Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/d41c4a-9bef-4737-95a1-08f17c410765/1/Ld_cpzzWTXXmVt0KOkQn7WGYKj0.mft
File: Ld_cpzzWTXXmVt0KOkQn7WGYKj0.mft (raw, json)
Hash identifier: 5ds+Uwy8h7YRCuEtlRmXx4dZwB9yVUozLIji+68xSHM=
Subject key identifier: 16:DB:53:D4:3A:F4:5D:C0:4F:23:8A:79:D9:97:B7:CF:F7:F2:B3:96
Authority key identifier: 2D:DF:DC:A7:3C:D6:4D:75:E6:56:DD:0A:3A:44:27:ED:61:98:2A:3D
Certificate issuer: /CN=2ddfdca73cd64d75e656dd0a3a4427ed61982a3d
Certificate serial: 01985231B4C82DD7C63CB1780EC201BA2306
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ld_cpzzWTXXmVt0KOkQn7WGYKj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/d41c4a-9bef-4737-95a1-08f17c410765/1/Ld_cpzzWTXXmVt0KOkQn7WGYKj0.mft
Manifest number: 071D
Signing time: Mon 28 Jul 2025 18:00:45 +0000
Manifest this update: Mon 28 Jul 2025 18:00:45 +0000
Manifest next update: Tue 29 Jul 2025 18:00:45 +0000
Files and hashes: 1: Ld_cpzzWTXXmVt0KOkQn7WGYKj0.crl (hash: 4w7v0YPyELUU0gmER2cIQGgAo2eRGf1f9MNTDbOlMFY=)
2: Ovla5EJUgy9GZRovhELArfkHbLc.roa (hash: 1ZYYi0oYPWoj0xBQr1HbwZ7BRAZOIkZmTAi9EvpW7yY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/d41c4a-9bef-4737-95a1-08f17c410765/1/Ld_cpzzWTXXmVt0KOkQn7WGYKj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/d41c4a-9bef-4737-95a1-08f17c410765/1/Ld_cpzzWTXXmVt0KOkQn7WGYKj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ld_cpzzWTXXmVt0KOkQn7WGYKj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 14:37:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:52:31:b4:c8:2d:d7:c6:3c:b1:78:0e:c2:01:ba:23:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ddfdca73cd64d75e656dd0a3a4427ed61982a3d
Validity
Not Before: Jul 28 18:00:45 2025 GMT
Not After : Jul 29 18:00:45 2025 GMT
Subject: CN=16db53d43af45dc04f238a79d997b7cff7f2b396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d8:6a:9e:d9:09:29:c8:e9:0f:c2:bd:44:98:
1c:2f:5a:b4:43:56:d6:da:b2:d9:23:19:e2:a1:d1:
bb:8b:e6:a4:84:b2:83:f9:d9:3d:24:a4:c9:01:a8:
63:eb:33:c9:43:45:0c:99:7e:32:8d:8f:95:a4:98:
89:d7:ee:03:63:8d:86:3a:0a:18:ac:0b:67:26:e5:
81:c3:9b:40:bc:48:b6:c1:4e:8c:5d:4b:85:ca:7d:
59:ef:7c:2d:69:a5:b5:81:09:4c:a8:cf:a2:86:5b:
25:cd:35:a0:f2:e2:85:dc:e7:44:03:a0:99:5f:4e:
9a:32:76:2e:ca:30:4b:78:80:72:52:96:56:83:75:
21:86:1c:55:2e:0c:85:2c:8c:34:e5:50:e6:e3:13:
70:9d:63:e3:21:29:e4:88:0c:ff:1e:43:4c:ad:24:
0f:01:09:f5:8a:7b:3c:3f:61:81:26:ac:d0:ce:75:
f1:8f:6c:5c:19:8a:00:05:79:56:c6:aa:d2:3c:87:
b9:dd:0b:72:34:24:c3:d2:c3:e3:91:a1:68:1f:6b:
e1:d6:4e:25:19:8e:72:50:29:c3:bf:54:36:a9:69:
d9:d3:84:86:fd:f4:b4:99:33:a3:24:0d:4f:4f:68:
f6:43:33:af:36:17:7a:cf:2f:f5:dc:29:12:b2:16:
28:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:DB:53:D4:3A:F4:5D:C0:4F:23:8A:79:D9:97:B7:CF:F7:F2:B3:96
X509v3 Authority Key Identifier:
keyid:2D:DF:DC:A7:3C:D6:4D:75:E6:56:DD:0A:3A:44:27:ED:61:98:2A:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ld_cpzzWTXXmVt0KOkQn7WGYKj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d41c4a-9bef-4737-95a1-08f17c410765/1/Ld_cpzzWTXXmVt0KOkQn7WGYKj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d41c4a-9bef-4737-95a1-08f17c410765/1/Ld_cpzzWTXXmVt0KOkQn7WGYKj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:a4:98:80:34:4e:a0:c4:64:f8:8d:1d:5f:eb:3f:39:73:12:
56:60:14:8e:fb:99:f8:92:f6:57:99:8f:e4:27:7a:39:de:95:
df:1c:9f:19:60:84:17:80:e2:e3:3d:c5:2e:85:2e:89:74:e3:
3b:f0:ed:b5:14:2d:0a:75:15:8c:77:8f:6f:6e:90:fc:cc:d8:
c1:9e:ff:e2:0d:7c:14:7a:b2:1e:03:a7:ec:9e:4b:06:dc:26:
45:8d:df:da:f8:1b:65:bb:eb:c3:86:4e:70:77:a1:98:08:9f:
de:ab:58:f2:ff:48:73:19:14:72:5b:20:4e:dc:6f:2b:cf:ad:
9e:fd:2a:88:4b:0f:13:94:38:83:b6:6a:df:d6:08:d2:98:52:
78:b9:36:05:22:39:8e:dd:8b:39:11:a6:1f:11:f5:50:6b:5f:
c5:64:76:24:3c:d7:3b:aa:a9:bd:7c:38:a9:28:fc:58:8e:75:
54:b4:f0:bf:bb:b3:b6:81:14:5d:56:c9:23:99:97:3e:de:88:
cc:6c:2e:9f:67:38:99:e5:a3:1f:25:b2:7f:13:74:f4:89:c2:
fc:74:ff:2d:25:49:50:c2:a3:57:98:84:37:5e:e6:37:d8:f2:
18:af:e9:79:c3:72:e5:e7:9b:8f:63:cd:12:10:e6:c7:72:f4:
dd:33:fb:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 21:20:48 2025 by rpki-client