Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/319d61-560a-44fd-aa25-49671acdf486/1/LdOuI8tG7pwhlQ78tg3voJS6VUg.mft
File: LdOuI8tG7pwhlQ78tg3voJS6VUg.mft (raw, json)
Hash identifier: d1WxT4Q3HF8K1I50RBazr1XVo02dHddEKTFw+/d9Ogs=
Subject key identifier: D3:4A:D2:63:D6:0C:00:AE:90:D0:BB:4A:EE:96:0C:BE:D8:89:77:CE
Authority key identifier: 2D:D3:AE:23:CB:46:EE:9C:21:95:0E:FC:B6:0D:EF:A0:94:BA:55:48
Certificate issuer: /CN=2dd3ae23cb46ee9c21950efcb60defa094ba5548
Certificate serial: 019A4DAA93CD42738D621898FCEA60FB684F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LdOuI8tG7pwhlQ78tg3voJS6VUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/319d61-560a-44fd-aa25-49671acdf486/1/LdOuI8tG7pwhlQ78tg3voJS6VUg.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 07:00:15 +0000
Manifest this update: Tue 04 Nov 2025 07:00:15 +0000
Manifest next update: Wed 05 Nov 2025 07:00:15 +0000
Files and hashes: 1: LdOuI8tG7pwhlQ78tg3voJS6VUg.crl (hash: ymRlRWC6r/w8TtzfpsKe3GK390qMY/f6J6u8Qy/dO3E=)
2: U56329e4gM-IVTVVEt6zrVkDGjo.roa (hash: we1XyD3BJFEUnklb4jnEqKHGEO1FUWwSSjWf88RrLFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/319d61-560a-44fd-aa25-49671acdf486/1/LdOuI8tG7pwhlQ78tg3voJS6VUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/319d61-560a-44fd-aa25-49671acdf486/1/LdOuI8tG7pwhlQ78tg3voJS6VUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LdOuI8tG7pwhlQ78tg3voJS6VUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:93:cd:42:73:8d:62:18:98:fc:ea:60:fb:68:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dd3ae23cb46ee9c21950efcb60defa094ba5548
Validity
Not Before: Nov 4 07:00:15 2025 GMT
Not After : Nov 5 07:00:15 2025 GMT
Subject: CN=d34ad263d60c00ae90d0bb4aee960cbed88977ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:09:57:d2:c1:e3:49:71:c9:fe:98:eb:19:f4:
a7:dc:47:dd:05:12:00:a4:63:41:1a:15:19:19:e7:
83:ea:ad:b5:d9:14:7a:98:5f:82:dc:64:b7:33:ed:
eb:3d:25:f2:00:55:a7:6c:26:fe:69:bb:55:d1:a7:
aa:70:53:57:c2:56:f1:c1:a5:38:7e:aa:c0:36:8e:
6b:62:7f:3d:42:fb:5f:6e:30:f2:ce:40:e5:d8:da:
10:ea:5f:92:32:da:e1:62:59:09:0f:e2:fb:a0:19:
dc:66:fb:4d:59:64:42:b7:ec:9d:ff:f2:dc:01:db:
c3:aa:96:29:7b:2e:9e:25:66:35:03:6d:ca:54:67:
02:9b:27:ef:2c:cf:e8:09:49:f8:f8:2b:21:b9:ad:
31:88:cf:2b:af:9b:2e:6f:52:c5:b0:1e:7b:f8:90:
4d:ac:0c:9c:48:25:6a:d4:39:4b:5c:81:bd:25:4f:
fa:59:7a:c7:48:58:89:45:88:83:a7:c5:31:3e:7d:
75:b0:c4:5e:5c:5f:3e:cd:4f:8b:4b:3d:ad:79:8c:
55:24:cd:2a:a7:f8:2d:5d:a8:10:29:b7:00:81:92:
03:1f:4e:65:85:9e:51:43:e8:af:bf:0c:30:f1:64:
2a:bb:fd:02:6a:6a:8d:34:51:ba:6a:8c:76:f4:df:
1b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:4A:D2:63:D6:0C:00:AE:90:D0:BB:4A:EE:96:0C:BE:D8:89:77:CE
X509v3 Authority Key Identifier:
keyid:2D:D3:AE:23:CB:46:EE:9C:21:95:0E:FC:B6:0D:EF:A0:94:BA:55:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LdOuI8tG7pwhlQ78tg3voJS6VUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/319d61-560a-44fd-aa25-49671acdf486/1/LdOuI8tG7pwhlQ78tg3voJS6VUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/319d61-560a-44fd-aa25-49671acdf486/1/LdOuI8tG7pwhlQ78tg3voJS6VUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:18:e5:27:71:07:55:ab:2a:6e:80:ab:13:6a:29:9c:3b:1b:
7b:11:a9:43:9d:f1:3d:ed:9c:a4:8d:85:fa:bc:8c:3e:d6:e7:
b1:80:e4:91:63:0c:12:eb:ee:fe:31:37:0f:bf:a9:bd:b0:44:
eb:ca:37:bf:b5:32:b8:5a:0d:c4:ff:67:b8:ac:b2:46:31:62:
91:4b:82:8c:0c:16:af:51:1a:40:50:92:0f:a9:9a:78:49:32:
6e:9d:f9:e5:b0:3b:c8:46:92:83:a7:5c:34:ba:13:85:b0:08:
a5:92:ce:1f:96:40:bd:34:de:a5:c4:2d:03:12:bc:4f:2f:a3:
27:4f:a7:f8:dc:9d:7a:8b:73:73:ae:dc:90:1e:d0:ef:99:00:
e4:00:78:08:7b:32:4d:eb:6a:51:1f:58:3b:12:b0:24:9c:6a:
31:93:d7:e8:b5:b9:0f:48:03:78:eb:38:a0:a6:57:c6:00:68:
f6:dd:0e:89:9b:59:fb:27:8b:4f:85:04:d2:20:df:88:7d:b0:
ab:c3:5c:0c:0f:21:9c:fe:37:f3:d4:76:36:97:fa:62:02:e1:
f6:a2:03:45:b7:c8:44:5b:d0:a4:a7:20:61:79:86:55:1f:9a:
1d:bf:ca:1b:92:51:01:d3:de:24:23:9f:bf:78:46:b3:88:63:
f7:61:02:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNqpPNQnONYhiY/Opg+2hPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkZDNhZTIzY2I0NmVlOWMyMTk1MGVmY2I2MGRlZmEwOTRi
YTU1NDgwHhcNMjUxMTA0MDcwMDE1WhcNMjUxMTA1MDcwMDE1WjAzMTEwLwYDVQQD
EyhkMzRhZDI2M2Q2MGMwMGFlOTBkMGJiNGFlZTk2MGNiZWQ4ODk3N2NlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyAlX0sHjSXHJ/pjrGfSn3EfdBRIA
pGNBGhUZGeeD6q212RR6mF+C3GS3M+3rPSXyAFWnbCb+abtV0aeqcFNXwlbxwaU4
fqrANo5rYn89QvtfbjDyzkDl2NoQ6l+SMtrhYlkJD+L7oBncZvtNWWRCt+yd//Lc
AdvDqpYpey6eJWY1A23KVGcCmyfvLM/oCUn4+Cshua0xiM8rr5sub1LFsB57+JBN
rAycSCVq1DlLXIG9JU/6WXrHSFiJRYiDp8UxPn11sMReXF8+zU+LSz2teYxVJM0q
p/gtXagQKbcAgZIDH05lhZ5RQ+ivvwww8WQqu/0CamqNNFG6aox29N8bywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNNK0mPWDACukNC7Su6WDL7YiXfOMB8GA1UdIwQY
MBaAFC3TriPLRu6cIZUO/LYN76CUulVIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGRPdUk4dEc3cHdobFE3OHRnM3ZvSlM2VlVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8zMTlkNjEtNTYwYS00NGZkLWFhMjUt
NDk2NzFhY2RmNDg2LzEvTGRPdUk4dEc3cHdobFE3OHRnM3ZvSlM2VlVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy8zMTlkNjEtNTYwYS00NGZkLWFhMjUtNDk2NzFhY2RmNDg2
LzEvTGRPdUk4dEc3cHdobFE3OHRnM3ZvSlM2VlVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAThjlJ3EH
VasqboCrE2opnDsbexGpQ53xPe2cpI2F+ryMPtbnsYDkkWMMEuvu/jE3D7+pvbBE
68o3v7UyuFoNxP9nuKyyRjFikUuCjAwWr1EaQFCSD6maeEkybp355bA7yEaSg6dc
NLoThbAIpZLOH5ZAvTTepcQtAxK8Ty+jJ0+n+Nydeotzc67ckB7Q75kA5AB4CHsy
TetqUR9YOxKwJJxqMZPX6LW5D0gDeOs4oKZXxgBo9t0OiZtZ+yeLT4UE0iDfiH2w
q8NcDA8hnP4389R2Npf6YgLh9qIDRbfIRFvQpKcgYXmGVR+aHb/KG5JRAdPeJCOf
v3hGs4hj92ECZg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 10:48:58 2025 by rpki-client