Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ee4748-4eab-4e55-b64a-2c7a11c1fbaf/1/ldYa6EcsXI_NgTdWwWTC8YZNPJA.mft
File: ldYa6EcsXI_NgTdWwWTC8YZNPJA.mft (raw, json)
Hash identifier: FDa6Ic0S7vwgBcKVUu7/MKsYsrBsogdj91gjwHsZr/U=
Subject key identifier: 84:3B:37:3B:BF:C7:1C:F2:DB:86:30:9E:9E:1B:D2:6B:F7:90:CA:A0
Authority key identifier: 95:D6:1A:E8:47:2C:5C:8F:CD:81:37:56:C1:64:C2:F1:86:4D:3C:90
Certificate issuer: /CN=95d61ae8472c5c8fcd813756c164c2f1864d3c90
Certificate serial: 0197B7B32AE5C398D55DBF27C439B7801B91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ldYa6EcsXI_NgTdWwWTC8YZNPJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ee4748-4eab-4e55-b64a-2c7a11c1fbaf/1/ldYa6EcsXI_NgTdWwWTC8YZNPJA.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 18:01:01 +0000
Manifest this update: Sat 28 Jun 2025 18:01:01 +0000
Manifest next update: Sun 29 Jun 2025 18:01:01 +0000
Files and hashes: 1: ldYa6EcsXI_NgTdWwWTC8YZNPJA.crl (hash: P2bvFQ8FPtYABVBbdf13wZnE5Ggd1LWM6NBLi3SYVR4=)
2: oEjv28BsSkkrSjhugPUpAGGwetU.roa (hash: CWIq+nR2seFkMvcAwstaiubts3JwM88PnSz1tCIk0CY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/ee4748-4eab-4e55-b64a-2c7a11c1fbaf/1/ldYa6EcsXI_NgTdWwWTC8YZNPJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/ee4748-4eab-4e55-b64a-2c7a11c1fbaf/1/ldYa6EcsXI_NgTdWwWTC8YZNPJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ldYa6EcsXI_NgTdWwWTC8YZNPJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:2a:e5:c3:98:d5:5d:bf:27:c4:39:b7:80:1b:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95d61ae8472c5c8fcd813756c164c2f1864d3c90
Validity
Not Before: Jun 28 18:01:01 2025 GMT
Not After : Jun 29 18:01:01 2025 GMT
Subject: CN=843b373bbfc71cf2db86309e9e1bd26bf790caa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7d:e7:05:cc:a3:39:b7:d3:04:cc:e7:51:c0:
04:3b:b3:9d:fc:1e:2e:64:5e:67:64:96:26:88:23:
f6:a9:b3:e6:69:f8:78:59:63:68:3e:c1:3c:c9:46:
29:34:9f:a0:4b:03:74:c1:58:38:da:77:be:3c:2a:
42:02:57:43:d5:89:8a:39:5b:d9:0a:a3:cf:c1:70:
b9:a8:cd:d9:af:f8:91:8b:0e:7e:4e:ac:42:c9:51:
e7:b5:d0:99:8f:3f:56:ac:5a:68:98:b7:77:67:9a:
6e:03:f6:c5:3f:0d:c4:fd:54:f8:94:12:0a:6c:66:
d1:74:4f:40:49:c8:26:3e:23:2e:73:7a:c4:ec:09:
9b:25:bd:8c:50:36:8d:8c:9b:5c:fc:fe:bf:e2:30:
c3:d5:c7:7e:31:d3:9f:b7:ff:b9:d0:b3:6d:f9:4d:
c1:ac:d2:db:59:e8:00:72:76:85:38:50:20:3a:94:
f9:2c:02:c2:6d:6e:a4:e0:57:88:24:27:bb:75:8c:
0b:b5:19:d7:d9:b6:6a:bd:6f:4a:ee:50:a6:d8:67:
d1:6f:06:c6:5e:9f:46:f8:84:8e:10:db:bc:35:f8:
3e:4b:98:fb:e3:74:8a:bf:bc:07:f5:9d:1b:b2:ca:
e1:bc:99:be:ac:45:ab:35:76:56:fb:0a:69:03:2b:
4d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:3B:37:3B:BF:C7:1C:F2:DB:86:30:9E:9E:1B:D2:6B:F7:90:CA:A0
X509v3 Authority Key Identifier:
keyid:95:D6:1A:E8:47:2C:5C:8F:CD:81:37:56:C1:64:C2:F1:86:4D:3C:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ldYa6EcsXI_NgTdWwWTC8YZNPJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ee4748-4eab-4e55-b64a-2c7a11c1fbaf/1/ldYa6EcsXI_NgTdWwWTC8YZNPJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ee4748-4eab-4e55-b64a-2c7a11c1fbaf/1/ldYa6EcsXI_NgTdWwWTC8YZNPJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:b5:85:7d:3d:49:41:00:6c:46:b5:35:80:70:44:da:e5:10:
21:4b:27:d3:27:d5:b8:86:17:81:45:29:8c:19:e9:5f:e9:46:
c4:1e:1e:7a:b9:67:b6:bd:76:50:af:8e:fc:50:d6:0c:fb:49:
43:aa:1b:2b:0d:29:06:2a:15:b9:a1:ea:be:e4:48:e1:51:df:
ea:1f:cd:50:9a:87:dc:90:73:d8:0d:08:70:34:99:9f:dd:92:
da:dc:2c:a6:a7:77:1b:f4:e1:10:d1:09:84:d0:ef:28:5a:cb:
ca:d3:26:ff:17:c6:35:c0:e9:e9:e0:7d:1e:53:4c:42:34:69:
4f:dd:d8:05:7b:33:44:95:6a:2f:6a:f1:f4:0d:8f:99:7f:13:
df:d8:83:9a:69:5c:b8:47:7a:11:49:16:e4:ec:0d:82:3d:eb:
76:6f:68:4f:1d:b0:ec:09:bc:a9:ac:25:2c:5a:b4:79:01:d7:
f5:a1:cc:3c:5f:59:f8:73:70:a6:99:1d:51:a6:9b:98:32:5e:
67:44:7b:56:41:55:a8:9b:25:bc:e9:fb:57:2f:2f:25:3d:0e:
8e:14:ea:e5:3e:59:8c:23:6e:cb:16:25:15:f8:04:3a:92:d0:
88:37:aa:da:a3:df:65:d1:5d:e9:db:d7:03:3b:e1:a8:ab:01:
56:42:6f:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:31:27 2025 by rpki-client