Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ee4748-4eab-4e55-b64a-2c7a11c1fbaf/1/ldYa6EcsXI_NgTdWwWTC8YZNPJA.mft
File: ldYa6EcsXI_NgTdWwWTC8YZNPJA.mft (raw, json)
Hash identifier: VKMnAyOl2WpYf143SaEmxVvHC+cOptX58Up2BN854D8=
Subject key identifier: F1:94:FE:42:33:45:08:C0:82:99:3F:5C:8D:4C:8F:7A:51:D6:64:9C
Authority key identifier: 95:D6:1A:E8:47:2C:5C:8F:CD:81:37:56:C1:64:C2:F1:86:4D:3C:90
Certificate issuer: /CN=95d61ae8472c5c8fcd813756c164c2f1864d3c90
Certificate serial: 019A51BE6086FB63948CEFED1D8278839DCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ldYa6EcsXI_NgTdWwWTC8YZNPJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ee4748-4eab-4e55-b64a-2c7a11c1fbaf/1/ldYa6EcsXI_NgTdWwWTC8YZNPJA.mft
Manifest number: 170D
Signing time: Wed 05 Nov 2025 02:00:22 +0000
Manifest this update: Wed 05 Nov 2025 02:00:22 +0000
Manifest next update: Thu 06 Nov 2025 02:00:22 +0000
Files and hashes: 1: ldYa6EcsXI_NgTdWwWTC8YZNPJA.crl (hash: a8cSlaKMbu2KT+NZ8WHpCk95/8oZnsR4EK3/1y5okGs=)
2: oEjv28BsSkkrSjhugPUpAGGwetU.roa (hash: CWIq+nR2seFkMvcAwstaiubts3JwM88PnSz1tCIk0CY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/ee4748-4eab-4e55-b64a-2c7a11c1fbaf/1/ldYa6EcsXI_NgTdWwWTC8YZNPJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/ee4748-4eab-4e55-b64a-2c7a11c1fbaf/1/ldYa6EcsXI_NgTdWwWTC8YZNPJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ldYa6EcsXI_NgTdWwWTC8YZNPJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:60:86:fb:63:94:8c:ef:ed:1d:82:78:83:9d:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95d61ae8472c5c8fcd813756c164c2f1864d3c90
Validity
Not Before: Nov 5 02:00:22 2025 GMT
Not After : Nov 6 02:00:22 2025 GMT
Subject: CN=f194fe42334508c082993f5c8d4c8f7a51d6649c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:54:64:8d:86:f8:27:e8:f9:4c:bf:f3:77:e8:
da:b8:8c:53:68:d7:f0:e8:f5:84:f5:67:0c:a7:60:
e9:e1:75:bd:fb:67:de:5d:22:ca:f2:45:b1:d1:3a:
6b:ca:a3:fb:27:c1:15:31:e5:22:a3:6f:2c:8f:e4:
2a:dc:97:4a:9c:aa:8b:0f:12:d3:5f:66:b4:0d:ac:
af:3c:25:1f:40:11:40:0a:4a:c2:26:a8:f1:e5:21:
59:3f:25:66:48:3c:21:5e:26:4a:b1:6a:31:67:5d:
af:5b:9e:b6:62:7d:44:88:d2:7a:b2:f6:d2:29:4f:
0e:08:d5:e9:70:8a:cf:ee:4b:e2:7e:68:0b:c3:c1:
92:13:48:66:69:25:55:84:18:4a:a6:a6:91:a2:03:
c9:51:89:80:72:e7:89:1a:9f:99:d9:1e:30:ad:f6:
5d:cf:b5:60:43:1f:f0:1f:f3:02:71:ad:2a:9c:ff:
93:d7:9c:b2:19:cf:6a:12:ee:09:d7:49:00:6d:c2:
30:9a:60:5c:98:b0:61:16:3b:1d:6f:e7:3c:d4:81:
b7:49:04:5d:33:d4:5c:72:d7:c0:58:d0:05:22:3e:
84:99:9e:03:18:cb:24:47:86:fd:6b:6f:7a:cb:7a:
71:9c:6d:c3:f1:22:bb:03:42:33:a0:5e:fe:5c:c2:
f6:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:94:FE:42:33:45:08:C0:82:99:3F:5C:8D:4C:8F:7A:51:D6:64:9C
X509v3 Authority Key Identifier:
keyid:95:D6:1A:E8:47:2C:5C:8F:CD:81:37:56:C1:64:C2:F1:86:4D:3C:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ldYa6EcsXI_NgTdWwWTC8YZNPJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ee4748-4eab-4e55-b64a-2c7a11c1fbaf/1/ldYa6EcsXI_NgTdWwWTC8YZNPJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ee4748-4eab-4e55-b64a-2c7a11c1fbaf/1/ldYa6EcsXI_NgTdWwWTC8YZNPJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:b3:b0:e9:ef:10:35:13:cb:7d:98:1a:5e:af:02:2d:a5:03:
ad:d1:6f:c3:09:ef:bd:74:8a:9e:de:7e:91:30:73:02:fd:09:
74:f9:7b:68:32:bb:e4:41:7e:1b:75:2e:50:59:da:58:aa:b6:
ef:bf:79:25:b8:67:52:c9:c0:87:58:75:75:33:f2:54:f7:99:
2a:f3:d5:3c:01:3c:70:24:3c:ba:82:e5:3a:35:af:e2:0a:e2:
13:98:bd:62:b7:e9:b8:eb:5f:95:f8:ca:7d:6b:92:50:b2:9e:
79:7e:08:57:18:16:33:9e:da:4a:98:df:14:05:1a:91:57:f5:
58:f4:01:4d:00:51:71:95:90:c9:d6:65:a4:a2:d0:2d:80:c2:
9c:0d:49:ca:82:5f:ab:e3:71:eb:63:c3:c3:6a:49:c2:4c:57:
36:1d:a9:4a:60:03:12:a2:fb:b9:8e:8d:36:d5:b3:6f:84:5e:
74:6a:d6:75:bb:87:99:fe:df:df:a3:5b:26:44:fe:5f:d1:56:
a0:98:23:40:f5:ed:f5:2a:41:67:4f:ed:7b:e6:2c:41:9a:36:
c5:43:08:c3:dd:aa:45:ba:bb:d1:ac:88:ec:89:23:86:f5:bc:
0d:ab:3c:59:cc:51:81:1d:6e:13:11:a8:5a:cf:c8:35:18:71:
60:c1:be:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:50:10 2025 by rpki-client