Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/319d61-560a-44fd-aa25-49671acdf486/1/LdOuI8tG7pwhlQ78tg3voJS6VUg.mft
File: LdOuI8tG7pwhlQ78tg3voJS6VUg.mft (raw, json)
Hash identifier: U8vyqeWBzwNV76ptqHhzVkRO2pJdKSW6XAkseDHDdP8=
Subject key identifier: 45:9E:1C:AD:84:98:52:8F:B9:41:EF:EB:FA:D8:B2:6B:BC:2D:7C:51
Authority key identifier: 2D:D3:AE:23:CB:46:EE:9C:21:95:0E:FC:B6:0D:EF:A0:94:BA:55:48
Certificate issuer: /CN=2dd3ae23cb46ee9c21950efcb60defa094ba5548
Certificate serial: 019855DEDD203DDFC7440ED55FEACF6B0DD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LdOuI8tG7pwhlQ78tg3voJS6VUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/319d61-560a-44fd-aa25-49671acdf486/1/LdOuI8tG7pwhlQ78tg3voJS6VUg.mft
Manifest number: 1608
Signing time: Tue 29 Jul 2025 11:08:45 +0000
Manifest this update: Tue 29 Jul 2025 11:08:45 +0000
Manifest next update: Wed 30 Jul 2025 11:08:45 +0000
Files and hashes: 1: LdOuI8tG7pwhlQ78tg3voJS6VUg.crl (hash: ON+5g8T433TxGseivtF7vks1E7J7nSRJV6hgExNu2IU=)
2: NR5q24H1ufzbYF2XouLHFu4YVgE.roa (hash: P7YBV+TAXY1ntVvPbNeFWy4DC2dZewmJse8AyIIurOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/319d61-560a-44fd-aa25-49671acdf486/1/LdOuI8tG7pwhlQ78tg3voJS6VUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/319d61-560a-44fd-aa25-49671acdf486/1/LdOuI8tG7pwhlQ78tg3voJS6VUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LdOuI8tG7pwhlQ78tg3voJS6VUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:55:de:dd:20:3d:df:c7:44:0e:d5:5f:ea:cf:6b:0d:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dd3ae23cb46ee9c21950efcb60defa094ba5548
Validity
Not Before: Jul 29 11:08:45 2025 GMT
Not After : Jul 30 11:08:45 2025 GMT
Subject: CN=459e1cad8498528fb941efebfad8b26bbc2d7c51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:76:ec:ea:d1:41:f8:16:c6:80:a2:33:d3:12:
53:3a:da:12:ce:81:3a:28:f4:af:90:16:64:4a:07:
88:1b:52:2a:d3:1b:83:5c:8d:17:ea:3e:86:17:8e:
30:5f:21:1c:a3:15:ad:ee:7b:38:99:4f:ef:a0:88:
5a:a0:8d:a2:71:62:29:c6:53:4a:d2:f5:04:62:f4:
d2:c4:ef:b9:61:c5:7f:7a:a2:42:4e:80:a9:3c:33:
a2:f7:21:ae:5e:96:c6:1f:af:cf:8c:18:21:c3:26:
b2:ce:52:f1:f8:99:c1:57:fe:21:a9:12:47:dc:9b:
15:1f:8a:ba:88:35:2a:3c:eb:cf:5e:31:37:19:12:
f5:2a:58:51:2b:80:60:51:84:62:95:08:70:f3:3e:
0f:ca:66:1f:72:cb:9b:01:06:45:e1:cd:3d:9e:ee:
a2:af:ad:7c:1e:18:19:19:66:d2:50:30:be:d2:a8:
16:65:39:85:9a:7f:94:fe:9a:86:8a:aa:f2:e2:30:
f3:47:3a:f0:4b:92:7f:c6:4f:cf:43:80:cb:5d:ab:
aa:4c:94:71:40:99:4f:1f:ec:62:62:0a:0c:01:ec:
dc:da:00:3f:aa:c2:e5:cb:a3:ac:d9:3f:0d:4b:ce:
27:7e:d5:e8:d8:96:18:55:27:a1:48:41:7e:5e:78:
40:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:9E:1C:AD:84:98:52:8F:B9:41:EF:EB:FA:D8:B2:6B:BC:2D:7C:51
X509v3 Authority Key Identifier:
keyid:2D:D3:AE:23:CB:46:EE:9C:21:95:0E:FC:B6:0D:EF:A0:94:BA:55:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LdOuI8tG7pwhlQ78tg3voJS6VUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/319d61-560a-44fd-aa25-49671acdf486/1/LdOuI8tG7pwhlQ78tg3voJS6VUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/319d61-560a-44fd-aa25-49671acdf486/1/LdOuI8tG7pwhlQ78tg3voJS6VUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:85:dc:4a:d3:bb:0e:a6:df:d3:51:6b:df:81:90:c8:4f:ca:
06:e1:c2:5a:25:eb:ff:2b:2e:1d:f5:af:2c:9f:41:8a:9a:85:
fd:69:52:3a:04:4b:f4:37:e9:15:3e:53:be:51:2e:bd:30:a0:
e9:31:df:88:e1:f7:2c:be:c8:00:99:cf:b8:e9:fd:0f:38:77:
02:3e:87:34:d0:18:f6:0e:2d:b5:47:be:41:af:96:4c:23:49:
fc:41:92:c0:49:d2:b7:97:be:9f:c5:25:e3:04:ce:81:01:65:
78:e2:8e:e9:0e:01:d7:22:8f:44:23:a0:d6:b0:90:8b:2a:f9:
78:9a:59:84:5f:f9:8e:fa:a9:91:f7:21:85:27:42:2b:00:88:
78:8f:d0:82:50:be:ef:b3:d8:dc:49:2b:b6:9b:a3:95:aa:0e:
e8:5b:6c:30:04:c9:64:3d:c5:ca:6f:ef:c2:25:c6:5e:b8:58:
51:d7:a0:93:2c:00:82:49:0d:ff:9e:a2:d4:ce:4b:c1:b1:3f:
a6:08:7c:05:58:ba:af:0f:03:d0:dc:43:77:9b:62:85:8f:d4:
21:e4:5a:83:f1:7b:65:a5:ff:49:52:ae:f5:ae:48:38:67:e3:
21:f5:c6:c7:56:89:58:3f:7b:77:d5:e0:46:36:3f:b9:29:4b:
68:6f:ea:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 14:53:55 2025 by rpki-client