Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/363ecc-2aa1-4281-95b1-8b0fc07858d6/1/LdWWwep-y7G-F3f8DTjtBspA6r4.mft
File: LdWWwep-y7G-F3f8DTjtBspA6r4.mft (raw, json)
Hash identifier: KYcCo9961qsAimllM6u0+jyagsylEuB+uJvnK/rf2ss=
Subject key identifier: E5:AE:8D:15:47:CC:2E:9A:0C:04:61:0F:6C:2D:1C:42:37:51:1A:DA
Authority key identifier: 2D:D5:96:C1:EA:7E:CB:B1:BE:17:77:FC:0D:38:ED:06:CA:40:EA:BE
Certificate issuer: /CN=2dd596c1ea7ecbb1be1777fc0d38ed06ca40eabe
Certificate serial: 019A725CDC5BA5CC55FF95BD84936E56134E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LdWWwep-y7G-F3f8DTjtBspA6r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/363ecc-2aa1-4281-95b1-8b0fc07858d6/1/LdWWwep-y7G-F3f8DTjtBspA6r4.mft
Manifest number: 10DE
Signing time: Tue 11 Nov 2025 10:01:19 +0000
Manifest this update: Tue 11 Nov 2025 10:01:19 +0000
Manifest next update: Wed 12 Nov 2025 10:01:19 +0000
Files and hashes: 1: LdWWwep-y7G-F3f8DTjtBspA6r4.crl (hash: cX6DsDEHWghVz+Y+z2pFvhJOgEatG21FZfHAjFXlZdU=)
2: lPP1CTZE_I869rs5FvdeSS4FA3k.roa (hash: qLXwzivmvmSSh7sbcIlPZozy/8eLL4zZEt9Q9nGGudc=)
3: zanD_Us8dBGhViwVbHdjZ1KnOyY.roa (hash: 8YK5aDnlFgCf1IslrmnzJ2YHYk3ZAoh0qEssJ/f413k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/363ecc-2aa1-4281-95b1-8b0fc07858d6/1/LdWWwep-y7G-F3f8DTjtBspA6r4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/363ecc-2aa1-4281-95b1-8b0fc07858d6/1/LdWWwep-y7G-F3f8DTjtBspA6r4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LdWWwep-y7G-F3f8DTjtBspA6r4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:dc:5b:a5:cc:55:ff:95:bd:84:93:6e:56:13:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dd596c1ea7ecbb1be1777fc0d38ed06ca40eabe
Validity
Not Before: Nov 11 10:01:19 2025 GMT
Not After : Nov 12 10:01:19 2025 GMT
Subject: CN=e5ae8d1547cc2e9a0c04610f6c2d1c4237511ada
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:c3:9f:68:ef:47:ce:d3:71:75:31:e9:59:52:
7b:14:43:ec:80:1a:c8:40:c8:cc:ae:9c:a6:19:8c:
03:29:2b:10:2f:e9:6c:14:37:10:90:1c:9f:4a:ad:
3e:a7:8a:b3:e1:71:d1:02:11:23:69:69:47:f3:98:
c3:f3:e1:77:da:51:00:ec:32:e0:37:3c:a0:f7:d0:
d8:89:31:27:a3:3b:9e:af:d5:e5:8a:10:65:2d:43:
a7:13:23:74:53:c6:55:5b:e5:ad:7c:f8:4d:a1:93:
df:76:1a:b6:2f:f1:1e:49:ab:75:e6:98:57:fb:f9:
3f:c9:b0:65:a9:68:b6:5e:b6:28:95:b8:f3:a8:08:
99:84:ac:b0:ff:54:6f:7b:35:46:52:50:d1:6c:b0:
bf:51:68:56:ce:c4:96:31:87:28:5d:88:d6:34:c5:
a0:c0:57:cd:62:cc:bc:c9:f8:b2:1a:29:a6:bc:b6:
62:de:41:69:d9:09:6d:aa:a5:da:1b:6f:55:21:24:
39:d9:80:ce:de:44:fd:ec:f4:e5:c3:29:fd:d8:7c:
8e:88:06:ea:97:df:61:35:61:29:c6:84:6d:bc:e0:
f1:a2:c3:59:3e:dd:d5:d0:58:e3:55:8a:1a:6a:9f:
a9:1b:8a:65:2f:b7:e7:dd:3d:1c:21:a5:4e:8e:51:
a1:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:AE:8D:15:47:CC:2E:9A:0C:04:61:0F:6C:2D:1C:42:37:51:1A:DA
X509v3 Authority Key Identifier:
keyid:2D:D5:96:C1:EA:7E:CB:B1:BE:17:77:FC:0D:38:ED:06:CA:40:EA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LdWWwep-y7G-F3f8DTjtBspA6r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/363ecc-2aa1-4281-95b1-8b0fc07858d6/1/LdWWwep-y7G-F3f8DTjtBspA6r4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/363ecc-2aa1-4281-95b1-8b0fc07858d6/1/LdWWwep-y7G-F3f8DTjtBspA6r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:87:14:f2:13:b9:16:72:fd:06:87:6b:f0:f8:15:41:fc:d9:
1c:67:07:b8:a1:58:ab:b2:ce:93:f3:95:67:3a:fd:3f:4a:86:
8b:72:9b:40:e1:6f:01:71:35:27:cb:ce:27:2b:7b:e5:ba:22:
a7:20:33:71:03:d1:b4:68:c0:f2:f0:ce:0f:ef:27:06:29:05:
d0:93:70:eb:d3:50:90:65:0c:63:e9:a7:79:ed:4a:8d:75:da:
5e:b7:ed:6c:5d:66:55:68:96:4e:3b:9d:b2:82:40:9f:ec:41:
04:76:75:f5:1b:04:14:54:62:49:26:2e:38:25:ce:2a:13:57:
50:56:b0:b4:0c:5a:d0:bd:e9:41:9b:33:a1:de:be:bc:13:e3:
3f:6c:24:54:92:be:3b:4f:22:75:b1:6c:26:c3:f9:f3:3d:2b:
c3:11:a6:9e:dd:d0:33:dc:41:2e:f9:21:87:2b:39:00:23:5d:
cb:fb:91:31:01:49:4f:63:52:2e:c6:2c:b3:d2:4b:30:ed:f0:
d7:24:18:6b:df:e2:4a:0a:3a:51:f7:18:c6:18:d3:7a:7c:38:
f7:ea:ef:73:f3:b3:2b:36:b9:91:19:eb:b6:13:c5:d7:2a:ec:
6d:58:b3:3f:65:6e:05:19:5d:59:b5:25:b1:7e:2a:1d:49:ee:
a8:d4:cf:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:49:33 2025 by rpki-client