Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/e67956-de18-40c4-b013-951e5afae9e7/1/LdgAjePP9i0vrKENmf8gw-h43N8.mft
File: LdgAjePP9i0vrKENmf8gw-h43N8.mft (raw, json)
Hash identifier: SZe9R55fySdSZqEnB4ugfwSnhUQh5Isf1E90/7oEHwU=
Subject key identifier: 19:31:49:67:36:06:40:D4:33:00:38:EB:EE:94:CF:D9:C6:05:2A:F2
Authority key identifier: 2D:D8:00:8D:E3:CF:F6:2D:2F:AC:A1:0D:99:FF:20:C3:E8:78:DC:DF
Certificate issuer: /CN=2dd8008de3cff62d2faca10d99ff20c3e878dcdf
Certificate serial: 0198D65FD773045B72E69853BF85ED98C459
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LdgAjePP9i0vrKENmf8gw-h43N8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/e67956-de18-40c4-b013-951e5afae9e7/1/LdgAjePP9i0vrKENmf8gw-h43N8.mft
Manifest number: 050B
Signing time: Sat 23 Aug 2025 10:01:01 +0000
Manifest this update: Sat 23 Aug 2025 10:01:01 +0000
Manifest next update: Sun 24 Aug 2025 10:01:01 +0000
Files and hashes: 1: LdgAjePP9i0vrKENmf8gw-h43N8.crl (hash: FAP2GEl1GF9OPY5ukJbNHBLej0fFczvbo1UUjDa3Z54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/e67956-de18-40c4-b013-951e5afae9e7/1/LdgAjePP9i0vrKENmf8gw-h43N8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/e67956-de18-40c4-b013-951e5afae9e7/1/LdgAjePP9i0vrKENmf8gw-h43N8.mft
rsync://rpki.ripe.net/repository/DEFAULT/LdgAjePP9i0vrKENmf8gw-h43N8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:d7:73:04:5b:72:e6:98:53:bf:85:ed:98:c4:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dd8008de3cff62d2faca10d99ff20c3e878dcdf
Validity
Not Before: Aug 23 10:01:01 2025 GMT
Not After : Aug 24 10:01:01 2025 GMT
Subject: CN=19314967360640d4330038ebee94cfd9c6052af2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5a:c2:78:64:f0:b1:c2:8f:7b:52:fe:72:01:
17:59:5e:83:72:aa:86:c9:42:6d:5a:a7:10:60:7f:
b1:54:0d:7d:85:70:3d:7b:9a:00:a3:a1:53:0b:c7:
77:2b:51:50:02:68:0a:d6:f0:9f:28:c4:a8:44:66:
4e:97:a7:3c:62:a8:72:61:40:ef:90:b9:c3:46:ad:
d4:43:3e:9b:f0:4a:d5:d3:b5:9e:62:c1:aa:71:e5:
c7:aa:86:0f:13:71:3f:00:2f:42:e0:8c:6b:4f:31:
50:3c:3d:f6:1b:3c:be:06:e2:81:ce:b5:9a:d1:33:
8c:ab:1a:06:ea:7f:47:f1:4a:29:a6:97:3d:bc:a2:
49:1b:92:bf:7f:a7:6a:4a:9d:a8:6f:81:c2:04:76:
3b:bf:30:3a:9b:f5:70:a0:06:48:7f:5b:fd:31:51:
5d:1f:98:69:bb:80:a3:36:64:ce:96:0c:14:b5:79:
c3:bf:1f:da:8a:7c:5a:25:8e:d0:01:ca:f9:37:4c:
e0:4c:5c:d6:97:87:ba:3a:f4:0f:b2:b5:4d:9f:56:
86:d9:7d:b3:de:2f:11:6a:a1:25:2f:2b:2f:a2:8e:
fe:83:34:a0:0a:3e:94:17:eb:b7:9e:eb:23:8d:01:
42:34:c6:c5:60:c4:e7:78:a8:8b:08:50:82:52:47:
05:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:31:49:67:36:06:40:D4:33:00:38:EB:EE:94:CF:D9:C6:05:2A:F2
X509v3 Authority Key Identifier:
keyid:2D:D8:00:8D:E3:CF:F6:2D:2F:AC:A1:0D:99:FF:20:C3:E8:78:DC:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LdgAjePP9i0vrKENmf8gw-h43N8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e67956-de18-40c4-b013-951e5afae9e7/1/LdgAjePP9i0vrKENmf8gw-h43N8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e67956-de18-40c4-b013-951e5afae9e7/1/LdgAjePP9i0vrKENmf8gw-h43N8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:32:2f:7c:44:9f:88:0c:5a:a4:ce:c9:3f:16:c0:fa:9f:04:
1f:fe:bb:2e:39:ef:59:b1:bc:19:1d:da:8f:9d:d8:3a:f1:c4:
4b:0e:4a:96:2c:e9:b2:ff:e0:aa:d5:75:b4:18:e9:4d:e9:ac:
fd:bb:51:b7:6d:4d:38:fa:00:e1:97:98:82:4b:4f:fc:b8:e6:
de:8d:33:dc:92:a5:dc:33:8a:1b:2e:1c:ea:94:3b:9a:7a:40:
e0:cb:e2:4d:78:ee:f7:4b:ea:cf:b0:0c:2d:12:3f:dc:6a:5a:
15:b7:6a:17:4b:05:cb:83:7a:3b:28:38:65:4c:ea:33:e6:11:
8c:b2:b7:34:50:31:35:18:26:f2:a8:89:06:b6:d8:f5:64:ce:
38:53:1a:dd:7f:4a:fe:51:ea:5f:49:db:8e:38:a0:98:a3:d2:
f4:07:c7:25:36:3c:95:50:58:9b:c7:fa:90:38:0a:4e:e5:ab:
a9:1e:84:a0:1d:7e:6e:20:5f:42:45:37:f6:bb:16:0d:2a:3d:
c8:3c:e7:d3:b2:60:57:ad:2d:6b:38:4b:e3:97:71:1b:81:33:
75:cc:6e:c8:cf:9a:42:b9:1b:c9:8f:0b:0e:85:15:f7:a2:7d:
33:2a:ec:be:06:c4:40:48:81:37:8e:70:04:b4:78:72:75:8c:
8f:88:f7:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:08:00 2025 by rpki-client