Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/e67956-de18-40c4-b013-951e5afae9e7/1/LdgAjePP9i0vrKENmf8gw-h43N8.mft
File: LdgAjePP9i0vrKENmf8gw-h43N8.mft (raw, json)
Hash identifier: 01E8yatUbqQDCVbkDWn9eN0dLf4HkYlZaycFZxsI4xQ=
Subject key identifier: A7:E3:61:09:23:54:4A:49:F7:DB:94:51:E4:DD:1D:93:04:85:4F:4D
Authority key identifier: 2D:D8:00:8D:E3:CF:F6:2D:2F:AC:A1:0D:99:FF:20:C3:E8:78:DC:DF
Certificate issuer: /CN=2dd8008de3cff62d2faca10d99ff20c3e878dcdf
Certificate serial: 019A71B78E4082CDFEA968D0EE00B0434233
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LdgAjePP9i0vrKENmf8gw-h43N8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/e67956-de18-40c4-b013-951e5afae9e7/1/LdgAjePP9i0vrKENmf8gw-h43N8.mft
Manifest number: 05E0
Signing time: Tue 11 Nov 2025 07:00:46 +0000
Manifest this update: Tue 11 Nov 2025 07:00:46 +0000
Manifest next update: Wed 12 Nov 2025 07:00:46 +0000
Files and hashes: 1: LdgAjePP9i0vrKENmf8gw-h43N8.crl (hash: 12Sa36M0/JQnjFjE2BmKajRAS9gHmOLDw/GfKX3ixE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/e67956-de18-40c4-b013-951e5afae9e7/1/LdgAjePP9i0vrKENmf8gw-h43N8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/e67956-de18-40c4-b013-951e5afae9e7/1/LdgAjePP9i0vrKENmf8gw-h43N8.mft
rsync://rpki.ripe.net/repository/DEFAULT/LdgAjePP9i0vrKENmf8gw-h43N8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:8e:40:82:cd:fe:a9:68:d0:ee:00:b0:43:42:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dd8008de3cff62d2faca10d99ff20c3e878dcdf
Validity
Not Before: Nov 11 07:00:46 2025 GMT
Not After : Nov 12 07:00:46 2025 GMT
Subject: CN=a7e3610923544a49f7db9451e4dd1d9304854f4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3e:98:d8:11:8c:44:21:07:12:08:a7:ee:5f:
52:49:d6:76:f3:47:49:73:7a:c2:4c:81:ec:7f:23:
b5:08:f2:61:3a:c1:bb:3b:8b:4b:f8:32:70:b1:87:
2b:b9:1f:2e:93:76:fd:93:03:46:ea:5c:46:97:66:
71:7a:01:a0:53:85:e6:f2:a3:d1:10:ba:4c:1d:86:
cc:9f:3a:07:60:e5:7e:92:1a:dd:23:ba:1c:3c:eb:
44:25:9a:de:20:91:4c:d8:c8:f8:fe:79:20:70:2a:
fb:34:b3:ea:b0:eb:24:80:1c:83:61:8d:c9:d4:47:
08:ca:b9:8c:72:9f:68:ae:d1:25:33:fb:86:47:a2:
77:21:48:a7:ad:7c:6c:5b:cb:cf:f3:8c:15:41:6f:
a9:f9:af:f7:5d:3b:58:95:e5:48:b4:17:28:f0:94:
bf:39:79:b0:4b:a9:da:3e:54:99:ee:dd:cb:32:35:
75:ef:8b:82:81:61:45:46:af:06:e8:dc:eb:13:5e:
e6:fe:af:4b:4e:f1:29:05:07:5f:36:10:3b:c5:1c:
cc:f4:ed:d6:ec:67:0c:1d:f8:be:bc:2c:6b:c0:36:
a9:68:9c:05:44:26:fa:36:54:e5:05:9c:70:bb:88:
5c:00:5f:c8:6a:96:d5:b8:58:51:ff:f5:26:1e:b8:
2d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:E3:61:09:23:54:4A:49:F7:DB:94:51:E4:DD:1D:93:04:85:4F:4D
X509v3 Authority Key Identifier:
keyid:2D:D8:00:8D:E3:CF:F6:2D:2F:AC:A1:0D:99:FF:20:C3:E8:78:DC:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LdgAjePP9i0vrKENmf8gw-h43N8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e67956-de18-40c4-b013-951e5afae9e7/1/LdgAjePP9i0vrKENmf8gw-h43N8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e67956-de18-40c4-b013-951e5afae9e7/1/LdgAjePP9i0vrKENmf8gw-h43N8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:d5:36:9c:c5:37:04:9c:a4:f6:4d:6b:89:fc:08:92:6f:1a:
b1:77:a3:9b:25:38:f9:6a:a2:b8:88:71:d9:c7:fe:26:47:6d:
db:9e:dd:d2:74:32:98:f5:0a:08:07:83:5a:1c:a1:8a:83:65:
c4:af:04:f6:d4:0a:b4:c6:87:fe:ac:f8:e3:a3:44:2b:f5:39:
a3:81:af:9d:58:b4:01:c3:a6:7e:52:e2:1f:9d:fd:4d:9b:1c:
b2:83:82:94:60:c8:6e:b2:d7:5b:c1:b8:77:ae:3a:a5:bd:31:
ab:74:5d:c0:69:6e:3c:c9:12:5d:10:d7:b7:b7:1f:54:f2:2e:
7d:6e:2f:19:84:84:56:c7:19:0d:eb:13:47:89:02:02:1f:d8:
ee:31:c2:d0:26:9d:cd:87:6d:60:6e:9a:21:6d:1e:8c:2b:04:
89:d7:b5:22:fe:f5:97:5c:0e:65:e9:6c:1d:c6:36:90:13:e8:
bc:4b:5a:da:af:81:69:52:53:59:61:a7:c6:8b:41:41:ad:03:
45:f3:1e:4c:2a:1d:11:15:4b:77:b2:3a:83:c6:d2:07:ca:3e:
35:8b:d1:f6:9b:9f:4a:de:12:0d:21:5b:2c:4a:45:2d:ee:97:
41:bd:e6:a6:15:c9:b8:d3:43:9f:b7:2d:cf:be:14:aa:a5:c7:
5d:e4:c7:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:12:57 2025 by rpki-client