Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/b12604-b481-416d-b088-210767bd0ba2/1/LDe0vsl9YIq-I7xXujmCRszFd2A.mft
File: LDe0vsl9YIq-I7xXujmCRszFd2A.mft (raw, json)
Hash identifier: gmL/zIInwhlXVDK5NPartW6pNM2SCjAmrLdtz4zoyxs=
Subject key identifier: 88:C7:83:43:5D:5B:8E:F6:02:5A:3F:35:14:05:DE:11:8A:33:E6:EC
Authority key identifier: 2C:37:B4:BE:C9:7D:60:8A:BE:23:BC:57:BA:39:82:46:CC:C5:77:60
Certificate issuer: /CN=2c37b4bec97d608abe23bc57ba398246ccc57760
Certificate serial: 01988E7DB4F34E3BA66309CDC6CDF3FF75AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LDe0vsl9YIq-I7xXujmCRszFd2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/b12604-b481-416d-b088-210767bd0ba2/1/LDe0vsl9YIq-I7xXujmCRszFd2A.mft
Manifest number: 1625
Signing time: Sat 09 Aug 2025 11:00:59 +0000
Manifest this update: Sat 09 Aug 2025 11:00:59 +0000
Manifest next update: Sun 10 Aug 2025 11:00:59 +0000
Files and hashes: 1: 7BY_kFwL8OEGCGg4fffLBCGfbIk.roa (hash: wPQVbJEzFYU2FTuvcz3iiUbD5hpnYkEGB5yumpXFpQo=)
2: LDe0vsl9YIq-I7xXujmCRszFd2A.crl (hash: sRgGD+RFqLmYeoBFb1zzidIGfwrL477NcPyRUeQvy8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/b12604-b481-416d-b088-210767bd0ba2/1/LDe0vsl9YIq-I7xXujmCRszFd2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/b12604-b481-416d-b088-210767bd0ba2/1/LDe0vsl9YIq-I7xXujmCRszFd2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/LDe0vsl9YIq-I7xXujmCRszFd2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:7d:b4:f3:4e:3b:a6:63:09:cd:c6:cd:f3:ff:75:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c37b4bec97d608abe23bc57ba398246ccc57760
Validity
Not Before: Aug 9 11:00:59 2025 GMT
Not After : Aug 10 11:00:59 2025 GMT
Subject: CN=88c783435d5b8ef6025a3f351405de118a33e6ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:91:b0:c2:60:3c:29:f8:9d:6e:a7:2f:b5:7f:
77:fa:f0:bd:c1:34:64:16:3d:fe:c7:d1:f4:bd:9d:
4f:a0:d4:f1:dd:d5:b2:13:d8:3a:8c:93:52:88:33:
ef:6f:47:17:4d:df:bd:db:58:49:ce:84:6a:a2:8b:
ac:d8:7b:f9:fc:52:aa:bd:a1:e8:68:b8:d0:bc:66:
05:ef:19:9c:ca:97:56:03:2d:0d:33:7c:5d:76:82:
03:01:dc:e6:7f:40:ab:78:b9:75:2d:64:5e:ed:1e:
50:f7:80:b8:90:b0:d8:1d:c8:8e:93:06:7f:df:df:
05:3b:81:9a:10:a7:a4:3d:52:0e:e7:73:b6:e5:f2:
f1:47:e2:d4:a3:9e:a7:d4:75:42:f4:b3:b5:3d:17:
eb:c6:d9:6a:5b:22:2d:b9:db:45:43:6c:0b:74:59:
65:f7:97:ec:e6:23:66:b1:37:e1:11:02:05:08:b1:
7b:be:9a:fe:a6:2c:d3:b7:7c:4a:01:29:dc:91:03:
3b:45:ec:ef:98:dc:14:d7:29:15:e8:90:54:7d:6f:
8e:9f:68:82:ef:72:99:4c:7a:2c:0e:b1:e5:7b:5e:
5b:32:a6:a6:6c:f2:45:b4:4b:c4:dc:7e:34:d0:b6:
ee:b8:0a:c0:5f:77:7e:05:33:5f:94:f6:98:2b:18:
7b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:C7:83:43:5D:5B:8E:F6:02:5A:3F:35:14:05:DE:11:8A:33:E6:EC
X509v3 Authority Key Identifier:
keyid:2C:37:B4:BE:C9:7D:60:8A:BE:23:BC:57:BA:39:82:46:CC:C5:77:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LDe0vsl9YIq-I7xXujmCRszFd2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/b12604-b481-416d-b088-210767bd0ba2/1/LDe0vsl9YIq-I7xXujmCRszFd2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/b12604-b481-416d-b088-210767bd0ba2/1/LDe0vsl9YIq-I7xXujmCRszFd2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:f4:00:07:fa:27:d0:74:39:a4:63:61:d9:74:46:6d:01:c8:
73:b5:b0:4d:34:d7:8b:8e:94:05:d2:18:84:8d:cd:64:b0:b0:
9b:fe:e5:f5:55:2c:c5:3e:3d:2a:23:f5:f0:c5:dd:3b:74:05:
fe:bb:8d:4d:44:c0:a0:16:6d:ca:ed:2d:f0:3a:46:3c:26:a1:
d1:e0:c9:e3:1f:91:90:3b:7c:58:73:01:0e:05:54:31:d3:a1:
89:b5:db:4a:7f:52:4d:35:53:93:bc:3f:f6:a2:f8:24:93:df:
e5:1c:d0:14:20:1e:22:de:80:a6:e2:c3:cf:ee:2a:51:d0:35:
b8:f6:5d:5a:ab:e5:8c:7f:78:ad:51:82:f2:0d:15:d9:49:08:
89:4d:08:e4:48:b8:e7:7c:67:ed:84:8d:7b:c6:19:d3:c7:fc:
1d:25:c9:31:d6:7c:9f:13:0b:18:57:9e:61:22:0a:a3:a8:9f:
b6:19:08:62:61:8c:55:fb:58:46:92:bc:2d:42:75:12:6b:67:
9d:94:7d:e8:38:22:c0:30:c3:43:4d:c7:a2:31:dd:1c:c9:43:
d9:e7:12:92:b3:40:c2:f1:53:29:dd:ea:aa:5d:5d:f5:1b:49:
b8:d2:9a:92:7c:3d:bc:79:ba:db:23:7b:dc:ab:40:af:dd:ad:
23:4c:e4:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 15:15:30 2025 by rpki-client