Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ee4748-4eab-4e55-b64a-2c7a11c1fbaf/1/ldYa6EcsXI_NgTdWwWTC8YZNPJA.mft
File: ldYa6EcsXI_NgTdWwWTC8YZNPJA.mft (raw, json)
Hash identifier: +vBMpQb8vB5zsV/8g7Dp8iX3cKxhb3pYaetMDpmZiOU=
Subject key identifier: 54:49:79:1D:B9:34:C9:AF:2C:E6:D7:55:8F:01:B8:1B:08:BE:A6:9E
Authority key identifier: 95:D6:1A:E8:47:2C:5C:8F:CD:81:37:56:C1:64:C2:F1:86:4D:3C:90
Certificate issuer: /CN=95d61ae8472c5c8fcd813756c164c2f1864d3c90
Certificate serial: 019922C34EC5829C3CAFD1FBE9215741ADC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ldYa6EcsXI_NgTdWwWTC8YZNPJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ee4748-4eab-4e55-b64a-2c7a11c1fbaf/1/ldYa6EcsXI_NgTdWwWTC8YZNPJA.mft
Manifest number: 1670
Signing time: Sun 07 Sep 2025 06:00:48 +0000
Manifest this update: Sun 07 Sep 2025 06:00:48 +0000
Manifest next update: Mon 08 Sep 2025 06:00:48 +0000
Files and hashes: 1: ldYa6EcsXI_NgTdWwWTC8YZNPJA.crl (hash: WyknQbL2EBIiTsYThDKPDlK5rXzqNPIKxDPNoybeK3s=)
2: oEjv28BsSkkrSjhugPUpAGGwetU.roa (hash: CWIq+nR2seFkMvcAwstaiubts3JwM88PnSz1tCIk0CY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/ee4748-4eab-4e55-b64a-2c7a11c1fbaf/1/ldYa6EcsXI_NgTdWwWTC8YZNPJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/ee4748-4eab-4e55-b64a-2c7a11c1fbaf/1/ldYa6EcsXI_NgTdWwWTC8YZNPJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ldYa6EcsXI_NgTdWwWTC8YZNPJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:4e:c5:82:9c:3c:af:d1:fb:e9:21:57:41:ad:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95d61ae8472c5c8fcd813756c164c2f1864d3c90
Validity
Not Before: Sep 7 06:00:48 2025 GMT
Not After : Sep 8 06:00:48 2025 GMT
Subject: CN=5449791db934c9af2ce6d7558f01b81b08bea69e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8f:6f:e8:86:b6:1b:eb:ca:f0:ff:1e:85:70:
a0:09:d8:7d:e2:91:ab:fb:5a:44:93:e8:f9:bb:a9:
ff:a0:0f:1c:15:39:91:b0:fb:aa:b3:76:62:68:11:
25:db:fe:1d:8d:36:72:4c:0e:b2:5b:fd:bd:4b:5b:
9d:e9:23:78:b8:23:87:9e:c2:d5:06:e9:2a:e5:5f:
6b:6c:f5:60:18:d4:25:e7:2e:73:bf:86:ec:7e:49:
04:88:15:fa:ce:ec:0f:7f:88:e7:84:96:07:41:99:
64:38:80:15:12:55:6c:79:36:cc:2b:19:13:94:9a:
aa:6b:59:4c:5e:81:d0:9b:a1:83:e5:48:1a:b2:52:
2f:d3:7b:94:c4:0a:5d:e1:b3:fb:e5:55:cb:49:87:
e2:de:4c:fb:5c:71:b8:0f:92:32:9b:c4:e0:5c:4a:
d6:54:4f:18:36:5b:ab:55:99:9b:48:35:b6:db:89:
a3:b1:49:e0:b4:f8:d7:30:d6:0f:2b:60:73:3e:9c:
72:69:76:a7:92:d2:b8:8b:4b:73:25:86:a8:24:e8:
53:9a:ac:99:6b:f6:ae:89:66:74:54:1f:a0:8e:08:
2e:f7:55:a4:27:70:12:76:c9:56:be:1a:37:9f:6b:
67:03:01:fd:ee:81:fc:cf:50:ab:4c:03:0d:63:ac:
1a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:49:79:1D:B9:34:C9:AF:2C:E6:D7:55:8F:01:B8:1B:08:BE:A6:9E
X509v3 Authority Key Identifier:
keyid:95:D6:1A:E8:47:2C:5C:8F:CD:81:37:56:C1:64:C2:F1:86:4D:3C:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ldYa6EcsXI_NgTdWwWTC8YZNPJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ee4748-4eab-4e55-b64a-2c7a11c1fbaf/1/ldYa6EcsXI_NgTdWwWTC8YZNPJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ee4748-4eab-4e55-b64a-2c7a11c1fbaf/1/ldYa6EcsXI_NgTdWwWTC8YZNPJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:b6:48:82:a3:93:c5:6a:2d:86:75:59:29:f9:cd:da:e1:c5:
44:3c:9d:53:7d:26:8c:98:66:de:a7:34:aa:79:ea:54:8c:5a:
4f:e9:e1:41:61:a6:89:bc:8e:41:13:95:b8:be:2c:d6:46:7b:
c3:d4:8e:f5:f9:b9:13:2e:0b:3e:97:21:53:c5:26:23:86:71:
b7:c4:07:41:ba:f3:f7:42:8e:e8:b1:c3:c6:d7:69:af:d0:60:
21:29:40:94:9d:a6:64:0c:6d:9f:d8:aa:83:cc:e5:34:31:7e:
e1:e6:13:12:f6:a9:33:2c:b0:c2:83:73:cb:b0:d3:07:47:bf:
00:d4:b3:03:b2:ab:b5:6d:66:c4:44:99:cd:d6:42:ad:a0:e5:
8d:33:6a:a8:5a:3c:91:f6:b3:a0:96:dc:3c:4c:dd:19:03:75:
68:35:7e:9f:89:2f:98:ad:75:36:ef:11:37:cc:96:52:92:4c:
17:b6:98:59:be:a0:ea:10:8c:35:ae:2c:e8:71:f2:fb:96:91:
be:32:87:c5:15:f6:65:25:84:4a:8f:f3:8c:29:5c:e3:ef:2e:
53:92:c4:62:a5:e9:97:f9:21:0e:0d:37:09:be:62:cf:19:ae:
6e:fc:ca:00:89:ba:36:e6:8f:2a:fa:4d:74:7e:ab:29:48:54:
5d:5d:45:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:20:29 2025 by rpki-client