
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/ldn8gV6QyoeSeQfF6rP-ecohXqo.mft
File: ldn8gV6QyoeSeQfF6rP-ecohXqo.mft (raw, json)
Hash identifier: uOv1UG+YLe2eADBrm1DxcsJKziaxWaCDV42YyGwL2RQ=
Subject key identifier: 7D:4D:C9:E6:9C:24:EC:38:68:40:14:1A:0A:2F:54:02:41:E5:60:BA
Authority key identifier: 95:D9:FC:81:5E:90:CA:87:92:79:07:C5:EA:B3:FE:79:CA:21:5E:AA
Certificate issuer: /CN=95d9fc815e90ca87927907c5eab3fe79ca215eaa
Certificate serial: 0199338013E961624CBA6D55B3E3B4A7118F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ldn8gV6QyoeSeQfF6rP-ecohXqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/ldn8gV6QyoeSeQfF6rP-ecohXqo.mft
Manifest number: 037C
Signing time: Wed 10 Sep 2025 12:00:55 +0000
Manifest this update: Wed 10 Sep 2025 12:00:55 +0000
Manifest next update: Thu 11 Sep 2025 12:00:55 +0000
Files and hashes: 1: A4UfYrXsQ6iSsiav-YeuLfimOTs.roa (hash: cPKqM44Z83MlRMbviQtgWddEZ3JyHZfP+3cvsuoyczI=)
2: WqCM--ZSqxtcqHxil1wItYtEpEM.roa (hash: CPcHuYLnfs1zjrIDaz07dO7we+nME2TOlwKRzyCU7gM=)
3: ldn8gV6QyoeSeQfF6rP-ecohXqo.crl (hash: b4L336/vVZT0Z/uBvLbPOUSAHRkoAWCQ/TUFFZaSGl4=)
4: wkbm61J6JI58DzdO7MCd9o4dj-o.roa (hash: hSaua0y3ny5hOslQkyLJESOAWMtyf0RUHAd8EHcHySo=)
5: xhhJQqhM5sB1fU9J0vxm3RoZWw0.roa (hash: +YOuzWIZ++rhf1ENTPtE45w85KCzRIvAgoMtfwrZcLw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/ldn8gV6QyoeSeQfF6rP-ecohXqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/ldn8gV6QyoeSeQfF6rP-ecohXqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ldn8gV6QyoeSeQfF6rP-ecohXqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:80:13:e9:61:62:4c:ba:6d:55:b3:e3:b4:a7:11:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95d9fc815e90ca87927907c5eab3fe79ca215eaa
Validity
Not Before: Sep 10 12:00:55 2025 GMT
Not After : Sep 11 12:00:55 2025 GMT
Subject: CN=7d4dc9e69c24ec386840141a0a2f540241e560ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8f:fa:4b:74:a7:89:e0:61:a9:ee:cf:7c:9d:
51:7c:ce:ab:c6:ee:4f:09:76:d7:55:98:24:43:52:
48:4a:93:6a:4f:95:0d:ae:7c:ff:93:50:af:73:30:
9a:37:19:d2:58:af:31:c9:87:47:8c:5b:96:2d:bd:
67:b1:80:50:e9:3e:e0:34:e9:8f:9e:85:91:13:61:
b0:cc:6b:74:55:0e:4e:14:5f:e4:87:42:51:4c:5c:
69:ef:0d:19:c8:ca:ad:95:25:22:15:9f:5c:ab:b4:
ec:0b:61:02:46:4f:62:31:7b:de:82:d5:47:b6:23:
ee:66:e3:61:20:90:43:c9:44:eb:5a:c2:d0:ea:1b:
ce:35:94:c0:2d:a2:4c:bf:5e:1a:fc:30:3a:a3:a4:
81:51:dd:de:8b:85:af:9a:42:45:01:ba:e3:51:f2:
94:00:70:22:56:ec:0e:76:13:d4:10:33:95:a9:14:
5d:3e:5d:90:29:8a:4b:fe:a0:b9:24:07:e7:75:4d:
50:8e:72:59:d8:b5:0d:9f:e4:92:8c:14:64:06:7e:
a4:e3:ce:e1:38:80:19:7a:1b:0f:dc:1d:c6:a7:6d:
c1:e6:14:1e:60:f9:c7:39:7a:14:d2:14:4d:32:72:
29:61:10:cd:a4:0d:e2:0b:98:7c:e7:79:a8:8d:a9:
2a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:4D:C9:E6:9C:24:EC:38:68:40:14:1A:0A:2F:54:02:41:E5:60:BA
X509v3 Authority Key Identifier:
keyid:95:D9:FC:81:5E:90:CA:87:92:79:07:C5:EA:B3:FE:79:CA:21:5E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ldn8gV6QyoeSeQfF6rP-ecohXqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/ldn8gV6QyoeSeQfF6rP-ecohXqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/ldn8gV6QyoeSeQfF6rP-ecohXqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:e8:e0:e1:6b:d5:d7:aa:54:5b:e6:6a:33:70:2d:b8:41:b3:
e8:bf:ae:d9:e4:81:50:36:2f:be:44:8d:17:54:9c:ca:05:68:
95:8a:bc:8c:6c:6a:22:2b:f1:a6:e7:4a:47:de:c9:ac:9e:43:
86:0c:55:b7:0e:48:94:fe:da:97:44:3f:e3:0d:d7:ab:21:7a:
59:30:e8:d5:c5:b8:20:46:09:02:d0:35:de:48:bf:71:f1:d2:
e4:82:00:ea:d1:30:51:f0:67:57:69:c9:2e:5d:28:8c:f8:0e:
52:93:34:8c:e8:fd:f6:e5:8b:fa:e8:61:b8:de:78:43:e4:a7:
3c:25:30:9b:8d:c5:51:4b:1f:c2:30:ac:0b:4d:28:7e:a1:61:
61:d9:0b:43:80:2e:3f:44:a7:5c:6d:24:3c:64:f7:08:53:e2:
76:2e:41:c2:f4:50:c4:ef:ac:b7:91:70:53:e6:94:1d:56:bf:
80:16:01:7b:58:67:e7:6d:b7:ea:ac:08:e9:96:bd:d5:8d:1c:
25:10:e6:f6:f6:df:86:52:18:22:7e:7f:54:dc:e4:ca:52:33:
f4:94:4b:d6:9b:7d:9e:d4:5d:c1:fa:fc:bb:c0:cf:d0:67:dd:
06:21:56:5e:5f:c8:8b:f0:49:ec:19:26:b5:00:63:08:2a:90:
8e:2f:c8:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 13:43:31 2025 by rpki-client