Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/01642e-c0ad-4bae-a545-8401952ac897/1/LdrykZbO5YxjJjDwK-69C1p1qdk.mft
File: LdrykZbO5YxjJjDwK-69C1p1qdk.mft (raw, json)
Hash identifier: RHyOwsUKB1jRi/HExCGDZ/2wuTV8BMSTdzpGwafoj6A=
Subject key identifier: D9:7A:88:04:5B:C7:2C:2B:0F:DA:72:73:A7:0B:93:9F:DB:C6:9B:FD
Authority key identifier: 2D:DA:F2:91:96:CE:E5:8C:63:26:30:F0:2B:EE:BD:0B:5A:75:A9:D9
Certificate issuer: /CN=2ddaf29196cee58c632630f02beebd0b5a75a9d9
Certificate serial: 019A71B7985AFBEEEF377A71003DEE0FE3CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LdrykZbO5YxjJjDwK-69C1p1qdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/01642e-c0ad-4bae-a545-8401952ac897/1/LdrykZbO5YxjJjDwK-69C1p1qdk.mft
Manifest number: 01AE
Signing time: Tue 11 Nov 2025 07:00:48 +0000
Manifest this update: Tue 11 Nov 2025 07:00:48 +0000
Manifest next update: Wed 12 Nov 2025 07:00:48 +0000
Files and hashes: 1: LdrykZbO5YxjJjDwK-69C1p1qdk.crl (hash: UempJhWJ5GVTlHDBqFHsHLCUE9ZnNAI0DJ0nDwKsaMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/01642e-c0ad-4bae-a545-8401952ac897/1/LdrykZbO5YxjJjDwK-69C1p1qdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/01642e-c0ad-4bae-a545-8401952ac897/1/LdrykZbO5YxjJjDwK-69C1p1qdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/LdrykZbO5YxjJjDwK-69C1p1qdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:98:5a:fb:ee:ef:37:7a:71:00:3d:ee:0f:e3:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ddaf29196cee58c632630f02beebd0b5a75a9d9
Validity
Not Before: Nov 11 07:00:48 2025 GMT
Not After : Nov 12 07:00:48 2025 GMT
Subject: CN=d97a88045bc72c2b0fda7273a70b939fdbc69bfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c7:67:c9:11:2f:6f:15:db:2d:e7:41:f3:3e:
9d:f2:0c:bd:23:2c:9d:08:e1:6a:63:67:88:7c:7f:
71:2b:b1:44:e0:75:3e:e1:e8:a1:88:db:1f:22:89:
e6:04:15:36:76:8c:c6:e1:7f:c2:3f:0f:98:4f:91:
a9:51:7c:1b:20:fb:65:58:c3:e6:11:28:05:9c:af:
bd:1f:0f:fb:3c:a3:35:9a:f0:b0:3b:c6:93:b8:5f:
60:a2:fb:02:49:0d:e2:88:9c:e1:bb:74:ac:d2:95:
b7:24:b1:4c:46:ec:82:d9:a1:21:1c:22:c6:5f:99:
9d:4a:7f:84:c5:e4:a3:c1:bd:f9:e3:a6:aa:8a:6a:
f1:37:b5:1b:17:78:4a:b5:b1:99:5d:5f:3a:e1:ef:
3f:bd:8e:4b:0f:35:dc:40:5b:eb:b3:71:01:b7:47:
8c:02:90:1f:ac:56:6b:2a:b5:b0:13:da:bf:b0:9c:
56:bf:27:1e:c6:3c:66:c3:fe:3c:36:b6:00:be:23:
49:4e:27:d2:c4:a4:bd:5b:a7:1a:d0:17:c4:07:ae:
65:ed:4b:d2:c9:5e:ba:dc:67:7b:4b:b4:3e:ba:74:
26:e0:fb:ec:ec:0d:84:3e:63:75:e5:fb:1c:81:9c:
f5:bd:33:d7:89:cb:89:5a:96:aa:ba:ae:a6:b1:f1:
6c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:7A:88:04:5B:C7:2C:2B:0F:DA:72:73:A7:0B:93:9F:DB:C6:9B:FD
X509v3 Authority Key Identifier:
keyid:2D:DA:F2:91:96:CE:E5:8C:63:26:30:F0:2B:EE:BD:0B:5A:75:A9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LdrykZbO5YxjJjDwK-69C1p1qdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/01642e-c0ad-4bae-a545-8401952ac897/1/LdrykZbO5YxjJjDwK-69C1p1qdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/01642e-c0ad-4bae-a545-8401952ac897/1/LdrykZbO5YxjJjDwK-69C1p1qdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:d1:dc:95:9d:be:84:ce:04:1c:86:fb:fc:91:e6:5d:d2:eb:
6b:67:82:a5:22:87:ef:62:da:e5:f5:53:9a:15:b2:82:1b:6b:
2b:e1:79:89:63:71:c5:69:ed:2f:24:2a:8a:c9:92:6d:dd:99:
66:ed:6c:93:cf:70:e5:98:4f:70:06:ec:59:b0:e2:b2:ac:19:
b7:bb:6c:8a:d6:1e:a1:62:a3:84:96:fe:1c:64:be:60:5c:b8:
17:17:02:9a:8f:38:dd:84:44:bf:8e:0a:db:56:e8:e6:ca:98:
e4:02:a0:7d:45:22:0c:8b:0e:a1:f3:ab:96:1b:de:07:2e:59:
74:f5:7b:a5:90:25:76:10:f0:05:b0:5f:a6:b1:3d:34:e8:94:
da:ca:5e:da:3e:52:56:21:65:1a:1d:6a:b1:87:75:48:fa:84:
b7:ff:9d:8e:bd:36:7c:67:30:bc:43:4f:c5:35:33:12:64:85:
44:d7:2d:46:04:68:32:23:63:61:f2:c8:cd:5f:c1:ad:c7:ab:
f3:2f:be:56:53:0a:65:05:4a:45:d0:06:c6:aa:35:ff:82:24:
03:5f:ae:a6:52:f9:0d:0d:2c:e0:ae:5d:b4:50:31:a4:5f:7b:
00:12:87:d4:a0:13:b3:4c:36:aa:1b:b2:a3:65:12:f5:92:1c:
ed:0f:52:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:17:38 2025 by rpki-client