Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ee4748-4eab-4e55-b64a-2c7a11c1fbaf/1/ldYa6EcsXI_NgTdWwWTC8YZNPJA.mft
File: ldYa6EcsXI_NgTdWwWTC8YZNPJA.mft (raw, json)
Hash identifier: NFH/qOsO2+NckSsL90Cyy4sBZZ7Nm/GyTDDK6frIrqI=
Subject key identifier: F5:59:18:AD:0B:34:7D:A7:9B:1B:56:63:8D:5A:CB:77:85:F0:87:1E
Authority key identifier: 95:D6:1A:E8:47:2C:5C:8F:CD:81:37:56:C1:64:C2:F1:86:4D:3C:90
Certificate issuer: /CN=95d61ae8472c5c8fcd813756c164c2f1864d3c90
Certificate serial: 01987306D1A1DA62D07450DDE0271AFE3EC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ldYa6EcsXI_NgTdWwWTC8YZNPJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ee4748-4eab-4e55-b64a-2c7a11c1fbaf/1/ldYa6EcsXI_NgTdWwWTC8YZNPJA.mft
Manifest number: 1615
Signing time: Mon 04 Aug 2025 03:01:23 +0000
Manifest this update: Mon 04 Aug 2025 03:01:23 +0000
Manifest next update: Tue 05 Aug 2025 03:01:23 +0000
Files and hashes: 1: ldYa6EcsXI_NgTdWwWTC8YZNPJA.crl (hash: QqEreyu/VIbL222jk+RZHoTm9SCpvGqZgcPnBeyaohQ=)
2: oEjv28BsSkkrSjhugPUpAGGwetU.roa (hash: CWIq+nR2seFkMvcAwstaiubts3JwM88PnSz1tCIk0CY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/ee4748-4eab-4e55-b64a-2c7a11c1fbaf/1/ldYa6EcsXI_NgTdWwWTC8YZNPJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/ee4748-4eab-4e55-b64a-2c7a11c1fbaf/1/ldYa6EcsXI_NgTdWwWTC8YZNPJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ldYa6EcsXI_NgTdWwWTC8YZNPJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:06:d1:a1:da:62:d0:74:50:dd:e0:27:1a:fe:3e:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95d61ae8472c5c8fcd813756c164c2f1864d3c90
Validity
Not Before: Aug 4 03:01:23 2025 GMT
Not After : Aug 5 03:01:23 2025 GMT
Subject: CN=f55918ad0b347da79b1b56638d5acb7785f0871e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:86:b0:59:61:9d:28:e1:6a:62:74:2b:16:86:
1f:6c:ab:2f:ab:3c:b3:9d:8e:d1:d7:81:89:a4:50:
8d:a1:dc:ca:5d:d3:e4:b4:e5:83:d1:e2:04:65:da:
7b:3d:91:8e:90:87:a0:eb:90:c9:2d:6e:79:25:2a:
6e:44:e8:0f:2e:54:3c:3f:88:72:47:6d:46:0b:84:
24:f6:fe:d4:1d:86:2c:f2:d6:4c:07:c6:95:66:3b:
d2:58:47:54:ba:66:26:cc:2d:47:ff:ea:58:7e:ed:
b7:0b:08:9d:9b:4f:b9:b8:ac:54:cb:98:f6:da:01:
82:77:13:52:34:8e:67:30:33:16:67:fc:c0:5b:0f:
e6:91:74:52:95:48:6e:5c:4d:77:d8:29:36:0e:52:
e3:3f:0a:0f:91:c7:7c:c8:4a:d6:1a:05:d5:64:cb:
58:2c:eb:0e:3c:8e:44:b6:71:be:ff:83:aa:73:4f:
96:77:db:0d:91:0e:a3:ab:c0:39:3f:92:31:bc:e7:
0b:be:97:b8:3f:f4:93:ac:54:52:64:82:f3:f3:49:
80:91:bf:07:48:e6:6e:0d:7e:7c:e4:e5:9a:08:58:
e8:72:42:aa:28:04:ac:ff:37:6f:ec:2f:81:25:25:
1c:f5:d1:80:a9:2c:51:24:60:0c:38:6a:b0:64:93:
fb:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:59:18:AD:0B:34:7D:A7:9B:1B:56:63:8D:5A:CB:77:85:F0:87:1E
X509v3 Authority Key Identifier:
keyid:95:D6:1A:E8:47:2C:5C:8F:CD:81:37:56:C1:64:C2:F1:86:4D:3C:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ldYa6EcsXI_NgTdWwWTC8YZNPJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ee4748-4eab-4e55-b64a-2c7a11c1fbaf/1/ldYa6EcsXI_NgTdWwWTC8YZNPJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ee4748-4eab-4e55-b64a-2c7a11c1fbaf/1/ldYa6EcsXI_NgTdWwWTC8YZNPJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:cf:d9:6d:08:af:8c:d8:82:95:6d:2a:12:ab:15:91:5d:35:
9e:bb:56:19:48:83:dc:f2:01:6a:ea:44:d3:40:db:a0:ec:8c:
01:37:ba:4e:1e:f1:cc:86:1c:11:98:53:a8:12:ac:d0:36:97:
16:fb:ca:e5:ce:1d:79:b9:55:43:72:54:49:ce:4c:a2:99:f5:
92:03:ea:7a:6a:b7:88:02:0f:fc:7e:66:45:4e:f0:f2:d6:f5:
6c:65:5b:f2:1e:fc:86:56:04:84:54:bd:b3:cd:13:bf:39:e8:
25:27:ad:30:41:bc:ae:a2:b2:1d:6a:8b:35:86:22:f0:1c:20:
52:af:92:6f:fc:6a:5c:f1:65:58:5c:ce:23:54:63:c3:f3:17:
78:70:b4:50:45:5c:a2:f9:a6:12:a5:b3:6c:a4:5b:99:2b:11:
e0:a2:4b:37:45:3f:a0:e8:fc:c8:9f:3c:aa:76:a5:93:44:2a:
44:12:17:97:d2:5f:35:42:35:07:4a:b1:34:61:2f:46:41:0e:
39:16:ba:da:95:c1:88:53:59:04:c2:d2:ad:52:a6:b1:ce:5d:
c6:9a:b3:a8:f5:a0:21:ff:f0:5f:b5:0c:af:1e:8f:47:a7:c0:
c3:84:dc:fc:43:6e:9a:4b:5b:7c:bb:f8:4e:72:8a:d8:b0:95:
86:96:24:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:01:33 2025 by rpki-client