Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/5b4426-a266-43ce-a9e6-b0e6058d4dd7/1/ltZpZv_aCl0OEx0TSnnZMgXIxVA.mft
File: ltZpZv_aCl0OEx0TSnnZMgXIxVA.mft (raw, json)
Hash identifier: +h7c6oRK32p5wYsazaPmcvk9lYGZFjjLwynLlz7te5k=
Subject key identifier: 73:C5:2D:63:1E:1A:36:1C:85:26:13:9C:EB:62:27:76:36:9E:7B:84
Authority key identifier: 96:D6:69:66:FF:DA:0A:5D:0E:13:1D:13:4A:79:D9:32:05:C8:C5:50
Certificate issuer: /CN=96d66966ffda0a5d0e131d134a79d93205c8c550
Certificate serial: 0197B8900D4D64E994BD45DFE826BCEA215D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ltZpZv_aCl0OEx0TSnnZMgXIxVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/5b4426-a266-43ce-a9e6-b0e6058d4dd7/1/ltZpZv_aCl0OEx0TSnnZMgXIxVA.mft
Manifest number: 2E
Signing time: Sat 28 Jun 2025 22:02:17 +0000
Manifest this update: Sat 28 Jun 2025 22:02:17 +0000
Manifest next update: Sun 29 Jun 2025 22:02:17 +0000
Files and hashes: 1: _oaImSL8yQUz7sSolsQ6h1C9hxI.roa (hash: MY6fAwo61gC56U+DvGD1k1/jTW6ufE4wkkyXYvcNP3c=)
2: ltZpZv_aCl0OEx0TSnnZMgXIxVA.crl (hash: eyhqReVTmhzB0UXWBErCG0OrBEMZb8kPHCv1/fmAISY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/5b4426-a266-43ce-a9e6-b0e6058d4dd7/1/ltZpZv_aCl0OEx0TSnnZMgXIxVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/5b4426-a266-43ce-a9e6-b0e6058d4dd7/1/ltZpZv_aCl0OEx0TSnnZMgXIxVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ltZpZv_aCl0OEx0TSnnZMgXIxVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 22:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:0d:4d:64:e9:94:bd:45:df:e8:26:bc:ea:21:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96d66966ffda0a5d0e131d134a79d93205c8c550
Validity
Not Before: Jun 28 22:02:17 2025 GMT
Not After : Jun 29 22:02:17 2025 GMT
Subject: CN=73c52d631e1a361c8526139ceb622776369e7b84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:0a:75:1f:de:1c:75:22:d3:59:cf:81:a2:e1:
0f:92:e2:55:af:6f:50:b8:9f:71:88:fb:52:e9:40:
27:d2:34:ca:b8:fd:12:2b:5d:66:2e:4b:d6:46:e3:
de:cb:46:a7:b1:9c:48:04:36:ef:d0:5b:af:c1:47:
0a:3a:ea:24:5a:3b:37:3a:90:87:09:e0:3d:18:51:
e2:2f:9b:ba:8b:7e:73:7e:e8:0b:ef:0d:52:3b:25:
96:09:a5:88:e8:be:42:a8:c2:5c:b4:4a:e7:03:6b:
1f:ee:d8:30:e0:65:c3:bd:8d:3d:04:db:65:34:4c:
73:83:f7:06:66:a9:9d:e1:04:41:5f:d6:8c:d0:3b:
11:0a:a8:0f:ed:a3:b4:91:a1:f6:ee:b7:c5:39:87:
5b:a2:69:f2:2a:23:af:54:0f:71:55:af:ed:cf:b5:
81:d7:2d:19:e9:cb:57:81:e5:15:c9:2a:47:5d:21:
a5:4a:93:06:a5:bf:59:4c:63:bf:2d:93:69:2e:78:
73:1a:0e:c0:1a:c1:c5:ef:a0:6f:64:f3:6d:80:34:
f6:45:04:9e:16:6b:aa:a9:01:34:40:f8:0d:8d:21:
31:76:63:43:a6:c5:59:96:5e:11:46:52:1a:94:d9:
6a:5e:7f:16:60:c2:d3:ae:59:81:89:5c:72:56:b5:
b1:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:C5:2D:63:1E:1A:36:1C:85:26:13:9C:EB:62:27:76:36:9E:7B:84
X509v3 Authority Key Identifier:
keyid:96:D6:69:66:FF:DA:0A:5D:0E:13:1D:13:4A:79:D9:32:05:C8:C5:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ltZpZv_aCl0OEx0TSnnZMgXIxVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/5b4426-a266-43ce-a9e6-b0e6058d4dd7/1/ltZpZv_aCl0OEx0TSnnZMgXIxVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/5b4426-a266-43ce-a9e6-b0e6058d4dd7/1/ltZpZv_aCl0OEx0TSnnZMgXIxVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:3b:db:8c:44:f2:42:37:21:3d:51:eb:c5:8d:72:ab:08:5c:
58:8f:b6:a2:a6:0d:83:fe:d4:71:45:9a:36:5e:ec:2c:7b:c7:
de:9c:f4:3d:98:61:6d:ae:60:6b:e9:a5:bd:b3:80:bc:71:0a:
74:80:b9:71:b6:c1:b2:dc:9b:86:d7:eb:0a:46:ff:25:93:55:
2e:82:c4:c8:96:b0:96:7e:96:df:d0:2b:68:a2:a2:df:c0:8e:
5e:10:c7:29:d2:5a:3c:56:3f:c6:f1:a3:b2:d2:1a:d6:ef:47:
04:9a:14:d4:5f:82:1d:90:15:5f:18:d4:e8:7e:b3:19:de:19:
83:2d:d3:75:e6:6f:0a:8e:6c:bf:21:3a:79:05:c5:0f:b9:65:
93:fa:9a:3b:23:6c:af:09:c0:da:5e:8c:20:3a:f4:0a:60:2b:
e9:eb:03:65:89:45:5f:c4:e8:6d:dc:d4:b0:53:0e:51:cb:94:
21:85:77:0a:7e:a6:96:f9:61:62:51:08:d2:df:c3:ae:e6:78:
2c:6e:fa:86:97:26:b9:6b:14:83:0b:4c:e1:c6:20:49:5a:8a:
e0:1f:87:51:ca:91:a2:69:e6:9f:a3:1e:00:40:b9:5a:30:cb:
db:28:f5:ac:82:97:e6:30:7a:36:68:5b:20:09:4b:52:48:3a:
53:a6:95:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:02:53 2025 by rpki-client