Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/01642e-c0ad-4bae-a545-8401952ac897/1/LdrykZbO5YxjJjDwK-69C1p1qdk.mft
File: LdrykZbO5YxjJjDwK-69C1p1qdk.mft (raw, json)
Hash identifier: KdNmte/GPt81DwUv6GV4SHVOudTLnKXqZahZYFdT2Xk=
Subject key identifier: E2:01:82:F1:A5:48:85:A1:AE:CA:81:1E:1D:A9:70:97:3B:45:1E:0B
Authority key identifier: 2D:DA:F2:91:96:CE:E5:8C:63:26:30:F0:2B:EE:BD:0B:5A:75:A9:D9
Certificate issuer: /CN=2ddaf29196cee58c632630f02beebd0b5a75a9d9
Certificate serial: 019751FD37E8BBDE518EE424BFA387A68D56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LdrykZbO5YxjJjDwK-69C1p1qdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/01642e-c0ad-4bae-a545-8401952ac897/1/LdrykZbO5YxjJjDwK-69C1p1qdk.mft
Manifest number: 10
Signing time: Mon 09 Jun 2025 00:00:38 +0000
Manifest this update: Mon 09 Jun 2025 00:00:38 +0000
Manifest next update: Tue 10 Jun 2025 00:00:38 +0000
Files and hashes: 1: LdrykZbO5YxjJjDwK-69C1p1qdk.crl (hash: A8joxROSFyGDX2ss7OGiSmPEFzy0jhjxS1wEyw+qNSw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/01642e-c0ad-4bae-a545-8401952ac897/1/LdrykZbO5YxjJjDwK-69C1p1qdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/01642e-c0ad-4bae-a545-8401952ac897/1/LdrykZbO5YxjJjDwK-69C1p1qdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/LdrykZbO5YxjJjDwK-69C1p1qdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:fd:37:e8:bb:de:51:8e:e4:24:bf:a3:87:a6:8d:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ddaf29196cee58c632630f02beebd0b5a75a9d9
Validity
Not Before: Jun 9 00:00:38 2025 GMT
Not After : Jun 10 00:00:38 2025 GMT
Subject: CN=e20182f1a54885a1aeca811e1da970973b451e0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a2:44:ad:a8:b0:30:da:f4:3c:6b:46:10:c6:
ad:81:c9:39:33:84:92:e0:ae:cc:02:df:3c:76:c9:
50:22:e9:d6:db:08:57:9f:a8:b5:0f:86:c8:3c:6d:
51:da:d8:fa:07:f8:bc:ff:a6:f8:24:27:11:8c:fd:
54:84:8f:97:d6:9d:6c:e0:be:d5:02:3a:0b:64:88:
e2:19:1e:06:7c:0e:77:9c:89:08:d0:ee:d6:8a:32:
dc:4a:91:ee:8b:c7:eb:61:ba:22:5c:02:ac:96:8a:
ed:50:8e:b4:bf:ce:61:ee:f2:9f:e1:8a:10:c2:e7:
52:9e:09:28:35:4d:a4:4c:79:03:fc:6f:06:1b:70:
0d:a8:4d:59:e1:5e:e7:eb:4f:86:5c:34:41:f3:ab:
3f:d4:cb:6a:aa:2f:ae:e0:ed:f0:45:4c:07:2c:27:
58:bc:5f:fd:f6:fc:4c:77:61:c2:d0:d5:c6:4c:70:
07:1a:c9:0d:f2:22:3f:bc:7b:df:ca:ed:a3:e3:2a:
4f:b3:0a:56:d9:32:56:cd:b9:ae:25:31:ad:5a:6b:
85:5d:de:e3:21:e7:26:9d:e1:8e:5e:3b:f0:a5:8d:
b8:41:a5:b4:39:2f:38:89:5b:30:33:a4:2e:c0:45:
b3:d6:a8:17:26:12:28:0c:57:1d:9b:8a:ec:11:11:
a7:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:01:82:F1:A5:48:85:A1:AE:CA:81:1E:1D:A9:70:97:3B:45:1E:0B
X509v3 Authority Key Identifier:
keyid:2D:DA:F2:91:96:CE:E5:8C:63:26:30:F0:2B:EE:BD:0B:5A:75:A9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LdrykZbO5YxjJjDwK-69C1p1qdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/01642e-c0ad-4bae-a545-8401952ac897/1/LdrykZbO5YxjJjDwK-69C1p1qdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/01642e-c0ad-4bae-a545-8401952ac897/1/LdrykZbO5YxjJjDwK-69C1p1qdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:6f:43:7b:8c:2e:7a:ba:30:2d:f3:d1:d5:ef:28:c5:8e:5f:
0c:41:95:4c:e9:58:25:f0:5a:dc:37:a1:2d:b0:2e:6a:59:6a:
5e:76:34:9d:a0:85:03:9e:11:5d:0a:2e:1b:a7:3c:42:d3:94:
17:fe:23:5a:ff:10:78:f8:f7:09:8c:9b:4a:c5:74:87:b4:44:
19:7b:32:7a:c8:06:35:fa:c3:a9:4e:54:d1:c1:3f:6f:2c:49:
78:0f:22:76:38:e4:5a:eb:24:02:a5:00:44:24:10:b3:06:99:
a3:99:5f:74:91:6a:6d:e2:b6:ef:11:43:ca:25:15:02:57:79:
80:a2:9d:e7:9c:6c:e9:dc:4e:f3:94:af:b7:38:c6:27:91:ec:
6d:ec:7d:4d:3c:96:2c:3c:cb:f4:1e:d3:33:5d:c7:4b:37:ae:
8c:96:88:73:64:19:a0:66:cb:02:5e:36:ca:d8:3d:98:5e:ee:
0d:b6:ce:87:db:3f:58:e8:99:fd:0c:d2:a7:28:07:23:2e:3b:
fd:41:b1:27:6f:32:19:e0:5c:d2:23:24:74:21:4b:12:f8:0b:
bb:22:dc:a1:a4:41:40:8d:79:b1:b0:97:c8:2f:b5:c5:e9:b6:
05:03:06:a3:ba:f4:7f:d3:b0:08:c4:e3:95:de:bc:53:eb:6d:
77:a1:c7:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:36:47 2025 by rpki-client