Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/01642e-c0ad-4bae-a545-8401952ac897/1/LdrykZbO5YxjJjDwK-69C1p1qdk.mft
File: LdrykZbO5YxjJjDwK-69C1p1qdk.mft (raw, json)
Hash identifier: ZqMY4Hx2W8bIEMiTruvFJnNDpQDnJws5iQPQcpeMCqg=
Subject key identifier: 09:C0:EA:52:3D:30:B6:E1:85:59:81:3B:1D:F9:37:1E:93:00:53:98
Authority key identifier: 2D:DA:F2:91:96:CE:E5:8C:63:26:30:F0:2B:EE:BD:0B:5A:75:A9:D9
Certificate issuer: /CN=2ddaf29196cee58c632630f02beebd0b5a75a9d9
Certificate serial: 019894B8859F663378B77D78013E326D4AA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LdrykZbO5YxjJjDwK-69C1p1qdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/01642e-c0ad-4bae-a545-8401952ac897/1/LdrykZbO5YxjJjDwK-69C1p1qdk.mft
Manifest number: B7
Signing time: Sun 10 Aug 2025 16:02:57 +0000
Manifest this update: Sun 10 Aug 2025 16:02:57 +0000
Manifest next update: Mon 11 Aug 2025 16:02:57 +0000
Files and hashes: 1: LdrykZbO5YxjJjDwK-69C1p1qdk.crl (hash: NBPZXhiUoh3F39knT38IdFbFhxDu1YlvmWZ733WD8Oo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/01642e-c0ad-4bae-a545-8401952ac897/1/LdrykZbO5YxjJjDwK-69C1p1qdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/01642e-c0ad-4bae-a545-8401952ac897/1/LdrykZbO5YxjJjDwK-69C1p1qdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/LdrykZbO5YxjJjDwK-69C1p1qdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 16:02:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:b8:85:9f:66:33:78:b7:7d:78:01:3e:32:6d:4a:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ddaf29196cee58c632630f02beebd0b5a75a9d9
Validity
Not Before: Aug 10 16:02:57 2025 GMT
Not After : Aug 11 16:02:57 2025 GMT
Subject: CN=09c0ea523d30b6e18559813b1df9371e93005398
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:bc:13:d5:ef:a4:f3:1c:63:b7:68:c0:c9:fc:
1a:4b:5c:75:73:20:e1:a4:f3:76:26:e6:01:eb:26:
59:26:44:73:6d:64:1c:27:f9:70:16:8f:5f:9d:cc:
ff:c5:d7:17:81:be:de:34:a7:5a:51:93:66:e1:df:
d1:1f:15:42:a5:8e:37:9b:69:b6:23:5a:45:30:3e:
e4:75:44:f4:94:a5:e1:98:77:3d:10:01:a2:ed:d6:
2e:b0:d1:7e:4b:76:92:9b:8a:0f:35:24:3d:3a:78:
73:e1:0c:91:e7:e8:bc:eb:88:64:99:db:fc:fb:01:
25:a2:b4:1b:9c:ee:8c:87:9d:cd:ab:49:2f:07:c9:
04:e7:14:11:e0:b6:10:99:d6:5d:54:db:7d:3c:21:
64:23:18:f1:e5:52:99:19:07:e4:c4:e1:14:24:f2:
26:da:a3:aa:05:39:71:a9:57:21:26:ce:bf:76:bf:
b3:ed:63:55:94:5a:0d:d9:4b:1d:12:2e:cc:2e:85:
29:10:11:6d:58:5a:65:ed:a0:3b:c3:9b:eb:2f:2e:
51:f6:36:4d:3b:14:f2:26:3a:c5:9d:ee:2d:4c:96:
93:34:74:eb:5c:36:e0:0d:fd:a1:4b:f5:d4:53:5d:
ff:c2:ac:60:81:b6:a0:42:cf:1b:39:dc:f1:b8:e6:
03:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:C0:EA:52:3D:30:B6:E1:85:59:81:3B:1D:F9:37:1E:93:00:53:98
X509v3 Authority Key Identifier:
keyid:2D:DA:F2:91:96:CE:E5:8C:63:26:30:F0:2B:EE:BD:0B:5A:75:A9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LdrykZbO5YxjJjDwK-69C1p1qdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/01642e-c0ad-4bae-a545-8401952ac897/1/LdrykZbO5YxjJjDwK-69C1p1qdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/01642e-c0ad-4bae-a545-8401952ac897/1/LdrykZbO5YxjJjDwK-69C1p1qdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:11:b8:a0:c0:0e:29:89:cc:07:64:0b:41:c1:8a:8d:11:11:
0c:4d:af:6b:7d:ca:e5:5f:46:eb:4c:0b:23:a7:ea:1d:21:0a:
e6:7e:6b:66:a7:b1:c2:e5:3a:05:b5:eb:72:59:10:2c:d7:02:
1a:8b:4f:9e:f8:66:12:88:0d:ac:10:4d:46:7d:57:fe:7d:92:
cd:86:61:4a:7f:ab:b6:6e:02:0b:ae:e4:2a:f9:59:be:d2:66:
a9:75:53:f1:69:33:a0:fa:5a:85:40:4b:bd:28:60:36:8e:db:
4e:27:b9:fe:37:34:1c:f9:70:02:ef:b3:b7:57:4e:26:9e:e4:
af:73:f1:9b:25:bd:3c:5d:92:21:84:b7:ef:5b:da:5e:40:76:
bc:1f:c9:3f:3f:3a:41:02:79:a4:b3:c5:64:62:5d:87:ad:90:
b1:4e:99:b4:83:20:e4:62:2d:57:46:a6:0a:1b:86:29:dd:12:
9e:d0:02:34:ee:e7:2b:2c:62:99:08:d5:01:0c:80:bc:a9:6f:
b5:1c:bd:8c:fa:8e:00:f2:fe:38:1d:93:5d:23:43:29:32:f1:
83:be:8e:58:a6:6d:1a:f8:df:05:21:e9:79:db:48:a1:93:a7:
8b:c6:e5:ec:6c:7e:c9:bb:70:98:29:2f:03:34:3b:7e:0a:83:
e6:42:f4:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:13:07 2025 by rpki-client