
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.mft
File: LD4cA--i8tn_-dvsMyW8bDdpQlA.mft (raw, json)
Hash identifier: fYhLSnO8mLTDnZVfSn/XgzflWwhBFlv7TcM8jvFqfrU=
Subject key identifier: B0:35:5B:79:A2:51:EF:20:B5:83:15:07:C6:46:5C:5F:19:C0:DC:B6
Authority key identifier: 2C:3E:1C:03:EF:A2:F2:D9:FF:F9:DB:EC:33:25:BC:6C:37:69:42:50
Certificate issuer: /CN=2c3e1c03efa2f2d9fff9dbec3325bc6c37694250
Certificate serial: 0197462FCDE7375D1123DA0C6615DD771D10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LD4cA--i8tn_-dvsMyW8bDdpQlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.mft
Manifest number: 12C6
Signing time: Fri 06 Jun 2025 17:00:27 +0000
Manifest this update: Fri 06 Jun 2025 17:00:27 +0000
Manifest next update: Sat 07 Jun 2025 17:00:27 +0000
Files and hashes: 1: LD4cA--i8tn_-dvsMyW8bDdpQlA.crl (hash: jJozdKmjic042xg+TMtqBFV1BfELs8LhPfka4Y7VnUU=)
2: P00v87nrou1jHf3IyWsCvn49wIw.roa (hash: 7G/m2+VXvGbn3QbXJwae3mt6bGUijMD8TCCAhr6uALc=)
3: SKVsL0dFPC8nQ8E0Sar1SVELQ-4.roa (hash: Wd6r5Q9d5JNbBO/CAcgZ9Q9+GeT6Xu5kC1/o/UnS0tI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LD4cA--i8tn_-dvsMyW8bDdpQlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:2f:cd:e7:37:5d:11:23:da:0c:66:15:dd:77:1d:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c3e1c03efa2f2d9fff9dbec3325bc6c37694250
Validity
Not Before: Jun 6 17:00:27 2025 GMT
Not After : Jun 7 17:00:27 2025 GMT
Subject: CN=b0355b79a251ef20b5831507c6465c5f19c0dcb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6f:a8:92:59:3b:f8:d1:cd:0f:5b:8e:fe:3a:
02:a9:87:59:c5:74:a8:5b:63:37:09:b5:3b:50:a8:
7e:f1:e6:ab:ec:f5:c8:93:c9:2a:cc:06:8b:4c:92:
fd:12:49:9e:89:20:f1:d5:33:14:f8:13:3a:d6:4f:
10:da:78:da:18:20:67:31:83:9c:22:7f:4d:c2:43:
f2:9f:b6:18:24:b4:16:82:7e:df:79:c6:71:a7:79:
39:9a:00:e0:67:4a:aa:d7:29:ae:e2:be:cc:04:26:
c0:58:95:b7:eb:c3:b7:88:62:fe:b7:4c:6c:10:b6:
0d:12:73:48:1a:c5:e1:f1:31:88:5f:66:21:db:25:
aa:5e:41:0c:48:47:25:62:56:d3:85:95:b3:ab:5a:
51:19:2a:4e:a0:75:04:4b:49:d3:26:9b:8b:94:57:
c2:d9:dd:74:5f:ba:e3:3a:54:51:93:c6:fb:e1:39:
0c:59:b5:81:ae:ec:29:58:2c:8d:f9:84:78:27:50:
70:27:b9:f0:2b:39:01:a1:00:dc:2c:4f:23:61:b7:
47:6b:b0:a7:32:83:ec:1f:13:64:45:79:ca:c5:f2:
d2:1a:9c:30:7d:04:c0:09:ab:0b:39:44:8f:d4:f4:
df:11:1b:d2:33:04:b8:b5:b5:9f:cd:bb:40:56:4f:
a8:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:35:5B:79:A2:51:EF:20:B5:83:15:07:C6:46:5C:5F:19:C0:DC:B6
X509v3 Authority Key Identifier:
keyid:2C:3E:1C:03:EF:A2:F2:D9:FF:F9:DB:EC:33:25:BC:6C:37:69:42:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LD4cA--i8tn_-dvsMyW8bDdpQlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:8d:fd:04:c9:42:54:9d:48:31:bc:97:84:0d:ed:c0:82:fc:
67:74:53:5c:e1:b0:dc:77:3f:06:f3:1b:de:1c:37:4c:91:2b:
19:02:33:96:a9:85:4d:7f:9b:49:45:1a:6f:05:33:23:50:60:
a3:9d:64:4e:9e:9f:c6:67:e5:90:a2:fc:95:90:22:57:39:aa:
c8:6f:5f:40:77:f8:4f:22:08:c3:b5:2d:e4:56:5f:a8:23:de:
e0:27:da:27:1a:70:2f:c4:20:68:b5:00:77:60:83:86:11:c9:
b9:0f:49:45:44:69:48:c9:28:40:a4:37:8b:18:81:71:dd:6e:
4e:f6:99:7e:a3:03:95:7e:53:f1:bf:d6:5b:42:8b:71:af:04:
05:99:fe:03:c5:0a:3c:e7:df:f1:d4:86:bc:95:64:e1:fe:fc:
73:d8:13:fc:59:7d:ca:c4:a2:78:02:bf:95:95:ac:97:80:75:
8f:00:a1:54:0a:48:99:de:ee:ef:c2:25:9d:5c:5c:6b:c8:6e:
59:13:8f:e0:d0:29:4e:cc:f6:cd:19:b6:70:aa:bd:7f:d2:7b:
7b:47:f0:cf:c6:d4:4f:85:34:40:c7:bf:d6:1b:60:8b:08:88:
e6:39:aa:e9:e2:73:27:57:3c:6d:32:55:db:66:ed:a3:8f:6b:
42:a4:ce:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdGL83nN10RI9oMZhXddx0QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjM2UxYzAzZWZhMmYyZDlmZmY5ZGJlYzMzMjViYzZjMzc2
OTQyNTAwHhcNMjUwNjA2MTcwMDI3WhcNMjUwNjA3MTcwMDI3WjAzMTEwLwYDVQQD
EyhiMDM1NWI3OWEyNTFlZjIwYjU4MzE1MDdjNjQ2NWM1ZjE5YzBkY2I2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAum+oklk7+NHND1uO/joCqYdZxXSo
W2M3CbU7UKh+8ear7PXIk8kqzAaLTJL9EkmeiSDx1TMU+BM61k8Q2njaGCBnMYOc
In9NwkPyn7YYJLQWgn7fecZxp3k5mgDgZ0qq1ymu4r7MBCbAWJW368O3iGL+t0xs
ELYNEnNIGsXh8TGIX2Yh2yWqXkEMSEclYlbThZWzq1pRGSpOoHUES0nTJpuLlFfC
2d10X7rjOlRRk8b74TkMWbWBruwpWCyN+YR4J1BwJ7nwKzkBoQDcLE8jYbdHa7Cn
MoPsHxNkRXnKxfLSGpwwfQTACasLOUSP1PTfERvSMwS4tbWfzbtAVk+ooQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLA1W3miUe8gtYMVB8ZGXF8ZwNy2MB8GA1UdIwQY
MBaAFCw+HAPvovLZ//nb7DMlvGw3aUJQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTEQ0Y0EtLWk4dG5fLWR2c015VzhiRGRwUWxBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9kY2JkM2EtNzUyOC00OTllLWEzYmQt
YmYyODg3NWFiMjYxLzEvTEQ0Y0EtLWk4dG5fLWR2c015VzhiRGRwUWxBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi9kY2JkM2EtNzUyOC00OTllLWEzYmQtYmYyODg3NWFiMjYx
LzEvTEQ0Y0EtLWk4dG5fLWR2c015VzhiRGRwUWxBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjI39BMlC
VJ1IMbyXhA3twIL8Z3RTXOGw3Hc/BvMb3hw3TJErGQIzlqmFTX+bSUUabwUzI1Bg
o51kTp6fxmflkKL8lZAiVzmqyG9fQHf4TyIIw7Ut5FZfqCPe4CfaJxpwL8QgaLUA
d2CDhhHJuQ9JRURpSMkoQKQ3ixiBcd1uTvaZfqMDlX5T8b/WW0KLca8EBZn+A8UK
POff8dSGvJVk4f78c9gT/Fl9ysSieAK/lZWsl4B1jwChVApImd7u78IlnVxca8hu
WROP4NApTsz2zRm2cKq9f9J7e0fwz8bUT4U0QMe/1htgiwiI5jmq6eJzJ1c8bTJV
22bto49rQqTO6Q==
-----END CERTIFICATE-----
Generated at Sat Jun 7 01:23:45 2025 by rpki-client