Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/53e26b-e7ee-473e-a54a-ffcca3e1f17f/1/LDsK5bf3gRIscJomUK35cpGH4eE.mft
File: LDsK5bf3gRIscJomUK35cpGH4eE.mft (raw, json)
Hash identifier: ycFXJX9qlNHMCTP/WXDXb55q8eHqCmRtMrlPlXmK5vo=
Subject key identifier: BA:5E:AE:9B:1A:AA:E1:BC:14:CE:CE:11:B8:93:88:84:CE:09:A6:B3
Authority key identifier: 2C:3B:0A:E5:B7:F7:81:12:2C:70:9A:26:50:AD:F9:72:91:87:E1:E1
Certificate issuer: /CN=2c3b0ae5b7f781122c709a2650adf9729187e1e1
Certificate serial: 01987486BBDBEF9E61EA0B5E8C6EA3E802CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LDsK5bf3gRIscJomUK35cpGH4eE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/53e26b-e7ee-473e-a54a-ffcca3e1f17f/1/LDsK5bf3gRIscJomUK35cpGH4eE.mft
Manifest number: 161A
Signing time: Mon 04 Aug 2025 10:00:43 +0000
Manifest this update: Mon 04 Aug 2025 10:00:43 +0000
Manifest next update: Tue 05 Aug 2025 10:00:43 +0000
Files and hashes: 1: G476nUAKTiPJHOVq8nA5e_q--jo.roa (hash: RBYLVll5e4aRdiDwFsCa0na9QgzsuLbF9Bor28EzHvs=)
2: LDsK5bf3gRIscJomUK35cpGH4eE.crl (hash: b8DGA/34dkx/sgp1N3tABJIjJMErP+LrFNLTPjEJ1C0=)
3: ZOc4yScbQ2pOrLNTSn7WIc7mrdg.roa (hash: a4V9Qq7aPmpRS+o4fuJXmCiOvZod1MlSuqcU6KwqGoY=)
4: e29yd0Z-TUCyBNtSl-PtOkd_vBo.roa (hash: nzWZvT8LarPWL1y41WRrbr0ybd5qlEde4pStDNf4QWM=)
5: muXl3inz6jffhdO2S6S_pqbjk0E.roa (hash: 0wF5o2O8eQOPVzc8lfen0DZTo8qEoofN4oy8P0PuwO0=)
6: qnW-kG_ubcYESkIhZA8A-RWn9Yo.roa (hash: OFkURHNbZaUbpCTRn6/6z5pejCg/w/M+JX7vs64fqfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/53e26b-e7ee-473e-a54a-ffcca3e1f17f/1/LDsK5bf3gRIscJomUK35cpGH4eE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/53e26b-e7ee-473e-a54a-ffcca3e1f17f/1/LDsK5bf3gRIscJomUK35cpGH4eE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LDsK5bf3gRIscJomUK35cpGH4eE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 10:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:86:bb:db:ef:9e:61:ea:0b:5e:8c:6e:a3:e8:02:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c3b0ae5b7f781122c709a2650adf9729187e1e1
Validity
Not Before: Aug 4 10:00:43 2025 GMT
Not After : Aug 5 10:00:43 2025 GMT
Subject: CN=ba5eae9b1aaae1bc14cece11b8938884ce09a6b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:18:27:21:5c:00:7d:a9:c3:b4:39:ac:dc:89:
63:b7:16:0d:ef:d2:0c:cd:23:1d:d8:30:10:d1:50:
b0:7b:ac:38:5a:83:1c:28:21:57:8c:f9:d6:44:c9:
73:a0:c3:d3:66:64:f1:7a:0b:d8:91:4c:74:0a:88:
40:7f:54:ae:50:6f:a8:f0:c4:cf:28:c0:f0:7a:95:
60:e5:6b:c2:ca:ab:68:f9:14:c2:c9:bc:5c:10:af:
f4:b3:b4:89:02:3a:55:b1:4e:e4:62:80:9c:ed:26:
2b:43:34:73:e9:91:86:15:e7:65:25:03:32:35:53:
e5:b6:15:53:b7:d1:e4:2d:b5:83:f8:f5:bb:0c:52:
06:dd:51:54:33:e4:ea:86:68:3f:8b:c7:e3:41:33:
6f:bb:dc:fa:2a:3a:22:01:79:21:da:03:7e:aa:fa:
39:e3:0d:7c:9e:c1:aa:e2:d3:aa:9b:f0:ce:5d:c9:
f5:7f:6f:6a:45:59:bc:05:40:09:4d:99:6a:32:39:
f1:ac:d4:84:3f:31:0e:1c:e7:e5:53:f9:3d:aa:3f:
0e:b6:90:a4:c6:09:45:da:27:35:94:12:c3:f6:72:
63:f8:cb:fa:a7:53:dd:f7:b5:8a:93:a0:5d:ae:be:
7b:25:86:9b:8b:fe:35:1f:45:0b:17:fd:51:8e:de:
3d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:5E:AE:9B:1A:AA:E1:BC:14:CE:CE:11:B8:93:88:84:CE:09:A6:B3
X509v3 Authority Key Identifier:
keyid:2C:3B:0A:E5:B7:F7:81:12:2C:70:9A:26:50:AD:F9:72:91:87:E1:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LDsK5bf3gRIscJomUK35cpGH4eE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/53e26b-e7ee-473e-a54a-ffcca3e1f17f/1/LDsK5bf3gRIscJomUK35cpGH4eE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/53e26b-e7ee-473e-a54a-ffcca3e1f17f/1/LDsK5bf3gRIscJomUK35cpGH4eE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:8e:03:25:ee:f6:b0:37:65:89:e7:49:b5:46:7f:e9:84:c7:
28:fe:6b:bb:e4:d3:81:13:85:d8:89:18:5e:c8:5f:86:de:b6:
f5:4c:e7:72:ab:94:04:f3:a6:f2:a7:3a:f6:97:23:c0:56:49:
80:8d:5a:d2:34:16:c3:2f:a5:31:32:35:2e:04:a6:3a:3c:06:
d1:ad:1e:b6:0b:d0:a8:cb:3d:9d:ff:93:3f:64:29:38:5c:70:
b1:e8:a8:22:6d:c6:d5:2f:4a:57:5b:e0:1f:22:88:1b:33:85:
9e:75:28:80:df:95:60:bf:96:10:20:d1:6b:09:60:96:9f:7d:
85:18:b9:6f:c6:a3:c5:f9:9d:4c:dc:8c:13:ef:8f:6b:af:51:
9b:d6:6e:c6:75:ae:34:b4:d1:d5:02:6b:83:7a:0a:58:52:20:
8a:bd:2b:8c:30:2d:1c:ff:4f:4f:c9:83:d9:fd:44:24:30:45:
ae:05:82:0a:b2:69:b6:e3:c5:b1:96:b7:ac:89:89:ae:bf:ff:
ef:8c:a4:ba:5a:93:05:7e:14:d0:48:e9:9c:0c:c5:a0:ce:f4:
ab:7b:3b:43:74:2d:3e:ec:89:57:49:3d:85:25:64:07:8b:47:
31:a6:5c:64:8f:dd:fe:61:0a:9f:96:07:ea:e6:4b:0a:c5:45:
9a:88:c0:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:35:02 2025 by rpki-client