Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/2b0e11-f18d-4757-9011-6678eb81b8b0/1/ldcL-AoHyf_L7wzYRltFjWE9zIU.mft
File: ldcL-AoHyf_L7wzYRltFjWE9zIU.mft (raw, json)
Hash identifier: EjhAZfiR8TnrVYwmCn38NhEqPJc/eN8AnpT3XgWGIWk=
Subject key identifier: 9C:E2:75:16:FB:D2:17:0E:2C:5C:C9:1F:2F:6E:F7:C4:DA:96:9A:EC
Authority key identifier: 95:D7:0B:F8:0A:07:C9:FF:CB:EF:0C:D8:46:5B:45:8D:61:3D:CC:85
Certificate issuer: /CN=95d70bf80a07c9ffcbef0cd8465b458d613dcc85
Certificate serial: 019A4D05F4E63DF11EB6844A0A3F36D34AE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ldcL-AoHyf_L7wzYRltFjWE9zIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/2b0e11-f18d-4757-9011-6678eb81b8b0/1/ldcL-AoHyf_L7wzYRltFjWE9zIU.mft
Manifest number: 09EB
Signing time: Tue 04 Nov 2025 04:00:27 +0000
Manifest this update: Tue 04 Nov 2025 04:00:27 +0000
Manifest next update: Wed 05 Nov 2025 04:00:27 +0000
Files and hashes: 1: Li8wKnrdmOXpX94BLLLbjVutDVE.roa (hash: B7wnEDA93LjWijQLqvYkWeQvccIg2ujkRKA0vpbO5ig=)
2: ldcL-AoHyf_L7wzYRltFjWE9zIU.crl (hash: 6Pvmqur34WglvAG3wn1KAah2nbJir3HAknIvfWwMI7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/2b0e11-f18d-4757-9011-6678eb81b8b0/1/ldcL-AoHyf_L7wzYRltFjWE9zIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/2b0e11-f18d-4757-9011-6678eb81b8b0/1/ldcL-AoHyf_L7wzYRltFjWE9zIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ldcL-AoHyf_L7wzYRltFjWE9zIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:05:f4:e6:3d:f1:1e:b6:84:4a:0a:3f:36:d3:4a:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95d70bf80a07c9ffcbef0cd8465b458d613dcc85
Validity
Not Before: Nov 4 04:00:27 2025 GMT
Not After : Nov 5 04:00:27 2025 GMT
Subject: CN=9ce27516fbd2170e2c5cc91f2f6ef7c4da969aec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:50:56:e0:e8:e9:4b:37:c1:19:1c:c1:2d:3a:
b8:6b:94:27:a3:5b:a5:ed:b8:47:d8:05:31:c5:84:
c7:21:c8:40:d7:df:27:8c:e6:8d:a8:19:2a:d5:33:
d3:0c:7f:4b:b2:06:90:68:51:48:b0:2f:b9:61:4c:
ed:67:76:db:08:60:4c:71:4d:c8:cd:e4:2d:03:12:
e5:ea:43:8a:ff:a0:fe:18:bb:7d:6f:a7:89:0d:06:
d2:1a:3a:d8:20:26:9c:68:d6:01:76:e9:35:0c:f1:
cb:17:19:87:a4:d4:c2:38:cf:47:0d:e2:e5:c2:4f:
3c:bc:44:32:1e:d9:05:7d:f0:0a:eb:4b:c3:bd:27:
db:45:26:e7:b1:00:eb:f4:ee:ff:5c:e2:cc:c2:fc:
36:7c:97:5a:00:cf:f6:b7:bb:24:6d:8f:64:97:f0:
8e:98:08:81:7d:4a:de:cb:ac:e4:83:bc:5c:ef:3e:
82:62:cd:76:ad:f2:be:d3:7e:41:74:9b:b3:78:3e:
37:34:59:11:d4:31:7b:dd:20:5b:b1:5f:da:a2:13:
ca:33:d9:67:29:00:8b:ac:2a:10:20:c0:26:c6:45:
f8:cc:66:f6:63:52:1b:e0:04:b3:c5:0a:46:97:78:
32:f1:37:ea:0b:a3:20:a0:af:f7:bd:26:f9:06:f4:
0a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:E2:75:16:FB:D2:17:0E:2C:5C:C9:1F:2F:6E:F7:C4:DA:96:9A:EC
X509v3 Authority Key Identifier:
keyid:95:D7:0B:F8:0A:07:C9:FF:CB:EF:0C:D8:46:5B:45:8D:61:3D:CC:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ldcL-AoHyf_L7wzYRltFjWE9zIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2b0e11-f18d-4757-9011-6678eb81b8b0/1/ldcL-AoHyf_L7wzYRltFjWE9zIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2b0e11-f18d-4757-9011-6678eb81b8b0/1/ldcL-AoHyf_L7wzYRltFjWE9zIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:d2:f1:b1:08:c5:e7:6c:3a:e1:36:53:19:50:fc:a5:90:18:
11:3d:d2:b5:de:06:14:55:1a:9b:6e:02:20:1a:e6:b6:85:e8:
94:af:7e:4b:d7:9d:ed:c4:22:2a:5d:34:53:8f:ae:49:84:41:
29:4b:cd:32:62:cb:8e:91:97:5e:8d:df:e6:91:22:7a:6a:b0:
4b:f7:1a:50:5e:21:96:d2:2f:04:27:0b:23:c9:6a:3b:a5:d1:
d9:8a:1a:b5:a6:df:9c:df:01:4c:5d:53:6f:3f:b3:79:2c:9b:
e6:11:d5:26:58:64:ec:73:78:51:f6:25:dd:5e:c6:72:12:3a:
cf:6b:8f:ab:22:33:a2:d0:f7:ef:54:51:a2:df:aa:a4:d7:fe:
4b:50:26:60:16:6f:bb:59:a0:cd:d9:f7:af:c6:92:c7:c5:49:
ed:47:83:80:ce:a3:0f:27:33:46:59:ff:6c:88:a5:54:61:bb:
7c:b8:de:09:7a:1f:66:c0:8e:11:71:9a:78:02:42:cc:c6:83:
08:b3:fc:1f:9f:1e:88:8a:01:cd:e5:ef:be:c3:53:74:64:38:
f1:78:fe:32:39:85:bb:ab:94:26:27:43:a5:0d:e4:e2:ab:64:
78:e6:ac:5e:a7:47:6e:3b:87:8a:e8:90:7b:33:e8:46:90:3f:
33:a2:a8:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:51:02 2025 by rpki-client