:44:9e:
e2:30:5b:4b:c4:6e:27:86:1e:ae:b6:a5:84:13:f6:f9:cf:cf:
d6:c2:2a:1f:c8:35:f8:4f:31:3e:52:a5:45:58:6c:7e:91:6d:
ce:ed:5a:44:24:aa:50:e4:47:2f:c9:d2:b4:88:72:7c:ac:32:
39:dd:fe:80:94:21:e9:f4:46:ea:d7:fa:82:bd:f9:3a:4a:2d:
62:f8:09:42:51:d1:00:3f:6a:c7:aa:75:de:a5:b1:b5:67:68:
6d:cd:46:2b:fb:4c:eb:2b:eb:4b:bf:39:2a:9c:bd:f5:75:a5:
23:a9:24:53:a2:a1:7b:8b:58:c8:f9:88:99:95:95:11:09:b0:
06:74:24:61:92:7b:38:29:6b:43:eb:89:7f:74:19:9c:ef:d7:
71:a3:49:eb:7e:3d:45:15:92:75:57:4b:c1:50:9a:b4:17:30:
9e:b7:73:be:06:f0:3a:7f:e2:a6:c7:21:9c:e8:41:1c:6c:21:
0e:04:1e:9d:ed:fb:94:83:9c:82:f3:8d:83:90:07:e6:2f:3b:
29:d7:e6:fb:be:f3:f9:45:ee:16:1e:b7:98:95:5a:31:98:8b:
b4:27:88:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:42:24 2025 by rpki-client