Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/319d61-560a-44fd-aa25-49671acdf486/1/LdOuI8tG7pwhlQ78tg3voJS6VUg.mft
File: LdOuI8tG7pwhlQ78tg3voJS6VUg.mft (raw, json)
Hash identifier: ANSSuiEM3mQzZgnlbbm0pqmMkc7FeQccalj4BLFNrmM=
Subject key identifier: A7:48:E6:11:39:7C:A0:78:A0:B6:8A:CA:53:57:F4:1B:3C:A7:0E:AB
Authority key identifier: 2D:D3:AE:23:CB:46:EE:9C:21:95:0E:FC:B6:0D:EF:A0:94:BA:55:48
Certificate issuer: /CN=2dd3ae23cb46ee9c21950efcb60defa094ba5548
Certificate serial: 019A725C6E2C369B89BFA6682E73B05A2E4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LdOuI8tG7pwhlQ78tg3voJS6VUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/319d61-560a-44fd-aa25-49671acdf486/1/LdOuI8tG7pwhlQ78tg3voJS6VUg.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 10:00:51 +0000
Manifest this update: Tue 11 Nov 2025 10:00:51 +0000
Manifest next update: Wed 12 Nov 2025 10:00:51 +0000
Files and hashes: 1: LdOuI8tG7pwhlQ78tg3voJS6VUg.crl (hash: QjdK+V15r4qraPLaDbmnBwq7uN+HRCTtxGDrzMOxHIY=)
2: U56329e4gM-IVTVVEt6zrVkDGjo.roa (hash: we1XyD3BJFEUnklb4jnEqKHGEO1FUWwSSjWf88RrLFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/319d61-560a-44fd-aa25-49671acdf486/1/LdOuI8tG7pwhlQ78tg3voJS6VUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/319d61-560a-44fd-aa25-49671acdf486/1/LdOuI8tG7pwhlQ78tg3voJS6VUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LdOuI8tG7pwhlQ78tg3voJS6VUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:6e:2c:36:9b:89:bf:a6:68:2e:73:b0:5a:2e:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dd3ae23cb46ee9c21950efcb60defa094ba5548
Validity
Not Before: Nov 11 10:00:51 2025 GMT
Not After : Nov 12 10:00:51 2025 GMT
Subject: CN=a748e611397ca078a0b68aca5357f41b3ca70eab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:fe:1d:b6:97:9d:d8:22:c8:c9:41:07:cb:c5:
e3:d2:17:04:fd:4c:76:18:f0:62:7a:9a:96:95:9b:
8e:fc:5b:41:ff:71:22:c7:70:d5:6b:91:36:86:a8:
72:9a:1a:61:5c:1f:22:ca:d5:47:08:3f:8a:bc:8b:
82:2d:98:82:cf:91:4f:93:28:80:c5:bf:17:eb:27:
28:72:6b:8c:29:3e:76:c6:f7:bd:14:36:a0:4b:e0:
f3:0b:b1:6f:99:b1:a0:d8:25:ff:eb:22:c3:7f:4d:
bc:1f:94:87:3a:61:32:61:10:7b:dc:a5:d5:38:be:
c1:95:f4:2b:fb:c9:75:25:e2:83:71:38:d1:3c:75:
f4:5f:5d:2b:71:63:81:01:dc:3e:e5:8d:fb:43:ba:
eb:3a:be:dd:4b:56:98:e3:aa:89:0b:cc:60:b4:6b:
a3:a3:f8:59:d7:a3:d6:05:3c:07:4b:f1:60:2a:39:
74:14:46:a6:35:d5:f8:bb:35:85:f4:23:2a:3c:9b:
3a:39:15:3e:e9:a0:9f:3b:58:fb:53:6f:be:32:5c:
13:2c:ef:cb:10:45:6e:a3:10:b3:57:00:a8:18:8c:
dd:fe:f8:05:b0:98:9e:84:16:8e:e4:ba:80:26:58:
36:8b:4e:90:7b:81:80:f7:8c:52:eb:a1:85:6b:c9:
1d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:48:E6:11:39:7C:A0:78:A0:B6:8A:CA:53:57:F4:1B:3C:A7:0E:AB
X509v3 Authority Key Identifier:
keyid:2D:D3:AE:23:CB:46:EE:9C:21:95:0E:FC:B6:0D:EF:A0:94:BA:55:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LdOuI8tG7pwhlQ78tg3voJS6VUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/319d61-560a-44fd-aa25-49671acdf486/1/LdOuI8tG7pwhlQ78tg3voJS6VUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/319d61-560a-44fd-aa25-49671acdf486/1/LdOuI8tG7pwhlQ78tg3voJS6VUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:9c:4f:98:bf:ce:bb:02:a9:30:b0:ea:ae:b2:00:a1:e0:27:
2a:59:64:8d:91:90:01:b4:de:01:f9:57:8f:66:cf:69:98:1a:
ac:61:d0:e7:85:ac:d3:9d:75:89:82:e1:98:e4:1b:ca:a2:fe:
76:f6:10:2e:16:1b:52:8d:f4:f7:24:6a:93:3e:a5:5a:b3:db:
00:aa:e8:52:05:a2:e7:b3:6e:04:db:c0:2f:fd:8f:31:5f:8e:
db:45:f6:b6:fe:16:b4:cd:1c:8e:ac:63:3f:16:a6:9f:e9:4d:
53:f5:7c:de:ca:79:0a:57:37:72:56:2a:ed:f7:01:b7:f2:31:
3a:2e:95:6c:4c:2f:de:79:a9:48:f0:f2:d2:ed:ba:28:c8:1b:
7e:4a:bf:94:65:e7:38:46:77:c8:92:75:09:6a:7f:75:cc:86:
a1:2a:83:63:5b:16:a1:9c:cd:de:05:4a:07:87:23:bc:55:89:
7f:2e:39:c0:21:a2:54:f4:f0:62:de:07:f0:75:6d:ae:59:a7:
e6:43:ce:77:83:d9:b8:84:2a:41:73:60:a4:fe:89:7c:96:79:
d6:c1:de:ab:97:05:45:a7:38:5c:00:33:60:51:b2:a4:6d:0e:
b8:25:77:83:8c:93:d4:e0:bf:db:fd:11:ef:44:b3:33:94:9f:
e1:f6:ac:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:19:11 2025 by rpki-client