Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ee4748-4eab-4e55-b64a-2c7a11c1fbaf/1/ldYa6EcsXI_NgTdWwWTC8YZNPJA.mft
File: ldYa6EcsXI_NgTdWwWTC8YZNPJA.mft (raw, json)
Hash identifier: GxCx4bkuqa2v1xbLTBLHYRtCPuPeUs6askl589ql7d8=
Subject key identifier: 41:04:3A:72:7B:4D:24:E5:67:7E:A5:DA:EC:68:9E:72:7A:50:43:EE
Authority key identifier: 95:D6:1A:E8:47:2C:5C:8F:CD:81:37:56:C1:64:C2:F1:86:4D:3C:90
Certificate issuer: /CN=95d61ae8472c5c8fcd813756c164c2f1864d3c90
Certificate serial: 0198D583848880611B03346EF24048EFC8E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ldYa6EcsXI_NgTdWwWTC8YZNPJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ee4748-4eab-4e55-b64a-2c7a11c1fbaf/1/ldYa6EcsXI_NgTdWwWTC8YZNPJA.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 06:00:22 +0000
Manifest this update: Sat 23 Aug 2025 06:00:22 +0000
Manifest next update: Sun 24 Aug 2025 06:00:22 +0000
Files and hashes: 1: ldYa6EcsXI_NgTdWwWTC8YZNPJA.crl (hash: qNsEfOZlGaB30bXvCeTp+iB2CqYhMOCleMPSkqQ1Nks=)
2: oEjv28BsSkkrSjhugPUpAGGwetU.roa (hash: CWIq+nR2seFkMvcAwstaiubts3JwM88PnSz1tCIk0CY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/ee4748-4eab-4e55-b64a-2c7a11c1fbaf/1/ldYa6EcsXI_NgTdWwWTC8YZNPJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/ee4748-4eab-4e55-b64a-2c7a11c1fbaf/1/ldYa6EcsXI_NgTdWwWTC8YZNPJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ldYa6EcsXI_NgTdWwWTC8YZNPJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:84:88:80:61:1b:03:34:6e:f2:40:48:ef:c8:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95d61ae8472c5c8fcd813756c164c2f1864d3c90
Validity
Not Before: Aug 23 06:00:22 2025 GMT
Not After : Aug 24 06:00:22 2025 GMT
Subject: CN=41043a727b4d24e5677ea5daec689e727a5043ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1c:bd:55:b1:c5:82:51:00:ce:83:c7:10:04:
ce:91:40:df:e2:e8:86:8e:1f:dd:d3:bd:64:0c:f9:
ec:a6:96:b3:61:99:70:7d:bb:4f:52:07:e9:a2:3d:
ef:b9:b7:a4:b4:9a:37:78:7c:43:46:89:b5:92:31:
b3:9f:49:f9:d9:8a:f9:c9:71:40:8b:13:98:0a:33:
55:60:b6:1e:ae:3c:57:53:08:5a:ed:da:cd:c0:89:
aa:e1:c5:13:82:0a:68:09:8d:7b:92:87:4c:f1:57:
e6:08:28:09:6d:72:65:31:b6:32:46:00:a8:4d:7c:
07:e4:ed:51:4a:47:1c:7d:7a:8d:13:d6:d5:b5:41:
25:8a:00:c1:59:82:ef:2b:49:37:b4:e9:bd:db:ab:
de:8a:98:7b:c2:3f:f1:f6:fe:f7:eb:a4:6e:1d:26:
2e:8b:46:c5:37:52:fd:a2:34:b4:2d:8f:d6:98:2b:
67:c2:ff:d1:9d:4c:6a:2f:da:21:c0:10:4e:4c:25:
43:76:78:4b:0d:77:41:7c:e7:a1:1a:59:8c:e0:81:
67:40:a5:69:e5:39:3d:ce:d1:d1:f7:e3:a6:c1:35:
5d:20:b6:17:c8:6e:c2:d6:b4:11:49:7c:2c:e3:b5:
27:b9:15:ec:74:6a:ec:50:66:30:f0:78:9e:37:e8:
7e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:04:3A:72:7B:4D:24:E5:67:7E:A5:DA:EC:68:9E:72:7A:50:43:EE
X509v3 Authority Key Identifier:
keyid:95:D6:1A:E8:47:2C:5C:8F:CD:81:37:56:C1:64:C2:F1:86:4D:3C:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ldYa6EcsXI_NgTdWwWTC8YZNPJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ee4748-4eab-4e55-b64a-2c7a11c1fbaf/1/ldYa6EcsXI_NgTdWwWTC8YZNPJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ee4748-4eab-4e55-b64a-2c7a11c1fbaf/1/ldYa6EcsXI_NgTdWwWTC8YZNPJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:67:3d:54:ed:f3:05:1b:f2:de:ce:ca:ad:6d:1d:24:d9:0b:
0c:89:0c:e2:5b:76:2b:96:8b:4b:fc:ee:84:e2:46:d4:3a:fc:
50:a7:09:ac:a2:cb:62:73:82:0d:dd:fc:f6:af:fa:5d:d3:9d:
0c:77:b6:e6:d2:18:0b:9d:85:cb:6f:66:75:05:aa:7b:a8:93:
d0:33:73:3e:30:f5:29:9d:cf:df:e3:06:06:24:fc:88:de:5b:
10:51:8c:24:0f:cb:56:3a:cf:81:42:01:de:ec:52:13:70:3d:
01:b5:ef:f4:cf:69:2f:8e:f6:00:06:2e:33:b1:ed:85:2d:ab:
ac:2d:b9:08:16:0c:a5:54:3e:43:13:a7:33:d4:f6:c9:95:77:
90:fb:5c:63:8e:e0:9e:f1:e5:60:21:3d:34:4d:7a:4b:c7:9c:
e8:80:42:b4:e5:77:23:00:4a:65:04:3c:3e:07:c0:90:d3:c4:
b3:75:6f:a3:f1:7e:72:2c:6b:f0:2a:64:c3:0f:d9:62:60:fb:
48:4f:89:0d:c8:bc:1a:3f:30:1d:e4:14:92:9d:e5:25:8f:4d:
69:43:3c:e4:b8:b5:d9:66:54:3c:1c:09:69:7f:61:da:90:be:
e3:70:a4:18:06:e5:37:8b:53:47:31:fb:a4:f3:d6:bc:2d:6e:
e4:ed:30:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg4SIgGEbAzRu8kBI78jlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1ZDYxYWU4NDcyYzVjOGZjZDgxMzc1NmMxNjRjMmYxODY0
ZDNjOTAwHhcNMjUwODIzMDYwMDIyWhcNMjUwODI0MDYwMDIyWjAzMTEwLwYDVQQD
Eyg0MTA0M2E3MjdiNGQyNGU1Njc3ZWE1ZGFlYzY4OWU3MjdhNTA0M2VlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxy9VbHFglEAzoPHEATOkUDf4uiG
jh/d071kDPnsppazYZlwfbtPUgfpoj3vubektJo3eHxDRom1kjGzn0n52Yr5yXFA
ixOYCjNVYLYerjxXUwha7drNwImq4cUTggpoCY17kodM8VfmCCgJbXJlMbYyRgCo
TXwH5O1RSkccfXqNE9bVtUEligDBWYLvK0k3tOm926veiph7wj/x9v7366RuHSYu
i0bFN1L9ojS0LY/WmCtnwv/RnUxqL9ohwBBOTCVDdnhLDXdBfOehGlmM4IFnQKVp
5Tk9ztHR9+OmwTVdILYXyG7C1rQRSXws47UnuRXsdGrsUGYw8HieN+h+3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEEEOnJ7TSTlZ36l2uxonnJ6UEPuMB8GA1UdIwQY
MBaAFJXWGuhHLFyPzYE3VsFkwvGGTTyQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGRZYTZFY3NYSV9OZ1RkV3dXVEM4WVpOUEpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9lZTQ3NDgtNGVhYi00ZTU1LWI2NGEt
MmM3YTExYzFmYmFmLzEvbGRZYTZFY3NYSV9OZ1RkV3dXVEM4WVpOUEpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS9lZTQ3NDgtNGVhYi00ZTU1LWI2NGEtMmM3YTExYzFmYmFm
LzEvbGRZYTZFY3NYSV9OZ1RkV3dXVEM4WVpOUEpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsWc9VO3z
BRvy3s7KrW0dJNkLDIkM4lt2K5aLS/zuhOJG1Dr8UKcJrKLLYnOCDd389q/6XdOd
DHe25tIYC52Fy29mdQWqe6iT0DNzPjD1KZ3P3+MGBiT8iN5bEFGMJA/LVjrPgUIB
3uxSE3A9AbXv9M9pL472AAYuM7HthS2rrC25CBYMpVQ+QxOnM9T2yZV3kPtcY47g
nvHlYCE9NE16S8ec6IBCtOV3IwBKZQQ8PgfAkNPEs3Vvo/F+cixr8Cpkww/ZYmD7
SE+JDci8Gj8wHeQUkp3lJY9NaUM85Li12WZUPBwJaX9h2pC+43CkGAblN4tTRzH7
pPPWvC1u5O0whQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:48:40 2025 by rpki-client