Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/319d61-560a-44fd-aa25-49671acdf486/1/LdOuI8tG7pwhlQ78tg3voJS6VUg.mft
File: LdOuI8tG7pwhlQ78tg3voJS6VUg.mft (raw, json)
Hash identifier: NpI0BYHFdsOsQl7DfSc//Q7aY5NKBjg8jnTXdX07z3k=
Subject key identifier: AD:1C:CB:BF:FA:5D:25:52:4D:B5:1A:D4:F1:BB:16:BF:36:B1:88:15
Authority key identifier: 2D:D3:AE:23:CB:46:EE:9C:21:95:0E:FC:B6:0D:EF:A0:94:BA:55:48
Certificate issuer: /CN=2dd3ae23cb46ee9c21950efcb60defa094ba5548
Certificate serial: 0199FCC6A107E6925830D599DFE63EA3248D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LdOuI8tG7pwhlQ78tg3voJS6VUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/319d61-560a-44fd-aa25-49671acdf486/1/LdOuI8tG7pwhlQ78tg3voJS6VUg.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 14:01:39 +0000
Manifest this update: Sun 19 Oct 2025 14:01:39 +0000
Manifest next update: Mon 20 Oct 2025 14:01:39 +0000
Files and hashes: 1: LdOuI8tG7pwhlQ78tg3voJS6VUg.crl (hash: LtSQMdihzcSv1D79BZYYJU+AS2mbIvVEb0q7qOIgsKs=)
2: NR5q24H1ufzbYF2XouLHFu4YVgE.roa (hash: P7YBV+TAXY1ntVvPbNeFWy4DC2dZewmJse8AyIIurOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/319d61-560a-44fd-aa25-49671acdf486/1/LdOuI8tG7pwhlQ78tg3voJS6VUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/319d61-560a-44fd-aa25-49671acdf486/1/LdOuI8tG7pwhlQ78tg3voJS6VUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LdOuI8tG7pwhlQ78tg3voJS6VUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:a1:07:e6:92:58:30:d5:99:df:e6:3e:a3:24:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dd3ae23cb46ee9c21950efcb60defa094ba5548
Validity
Not Before: Oct 19 14:01:39 2025 GMT
Not After : Oct 20 14:01:39 2025 GMT
Subject: CN=ad1ccbbffa5d25524db51ad4f1bb16bf36b18815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d3:fc:ed:98:08:db:85:de:d5:9f:c9:ac:6c:
23:5a:06:40:a6:e1:c4:44:96:65:d5:a1:c2:7d:2a:
b9:17:ae:b6:4e:31:7d:1b:52:22:31:90:cb:0c:82:
06:12:be:ba:ce:cc:8b:68:21:05:20:01:54:3b:01:
4a:e0:08:09:6f:55:00:b6:e6:a9:ad:67:a4:f9:08:
42:33:9e:bf:b5:4a:09:ba:5d:5c:50:db:17:d5:21:
28:a7:94:e3:7c:55:19:2b:c7:97:18:b3:7b:55:c7:
db:69:a6:c7:36:62:fa:b9:6f:4b:87:40:d3:4c:60:
fe:e3:a1:d3:6f:92:e8:27:dd:7a:16:af:e2:9f:04:
a5:b1:c8:6c:30:10:f5:70:17:72:4c:eb:db:df:cd:
99:c7:16:25:0d:73:31:8a:3c:76:87:2b:0f:54:39:
ce:83:7e:17:db:5c:75:01:bd:f3:07:e9:7a:7b:99:
e4:cb:0f:b7:10:59:52:70:ac:ca:d9:12:27:21:73:
2c:26:1e:b0:d0:80:13:6a:c8:47:8e:80:4c:8a:92:
4b:d2:38:d9:56:7f:0d:c6:85:03:4a:6f:21:89:ab:
1e:80:31:92:fa:3b:8d:5a:27:f6:06:17:0a:b2:4e:
0f:26:4e:53:16:c4:64:11:b4:be:7f:29:33:32:54:
45:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:1C:CB:BF:FA:5D:25:52:4D:B5:1A:D4:F1:BB:16:BF:36:B1:88:15
X509v3 Authority Key Identifier:
keyid:2D:D3:AE:23:CB:46:EE:9C:21:95:0E:FC:B6:0D:EF:A0:94:BA:55:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LdOuI8tG7pwhlQ78tg3voJS6VUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/319d61-560a-44fd-aa25-49671acdf486/1/LdOuI8tG7pwhlQ78tg3voJS6VUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/319d61-560a-44fd-aa25-49671acdf486/1/LdOuI8tG7pwhlQ78tg3voJS6VUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:a3:e3:d5:8e:bd:f0:2e:14:df:83:4d:f3:1b:c6:c2:4d:66:
24:58:c7:53:bc:2c:9a:48:77:cf:da:a6:44:25:9f:a1:6d:c3:
7f:0f:af:9b:93:53:2e:38:22:f2:26:42:43:1b:4c:d4:03:4d:
69:77:c0:8b:40:af:28:85:22:a9:33:5c:d2:e5:78:bf:83:25:
0d:dd:63:63:d9:3a:dd:36:48:b0:8c:35:68:f1:f8:30:c2:f5:
7a:af:e3:59:67:ee:96:2a:4f:8d:c2:04:c6:f0:3f:d7:5a:65:
93:55:80:4e:ca:8a:f6:9d:b6:70:16:12:0c:05:c9:b6:8c:8b:
96:31:d5:f6:1a:c9:89:a7:ce:c6:90:e6:0d:6e:98:08:16:54:
a4:80:12:75:44:1a:16:43:e2:c0:9e:5a:e4:51:60:fa:36:88:
39:64:eb:f3:73:48:04:c1:79:ea:71:3e:75:42:f2:dd:13:ff:
f3:a8:c1:a1:80:be:df:3c:03:f8:64:57:c4:af:b6:3e:1c:0e:
05:28:3d:9b:63:ea:3d:bd:ec:68:04:71:73:42:46:88:9e:6f:
21:cc:0e:a5:5a:0e:45:a9:eb:6e:40:c3:1c:38:1e:48:9e:70:
48:0e:e7:9b:c1:a1:0c:9e:1d:5b:32:7c:44:5d:69:31:50:ac:
1d:ad:3f:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:30:09 2025 by rpki-client