Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/e67956-de18-40c4-b013-951e5afae9e7/1/LdgAjePP9i0vrKENmf8gw-h43N8.mft
File: LdgAjePP9i0vrKENmf8gw-h43N8.mft (raw, json)
Hash identifier: W/7ED9R5qLtH2r+qKmhUdLM7c09X5AaGgfd6VxC7HYQ=
Subject key identifier: F5:A9:AD:20:DF:21:46:FB:17:CC:11:1A:14:D3:89:FC:21:A5:7E:CA
Authority key identifier: 2D:D8:00:8D:E3:CF:F6:2D:2F:AC:A1:0D:99:FF:20:C3:E8:78:DC:DF
Certificate issuer: /CN=2dd8008de3cff62d2faca10d99ff20c3e878dcdf
Certificate serial: 0199FBEAA23D2BCF96C8D4CA2FBD96AC9147
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LdgAjePP9i0vrKENmf8gw-h43N8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/e67956-de18-40c4-b013-951e5afae9e7/1/LdgAjePP9i0vrKENmf8gw-h43N8.mft
Manifest number: 05A3
Signing time: Sun 19 Oct 2025 10:01:22 +0000
Manifest this update: Sun 19 Oct 2025 10:01:22 +0000
Manifest next update: Mon 20 Oct 2025 10:01:22 +0000
Files and hashes: 1: LdgAjePP9i0vrKENmf8gw-h43N8.crl (hash: 0XvFpXSZTMsSC+4ESGxvKLVSHQ6OxWkrHhFqyRQ5MKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/e67956-de18-40c4-b013-951e5afae9e7/1/LdgAjePP9i0vrKENmf8gw-h43N8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/e67956-de18-40c4-b013-951e5afae9e7/1/LdgAjePP9i0vrKENmf8gw-h43N8.mft
rsync://rpki.ripe.net/repository/DEFAULT/LdgAjePP9i0vrKENmf8gw-h43N8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:a2:3d:2b:cf:96:c8:d4:ca:2f:bd:96:ac:91:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dd8008de3cff62d2faca10d99ff20c3e878dcdf
Validity
Not Before: Oct 19 10:01:22 2025 GMT
Not After : Oct 20 10:01:22 2025 GMT
Subject: CN=f5a9ad20df2146fb17cc111a14d389fc21a57eca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:4b:53:c1:71:46:6e:86:eb:7a:b5:4f:d2:0b:
dc:c5:5b:bc:18:1f:48:5c:3f:3d:7d:6d:dc:e9:57:
05:0b:3d:8e:a9:0c:7e:29:e4:a7:5c:8c:f4:3f:05:
4b:15:98:1e:84:dc:db:f3:e6:fe:34:10:33:01:dd:
45:38:8b:5a:4e:1d:25:99:e6:46:db:c9:11:b1:6a:
7c:06:26:d1:49:47:15:ed:25:a0:92:99:a9:98:7a:
ba:fd:7a:4b:cd:ff:52:5e:43:ca:fd:75:92:83:15:
9d:bb:08:e6:db:35:6c:bb:21:ea:06:a7:67:de:57:
7f:89:44:94:b0:0e:6d:38:c4:68:a2:ad:d1:a4:f6:
c8:c5:a1:2c:ff:7c:fb:ba:f4:dc:fa:94:40:64:69:
2e:f0:da:99:bd:6b:7f:70:7c:b0:1c:6e:2c:0f:e3:
df:72:47:66:06:0d:13:6a:37:fd:8f:45:ed:8d:83:
3e:cc:00:04:4a:52:38:31:69:3b:ec:2d:bd:60:84:
cb:1d:5d:67:a0:e5:cf:cf:41:fc:ff:e8:48:47:01:
dd:87:49:ab:b6:35:b0:80:4d:4e:c4:88:c9:08:30:
70:88:2b:55:e7:d0:b7:c5:9f:61:27:7a:3c:3e:15:
4d:c3:4b:ff:e9:fe:86:de:8a:9a:ec:27:fb:77:69:
9a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:A9:AD:20:DF:21:46:FB:17:CC:11:1A:14:D3:89:FC:21:A5:7E:CA
X509v3 Authority Key Identifier:
keyid:2D:D8:00:8D:E3:CF:F6:2D:2F:AC:A1:0D:99:FF:20:C3:E8:78:DC:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LdgAjePP9i0vrKENmf8gw-h43N8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e67956-de18-40c4-b013-951e5afae9e7/1/LdgAjePP9i0vrKENmf8gw-h43N8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e67956-de18-40c4-b013-951e5afae9e7/1/LdgAjePP9i0vrKENmf8gw-h43N8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:15:e5:ed:29:81:68:7e:bc:fc:aa:74:f1:13:f3:b8:95:75:
35:78:20:7e:31:e6:79:55:c6:8f:65:d4:7a:2b:ea:4a:fd:5d:
33:f4:fd:79:90:e8:11:8c:fe:20:94:d5:ed:26:37:cc:f1:70:
6b:2c:10:b0:3b:2c:26:0d:b8:b0:d2:e7:53:a3:bc:db:0b:86:
2b:4d:9e:41:5c:2a:61:28:92:f5:f8:b2:6e:ee:2a:78:00:7c:
be:2e:aa:a7:8f:a8:34:c1:1b:b4:b1:ec:ca:0a:ab:bd:69:9d:
bb:df:f5:ab:e0:41:b0:29:2e:a2:e6:e5:72:cb:1d:4d:0d:d5:
fb:6e:5e:d3:c1:f3:b4:74:64:e5:04:61:67:0f:a0:a1:3a:ac:
51:81:7b:f1:9c:05:93:24:f2:79:94:27:1d:58:39:14:f9:fe:
ed:42:56:9a:98:a1:ba:a9:90:9f:79:46:0e:99:ea:1a:49:38:
53:c7:87:1e:6c:e1:9f:dd:b5:14:40:fd:aa:80:50:58:74:15:
ea:40:1e:81:7c:65:1e:7a:c9:d0:6f:37:6e:a0:3b:2c:30:89:
f7:0a:44:e7:c1:be:3f:fd:9d:90:5b:80:97:0f:db:48:86:a3:
fd:bd:83:d5:1f:c2:6a:9d:b6:a4:5b:89:4d:ad:63:e1:bc:3f:
35:ca:b4:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:38:36 2025 by rpki-client