Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/363ecc-2aa1-4281-95b1-8b0fc07858d6/1/LdWWwep-y7G-F3f8DTjtBspA6r4.mft
File: LdWWwep-y7G-F3f8DTjtBspA6r4.mft (raw, json)
Hash identifier: KrMApNjPVniyI7wtp7sEDp54URFosgCHlZYulVpH2Nk=
Subject key identifier: 1F:92:0B:43:0F:21:94:A7:FA:7A:B7:56:22:E8:93:61:7D:B7:80:1E
Authority key identifier: 2D:D5:96:C1:EA:7E:CB:B1:BE:17:77:FC:0D:38:ED:06:CA:40:EA:BE
Certificate issuer: /CN=2dd596c1ea7ecbb1be1777fc0d38ed06ca40eabe
Certificate serial: 0198481B73B6B1BE5483F62B527453D0C2A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LdWWwep-y7G-F3f8DTjtBspA6r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/363ecc-2aa1-4281-95b1-8b0fc07858d6/1/LdWWwep-y7G-F3f8DTjtBspA6r4.mft
Manifest number: 0FBF
Signing time: Sat 26 Jul 2025 19:00:15 +0000
Manifest this update: Sat 26 Jul 2025 19:00:15 +0000
Manifest next update: Sun 27 Jul 2025 19:00:15 +0000
Files and hashes: 1: LdWWwep-y7G-F3f8DTjtBspA6r4.crl (hash: SmV19ebeaQqeIcifOa/DULHXKqGuQD5MWeeLUwKmFtY=)
2: lPP1CTZE_I869rs5FvdeSS4FA3k.roa (hash: qLXwzivmvmSSh7sbcIlPZozy/8eLL4zZEt9Q9nGGudc=)
3: zanD_Us8dBGhViwVbHdjZ1KnOyY.roa (hash: 8YK5aDnlFgCf1IslrmnzJ2YHYk3ZAoh0qEssJ/f413k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/363ecc-2aa1-4281-95b1-8b0fc07858d6/1/LdWWwep-y7G-F3f8DTjtBspA6r4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/363ecc-2aa1-4281-95b1-8b0fc07858d6/1/LdWWwep-y7G-F3f8DTjtBspA6r4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LdWWwep-y7G-F3f8DTjtBspA6r4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:1b:73:b6:b1:be:54:83:f6:2b:52:74:53:d0:c2:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dd596c1ea7ecbb1be1777fc0d38ed06ca40eabe
Validity
Not Before: Jul 26 19:00:15 2025 GMT
Not After : Jul 27 19:00:15 2025 GMT
Subject: CN=1f920b430f2194a7fa7ab75622e893617db7801e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:40:74:2d:16:d3:b4:f6:9e:22:c7:ee:4c:96:
e7:7f:06:dd:80:de:5a:d3:1b:4d:ba:e9:e9:23:bf:
b3:e4:8c:aa:9f:0f:42:ff:83:3d:34:b5:7e:43:2c:
72:e7:0a:cc:22:4a:7c:7a:d8:75:38:be:e2:ee:9f:
49:45:28:eb:b5:72:84:e2:31:85:df:a4:6a:31:fe:
bf:63:a7:eb:0e:a2:c0:52:75:7d:e1:2d:53:5d:f4:
0a:6e:1c:64:80:e3:c0:0a:97:dd:ca:89:ac:95:2b:
74:75:3f:84:77:49:ba:5d:a1:91:c3:1e:4b:71:0f:
b4:09:f3:cc:7e:6f:7d:74:a8:3e:a3:36:89:29:d3:
5c:a5:b7:39:ee:28:d3:b6:90:b4:da:a0:42:5e:c3:
8f:59:cf:62:14:36:db:ef:f7:78:91:9a:4c:3c:60:
71:df:db:34:a1:b1:40:dc:11:df:0b:0b:30:d9:d9:
44:79:6e:cb:fc:e2:c7:a0:de:8d:2a:8a:17:2b:70:
5f:c7:2c:7c:d2:d9:87:f9:24:ff:ea:d3:99:30:f5:
3d:ca:e9:45:af:54:08:4b:50:5f:44:13:69:72:4b:
cb:33:43:8b:af:c5:74:a6:87:80:1f:37:a9:f9:8c:
73:41:7f:b5:ca:cc:e0:67:c6:5c:19:50:ba:35:37:
b8:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:92:0B:43:0F:21:94:A7:FA:7A:B7:56:22:E8:93:61:7D:B7:80:1E
X509v3 Authority Key Identifier:
keyid:2D:D5:96:C1:EA:7E:CB:B1:BE:17:77:FC:0D:38:ED:06:CA:40:EA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LdWWwep-y7G-F3f8DTjtBspA6r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/363ecc-2aa1-4281-95b1-8b0fc07858d6/1/LdWWwep-y7G-F3f8DTjtBspA6r4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/363ecc-2aa1-4281-95b1-8b0fc07858d6/1/LdWWwep-y7G-F3f8DTjtBspA6r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:e2:f6:ec:17:d5:b5:ba:8b:5d:a9:d7:91:3b:c2:f9:4e:b1:
15:3b:73:46:a1:33:9d:de:73:68:35:84:1c:d9:98:be:aa:0a:
09:48:aa:25:16:46:8c:45:8c:32:a1:58:08:5a:b6:62:25:bb:
93:cc:3b:7b:15:2c:08:f5:81:87:4e:db:b6:a6:6d:f9:c0:42:
90:2b:8f:8c:ee:c8:5c:0e:3c:2b:b3:55:46:fb:e7:32:02:6e:
a5:1d:19:f0:7c:5c:85:6a:8e:79:6f:ba:0a:e1:3e:96:28:db:
f6:91:5e:09:b1:e6:53:17:0a:89:a1:47:03:0a:ef:0c:7c:96:
8e:68:04:b4:16:2b:a2:f9:0e:db:96:4f:75:a3:10:14:a4:7e:
12:58:29:da:5c:d2:10:e9:c1:4d:e6:69:d6:40:f8:44:af:de:
b9:d9:59:0e:0c:8b:ce:6f:8d:bc:80:46:32:89:2e:57:83:1f:
2c:02:61:3d:77:d8:e4:2e:9e:9c:15:e0:89:c7:bb:53:2c:7f:
fd:fd:cb:16:44:e1:93:6d:d4:f7:27:3b:ac:a9:7a:3d:67:12:
e4:2a:fd:c1:b2:ad:60:4c:6c:6c:0b:98:50:bb:6f:68:65:ee:
9f:5e:e2:8c:0e:d9:a8:96:5e:ae:9c:5e:94:3b:95:e8:0d:4d:
b3:ce:ba:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:01:05 2025 by rpki-client