Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/e67956-de18-40c4-b013-951e5afae9e7/1/LdgAjePP9i0vrKENmf8gw-h43N8.mft
File: LdgAjePP9i0vrKENmf8gw-h43N8.mft (raw, json)
Hash identifier: XjslqhFhYa9FGKScQ5S5+XX77vTFUZKvgrcm3OpY1jA=
Subject key identifier: E2:1F:1E:DF:42:E7:E2:A0:E3:82:7C:B3:77:E8:3C:1F:32:14:A4:47
Authority key identifier: 2D:D8:00:8D:E3:CF:F6:2D:2F:AC:A1:0D:99:FF:20:C3:E8:78:DC:DF
Certificate issuer: /CN=2dd8008de3cff62d2faca10d99ff20c3e878dcdf
Certificate serial: 01974E209077B2A6496B6FA36E11606D4417
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LdgAjePP9i0vrKENmf8gw-h43N8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/e67956-de18-40c4-b013-951e5afae9e7/1/LdgAjePP9i0vrKENmf8gw-h43N8.mft
Manifest number: 0440
Signing time: Sun 08 Jun 2025 06:00:46 +0000
Manifest this update: Sun 08 Jun 2025 06:00:46 +0000
Manifest next update: Mon 09 Jun 2025 06:00:46 +0000
Files and hashes: 1: LdgAjePP9i0vrKENmf8gw-h43N8.crl (hash: mAPssmYD6sPml4EXe9UDJ7i5K3DthSun0r2usdOgYsQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/e67956-de18-40c4-b013-951e5afae9e7/1/LdgAjePP9i0vrKENmf8gw-h43N8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/e67956-de18-40c4-b013-951e5afae9e7/1/LdgAjePP9i0vrKENmf8gw-h43N8.mft
rsync://rpki.ripe.net/repository/DEFAULT/LdgAjePP9i0vrKENmf8gw-h43N8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:20:90:77:b2:a6:49:6b:6f:a3:6e:11:60:6d:44:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dd8008de3cff62d2faca10d99ff20c3e878dcdf
Validity
Not Before: Jun 8 06:00:46 2025 GMT
Not After : Jun 9 06:00:46 2025 GMT
Subject: CN=e21f1edf42e7e2a0e3827cb377e83c1f3214a447
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:9d:07:91:4c:76:3d:61:92:86:0b:8c:f3:38:
08:73:a6:46:64:5d:5e:bf:1b:fb:02:7c:d5:8d:00:
91:28:f5:8b:e5:ca:70:7d:b2:09:0b:4d:97:12:54:
f3:90:54:36:e8:eb:cd:e1:28:8f:cf:db:93:55:cf:
dd:31:4f:d9:a1:72:18:78:3f:37:f3:f1:91:c1:7a:
68:f4:73:73:08:79:6a:3c:95:bf:2f:2c:a0:db:6a:
f1:18:81:49:af:15:a0:52:d0:87:46:fa:53:46:00:
14:7a:59:9b:b2:a2:b6:e0:0e:c3:f6:9c:ab:e4:a5:
67:31:99:9e:12:86:95:52:06:f4:23:24:fe:b9:9a:
e8:2a:01:27:26:a7:a9:b8:f3:28:c7:41:01:0d:f6:
0a:89:df:84:71:a2:c3:fa:2e:fd:e0:cf:6a:6b:c4:
32:d8:e7:49:1c:f1:bd:01:2c:5c:25:42:30:23:2c:
bd:28:c3:08:ac:27:a6:c0:6d:fc:d7:b0:45:6b:a1:
47:c4:77:70:21:23:b4:a7:f6:9a:8b:b1:5f:97:f8:
b6:d8:d6:c7:53:c5:8d:67:33:5c:ea:ba:c3:80:8e:
ba:3e:c8:fe:59:0d:58:d6:9d:fc:bf:d2:42:69:2c:
b0:2c:0b:8b:16:fe:c5:44:b6:3b:3f:a8:a6:c9:24:
7d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:1F:1E:DF:42:E7:E2:A0:E3:82:7C:B3:77:E8:3C:1F:32:14:A4:47
X509v3 Authority Key Identifier:
keyid:2D:D8:00:8D:E3:CF:F6:2D:2F:AC:A1:0D:99:FF:20:C3:E8:78:DC:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LdgAjePP9i0vrKENmf8gw-h43N8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e67956-de18-40c4-b013-951e5afae9e7/1/LdgAjePP9i0vrKENmf8gw-h43N8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e67956-de18-40c4-b013-951e5afae9e7/1/LdgAjePP9i0vrKENmf8gw-h43N8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:89:7e:cc:30:21:c3:14:88:d6:29:c0:fa:ec:de:94:19:42:
1e:2c:68:8c:71:35:5a:16:c2:d0:8f:21:ab:aa:81:c8:51:17:
03:5e:7c:94:b5:62:2f:96:20:58:4f:53:ee:1c:e7:df:a7:2e:
06:c3:1e:59:f2:6e:d7:8c:43:d3:64:e7:5c:1b:24:f8:7a:c2:
eb:c1:13:11:e4:f4:97:3c:9a:ac:55:88:a3:bf:88:0f:58:67:
7e:f2:ce:e1:6d:09:30:d0:19:45:2e:2e:6b:d6:8a:15:5c:08:
f2:9b:f4:02:9c:07:46:36:13:99:5c:0e:8c:8b:e7:f0:4c:2f:
51:ab:73:69:a6:67:33:e0:72:2d:a0:59:21:38:f4:d0:9c:9c:
04:66:68:d8:d2:a7:af:89:bd:66:92:78:58:1e:ae:eb:d3:cf:
e3:d0:5a:37:e0:de:02:af:2a:5f:4f:a9:9e:db:03:5e:16:e4:
8d:0a:87:55:0a:59:8f:d0:9a:da:87:4c:16:80:b5:4c:fb:24:
25:ff:9b:f7:ac:d3:5d:b5:2a:6a:01:42:72:a5:43:bd:cb:56:
56:78:fd:a8:fc:2f:60:a3:72:42:53:51:f0:41:f6:6d:fe:18:
5b:bc:50:86:37:26:01:ba:c1:f7:37:e5:0c:92:5b:6b:ad:cf:
38:7d:ec:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:06:25 2025 by rpki-client