Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.mft
File: LD4cA--i8tn_-dvsMyW8bDdpQlA.mft (raw, json)
Hash identifier: 8B2VmvNOfpe0cds7+sar5isZ5STUrPUexCoY02ewLnA=
Subject key identifier: 8C:1A:78:3B:3A:38:9B:CF:86:89:6C:E8:61:E0:6B:25:7F:E2:90:84
Authority key identifier: 2C:3E:1C:03:EF:A2:F2:D9:FF:F9:DB:EC:33:25:BC:6C:37:69:42:50
Certificate issuer: /CN=2c3e1c03efa2f2d9fff9dbec3325bc6c37694250
Certificate serial: 019848F7A34F6F6CB5F890EB1D7C0A4363F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LD4cA--i8tn_-dvsMyW8bDdpQlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.mft
Manifest number: 134C
Signing time: Sat 26 Jul 2025 23:00:45 +0000
Manifest this update: Sat 26 Jul 2025 23:00:45 +0000
Manifest next update: Sun 27 Jul 2025 23:00:45 +0000
Files and hashes: 1: LD4cA--i8tn_-dvsMyW8bDdpQlA.crl (hash: daOhHSugGF1hlgyWKpeiWUaQNs+3H2YNl+HwR/Yl+qY=)
2: P00v87nrou1jHf3IyWsCvn49wIw.roa (hash: 7G/m2+VXvGbn3QbXJwae3mt6bGUijMD8TCCAhr6uALc=)
3: SKVsL0dFPC8nQ8E0Sar1SVELQ-4.roa (hash: Wd6r5Q9d5JNbBO/CAcgZ9Q9+GeT6Xu5kC1/o/UnS0tI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LD4cA--i8tn_-dvsMyW8bDdpQlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 23:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:f7:a3:4f:6f:6c:b5:f8:90:eb:1d:7c:0a:43:63:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c3e1c03efa2f2d9fff9dbec3325bc6c37694250
Validity
Not Before: Jul 26 23:00:45 2025 GMT
Not After : Jul 27 23:00:45 2025 GMT
Subject: CN=8c1a783b3a389bcf86896ce861e06b257fe29084
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:01:ee:30:a1:c9:82:86:68:9d:53:4a:4f:08:
bb:5f:b7:ef:f9:53:a6:a3:b4:da:e0:f9:ea:a6:dd:
32:1f:b6:34:22:15:94:cd:0c:d9:44:af:86:c0:3c:
d4:8b:9a:b9:03:f6:7c:f7:5b:3b:7d:7c:3d:1a:4f:
96:86:90:81:12:14:03:50:01:94:ee:36:9e:8d:53:
ef:bd:da:19:32:09:19:0b:8f:1b:e5:cf:4a:90:30:
f1:28:23:7a:14:09:bb:47:6d:17:91:db:39:de:36:
96:9a:79:27:a0:21:6b:f7:f8:10:c2:1c:28:80:fb:
38:b5:dc:1f:65:ee:cd:81:30:1a:f5:0c:84:04:1b:
99:3a:b9:ca:91:eb:ea:31:d1:9b:36:5c:31:54:08:
3e:85:bf:da:28:a1:d4:33:89:b4:f9:a8:9e:5c:cf:
79:6f:d7:0b:a7:62:a8:d3:50:81:59:a2:dc:5f:84:
a1:8d:9a:e5:c2:a0:56:34:23:d9:4f:b1:3e:d9:d5:
97:53:f6:71:75:d3:b8:5a:dd:f2:8b:7c:d3:aa:0d:
af:19:a0:e1:df:bf:73:9a:00:da:a8:90:77:ab:15:
4a:6a:15:ed:23:e1:29:97:78:9a:98:7e:df:8b:9c:
6e:63:af:5c:c6:ed:0a:46:a1:14:2b:53:c2:4f:94:
c5:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:1A:78:3B:3A:38:9B:CF:86:89:6C:E8:61:E0:6B:25:7F:E2:90:84
X509v3 Authority Key Identifier:
keyid:2C:3E:1C:03:EF:A2:F2:D9:FF:F9:DB:EC:33:25:BC:6C:37:69:42:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LD4cA--i8tn_-dvsMyW8bDdpQlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:a0:1d:33:61:0d:cc:22:e7:21:b2:65:06:fd:87:90:be:44:
48:27:5b:94:ba:d1:d5:eb:9c:c1:61:10:54:09:33:ce:af:bb:
cb:fe:84:5c:73:c3:ab:4e:5e:b8:b0:a9:55:02:53:23:22:9a:
45:5b:d6:ff:73:57:f7:c2:a9:98:59:5e:e7:6c:de:42:32:15:
86:57:61:34:49:51:e5:ee:c7:b7:71:ac:7d:fb:41:b1:8a:4a:
4a:22:2e:bd:2d:31:31:cb:96:41:ac:1b:ad:1c:14:70:55:f4:
fa:a5:3e:de:5d:47:bc:0f:3c:76:d7:53:82:ce:4b:30:1b:2d:
6e:9d:a3:f1:0e:c5:83:b6:95:d7:5c:a0:57:5b:e8:d0:05:67:
08:76:b7:cd:19:2b:3d:93:ed:8b:02:82:c1:18:44:81:ec:86:
8e:8b:6c:07:d9:af:7d:8c:7e:6b:da:21:11:ce:16:53:9c:75:
61:44:85:8b:0b:c7:05:c0:cf:6b:13:3a:6d:20:43:ca:50:39:
dd:a0:82:b0:24:96:7f:b0:f6:a3:a8:74:bf:27:95:4f:55:76:
c5:43:0e:ca:3b:f3:68:30:22:58:ef:fb:a3:01:64:b7:f5:b7:
56:47:e6:af:b8:64:7a:f9:ab:cd:ec:6a:05:73:61:d4:4e:62:
5e:5c:a2:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:36:58 2025 by rpki-client