Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ee4748-4eab-4e55-b64a-2c7a11c1fbaf/1/ldYa6EcsXI_NgTdWwWTC8YZNPJA.mft
File: ldYa6EcsXI_NgTdWwWTC8YZNPJA.mft (raw, json)
Hash identifier: 7ZTIPJ9EwE3+jySJF+nNd2D/GwPD2snNEe+6Jib2sIo=
Subject key identifier: 2C:03:86:30:73:DE:25:A2:02:D6:AD:3F:4B:11:6F:29:91:8C:16:C8
Authority key identifier: 95:D6:1A:E8:47:2C:5C:8F:CD:81:37:56:C1:64:C2:F1:86:4D:3C:90
Certificate issuer: /CN=95d61ae8472c5c8fcd813756c164c2f1864d3c90
Certificate serial: 0199FCC635A7CD072B74612F4850CA9809E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ldYa6EcsXI_NgTdWwWTC8YZNPJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ee4748-4eab-4e55-b64a-2c7a11c1fbaf/1/ldYa6EcsXI_NgTdWwWTC8YZNPJA.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 14:01:12 +0000
Manifest this update: Sun 19 Oct 2025 14:01:12 +0000
Manifest next update: Mon 20 Oct 2025 14:01:12 +0000
Files and hashes: 1: ldYa6EcsXI_NgTdWwWTC8YZNPJA.crl (hash: bGwxMYnT5bxBp9jB1czgEPasngPMwAbqH5nqLte0p4k=)
2: oEjv28BsSkkrSjhugPUpAGGwetU.roa (hash: CWIq+nR2seFkMvcAwstaiubts3JwM88PnSz1tCIk0CY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/ee4748-4eab-4e55-b64a-2c7a11c1fbaf/1/ldYa6EcsXI_NgTdWwWTC8YZNPJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/ee4748-4eab-4e55-b64a-2c7a11c1fbaf/1/ldYa6EcsXI_NgTdWwWTC8YZNPJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ldYa6EcsXI_NgTdWwWTC8YZNPJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:35:a7:cd:07:2b:74:61:2f:48:50:ca:98:09:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95d61ae8472c5c8fcd813756c164c2f1864d3c90
Validity
Not Before: Oct 19 14:01:12 2025 GMT
Not After : Oct 20 14:01:12 2025 GMT
Subject: CN=2c03863073de25a202d6ad3f4b116f29918c16c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:35:81:8a:51:75:b0:64:a2:5c:e7:44:e5:85:
57:15:a4:45:13:97:ef:b9:98:28:a3:f6:14:c7:d9:
00:ee:87:f8:ab:1a:8e:13:2d:6f:8e:2b:05:8e:58:
91:3f:69:2c:93:61:77:44:71:c6:76:04:86:b3:dc:
4a:d4:14:74:dd:6d:fd:4e:1d:2d:8c:bc:6e:84:d8:
ca:cc:6d:bc:56:5f:0f:10:a0:07:5f:42:b0:ac:12:
28:10:47:af:eb:b0:57:f5:e1:be:35:33:24:7c:df:
0f:60:51:90:ba:dd:26:ce:44:36:2e:30:75:f8:5c:
63:70:c6:e2:f8:59:86:bf:cd:3d:7d:6e:16:67:dd:
21:36:26:b1:48:17:2f:ff:61:6e:c1:51:b2:10:b0:
16:6a:46:db:01:7b:c6:2b:a8:1f:93:22:6b:ff:6c:
bb:98:ac:69:22:e0:36:19:18:de:5a:9c:02:94:4e:
f4:4a:d6:67:f9:b1:3a:1c:c2:ab:e0:94:d5:50:33:
b3:60:9d:c6:a2:47:38:f7:d1:d7:11:bf:db:14:b0:
85:3a:bd:b3:fe:e4:05:3d:39:a6:74:f5:1b:07:0b:
7c:70:3c:07:64:62:1b:71:a2:89:6f:94:17:0d:e4:
a5:af:f0:53:ac:dd:86:b2:d9:44:4f:56:b3:75:a9:
ce:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:03:86:30:73:DE:25:A2:02:D6:AD:3F:4B:11:6F:29:91:8C:16:C8
X509v3 Authority Key Identifier:
keyid:95:D6:1A:E8:47:2C:5C:8F:CD:81:37:56:C1:64:C2:F1:86:4D:3C:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ldYa6EcsXI_NgTdWwWTC8YZNPJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ee4748-4eab-4e55-b64a-2c7a11c1fbaf/1/ldYa6EcsXI_NgTdWwWTC8YZNPJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ee4748-4eab-4e55-b64a-2c7a11c1fbaf/1/ldYa6EcsXI_NgTdWwWTC8YZNPJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:13:b8:e4:1b:a7:24:61:fa:fb:8c:53:34:20:a9:d3:ef:d6:
35:90:82:5b:0b:fd:f4:09:36:63:0a:5a:33:cc:d3:dc:8c:00:
0c:0d:90:c7:ca:f5:1f:3f:97:80:ec:57:8e:5a:e1:72:cb:53:
51:82:7c:21:32:40:3c:f3:22:29:b3:2d:af:a7:df:60:58:4d:
4e:bb:7d:37:c7:0f:c4:00:34:02:7b:b8:26:d1:c5:0e:6e:95:
38:c9:18:1a:94:f4:7a:c6:e0:88:6b:e2:02:16:92:f3:db:81:
2e:7f:be:dd:42:3d:a4:ae:65:11:16:2f:6c:21:49:50:41:94:
33:06:a3:45:86:9a:a4:60:ef:71:99:42:4b:83:ff:38:48:35:
d8:9a:9f:b6:28:d6:15:c5:ba:43:f0:a1:25:ed:b4:d8:aa:bd:
38:47:0e:e9:e0:7e:64:9d:9d:2e:8c:42:fd:66:a4:1f:f0:1c:
bb:ff:56:03:bd:c5:9c:0c:9e:f3:74:84:97:5a:bb:a5:e2:dd:
45:d8:34:62:44:8d:96:81:2d:d9:ee:6f:0f:9e:5b:9c:f7:6c:
6f:74:4d:c5:4b:a2:f2:30:8a:93:75:96:e1:60:71:33:80:33:
fb:d0:2d:4e:50:47:e7:d5:94:27:63:ad:03:3e:56:d2:11:1a:
05:be:8e:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xjWnzQcrdGEvSFDKmAnoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1ZDYxYWU4NDcyYzVjOGZjZDgxMzc1NmMxNjRjMmYxODY0
ZDNjOTAwHhcNMjUxMDE5MTQwMTEyWhcNMjUxMDIwMTQwMTEyWjAzMTEwLwYDVQQD
EygyYzAzODYzMDczZGUyNWEyMDJkNmFkM2Y0YjExNmYyOTkxOGMxNmM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3jWBilF1sGSiXOdE5YVXFaRFE5fv
uZgoo/YUx9kA7of4qxqOEy1vjisFjliRP2ksk2F3RHHGdgSGs9xK1BR03W39Th0t
jLxuhNjKzG28Vl8PEKAHX0KwrBIoEEev67BX9eG+NTMkfN8PYFGQut0mzkQ2LjB1
+FxjcMbi+FmGv809fW4WZ90hNiaxSBcv/2FuwVGyELAWakbbAXvGK6gfkyJr/2y7
mKxpIuA2GRjeWpwClE70StZn+bE6HMKr4JTVUDOzYJ3Gokc499HXEb/bFLCFOr2z
/uQFPTmmdPUbBwt8cDwHZGIbcaKJb5QXDeSlr/BTrN2GstlET1azdanOjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCwDhjBz3iWiAtatP0sRbymRjBbIMB8GA1UdIwQY
MBaAFJXWGuhHLFyPzYE3VsFkwvGGTTyQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGRZYTZFY3NYSV9OZ1RkV3dXVEM4WVpOUEpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9lZTQ3NDgtNGVhYi00ZTU1LWI2NGEt
MmM3YTExYzFmYmFmLzEvbGRZYTZFY3NYSV9OZ1RkV3dXVEM4WVpOUEpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS9lZTQ3NDgtNGVhYi00ZTU1LWI2NGEtMmM3YTExYzFmYmFm
LzEvbGRZYTZFY3NYSV9OZ1RkV3dXVEM4WVpOUEpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsBO45Bun
JGH6+4xTNCCp0+/WNZCCWwv99Ak2YwpaM8zT3IwADA2Qx8r1Hz+XgOxXjlrhcstT
UYJ8ITJAPPMiKbMtr6ffYFhNTrt9N8cPxAA0Anu4JtHFDm6VOMkYGpT0esbgiGvi
AhaS89uBLn++3UI9pK5lERYvbCFJUEGUMwajRYaapGDvcZlCS4P/OEg12JqftijW
FcW6Q/ChJe202Kq9OEcO6eB+ZJ2dLoxC/WakH/Acu/9WA73FnAye83SEl1q7peLd
Rdg0YkSNloEt2e5vD55bnPdsb3RNxUui8jCKk3WW4WBxM4Az+9AtTlBH59WUJ2Ot
Az5W0hEaBb6OSg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:38:02 2025 by rpki-client