Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ee4748-4eab-4e55-b64a-2c7a11c1fbaf/1/ldYa6EcsXI_NgTdWwWTC8YZNPJA.mft
File: ldYa6EcsXI_NgTdWwWTC8YZNPJA.mft (raw, json)
Hash identifier: 5O1k5BOuAd+O0RlzY60B+8Hu7Sh/d/XfvgYN/7yD02M=
Subject key identifier: 66:D4:77:64:ED:1D:75:3A:99:A9:5D:90:10:24:BE:66:51:DF:DD:C0
Authority key identifier: 95:D6:1A:E8:47:2C:5C:8F:CD:81:37:56:C1:64:C2:F1:86:4D:3C:90
Certificate issuer: /CN=95d61ae8472c5c8fcd813756c164c2f1864d3c90
Certificate serial: 019A72939362650E0949D1142AE3D72A97E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ldYa6EcsXI_NgTdWwWTC8YZNPJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ee4748-4eab-4e55-b64a-2c7a11c1fbaf/1/ldYa6EcsXI_NgTdWwWTC8YZNPJA.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 11:01:05 +0000
Manifest this update: Tue 11 Nov 2025 11:01:05 +0000
Manifest next update: Wed 12 Nov 2025 11:01:05 +0000
Files and hashes: 1: ldYa6EcsXI_NgTdWwWTC8YZNPJA.crl (hash: uK8Ez4PAv+B0VBBIzIddQIuQWtCAhRmWEWjTebiW7S4=)
2: oEjv28BsSkkrSjhugPUpAGGwetU.roa (hash: CWIq+nR2seFkMvcAwstaiubts3JwM88PnSz1tCIk0CY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/ee4748-4eab-4e55-b64a-2c7a11c1fbaf/1/ldYa6EcsXI_NgTdWwWTC8YZNPJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/ee4748-4eab-4e55-b64a-2c7a11c1fbaf/1/ldYa6EcsXI_NgTdWwWTC8YZNPJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ldYa6EcsXI_NgTdWwWTC8YZNPJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:93:62:65:0e:09:49:d1:14:2a:e3:d7:2a:97:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95d61ae8472c5c8fcd813756c164c2f1864d3c90
Validity
Not Before: Nov 11 11:01:05 2025 GMT
Not After : Nov 12 11:01:05 2025 GMT
Subject: CN=66d47764ed1d753a99a95d901024be6651dfddc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8b:b0:de:1b:5c:a6:e5:09:50:6a:52:d6:0b:
7b:3b:7c:a1:4b:3c:22:b3:25:66:11:9f:29:16:2f:
d5:06:33:37:a8:42:93:5a:fe:15:55:76:db:27:01:
ef:a4:2a:f8:e0:88:a7:32:3f:2d:bf:b8:bc:c3:f2:
25:05:5f:be:22:84:dc:14:50:ff:fc:6d:69:7c:43:
67:2a:2a:d1:56:e9:96:03:84:1f:c5:6e:39:45:25:
3d:d2:aa:e6:69:d3:91:55:10:bf:93:72:e4:b7:de:
33:ef:fc:dc:ce:03:8d:75:f2:1c:50:25:95:7c:8c:
9d:bd:9e:27:59:1b:0b:5c:06:a7:24:28:a1:6e:27:
05:20:64:1b:db:f5:27:c8:8f:45:3a:a2:a1:d7:17:
b1:11:9e:4b:bf:b6:8c:66:c1:3b:66:f3:70:65:76:
35:06:f5:d7:09:0d:d7:dc:10:cc:7a:11:34:e3:93:
e0:93:4f:5c:68:41:fb:76:33:d9:4e:e6:24:52:88:
8f:07:04:47:82:4c:02:5f:db:a4:f0:c3:d4:32:00:
14:24:90:59:85:49:ba:c9:45:ef:e1:1f:e2:e4:8f:
17:53:4e:70:4d:1a:69:ee:9a:77:04:b6:06:da:51:
f9:a3:e0:e6:28:88:ba:95:e2:9c:eb:ce:ad:3d:f2:
f6:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:D4:77:64:ED:1D:75:3A:99:A9:5D:90:10:24:BE:66:51:DF:DD:C0
X509v3 Authority Key Identifier:
keyid:95:D6:1A:E8:47:2C:5C:8F:CD:81:37:56:C1:64:C2:F1:86:4D:3C:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ldYa6EcsXI_NgTdWwWTC8YZNPJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ee4748-4eab-4e55-b64a-2c7a11c1fbaf/1/ldYa6EcsXI_NgTdWwWTC8YZNPJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ee4748-4eab-4e55-b64a-2c7a11c1fbaf/1/ldYa6EcsXI_NgTdWwWTC8YZNPJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:d7:f4:60:21:76:cf:8d:a1:64:69:ad:47:03:5c:11:99:07:
52:aa:09:b1:d1:ad:84:89:06:a3:cb:f9:18:9f:64:df:97:8d:
cc:62:d1:b7:81:46:94:bf:27:2d:5a:18:17:e5:ac:af:f0:d9:
1f:26:12:b0:f2:3b:21:ea:47:d1:2b:18:11:2f:cd:c3:b1:89:
48:25:1e:07:04:80:3b:b6:86:3d:10:e7:eb:27:37:6a:96:5a:
20:18:f7:1c:ea:ef:56:c1:db:f9:2f:c9:9c:94:b0:02:8f:2b:
45:35:44:e7:4a:ce:45:7c:a5:51:37:04:7e:b6:ea:72:2a:4a:
a7:f8:cf:53:15:54:ca:d4:a7:f6:3e:5b:8c:f1:05:73:f0:a7:
a0:ca:25:c4:db:a5:d9:43:c5:fc:02:96:30:51:fc:e3:07:39:
70:3c:c5:51:6d:62:ca:72:a6:99:54:0e:ff:55:76:01:5e:5f:
01:62:62:bf:17:29:e5:40:38:5e:21:41:a5:f8:a6:3e:cc:8a:
19:41:bb:48:3e:a4:f5:a9:e7:d1:d9:9e:c7:23:d6:8e:56:97:
65:4a:8a:fe:f7:72:ab:7e:05:32:c3:ed:35:60:ea:5c:75:c5:
b6:b2:1f:a0:8b:22:2a:3d:5d:1d:28:04:9e:ff:b1:d6:0c:92:
96:b4:55:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:02:32 2025 by rpki-client