Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/363ecc-2aa1-4281-95b1-8b0fc07858d6/1/LdWWwep-y7G-F3f8DTjtBspA6r4.mft
File: LdWWwep-y7G-F3f8DTjtBspA6r4.mft (raw, json)
Hash identifier: pk1JS3pmPQQuT4fqID3MLM25fsyZ9atr7l29puxKCek=
Subject key identifier: 79:C2:C2:15:0A:67:CE:9A:B4:E6:BA:8F:CE:C9:26:57:CD:57:97:8D
Authority key identifier: 2D:D5:96:C1:EA:7E:CB:B1:BE:17:77:FC:0D:38:ED:06:CA:40:EA:BE
Certificate issuer: /CN=2dd596c1ea7ecbb1be1777fc0d38ed06ca40eabe
Certificate serial: 0197500EC7C4C15795902A2A9F029680B656
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LdWWwep-y7G-F3f8DTjtBspA6r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/363ecc-2aa1-4281-95b1-8b0fc07858d6/1/LdWWwep-y7G-F3f8DTjtBspA6r4.mft
Manifest number: 0F3E
Signing time: Sun 08 Jun 2025 15:00:35 +0000
Manifest this update: Sun 08 Jun 2025 15:00:35 +0000
Manifest next update: Mon 09 Jun 2025 15:00:35 +0000
Files and hashes: 1: LdWWwep-y7G-F3f8DTjtBspA6r4.crl (hash: yg2dc/hVB32r4eyF2UwGFYxSYCJSmc0M8ermiAp0Yzk=)
2: lPP1CTZE_I869rs5FvdeSS4FA3k.roa (hash: qLXwzivmvmSSh7sbcIlPZozy/8eLL4zZEt9Q9nGGudc=)
3: uLAHNi7rmoHRh_D54NFn7mSRJKY.roa (hash: v1waYeM99XoJRaEbp2nkSCeaz2Y1P/V5tFFutQv8UbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/363ecc-2aa1-4281-95b1-8b0fc07858d6/1/LdWWwep-y7G-F3f8DTjtBspA6r4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/363ecc-2aa1-4281-95b1-8b0fc07858d6/1/LdWWwep-y7G-F3f8DTjtBspA6r4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LdWWwep-y7G-F3f8DTjtBspA6r4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:0e:c7:c4:c1:57:95:90:2a:2a:9f:02:96:80:b6:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dd596c1ea7ecbb1be1777fc0d38ed06ca40eabe
Validity
Not Before: Jun 8 15:00:35 2025 GMT
Not After : Jun 9 15:00:35 2025 GMT
Subject: CN=79c2c2150a67ce9ab4e6ba8fcec92657cd57978d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e5:c5:5e:de:0a:8a:94:c5:04:32:7a:56:24:
dd:7a:76:fe:d9:df:d6:74:06:a6:9b:06:ea:22:02:
9a:47:60:78:b8:06:7a:52:76:15:dc:8c:e0:95:19:
47:ac:cd:62:6c:09:e7:1d:f2:37:55:f4:35:31:5e:
76:69:8d:95:ab:ad:72:bc:ab:10:bc:4b:ec:7d:66:
86:7c:0c:9e:54:22:3c:aa:98:95:18:96:16:58:23:
62:40:60:f7:1b:e1:e4:75:36:d9:b9:a9:e6:62:50:
32:50:dd:46:1c:86:28:c6:a1:c7:ba:c5:04:da:47:
cd:6b:54:12:26:7f:86:72:9e:c2:ad:f7:15:93:63:
a9:cb:76:d7:57:b7:1b:d4:3c:6a:15:1d:7a:fd:6b:
46:28:5e:86:ae:6e:60:f8:05:15:cd:d5:33:40:86:
dd:a3:5e:54:b1:35:90:ed:cd:14:c2:be:f3:01:d0:
e9:cc:82:39:f4:29:72:9f:f9:3d:43:a3:d6:bc:e5:
97:6d:4e:a4:3e:5d:38:3d:1a:4e:66:88:fe:e7:98:
04:fe:f0:f3:df:af:43:5c:b8:72:39:f2:cd:fe:c6:
76:c3:a8:d0:be:3e:35:7c:e6:2f:ce:0d:d6:92:0f:
f0:b1:4d:f3:61:a4:f2:ea:22:e1:36:eb:0c:5d:81:
37:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:C2:C2:15:0A:67:CE:9A:B4:E6:BA:8F:CE:C9:26:57:CD:57:97:8D
X509v3 Authority Key Identifier:
keyid:2D:D5:96:C1:EA:7E:CB:B1:BE:17:77:FC:0D:38:ED:06:CA:40:EA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LdWWwep-y7G-F3f8DTjtBspA6r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/363ecc-2aa1-4281-95b1-8b0fc07858d6/1/LdWWwep-y7G-F3f8DTjtBspA6r4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/363ecc-2aa1-4281-95b1-8b0fc07858d6/1/LdWWwep-y7G-F3f8DTjtBspA6r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:1a:73:85:1d:0b:49:cf:4a:2b:40:27:0a:22:8e:05:bb:e0:
bf:63:5a:57:25:47:83:41:f0:89:2c:17:77:23:0f:49:d2:af:
f2:cb:37:74:23:55:83:58:fa:5e:7c:5c:37:75:c3:a5:74:1f:
f1:1f:b4:ef:10:e0:89:45:28:66:fa:6b:1c:2a:b2:94:32:7b:
96:fa:66:6b:12:0a:72:6e:71:e2:4b:73:5f:22:34:0b:aa:4f:
60:e6:1f:de:fc:c7:b4:0e:78:18:27:42:b0:0b:07:14:f3:8b:
ef:a8:5f:44:e7:5c:25:bf:8b:d4:d6:7c:00:a1:4c:e6:97:89:
20:28:2b:a6:1e:b4:d2:9b:25:bf:41:17:90:b4:90:e9:ff:ce:
e4:72:92:dc:a8:48:58:51:9b:e8:f9:f5:44:42:4a:eb:23:46:
b1:42:63:03:ee:14:99:91:c5:9f:cb:14:82:aa:d8:af:96:aa:
60:b3:85:26:76:4f:c3:f6:13:80:de:d9:a5:88:4f:d7:7f:60:
af:3f:e6:fa:12:72:00:cd:48:3b:54:01:a5:05:0b:65:f1:73:
5c:ae:1d:ad:09:24:48:a6:62:8a:dd:34:52:f3:3d:84:4e:4c:
0b:3a:0c:68:d4:f4:b0:f9:89:9b:70:66:65:a9:73:b5:88:e5:
4d:b9:df:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 19:20:24 2025 by rpki-client