Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/01642e-c0ad-4bae-a545-8401952ac897/1/LdrykZbO5YxjJjDwK-69C1p1qdk.mft
File: LdrykZbO5YxjJjDwK-69C1p1qdk.mft (raw, json)
Hash identifier: FVPa2y7RPR+2SsLg8ABPv8AgUTahg/q+1zQhtRtzKp0=
Subject key identifier: B2:75:BC:3D:3A:67:D0:63:56:A1:9D:46:2B:A3:72:54:0E:F4:CC:6A
Authority key identifier: 2D:DA:F2:91:96:CE:E5:8C:63:26:30:F0:2B:EE:BD:0B:5A:75:A9:D9
Certificate issuer: /CN=2ddaf29196cee58c632630f02beebd0b5a75a9d9
Certificate serial: 01976D06904A48C9456AE1494EC6D955BA71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LdrykZbO5YxjJjDwK-69C1p1qdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/01642e-c0ad-4bae-a545-8401952ac897/1/LdrykZbO5YxjJjDwK-69C1p1qdk.mft
Manifest number: 1E
Signing time: Sat 14 Jun 2025 06:00:35 +0000
Manifest this update: Sat 14 Jun 2025 06:00:35 +0000
Manifest next update: Sun 15 Jun 2025 06:00:35 +0000
Files and hashes: 1: LdrykZbO5YxjJjDwK-69C1p1qdk.crl (hash: 86XWqShWV0E/MmHJBlDd/86tYlmDRDmx930JBIZGyvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/01642e-c0ad-4bae-a545-8401952ac897/1/LdrykZbO5YxjJjDwK-69C1p1qdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/01642e-c0ad-4bae-a545-8401952ac897/1/LdrykZbO5YxjJjDwK-69C1p1qdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/LdrykZbO5YxjJjDwK-69C1p1qdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:06:90:4a:48:c9:45:6a:e1:49:4e:c6:d9:55:ba:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ddaf29196cee58c632630f02beebd0b5a75a9d9
Validity
Not Before: Jun 14 06:00:35 2025 GMT
Not After : Jun 15 06:00:35 2025 GMT
Subject: CN=b275bc3d3a67d06356a19d462ba372540ef4cc6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ef:fb:76:ef:01:1d:dc:bd:09:7c:ed:3e:b1:
88:bf:ca:e0:fe:44:15:6d:76:90:f1:a9:66:39:6d:
8e:74:63:1f:9f:0c:ac:41:bc:bf:c4:45:ac:2f:aa:
97:32:43:6b:69:12:b3:ed:cd:21:cd:7a:4f:5d:4c:
f1:bc:55:e0:78:74:55:4f:cd:52:76:f3:34:59:d8:
c8:28:5c:56:80:44:3a:2b:9c:78:76:f1:a5:30:ca:
77:61:7b:e1:55:d1:e0:7b:19:5a:03:0c:4d:7e:6d:
53:f3:a9:89:ae:66:82:ae:08:27:da:d4:7c:ea:4b:
8a:80:0b:ea:72:e1:05:ad:3d:33:74:cd:c6:13:f1:
aa:f3:51:82:69:01:ab:d7:11:c7:8a:b3:e6:ba:2a:
e7:bc:eb:62:0f:73:61:51:72:45:b3:14:54:20:a7:
8f:c9:7b:ff:e6:bb:13:5e:c0:84:62:02:49:af:41:
73:d2:d3:11:b7:c7:39:d8:60:dd:6c:b3:e9:99:11:
ba:bd:0b:ab:7e:5b:b9:37:93:a4:a7:d2:91:c0:f0:
74:44:bf:b6:a6:3c:f6:bd:79:27:e5:d2:a6:cb:75:
3b:aa:b7:d7:1e:aa:79:3e:c4:4b:21:8b:21:61:30:
8a:c2:83:29:36:a0:60:0b:e1:ec:d9:bd:82:7b:e8:
24:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:75:BC:3D:3A:67:D0:63:56:A1:9D:46:2B:A3:72:54:0E:F4:CC:6A
X509v3 Authority Key Identifier:
keyid:2D:DA:F2:91:96:CE:E5:8C:63:26:30:F0:2B:EE:BD:0B:5A:75:A9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LdrykZbO5YxjJjDwK-69C1p1qdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/01642e-c0ad-4bae-a545-8401952ac897/1/LdrykZbO5YxjJjDwK-69C1p1qdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/01642e-c0ad-4bae-a545-8401952ac897/1/LdrykZbO5YxjJjDwK-69C1p1qdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:db:9d:83:d4:82:10:e4:5b:f6:a5:cc:da:d5:57:79:62:bf:
f2:02:61:6b:23:d1:d4:1b:75:82:98:61:ff:45:c6:08:78:41:
08:22:c1:b3:dd:44:c3:91:61:55:c7:4b:7a:76:a0:12:8b:2b:
08:4f:34:4f:b8:33:be:02:0d:ed:39:95:8a:9b:08:c1:13:a5:
f9:93:f4:29:14:b0:a0:78:6c:f4:0b:52:dc:f3:47:65:3f:0b:
98:cf:40:ea:f8:53:d2:06:26:ad:79:7e:27:80:cf:9d:93:3e:
85:6c:a2:26:19:3e:fd:03:59:ed:d4:ff:e4:e5:8f:5b:c4:b8:
fc:a3:6d:79:d9:f5:31:59:94:c4:18:45:37:ad:9c:d0:6c:af:
58:ca:fd:38:e4:2b:41:43:bf:7f:2b:5e:de:27:5f:9b:3e:e5:
68:ca:93:5b:eb:41:a3:f2:3d:d3:93:df:5d:47:65:ae:73:37:
fc:3b:20:b0:96:6d:50:09:74:12:a4:fe:29:92:ae:07:23:4c:
3e:7f:47:49:0d:08:6f:f5:a6:7f:86:ec:90:48:a2:89:54:2a:
b8:5d:f7:ea:58:df:cc:39:b6:ab:cb:0b:35:ff:30:b3:b8:d0:
a5:82:b4:27:97:6e:24:31:92:58:5d:0c:63:1e:0f:b5:6b:80:
55:ae:35:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:39:37 2025 by rpki-client