Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/2b0e11-f18d-4757-9011-6678eb81b8b0/1/ldcL-AoHyf_L7wzYRltFjWE9zIU.mft
File: ldcL-AoHyf_L7wzYRltFjWE9zIU.mft (raw, json)
Hash identifier: jNcgasljQDdOq9dcLQ6IbQHNFxwFdHyVrjbZwjjA6Ts=
Subject key identifier: 3C:30:48:85:BC:A1:AB:01:34:8B:31:10:35:27:1E:A6:3A:5C:E8:52
Authority key identifier: 95:D7:0B:F8:0A:07:C9:FF:CB:EF:0C:D8:46:5B:45:8D:61:3D:CC:85
Certificate issuer: /CN=95d70bf80a07c9ffcbef0cd8465b458d613dcc85
Certificate serial: 0199FDD957D40F8C1784DD90B179081FAA79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ldcL-AoHyf_L7wzYRltFjWE9zIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/2b0e11-f18d-4757-9011-6678eb81b8b0/1/ldcL-AoHyf_L7wzYRltFjWE9zIU.mft
Manifest number: 09C2
Signing time: Sun 19 Oct 2025 19:01:43 +0000
Manifest this update: Sun 19 Oct 2025 19:01:43 +0000
Manifest next update: Mon 20 Oct 2025 19:01:43 +0000
Files and hashes: 1: Li8wKnrdmOXpX94BLLLbjVutDVE.roa (hash: B7wnEDA93LjWijQLqvYkWeQvccIg2ujkRKA0vpbO5ig=)
2: ldcL-AoHyf_L7wzYRltFjWE9zIU.crl (hash: HVmN4HPkxfhh+C48Eqt24usiCm0SxOmpHsiHG3moaHQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/2b0e11-f18d-4757-9011-6678eb81b8b0/1/ldcL-AoHyf_L7wzYRltFjWE9zIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/2b0e11-f18d-4757-9011-6678eb81b8b0/1/ldcL-AoHyf_L7wzYRltFjWE9zIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ldcL-AoHyf_L7wzYRltFjWE9zIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:57:d4:0f:8c:17:84:dd:90:b1:79:08:1f:aa:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95d70bf80a07c9ffcbef0cd8465b458d613dcc85
Validity
Not Before: Oct 19 19:01:43 2025 GMT
Not After : Oct 20 19:01:43 2025 GMT
Subject: CN=3c304885bca1ab01348b311035271ea63a5ce852
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:04:e3:6f:62:10:c7:08:ab:77:b2:37:ec:84:
e8:90:1f:47:15:e5:0b:dd:2d:48:22:a3:58:d7:4f:
c9:5f:01:c6:01:d2:d0:f4:2f:67:7e:58:c2:97:ac:
be:0b:67:39:b4:08:36:11:ad:01:7d:6c:25:47:21:
d5:34:76:37:0c:f4:54:e5:43:30:28:60:73:c3:fc:
d8:9f:e4:96:ea:88:2a:32:10:87:8f:f5:29:ac:db:
2b:ed:ad:08:d9:ce:5b:a5:1f:b4:04:f6:b3:39:24:
49:ca:ab:23:17:f6:3e:7e:ea:10:ea:2d:b7:d4:2c:
23:b8:5e:9f:68:20:ab:68:f8:c0:cd:7a:91:6c:69:
d3:38:3e:5c:b9:82:3e:70:9f:e6:b5:2f:25:28:18:
3d:13:68:fd:79:80:0f:1c:83:3b:1c:26:c7:f4:1c:
f3:f5:4b:cb:cd:cd:b5:81:df:82:5c:3e:9c:c4:8d:
9f:bd:e5:cf:b1:2a:ce:f0:6d:28:4c:50:53:cb:21:
5e:53:f3:15:7a:f7:ee:d6:13:54:79:4e:99:6e:5e:
f8:f6:de:af:9f:1d:dd:b9:52:ab:a8:a6:6e:9e:e7:
05:fa:9d:b3:bc:bd:c5:79:0a:d1:2f:73:59:2e:f7:
a9:ba:e5:b0:e6:f9:a7:a0:fa:f5:d7:ce:31:50:a1:
b1:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:30:48:85:BC:A1:AB:01:34:8B:31:10:35:27:1E:A6:3A:5C:E8:52
X509v3 Authority Key Identifier:
keyid:95:D7:0B:F8:0A:07:C9:FF:CB:EF:0C:D8:46:5B:45:8D:61:3D:CC:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ldcL-AoHyf_L7wzYRltFjWE9zIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2b0e11-f18d-4757-9011-6678eb81b8b0/1/ldcL-AoHyf_L7wzYRltFjWE9zIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2b0e11-f18d-4757-9011-6678eb81b8b0/1/ldcL-AoHyf_L7wzYRltFjWE9zIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:09:a3:15:8a:da:01:28:98:b8:d1:12:e9:50:dd:db:81:8d:
b3:ee:5e:5d:10:f4:2c:3d:2a:b5:ce:c5:19:04:d2:1a:f8:aa:
7b:66:4e:21:f2:4d:b9:40:60:1d:4f:18:c7:ea:1b:41:2b:f5:
31:b5:be:14:e6:81:29:1f:f7:62:b1:67:99:7e:38:ef:7c:26:
7b:aa:8a:91:52:e3:7e:18:22:7e:83:f5:22:5d:80:ff:b9:ce:
87:98:a4:d8:57:f4:e4:27:a7:d1:b5:c0:6a:59:1c:29:68:a4:
a4:60:6e:68:f2:82:1e:d0:cb:a2:9f:2d:cc:91:05:97:2c:03:
3b:1a:2b:4d:4c:f9:46:6a:77:7e:8f:b0:6e:2d:fb:ea:02:38:
da:15:f4:fa:0d:23:9d:95:64:b5:96:80:b5:1b:9d:dd:41:a0:
6d:ae:20:2c:ae:d4:1e:34:c7:d0:fb:d7:12:14:fe:f4:ba:48:
17:3f:3d:48:1f:8d:2d:93:7f:21:fb:99:b1:c0:35:aa:be:40:
0b:d7:55:dd:05:80:8c:2c:be:e8:c5:ac:78:ac:f0:11:a9:e8:
2f:42:c8:fb:c2:68:b6:1a:38:36:16:2e:e0:2e:4f:67:c0:91:
c5:70:af:b2:20:b1:9e:92:24:5c:fe:5c:6a:73:98:b8:2a:b8:
0d:3f:85:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:12:38 2025 by rpki-client