Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d59246-953e-423a-9704-931414101a01/1/1-ldVdi3-THDNg7MKE7eCxP_BX1o.mft
File: 1-ldVdi3-THDNg7MKE7eCxP_BX1o.mft (raw, json)
Hash identifier: czZ6kcWmEn4qARdGarR1yAHgYYMijosfiqUGMHNLYqI=
Subject key identifier: E0:0D:21:41:71:FA:87:54:AE:C8:BE:49:C4:3F:76:0E:D0:4C:38:3E
Authority key identifier: FA:57:55:76:2D:FE:4C:70:CD:83:B3:0A:13:B7:82:C4:FF:C1:5F:5A
Certificate issuer: /CN=fa5755762dfe4c70cd83b30a13b782c4ffc15f5a
Certificate serial: 019A13BB304FB5704778E18924AC79AAC0CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ldVdi3-THDNg7MKE7eCxP_BX1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/d59246-953e-423a-9704-931414101a01/1/1-ldVdi3-THDNg7MKE7eCxP_BX1o.mft
Manifest number: 53
Signing time: Fri 24 Oct 2025 01:00:25 +0000
Manifest this update: Fri 24 Oct 2025 01:00:25 +0000
Manifest next update: Sat 25 Oct 2025 01:00:25 +0000
Files and hashes: 1: 1-ldVdi3-THDNg7MKE7eCxP_BX1o.crl (hash: Rj9SWSpxUwejnLp+xi6iX2lRkuP09jhpYzplahw0a1A=)
2: 66i9VQv85h4cdWrREDgIRU9Jei8.roa (hash: 934EnLFeuIOeKbVZK8z3+Pf5MO8fsJyxyX8CTCcWy6I=)
3: 7oB3ar7GwFtb0clbtSqh_ldJanw.roa (hash: d421V6jyf/lL0flOYjT5So8TNIpbSRnpdeNItUDXdnM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/d59246-953e-423a-9704-931414101a01/1/1-ldVdi3-THDNg7MKE7eCxP_BX1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/d59246-953e-423a-9704-931414101a01/1/1-ldVdi3-THDNg7MKE7eCxP_BX1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-ldVdi3-THDNg7MKE7eCxP_BX1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:13:bb:30:4f:b5:70:47:78:e1:89:24:ac:79:aa:c0:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa5755762dfe4c70cd83b30a13b782c4ffc15f5a
Validity
Not Before: Oct 24 01:00:25 2025 GMT
Not After : Oct 25 01:00:25 2025 GMT
Subject: CN=e00d214171fa8754aec8be49c43f760ed04c383e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:8e:2c:0e:26:02:60:6f:91:1e:4f:85:73:21:
cf:5e:21:34:76:8e:cf:3d:c6:3f:8b:20:85:d1:ba:
3d:37:e5:6f:e2:a0:43:3c:8b:f6:f2:48:73:9e:51:
82:73:f8:e2:0e:ad:66:0f:b9:9c:6c:60:f6:04:4f:
ad:f3:51:a9:40:49:f2:ca:4b:f1:43:48:6e:8b:57:
4f:f8:cf:69:52:8f:9b:d0:6e:1c:d1:63:9e:c0:91:
30:72:30:a4:5c:61:bc:e5:6f:0f:9a:85:fa:9e:21:
27:43:51:e2:18:b8:f5:55:80:d2:7f:1a:5a:c1:2d:
c9:82:dc:c5:01:7a:3e:18:5f:22:19:0e:a2:52:9e:
79:d2:cb:40:54:45:8f:f4:1f:97:bf:82:9d:29:ca:
9a:4b:69:d7:1a:b0:1c:46:58:c2:23:24:24:d7:fc:
12:32:9a:9e:5f:24:5d:f8:f0:2d:8f:7a:6e:da:79:
68:88:f3:5f:86:22:02:e5:4c:07:d5:56:48:4f:5d:
b3:68:c3:47:74:9e:59:74:eb:ee:ba:26:d7:6e:f0:
72:cd:e9:c9:58:b9:e8:3e:07:32:48:22:1d:dd:c3:
db:c4:d3:9d:2d:fb:66:06:15:08:cf:a2:d9:1e:92:
68:d0:7d:9c:99:a5:b3:f6:66:5d:88:f7:10:f7:e4:
67:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:0D:21:41:71:FA:87:54:AE:C8:BE:49:C4:3F:76:0E:D0:4C:38:3E
X509v3 Authority Key Identifier:
keyid:FA:57:55:76:2D:FE:4C:70:CD:83:B3:0A:13:B7:82:C4:FF:C1:5F:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ldVdi3-THDNg7MKE7eCxP_BX1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d59246-953e-423a-9704-931414101a01/1/1-ldVdi3-THDNg7MKE7eCxP_BX1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d59246-953e-423a-9704-931414101a01/1/1-ldVdi3-THDNg7MKE7eCxP_BX1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:c9:0f:f8:ab:fc:a6:2e:f6:d3:d0:49:ac:95:4b:0a:cb:5e:
50:12:4e:0d:04:9a:c0:6c:23:c0:d6:52:19:ce:05:1c:ea:2a:
bf:7a:86:b5:6f:a8:af:7b:43:41:1b:ef:9e:b3:4a:de:70:5c:
6d:1b:49:9c:e8:9b:0c:e3:e7:a4:b7:ba:cf:49:8c:e6:9e:ea:
a2:14:61:b6:63:3c:ae:55:62:ee:83:e7:6f:d2:05:7c:35:cf:
65:76:e0:72:a3:c7:f4:f8:42:2d:0f:e4:6e:99:6f:a8:5d:eb:
68:fd:ba:98:d1:40:6d:b7:c7:13:73:89:da:43:86:42:26:ee:
0a:df:56:46:28:69:5f:5d:a6:23:7e:d0:bc:a4:b9:40:24:0e:
89:6a:62:21:fd:db:62:1a:1f:b6:58:e6:b2:91:f5:49:47:49:
32:04:2d:ee:ce:b1:69:74:84:42:10:1b:b7:7a:19:ba:c0:0b:
57:5f:75:6d:d2:03:8f:20:27:c2:26:34:4c:9c:88:51:0f:87:
34:f1:35:90:52:b6:37:5d:f0:e2:a8:cb:db:9e:78:0f:aa:ba:
b3:d5:64:60:11:67:60:a5:41:2b:fe:98:94:d0:c9:e9:d7:1b:
1a:1f:c6:9f:4a:e5:07:e8:17:b9:47:ff:d4:36:e1:c5:d3:52:
be:02:10:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 05:53:06 2025 by rpki-client