Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/319d61-560a-44fd-aa25-49671acdf486/1/LdOuI8tG7pwhlQ78tg3voJS6VUg.mft
File: LdOuI8tG7pwhlQ78tg3voJS6VUg.mft (raw, json)
Hash identifier: LE/Iorzpu1QQRkAre6C3oIGebRpdFJzPWJ6YYr2g0x0=
Subject key identifier: AA:01:EE:AE:C9:C4:71:1C:66:6A:39:E6:AD:6E:A8:0C:F3:E4:FA:09
Authority key identifier: 2D:D3:AE:23:CB:46:EE:9C:21:95:0E:FC:B6:0D:EF:A0:94:BA:55:48
Certificate issuer: /CN=2dd3ae23cb46ee9c21950efcb60defa094ba5548
Certificate serial: 0197D4748DB7F49E5A5FDA9E2C7AFDEB3F0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LdOuI8tG7pwhlQ78tg3voJS6VUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/319d61-560a-44fd-aa25-49671acdf486/1/LdOuI8tG7pwhlQ78tg3voJS6VUg.mft
Manifest number: 15C5
Signing time: Fri 04 Jul 2025 08:01:37 +0000
Manifest this update: Fri 04 Jul 2025 08:01:37 +0000
Manifest next update: Sat 05 Jul 2025 08:01:37 +0000
Files and hashes: 1: LdOuI8tG7pwhlQ78tg3voJS6VUg.crl (hash: drlEK2IoZYbev7VpUdbx3+DZ+YBcetdGvIaxP49140k=)
2: NR5q24H1ufzbYF2XouLHFu4YVgE.roa (hash: P7YBV+TAXY1ntVvPbNeFWy4DC2dZewmJse8AyIIurOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/319d61-560a-44fd-aa25-49671acdf486/1/LdOuI8tG7pwhlQ78tg3voJS6VUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/319d61-560a-44fd-aa25-49671acdf486/1/LdOuI8tG7pwhlQ78tg3voJS6VUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LdOuI8tG7pwhlQ78tg3voJS6VUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d4:74:8d:b7:f4:9e:5a:5f:da:9e:2c:7a:fd:eb:3f:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dd3ae23cb46ee9c21950efcb60defa094ba5548
Validity
Not Before: Jul 4 08:01:37 2025 GMT
Not After : Jul 5 08:01:37 2025 GMT
Subject: CN=aa01eeaec9c4711c666a39e6ad6ea80cf3e4fa09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9c:71:b0:ca:6c:dd:c6:84:08:76:4f:59:06:
2b:fc:34:00:fa:84:1b:70:08:f1:51:63:c8:14:da:
52:b9:00:ad:b9:05:05:c4:82:a7:2b:43:94:14:98:
04:0d:9a:92:ae:92:d4:a3:e5:f0:60:8c:22:08:94:
76:34:d0:57:8c:f7:df:5b:20:ff:9c:6f:45:bb:5b:
e3:b2:67:2a:ef:10:a6:00:8e:5e:c0:f5:81:51:3d:
f8:4e:b8:b2:3e:12:d1:59:96:f6:cf:b5:38:2f:de:
7e:d5:55:8b:4f:99:eb:b3:eb:9a:91:ba:3b:9f:03:
10:fd:4e:e0:50:f4:cb:ae:73:d5:8c:bf:d5:b9:26:
6b:b5:43:74:6b:51:a1:ac:98:f0:22:bb:7b:d3:35:
4c:7b:16:a7:a8:7b:76:a2:68:70:a0:f1:88:ed:13:
f4:51:0c:a0:9f:ab:70:dd:7c:3c:ac:30:7d:a7:c6:
b7:0e:fd:3c:f4:08:a2:90:24:0b:df:7e:5e:fb:8f:
36:20:11:42:64:71:8a:9b:6f:d9:16:2b:d8:76:12:
66:1e:26:63:df:77:ce:b5:70:69:db:98:c7:26:a5:
79:48:68:72:30:bb:c5:56:f3:2c:f9:72:f0:b2:c0:
63:57:0c:0f:ef:50:57:c1:d4:14:94:1b:15:5e:06:
ce:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:01:EE:AE:C9:C4:71:1C:66:6A:39:E6:AD:6E:A8:0C:F3:E4:FA:09
X509v3 Authority Key Identifier:
keyid:2D:D3:AE:23:CB:46:EE:9C:21:95:0E:FC:B6:0D:EF:A0:94:BA:55:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LdOuI8tG7pwhlQ78tg3voJS6VUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/319d61-560a-44fd-aa25-49671acdf486/1/LdOuI8tG7pwhlQ78tg3voJS6VUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/319d61-560a-44fd-aa25-49671acdf486/1/LdOuI8tG7pwhlQ78tg3voJS6VUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:46:4a:28:5f:6f:a1:4f:16:48:5c:fb:b4:6a:85:2e:16:eb:
ea:b8:63:db:9e:22:e3:ea:14:c8:d8:76:ee:aa:28:7d:9d:d3:
26:eb:4a:8e:da:27:50:16:b5:35:31:80:50:63:ac:ec:9e:51:
15:0d:d6:5a:7b:4e:75:51:3a:57:be:41:fb:1f:a6:1c:7a:09:
4b:c6:67:b0:2f:95:9b:79:c0:ac:5e:31:09:a7:02:92:55:16:
f7:fb:c2:48:35:01:16:8d:6f:f5:86:cc:14:8a:3c:fc:be:a1:
79:9b:fc:e2:68:83:0d:e8:7e:b0:77:8c:14:41:9b:78:a5:c2:
17:d4:28:a1:58:b7:88:06:87:df:a1:df:4b:2f:a8:5e:ad:31:
25:ef:c7:0b:c9:8c:be:40:82:c6:18:4f:33:dc:42:98:16:e5:
96:8c:7c:e6:bc:a2:2d:10:ba:58:7e:37:d6:82:b8:aa:c0:10:
3a:3e:4b:19:dd:83:0e:bb:9e:6a:5e:be:26:4e:c5:7b:c8:9b:
15:df:ce:98:d9:b3:0e:65:14:f3:28:f8:e8:18:da:b2:e3:a6:
5d:0f:39:14:9e:a3:86:9c:7d:da:d2:8e:34:0f:45:4d:b2:3c:
d3:ae:95:94:f7:ec:cb:1d:95:3c:65:bc:5c:c5:4e:bb:c6:02:
5c:11:bb:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 15:06:51 2025 by rpki-client