Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/5b4426-a266-43ce-a9e6-b0e6058d4dd7/1/ltZpZv_aCl0OEx0TSnnZMgXIxVA.mft
File: ltZpZv_aCl0OEx0TSnnZMgXIxVA.mft (raw, json)
Hash identifier: ua06KQG1tkC14N1NqNDDdKRAuvz3xEQSmya2SdxAaMk=
Subject key identifier: 29:32:AC:34:A5:02:F4:A1:D7:86:08:29:35:B3:5B:D1:59:CE:60:91
Authority key identifier: 96:D6:69:66:FF:DA:0A:5D:0E:13:1D:13:4A:79:D9:32:05:C8:C5:50
Certificate issuer: /CN=96d66966ffda0a5d0e131d134a79d93205c8c550
Certificate serial: 0199FBEAAA503520752EE09285A24B210E97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ltZpZv_aCl0OEx0TSnnZMgXIxVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/5b4426-a266-43ce-a9e6-b0e6058d4dd7/1/ltZpZv_aCl0OEx0TSnnZMgXIxVA.mft
Manifest number: 015F
Signing time: Sun 19 Oct 2025 10:01:24 +0000
Manifest this update: Sun 19 Oct 2025 10:01:24 +0000
Manifest next update: Mon 20 Oct 2025 10:01:24 +0000
Files and hashes: 1: 3xmsWGneySA3DC-ZXguOS63wWJg.roa (hash: /EUgaqeX+JqBSV8zpMIdPwMfgqWhg29j69UOVD+BYMY=)
2: DqpKurVtsDb39HbxRups2MxtLKc.roa (hash: 7+pcI79ZSotmmRkvmUhbaO+Q2eAfUcTThw6Xq6zn5k4=)
3: ltZpZv_aCl0OEx0TSnnZMgXIxVA.crl (hash: jDXZI7ndrhSBLvtQujk61ap5PaO9va0j4MzPL4Xwsow=)
4: r8VcOkeggmMRyiGEk0aUS6Ie5Z8.roa (hash: ajFyLHUwhvdifaKddAb9Tcm5mXQRQ+OBh6JdPXJygzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/5b4426-a266-43ce-a9e6-b0e6058d4dd7/1/ltZpZv_aCl0OEx0TSnnZMgXIxVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/5b4426-a266-43ce-a9e6-b0e6058d4dd7/1/ltZpZv_aCl0OEx0TSnnZMgXIxVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ltZpZv_aCl0OEx0TSnnZMgXIxVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:aa:50:35:20:75:2e:e0:92:85:a2:4b:21:0e:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96d66966ffda0a5d0e131d134a79d93205c8c550
Validity
Not Before: Oct 19 10:01:24 2025 GMT
Not After : Oct 20 10:01:24 2025 GMT
Subject: CN=2932ac34a502f4a1d786082935b35bd159ce6091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:01:6c:3c:5b:13:7c:fe:bc:26:d7:fc:21:6f:
df:45:15:c4:39:12:6e:36:db:c8:e2:f3:05:63:d8:
5d:70:fe:a8:db:d3:f3:99:ac:e1:69:db:15:1a:7e:
bc:d9:66:d5:f9:17:80:d4:5a:b9:fd:a0:a1:32:14:
70:30:37:62:ad:02:10:48:ea:5b:fd:d6:55:94:16:
b7:8d:3d:15:94:ad:7b:9c:0c:55:e8:94:4f:f2:35:
3f:5d:62:17:0d:2b:37:34:1b:45:05:bc:d4:60:b9:
c8:e6:55:de:e4:bd:13:8d:50:c4:9e:d2:64:a3:a7:
d8:71:bf:24:09:4d:92:f6:1f:48:e1:59:e5:08:62:
d2:b0:01:ae:4e:be:dc:df:99:3d:dd:66:f5:a7:31:
9f:8f:f4:40:ff:1f:d3:81:29:7d:ee:d2:0b:a9:43:
28:d9:c9:c3:63:cd:de:89:1a:c7:f7:5f:bf:fd:36:
66:8a:ac:e6:cd:d8:24:8d:f1:ba:61:4f:cb:2f:bb:
0f:9a:62:f7:d0:9b:ae:77:e0:c4:45:18:d3:78:3b:
f6:35:26:5a:f1:62:7a:08:3b:8e:62:d6:a9:f5:4f:
04:12:e6:73:3a:8a:12:9d:27:db:84:7e:a6:44:f0:
4f:a7:48:62:e4:dd:19:1d:65:fd:03:f0:2a:0e:18:
44:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:32:AC:34:A5:02:F4:A1:D7:86:08:29:35:B3:5B:D1:59:CE:60:91
X509v3 Authority Key Identifier:
keyid:96:D6:69:66:FF:DA:0A:5D:0E:13:1D:13:4A:79:D9:32:05:C8:C5:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ltZpZv_aCl0OEx0TSnnZMgXIxVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/5b4426-a266-43ce-a9e6-b0e6058d4dd7/1/ltZpZv_aCl0OEx0TSnnZMgXIxVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/5b4426-a266-43ce-a9e6-b0e6058d4dd7/1/ltZpZv_aCl0OEx0TSnnZMgXIxVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:a7:12:64:cc:4f:ec:e2:94:d0:d4:1c:32:29:9c:95:d8:dc:
06:8a:a0:56:da:22:a6:a7:25:20:3a:88:fb:be:20:40:44:ce:
92:cb:e1:5e:72:4e:bf:6a:cd:3e:dc:5d:a8:3b:73:76:a8:50:
35:9a:6e:09:94:33:28:09:65:2b:58:4f:28:03:20:99:26:18:
78:e1:4a:25:88:fe:70:16:f5:7d:c6:15:34:03:87:1c:10:e5:
ba:6e:19:19:a0:ab:b5:0a:6d:9b:2e:a4:40:5c:2e:cb:6e:04:
f2:59:d2:f9:a8:47:43:43:e2:c1:79:8d:19:6a:09:e9:ad:fe:
bd:96:17:3a:38:3a:b6:a0:4b:bb:52:c7:1c:f4:9d:23:7c:b3:
11:35:12:63:d0:d2:64:a2:d7:f3:b0:f0:5c:5b:2d:c6:20:4b:
f9:33:bf:19:f3:02:7b:77:c3:ac:48:b1:15:c8:e1:0f:5b:be:
50:7e:2d:f4:1c:6b:3c:c1:08:b8:33:06:7b:2c:c1:a0:78:da:
1d:84:cc:0b:41:46:73:d1:47:35:57:dd:68:9a:4f:0e:dc:40:
91:73:9e:f3:08:89:2a:06:cc:83:46:88:07:8b:b0:42:54:07:
55:9d:71:48:d3:fa:f5:d8:17:39:f3:1b:19:87:0e:e9:49:ec:
cd:95:51:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:06:59 2025 by rpki-client