Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/2b0e11-f18d-4757-9011-6678eb81b8b0/1/ldcL-AoHyf_L7wzYRltFjWE9zIU.mft
File: ldcL-AoHyf_L7wzYRltFjWE9zIU.mft (raw, json)
Hash identifier: 1q1QXlow4Ptogo9ELbmFkrU0BoW0SrtrtgEbsnSKeLM=
Subject key identifier: 3A:28:9D:10:CA:55:92:58:58:36:2F:9C:BA:9C:AD:30:C1:85:57:B7
Authority key identifier: 95:D7:0B:F8:0A:07:C9:FF:CB:EF:0C:D8:46:5B:45:8D:61:3D:CC:85
Certificate issuer: /CN=95d70bf80a07c9ffcbef0cd8465b458d613dcc85
Certificate serial: 0197B6A129EDD6357F005C447AF3666B1ACA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ldcL-AoHyf_L7wzYRltFjWE9zIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/2b0e11-f18d-4757-9011-6678eb81b8b0/1/ldcL-AoHyf_L7wzYRltFjWE9zIU.mft
Manifest number: 0894
Signing time: Sat 28 Jun 2025 13:01:44 +0000
Manifest this update: Sat 28 Jun 2025 13:01:44 +0000
Manifest next update: Sun 29 Jun 2025 13:01:44 +0000
Files and hashes: 1: Li8wKnrdmOXpX94BLLLbjVutDVE.roa (hash: B7wnEDA93LjWijQLqvYkWeQvccIg2ujkRKA0vpbO5ig=)
2: ldcL-AoHyf_L7wzYRltFjWE9zIU.crl (hash: qKt+eKuICqmw3UgL7sCq78kxg/D77MuzGBRtI3y5WGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/2b0e11-f18d-4757-9011-6678eb81b8b0/1/ldcL-AoHyf_L7wzYRltFjWE9zIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/2b0e11-f18d-4757-9011-6678eb81b8b0/1/ldcL-AoHyf_L7wzYRltFjWE9zIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ldcL-AoHyf_L7wzYRltFjWE9zIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:29:ed:d6:35:7f:00:5c:44:7a:f3:66:6b:1a:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95d70bf80a07c9ffcbef0cd8465b458d613dcc85
Validity
Not Before: Jun 28 13:01:44 2025 GMT
Not After : Jun 29 13:01:44 2025 GMT
Subject: CN=3a289d10ca55925858362f9cba9cad30c18557b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:bb:4a:14:eb:9c:8a:41:d8:8d:c2:34:2d:49:
12:73:45:dd:ae:5f:72:96:96:0a:4b:ab:38:b9:65:
8a:1f:8c:09:a5:b1:06:19:aa:dc:08:5b:2d:18:e6:
ce:87:be:ba:fd:c0:c5:5f:69:ce:25:fb:39:dc:46:
42:08:a7:62:f7:9a:c4:0a:88:30:50:0f:17:c8:d0:
a8:bf:d0:31:90:af:7f:76:94:60:cc:93:a0:50:54:
63:5f:fa:14:4b:9d:18:50:98:a2:4a:37:fc:5f:a1:
48:ae:23:87:77:47:ff:a6:92:57:e7:87:26:da:8e:
f1:4e:05:d3:cb:01:43:58:ff:94:9a:04:fc:ff:63:
78:82:2b:9c:19:28:50:b9:0f:f0:c0:f0:78:8f:89:
ad:c8:37:13:16:13:ca:da:ba:42:36:f1:7d:28:03:
ee:38:f6:93:93:c4:2b:84:22:66:e7:4d:fc:c3:dc:
53:54:9c:6f:94:3e:b1:89:27:17:6d:5a:25:30:57:
4f:37:a3:f7:3e:42:30:48:8d:ea:23:5c:60:92:c9:
95:10:62:b6:76:11:f5:ee:54:1e:91:98:66:7f:6f:
76:f6:17:80:bb:a1:4f:02:2f:db:fb:c3:ca:01:27:
62:26:ae:56:12:83:94:4c:93:45:32:f2:f5:d7:ef:
a5:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:28:9D:10:CA:55:92:58:58:36:2F:9C:BA:9C:AD:30:C1:85:57:B7
X509v3 Authority Key Identifier:
keyid:95:D7:0B:F8:0A:07:C9:FF:CB:EF:0C:D8:46:5B:45:8D:61:3D:CC:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ldcL-AoHyf_L7wzYRltFjWE9zIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2b0e11-f18d-4757-9011-6678eb81b8b0/1/ldcL-AoHyf_L7wzYRltFjWE9zIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2b0e11-f18d-4757-9011-6678eb81b8b0/1/ldcL-AoHyf_L7wzYRltFjWE9zIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:2b:76:4a:98:7a:64:4f:e2:fe:0b:fd:3f:a8:76:a7:b6:96:
fe:6b:1f:0c:8e:5d:d8:97:6b:38:b3:16:7c:70:0b:b6:96:f8:
09:dd:07:5a:a7:3e:ee:55:fe:99:35:d6:33:38:16:c3:8a:5e:
8d:bd:44:bc:af:ed:fd:78:b6:5e:b7:e5:27:bf:48:77:f6:0d:
e5:01:5c:a5:02:17:89:46:46:3c:84:82:45:36:13:78:f4:61:
00:86:22:60:52:4e:b4:c5:3a:d4:86:df:3f:d1:31:a4:ac:28:
63:df:3f:7c:40:d0:e2:ec:2f:e0:ea:61:e0:4b:27:2a:95:2f:
a4:9a:56:3b:28:b3:90:dd:f0:c7:4b:cc:a8:ae:ec:5a:5b:4c:
ac:24:c2:c6:cd:41:d3:86:70:f5:2d:17:ee:3c:07:22:4e:aa:
5d:b6:8b:cf:32:6e:6d:82:50:bc:d6:20:00:81:e1:e2:74:48:
47:ac:2a:8c:1b:38:f9:8c:49:c8:bd:21:18:a9:63:9c:39:ca:
c1:5b:5d:65:cc:c1:c9:3c:19:aa:15:d6:72:11:30:d7:c9:ed:
45:00:58:e8:92:12:fc:78:56:22:9c:f8:a8:b2:0d:6d:8f:77:
d9:db:37:d3:c8:39:eb:63:d2:e4:42:22:c6:e8:d2:4e:be:4b:
ee:08:f7:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:45:55 2025 by rpki-client