Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/b12604-b481-416d-b088-210767bd0ba2/1/LDe0vsl9YIq-I7xXujmCRszFd2A.mft
File: LDe0vsl9YIq-I7xXujmCRszFd2A.mft (raw, json)
Hash identifier: y32nfAnRnemJe0xX45OirXapZY2OQR3ZVyb9W19UXMo=
Subject key identifier: 63:E0:07:E8:C9:14:A3:2E:E8:E3:E8:98:DC:26:42:E2:C5:02:91:DF
Authority key identifier: 2C:37:B4:BE:C9:7D:60:8A:BE:23:BC:57:BA:39:82:46:CC:C5:77:60
Certificate issuer: /CN=2c37b4bec97d608abe23bc57ba398246ccc57760
Certificate serial: 019923314E390CBC31619DE458C29D9E9800
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LDe0vsl9YIq-I7xXujmCRszFd2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/b12604-b481-416d-b088-210767bd0ba2/1/LDe0vsl9YIq-I7xXujmCRszFd2A.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 08:00:57 +0000
Manifest this update: Sun 07 Sep 2025 08:00:57 +0000
Manifest next update: Mon 08 Sep 2025 08:00:57 +0000
Files and hashes: 1: 7BY_kFwL8OEGCGg4fffLBCGfbIk.roa (hash: wPQVbJEzFYU2FTuvcz3iiUbD5hpnYkEGB5yumpXFpQo=)
2: LDe0vsl9YIq-I7xXujmCRszFd2A.crl (hash: Dq2EK/E4zqtAbBpXsuID1QxZTAvWD2z/71SrHXnV99M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/b12604-b481-416d-b088-210767bd0ba2/1/LDe0vsl9YIq-I7xXujmCRszFd2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/b12604-b481-416d-b088-210767bd0ba2/1/LDe0vsl9YIq-I7xXujmCRszFd2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/LDe0vsl9YIq-I7xXujmCRszFd2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:4e:39:0c:bc:31:61:9d:e4:58:c2:9d:9e:98:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c37b4bec97d608abe23bc57ba398246ccc57760
Validity
Not Before: Sep 7 08:00:57 2025 GMT
Not After : Sep 8 08:00:57 2025 GMT
Subject: CN=63e007e8c914a32ee8e3e898dc2642e2c50291df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:74:c5:db:ea:f0:4d:11:31:bd:2c:43:72:b5:
f2:59:48:e5:b4:01:2f:97:55:dc:9f:3c:fe:b6:c6:
c9:ad:f5:64:d7:c9:78:a4:46:ec:d0:73:a6:06:01:
96:da:e3:cc:2f:36:11:ba:88:49:72:00:a4:c9:5e:
5a:f4:af:c9:12:2f:30:9d:f9:9f:aa:4e:e9:60:fa:
a1:f7:95:68:4f:d1:07:fc:91:29:05:47:e3:b9:ee:
85:02:b6:17:31:53:1d:d2:21:1e:a1:a3:4c:45:a1:
18:5e:57:af:5b:cf:09:7f:ee:df:d4:c8:ec:e9:8c:
42:36:ae:e2:e0:02:bf:ff:5d:d6:29:18:d4:e6:97:
6b:dc:cd:c9:4b:98:4b:89:05:b9:24:e7:52:df:e1:
75:f0:59:b7:e7:b3:07:bb:37:6f:19:a6:87:87:33:
e7:13:1d:cb:88:e9:2b:a5:c4:a8:75:87:a7:41:18:
05:67:a0:1b:10:21:57:d7:f7:05:a7:9c:6d:0b:93:
1b:03:37:76:07:b2:45:9a:ed:36:a4:6d:d0:fd:8e:
a8:63:f1:59:db:b2:8a:34:eb:2e:93:8f:5f:4b:3f:
da:a7:75:da:bd:bb:b7:78:03:66:a0:45:16:44:49:
e4:88:5b:e5:ee:16:69:fb:0e:3d:06:1d:ae:ad:9f:
28:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:E0:07:E8:C9:14:A3:2E:E8:E3:E8:98:DC:26:42:E2:C5:02:91:DF
X509v3 Authority Key Identifier:
keyid:2C:37:B4:BE:C9:7D:60:8A:BE:23:BC:57:BA:39:82:46:CC:C5:77:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LDe0vsl9YIq-I7xXujmCRszFd2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/b12604-b481-416d-b088-210767bd0ba2/1/LDe0vsl9YIq-I7xXujmCRszFd2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/b12604-b481-416d-b088-210767bd0ba2/1/LDe0vsl9YIq-I7xXujmCRszFd2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:b5:8f:4a:04:aa:d9:f4:c7:5d:91:24:dd:78:3d:b7:26:3b:
09:b6:2f:5e:ac:40:1a:63:a8:0c:76:c1:95:6d:2b:c2:f4:78:
38:00:a0:b9:33:77:61:04:1e:2b:29:14:a9:54:16:04:95:2c:
ef:f3:5e:b2:d0:7e:3c:63:ce:b4:6c:ba:40:ee:31:b8:29:bb:
b5:0a:9f:b2:ae:4f:4f:ed:16:98:d8:39:ff:c0:8e:0d:e1:9c:
80:63:68:3d:08:1d:e3:7c:a0:f5:0e:a3:ab:57:26:20:fc:87:
f6:43:46:d2:21:a6:39:e3:34:70:ba:0b:a7:d6:c0:5c:8a:f5:
ac:6d:10:f0:98:90:30:6b:c3:ff:04:c3:04:21:3b:7b:b3:4d:
e4:3f:06:2b:f7:32:8e:81:da:8b:ee:c1:31:6f:12:a7:a0:61:
58:84:02:15:41:4d:5f:02:81:f0:a1:95:3f:13:1a:8d:84:fe:
fb:83:b3:46:59:91:2f:f9:44:6f:ea:b1:48:3e:ea:4a:4f:51:
e1:51:a5:5f:b0:32:ef:38:21:da:7a:95:de:e2:c2:55:0d:57:
16:cf:bc:bf:0b:04:15:f5:c7:1c:a5:8a:3f:b7:1b:3e:b7:5c:
3d:a8:fc:72:8f:14:83:6f:38:62:ce:03:f1:ce:84:31:5e:bb:
6c:bc:ee:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:26:38 2025 by rpki-client