Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/01642e-c0ad-4bae-a545-8401952ac897/1/LdrykZbO5YxjJjDwK-69C1p1qdk.mft
File: LdrykZbO5YxjJjDwK-69C1p1qdk.mft (raw, json)
Hash identifier: 1P6L3VLdYqJ+dPlxpdCzKpbDUwgJ0FGobdQTXKTZ+oA=
Subject key identifier: 87:D8:1D:1E:6B:4E:3F:FF:E6:3C:8F:26:4D:6A:BC:6E:01:A3:4C:E3
Authority key identifier: 2D:DA:F2:91:96:CE:E5:8C:63:26:30:F0:2B:EE:BD:0B:5A:75:A9:D9
Certificate issuer: /CN=2ddaf29196cee58c632630f02beebd0b5a75a9d9
Certificate serial: 019923A028066BF1A10E2FC0D80567B81C15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LdrykZbO5YxjJjDwK-69C1p1qdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/01642e-c0ad-4bae-a545-8401952ac897/1/LdrykZbO5YxjJjDwK-69C1p1qdk.mft
Manifest number: 0101
Signing time: Sun 07 Sep 2025 10:02:02 +0000
Manifest this update: Sun 07 Sep 2025 10:02:02 +0000
Manifest next update: Mon 08 Sep 2025 10:02:02 +0000
Files and hashes: 1: LdrykZbO5YxjJjDwK-69C1p1qdk.crl (hash: cvwFVmvra5p9bk+jGbaf18kPl9g6XC654JSzMGOffZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/01642e-c0ad-4bae-a545-8401952ac897/1/LdrykZbO5YxjJjDwK-69C1p1qdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/01642e-c0ad-4bae-a545-8401952ac897/1/LdrykZbO5YxjJjDwK-69C1p1qdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/LdrykZbO5YxjJjDwK-69C1p1qdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:28:06:6b:f1:a1:0e:2f:c0:d8:05:67:b8:1c:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ddaf29196cee58c632630f02beebd0b5a75a9d9
Validity
Not Before: Sep 7 10:02:02 2025 GMT
Not After : Sep 8 10:02:02 2025 GMT
Subject: CN=87d81d1e6b4e3fffe63c8f264d6abc6e01a34ce3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d3:2c:f7:48:e6:10:49:49:1a:43:77:50:4b:
1f:94:d8:4b:5a:06:99:e2:56:84:f5:5e:bc:f9:fe:
da:15:68:68:b8:c4:b7:aa:7f:0f:10:37:e9:cd:03:
0c:5b:a1:1f:59:76:2a:10:33:37:7b:49:94:82:1a:
ec:5a:d8:79:0f:ef:6f:b3:fd:8a:d4:e9:72:e7:f0:
98:a6:22:5e:5a:f2:e4:16:fe:1f:51:08:39:74:55:
59:46:74:c6:a9:b6:e2:2b:fe:a6:d4:b6:08:35:94:
bc:6e:a2:e3:94:11:f5:ee:a9:50:19:c6:b8:cc:ca:
0d:d0:bc:d4:26:a5:90:31:97:64:cf:90:d7:c2:56:
a1:31:8e:25:d7:52:9b:ce:51:1d:0c:ad:93:c0:55:
2d:49:aa:8b:9d:d2:68:4d:cb:58:e4:1f:46:d0:34:
6f:fa:b2:57:b1:4e:2b:27:3c:25:ea:6b:e9:84:b4:
0c:80:07:91:1a:13:09:d8:2c:00:ba:ba:3d:de:ca:
d8:ec:81:b0:db:6b:59:eb:6f:dc:dc:a3:c1:2e:7c:
c4:fd:a2:21:35:66:7c:90:66:42:11:13:35:14:b1:
60:47:be:25:38:66:b5:de:d0:bb:fa:85:41:e9:f4:
29:58:1a:58:b3:c3:51:10:13:7d:bc:25:21:1e:5b:
43:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:D8:1D:1E:6B:4E:3F:FF:E6:3C:8F:26:4D:6A:BC:6E:01:A3:4C:E3
X509v3 Authority Key Identifier:
keyid:2D:DA:F2:91:96:CE:E5:8C:63:26:30:F0:2B:EE:BD:0B:5A:75:A9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LdrykZbO5YxjJjDwK-69C1p1qdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/01642e-c0ad-4bae-a545-8401952ac897/1/LdrykZbO5YxjJjDwK-69C1p1qdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/01642e-c0ad-4bae-a545-8401952ac897/1/LdrykZbO5YxjJjDwK-69C1p1qdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:f5:97:68:c8:73:ef:18:0a:38:3d:8a:91:2e:5a:bb:59:a7:
d5:73:ed:47:93:f4:6a:a0:76:90:be:31:7e:99:1f:90:4a:8a:
ba:6a:d4:bb:9e:c3:c8:ef:5d:40:50:ab:24:5d:91:0a:29:8a:
2a:21:b8:c9:3b:46:05:ca:26:2c:69:dc:13:a1:95:3e:61:8f:
1f:f4:e1:d9:85:3a:18:f6:52:23:e5:42:f5:85:6b:06:a5:03:
2d:c0:69:ce:e0:2b:90:e4:9e:fc:21:e8:9e:8f:6c:aa:aa:1d:
02:56:c2:ad:89:52:94:f3:f2:09:61:fa:54:99:84:36:b0:e3:
dd:b7:d0:b8:65:e9:d5:67:43:89:04:47:6a:b3:58:70:53:b3:
45:9a:f1:e9:12:58:36:21:db:0c:84:c5:44:18:13:42:2d:2e:
1b:18:43:34:9b:39:2e:28:d7:85:42:44:93:fc:9f:1f:94:92:
a4:95:45:3f:71:d3:b8:6e:86:4d:f4:59:56:25:5e:32:56:77:
d9:4d:17:b8:09:7f:81:f6:5a:c4:bf:00:d0:30:58:29:c3:fc:
4f:72:97:cb:cd:76:f8:9e:be:07:21:82:e0:81:49:4d:aa:e1:
76:7a:55:35:37:b7:b5:01:0e:86:cd:19:3b:44:eb:41:72:f7:
25:3a:ff:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:35:54 2025 by rpki-client