Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.mft
File: LD4cA--i8tn_-dvsMyW8bDdpQlA.mft (raw, json)
Hash identifier: bdWQ6xXIsMWPc8gOxgyGLxCmLT/awtAcnPO65czwXsA=
Subject key identifier: 71:D3:27:70:39:C5:49:8F:30:7F:37:3F:F5:5F:F9:75:07:69:17:B9
Authority key identifier: 2C:3E:1C:03:EF:A2:F2:D9:FF:F9:DB:EC:33:25:BC:6C:37:69:42:50
Certificate issuer: /CN=2c3e1c03efa2f2d9fff9dbec3325bc6c37694250
Certificate serial: 0198D5F1D84865CBEC4212CE326A73876811
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LD4cA--i8tn_-dvsMyW8bDdpQlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.mft
Manifest number: 1395
Signing time: Sat 23 Aug 2025 08:00:53 +0000
Manifest this update: Sat 23 Aug 2025 08:00:53 +0000
Manifest next update: Sun 24 Aug 2025 08:00:53 +0000
Files and hashes: 1: LD4cA--i8tn_-dvsMyW8bDdpQlA.crl (hash: K9+9WUwRLFE0IvKq8Uw5WbVyksO5V9mCYo18YVqryYw=)
2: P00v87nrou1jHf3IyWsCvn49wIw.roa (hash: 7G/m2+VXvGbn3QbXJwae3mt6bGUijMD8TCCAhr6uALc=)
3: SKVsL0dFPC8nQ8E0Sar1SVELQ-4.roa (hash: Wd6r5Q9d5JNbBO/CAcgZ9Q9+GeT6Xu5kC1/o/UnS0tI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LD4cA--i8tn_-dvsMyW8bDdpQlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:d8:48:65:cb:ec:42:12:ce:32:6a:73:87:68:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c3e1c03efa2f2d9fff9dbec3325bc6c37694250
Validity
Not Before: Aug 23 08:00:53 2025 GMT
Not After : Aug 24 08:00:53 2025 GMT
Subject: CN=71d3277039c5498f307f373ff55ff975076917b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:66:ed:c1:56:3e:d5:53:61:aa:c4:41:0c:e0:
81:1b:6f:81:e0:83:46:05:0f:2a:8b:7b:85:cf:9e:
44:d5:40:66:ed:49:fc:49:4c:88:03:54:61:f1:5f:
7b:c3:b0:2b:d0:03:ec:65:02:83:1f:c6:48:12:37:
6b:79:2a:04:ff:2f:e9:81:42:70:b8:1f:c1:63:82:
85:15:d8:19:70:3d:ea:c9:77:6f:a2:5a:87:25:d6:
ee:fe:83:7e:72:fa:e9:d9:34:5a:13:48:63:14:b7:
6c:f6:99:4f:90:96:6f:c3:a6:fa:d8:9c:45:d1:ff:
15:d9:5a:8a:e5:2f:4d:8b:16:aa:2a:d5:21:66:f4:
ba:fd:c3:1b:5c:44:b9:90:f0:e0:15:b0:f1:85:bf:
40:8a:c4:6a:f9:4b:2a:72:69:f6:66:27:24:db:cf:
6e:61:a3:2f:8f:24:7a:24:59:c3:73:a2:8c:9f:fb:
db:1c:91:43:5b:97:ef:7c:40:e2:5f:b6:2b:6d:aa:
cc:68:10:82:1f:15:9d:84:26:90:6b:71:70:20:a3:
dd:ad:e1:0b:ed:04:f4:d5:c0:af:e5:7d:58:ba:f9:
4d:80:a7:d6:72:bc:e8:d4:59:88:65:00:b3:2b:05:
cd:00:93:78:2c:d7:0d:d1:29:66:5f:20:79:e7:88:
a0:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:D3:27:70:39:C5:49:8F:30:7F:37:3F:F5:5F:F9:75:07:69:17:B9
X509v3 Authority Key Identifier:
keyid:2C:3E:1C:03:EF:A2:F2:D9:FF:F9:DB:EC:33:25:BC:6C:37:69:42:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LD4cA--i8tn_-dvsMyW8bDdpQlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:cf:9e:85:b7:86:5f:7f:76:44:49:23:92:fd:ca:9c:0d:4a:
16:97:18:2e:34:d0:5a:0b:d2:88:9d:d6:83:76:35:a7:2b:89:
b7:c0:6b:9e:d6:12:3e:7d:90:dd:1f:02:e3:df:a2:72:38:5c:
fd:41:eb:02:3c:73:1f:57:84:97:c1:60:ae:29:0f:f3:56:d8:
54:76:d3:72:eb:83:1e:f6:cf:92:43:a8:3b:7d:a3:95:bb:bd:
d6:cc:a5:11:90:bb:89:74:b5:29:90:43:3f:6d:e2:05:22:a6:
25:f8:9b:52:59:a7:39:41:c8:e4:ae:f8:b8:ae:2a:ff:3d:ad:
9c:7c:59:d3:0f:e0:c7:78:b6:46:20:ac:f5:40:79:d2:65:d8:
bd:db:33:9d:0e:3d:36:4d:22:5f:5e:08:39:13:9b:b5:9d:d4:
94:7b:d5:94:57:f4:54:4f:73:a4:fe:b3:81:e4:4a:37:6e:c5:
13:dd:82:76:11:6b:61:dc:f3:5f:2e:f4:b7:4a:73:fa:7b:1f:
bc:45:d4:3a:3f:7e:f2:bc:54:34:2f:ae:41:a4:36:e4:3c:0f:
70:cf:85:32:6c:6e:6c:10:60:48:10:04:0c:2f:e9:71:74:5f:
07:84:71:b1:9c:56:5a:b0:e4:5e:cd:6a:8d:09:e9:2f:1e:ef:
43:7f:64:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjV8dhIZcvsQhLOMmpzh2gRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjM2UxYzAzZWZhMmYyZDlmZmY5ZGJlYzMzMjViYzZjMzc2
OTQyNTAwHhcNMjUwODIzMDgwMDUzWhcNMjUwODI0MDgwMDUzWjAzMTEwLwYDVQQD
Eyg3MWQzMjc3MDM5YzU0OThmMzA3ZjM3M2ZmNTVmZjk3NTA3NjkxN2I5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWbtwVY+1VNhqsRBDOCBG2+B4ING
BQ8qi3uFz55E1UBm7Un8SUyIA1Rh8V97w7Ar0APsZQKDH8ZIEjdreSoE/y/pgUJw
uB/BY4KFFdgZcD3qyXdvolqHJdbu/oN+cvrp2TRaE0hjFLds9plPkJZvw6b62JxF
0f8V2VqK5S9NixaqKtUhZvS6/cMbXES5kPDgFbDxhb9AisRq+Usqcmn2Zick289u
YaMvjyR6JFnDc6KMn/vbHJFDW5fvfEDiX7YrbarMaBCCHxWdhCaQa3FwIKPdreEL
7QT01cCv5X1YuvlNgKfWcrzo1FmIZQCzKwXNAJN4LNcN0SlmXyB554iguQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHHTJ3A5xUmPMH83P/Vf+XUHaRe5MB8GA1UdIwQY
MBaAFCw+HAPvovLZ//nb7DMlvGw3aUJQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTEQ0Y0EtLWk4dG5fLWR2c015VzhiRGRwUWxBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9kY2JkM2EtNzUyOC00OTllLWEzYmQt
YmYyODg3NWFiMjYxLzEvTEQ0Y0EtLWk4dG5fLWR2c015VzhiRGRwUWxBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi9kY2JkM2EtNzUyOC00OTllLWEzYmQtYmYyODg3NWFiMjYx
LzEvTEQ0Y0EtLWk4dG5fLWR2c015VzhiRGRwUWxBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcs+ehbeG
X392REkjkv3KnA1KFpcYLjTQWgvSiJ3Wg3Y1pyuJt8BrntYSPn2Q3R8C49+icjhc
/UHrAjxzH1eEl8FgrikP81bYVHbTcuuDHvbPkkOoO32jlbu91sylEZC7iXS1KZBD
P23iBSKmJfibUlmnOUHI5K74uK4q/z2tnHxZ0w/gx3i2RiCs9UB50mXYvdsznQ49
Nk0iX14IORObtZ3UlHvVlFf0VE9zpP6zgeRKN27FE92CdhFrYdzzXy70t0pz+nsf
vEXUOj9+8rxUNC+uQaQ25DwPcM+FMmxubBBgSBAEDC/pcXRfB4RxsZxWWrDkXs1q
jQnpLx7vQ39kUA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:08:06 2025 by rpki-client