Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/319d61-560a-44fd-aa25-49671acdf486/1/LdOuI8tG7pwhlQ78tg3voJS6VUg.mft
File: LdOuI8tG7pwhlQ78tg3voJS6VUg.mft (raw, json)
Hash identifier: UzmyHIWE5NdDaT3crYo599oyJPbgD6enTuxFLTvukR4=
Subject key identifier: 6C:38:19:0E:B0:88:99:24:14:9C:A9:09:76:15:00:60:62:BB:F5:D3
Authority key identifier: 2D:D3:AE:23:CB:46:EE:9C:21:95:0E:FC:B6:0D:EF:A0:94:BA:55:48
Certificate issuer: /CN=2dd3ae23cb46ee9c21950efcb60defa094ba5548
Certificate serial: 019893A3A0F300E6EABAE46F55C3BA2DC405
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LdOuI8tG7pwhlQ78tg3voJS6VUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/319d61-560a-44fd-aa25-49671acdf486/1/LdOuI8tG7pwhlQ78tg3voJS6VUg.mft
Manifest number: 1628
Signing time: Sun 10 Aug 2025 11:00:30 +0000
Manifest this update: Sun 10 Aug 2025 11:00:30 +0000
Manifest next update: Mon 11 Aug 2025 11:00:30 +0000
Files and hashes: 1: LdOuI8tG7pwhlQ78tg3voJS6VUg.crl (hash: quNFyTymvjFJ4qo1Kros5V7111e3+DbYDowclMEgYLw=)
2: NR5q24H1ufzbYF2XouLHFu4YVgE.roa (hash: P7YBV+TAXY1ntVvPbNeFWy4DC2dZewmJse8AyIIurOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/319d61-560a-44fd-aa25-49671acdf486/1/LdOuI8tG7pwhlQ78tg3voJS6VUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/319d61-560a-44fd-aa25-49671acdf486/1/LdOuI8tG7pwhlQ78tg3voJS6VUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LdOuI8tG7pwhlQ78tg3voJS6VUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 11:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:a3:a0:f3:00:e6:ea:ba:e4:6f:55:c3:ba:2d:c4:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dd3ae23cb46ee9c21950efcb60defa094ba5548
Validity
Not Before: Aug 10 11:00:30 2025 GMT
Not After : Aug 11 11:00:30 2025 GMT
Subject: CN=6c38190eb0889924149ca9097615006062bbf5d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e3:01:0b:bd:7f:4f:f4:b3:9b:0c:f8:8f:d5:
26:56:4c:5e:80:db:45:fe:40:34:5f:da:c5:8a:28:
1d:20:78:de:96:1d:ed:1b:e4:66:24:a0:02:45:00:
ee:3a:92:68:88:67:4b:59:ba:2e:a9:db:39:7d:b2:
b0:a7:55:a2:70:93:28:1d:06:30:df:4d:20:2d:ed:
0d:83:76:57:83:34:cf:68:11:98:40:cb:53:a5:14:
ee:74:d2:c5:ae:c6:18:5d:5c:88:12:2e:fc:d6:34:
87:93:8d:ff:a2:91:bb:37:62:b7:04:1d:11:5a:3e:
ed:7e:55:12:37:67:49:61:8b:6b:a3:2d:71:09:58:
4e:47:4a:db:ce:41:26:00:ce:f2:37:57:59:02:b7:
2f:19:45:d7:d8:0c:f4:0a:23:0c:3e:28:b1:1f:a6:
6c:8a:ee:7b:b1:62:c4:35:6f:85:bf:ab:1f:b8:eb:
a1:38:ef:c1:56:c1:49:5a:e4:3a:bb:f0:e3:d4:c2:
1b:b9:84:2f:1b:f0:55:05:3f:fa:ff:4d:62:75:7c:
7d:30:48:6c:59:dd:6f:55:bd:9b:83:92:fa:41:2c:
d6:ab:98:78:af:f2:9f:05:ce:11:2c:ee:f6:60:12:
94:92:b8:0a:89:d7:e8:42:1b:0b:13:ee:cb:59:9d:
b4:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:38:19:0E:B0:88:99:24:14:9C:A9:09:76:15:00:60:62:BB:F5:D3
X509v3 Authority Key Identifier:
keyid:2D:D3:AE:23:CB:46:EE:9C:21:95:0E:FC:B6:0D:EF:A0:94:BA:55:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LdOuI8tG7pwhlQ78tg3voJS6VUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/319d61-560a-44fd-aa25-49671acdf486/1/LdOuI8tG7pwhlQ78tg3voJS6VUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/319d61-560a-44fd-aa25-49671acdf486/1/LdOuI8tG7pwhlQ78tg3voJS6VUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:9d:82:05:b3:24:22:6c:3c:68:8d:e9:17:ef:99:16:d9:00:
63:72:f3:de:f3:1f:12:64:96:57:93:57:73:60:86:a8:05:16:
3e:f5:11:fd:00:7c:e2:32:47:8c:f1:20:e9:0f:09:88:8d:4d:
a0:d2:45:6e:4f:d4:19:a2:11:b7:fa:0b:a7:c3:3b:6f:58:59:
55:cd:93:4f:77:0c:fd:7e:7c:c8:ca:de:4b:10:96:26:35:46:
f2:f8:24:06:d3:ab:93:74:a4:57:ea:d3:a9:07:27:bf:53:44:
23:4f:aa:c0:d9:73:b2:69:94:88:0c:e3:79:8a:f1:f4:0e:9e:
1d:2b:ac:bf:3c:c6:40:67:3b:09:be:6f:47:de:12:31:34:93:
93:d9:bb:04:19:e8:a6:84:e9:4e:6e:bd:1d:aa:f0:57:f8:29:
39:88:d9:34:89:12:d5:fb:18:45:0c:96:a2:2e:90:84:dd:88:
fe:55:45:33:96:f5:00:b0:6b:45:4b:d6:6e:8c:34:f9:04:10:
3f:c8:d9:b8:10:f3:0a:a9:ca:ec:d3:d9:3d:33:27:c6:a0:f6:
6e:25:c1:54:5e:e5:c1:1c:8c:20:6a:af:50:d1:6f:06:4b:67:
fd:ca:e3:29:37:bb:48:ce:10:63:a5:1c:d6:30:8a:22:72:8a:
f4:88:3d:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 21:16:53 2025 by rpki-client