Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.mft
File: LD4cA--i8tn_-dvsMyW8bDdpQlA.mft (raw, json)
Hash identifier: cyQNyweSPdfr2I0HhvW/U6uuOSsvXV/6F4LOFHAoQZg=
Subject key identifier: 3F:F8:52:15:E5:FD:C8:20:73:53:7E:1C:A8:C1:FE:9C:F6:0D:EA:90
Authority key identifier: 2C:3E:1C:03:EF:A2:F2:D9:FF:F9:DB:EC:33:25:BC:6C:37:69:42:50
Certificate issuer: /CN=2c3e1c03efa2f2d9fff9dbec3325bc6c37694250
Certificate serial: 0199FF59626B6D971D512473A2809206CC97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LD4cA--i8tn_-dvsMyW8bDdpQlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.mft
Manifest number: 142F
Signing time: Mon 20 Oct 2025 02:01:11 +0000
Manifest this update: Mon 20 Oct 2025 02:01:11 +0000
Manifest next update: Tue 21 Oct 2025 02:01:11 +0000
Files and hashes: 1: LD4cA--i8tn_-dvsMyW8bDdpQlA.crl (hash: mioHrFm3IphiPPqWrr2rRv5KtMO85kqx5z1B60PDcMo=)
2: P00v87nrou1jHf3IyWsCvn49wIw.roa (hash: 7G/m2+VXvGbn3QbXJwae3mt6bGUijMD8TCCAhr6uALc=)
3: SKVsL0dFPC8nQ8E0Sar1SVELQ-4.roa (hash: Wd6r5Q9d5JNbBO/CAcgZ9Q9+GeT6Xu5kC1/o/UnS0tI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LD4cA--i8tn_-dvsMyW8bDdpQlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:62:6b:6d:97:1d:51:24:73:a2:80:92:06:cc:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c3e1c03efa2f2d9fff9dbec3325bc6c37694250
Validity
Not Before: Oct 20 02:01:11 2025 GMT
Not After : Oct 21 02:01:11 2025 GMT
Subject: CN=3ff85215e5fdc82073537e1ca8c1fe9cf60dea90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a3:07:a4:e2:43:75:3c:07:47:b3:ba:3a:b5:
f1:a5:28:34:46:2d:b8:24:97:6e:ab:a0:cb:fe:c4:
62:5d:df:7a:b5:1c:c9:50:9d:d4:29:4f:fd:01:7f:
71:2f:ae:b8:49:f2:dd:2e:3f:89:a2:ce:32:dc:c5:
fd:56:32:d3:88:fe:03:cc:2e:52:28:bc:7f:66:3a:
47:c9:6e:b6:f8:c3:95:cb:80:ac:f1:50:f2:ae:eb:
2d:6f:f6:c0:99:bc:e8:41:00:ed:b7:1f:de:2a:4c:
af:41:5f:c7:68:15:39:c3:16:7c:8e:c5:4a:b4:46:
f1:43:94:fb:be:ad:31:df:70:64:54:99:31:8c:4c:
e9:b7:ba:11:7e:77:28:33:e6:3f:87:77:ac:a6:3a:
14:72:ac:03:ba:7b:f9:52:9d:a0:16:1f:55:fe:a4:
19:3e:7f:84:53:f7:50:45:09:61:26:b0:00:b9:d4:
3d:01:fb:bd:49:78:76:a4:8e:94:c9:e0:2b:11:86:
af:77:00:ab:22:5e:d9:a3:52:cc:46:ac:da:dd:59:
3f:fa:f3:af:d7:02:78:07:63:37:4f:3b:e8:3a:e1:
9c:10:4c:9c:ee:57:1c:be:aa:c6:db:78:73:e2:94:
7c:9c:21:af:f1:44:3d:ea:17:0e:1a:28:8d:34:55:
fc:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:F8:52:15:E5:FD:C8:20:73:53:7E:1C:A8:C1:FE:9C:F6:0D:EA:90
X509v3 Authority Key Identifier:
keyid:2C:3E:1C:03:EF:A2:F2:D9:FF:F9:DB:EC:33:25:BC:6C:37:69:42:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LD4cA--i8tn_-dvsMyW8bDdpQlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:e3:ab:37:71:cd:ba:99:78:c5:a2:d9:57:8d:c4:be:ae:89:
8a:92:fc:d0:32:80:ac:bc:1c:11:74:a4:ee:d8:50:aa:e2:8a:
ba:9f:20:7a:37:b3:05:c3:46:39:cb:bf:f5:ca:51:9d:84:e3:
b3:f4:03:84:e5:36:c4:fe:95:76:b9:3e:79:5e:e2:b9:22:d5:
47:be:a4:0b:de:f8:aa:1c:11:3a:fc:59:f5:ac:5f:28:4d:84:
2b:58:87:7d:0c:ff:26:99:6e:f8:b8:34:14:41:88:14:c3:58:
84:8d:ab:2f:c9:ef:83:e5:2c:48:ec:4c:74:99:72:05:4d:71:
49:b4:f8:51:ed:1d:50:1d:89:12:d1:67:41:e8:d6:0e:9a:dc:
e7:f8:63:de:4e:50:cc:77:a9:64:5c:47:8c:db:cb:ea:23:34:
3e:1f:42:2b:dd:a3:5e:25:7d:2e:e7:e0:1d:e0:73:2b:51:22:
eb:79:dd:e1:c4:04:ed:ab:27:8f:8f:de:da:3c:f1:93:64:e4:
45:d7:92:49:ff:ed:dd:98:e9:dd:7a:16:2c:f2:3c:ae:28:30:
6b:26:b6:af:12:4a:71:ae:3f:c3:53:bc:d7:34:dd:bc:9b:28:
bd:27:9d:63:37:3d:93:f8:fa:71:f5:cb:d9:d4:5e:60:55:79:
27:be:53:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:08:59 2025 by rpki-client