Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/5b4426-a266-43ce-a9e6-b0e6058d4dd7/1/ltZpZv_aCl0OEx0TSnnZMgXIxVA.mft
File: ltZpZv_aCl0OEx0TSnnZMgXIxVA.mft (raw, json)
Hash identifier: sondsfbTarWCEW0uCcrfeqqr/wK1puL5Gt8EqiF5rwg=
Subject key identifier: D4:2C:06:92:F7:67:A7:DC:F3:50:45:DA:B0:26:D2:21:8A:8C:39:7B
Authority key identifier: 96:D6:69:66:FF:DA:0A:5D:0E:13:1D:13:4A:79:D9:32:05:C8:C5:50
Certificate issuer: /CN=96d66966ffda0a5d0e131d134a79d93205c8c550
Certificate serial: 0198D66049F6615CC8547D20EE8E888ECAF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ltZpZv_aCl0OEx0TSnnZMgXIxVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/5b4426-a266-43ce-a9e6-b0e6058d4dd7/1/ltZpZv_aCl0OEx0TSnnZMgXIxVA.mft
Manifest number: C2
Signing time: Sat 23 Aug 2025 10:01:31 +0000
Manifest this update: Sat 23 Aug 2025 10:01:31 +0000
Manifest next update: Sun 24 Aug 2025 10:01:31 +0000
Files and hashes: 1: _oaImSL8yQUz7sSolsQ6h1C9hxI.roa (hash: MY6fAwo61gC56U+DvGD1k1/jTW6ufE4wkkyXYvcNP3c=)
2: ltZpZv_aCl0OEx0TSnnZMgXIxVA.crl (hash: AqQIhIfgaE9jvaxy5Q7f6t9P/V5qXItQRvkOHK3ySow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/5b4426-a266-43ce-a9e6-b0e6058d4dd7/1/ltZpZv_aCl0OEx0TSnnZMgXIxVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/5b4426-a266-43ce-a9e6-b0e6058d4dd7/1/ltZpZv_aCl0OEx0TSnnZMgXIxVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ltZpZv_aCl0OEx0TSnnZMgXIxVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:49:f6:61:5c:c8:54:7d:20:ee:8e:88:8e:ca:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96d66966ffda0a5d0e131d134a79d93205c8c550
Validity
Not Before: Aug 23 10:01:31 2025 GMT
Not After : Aug 24 10:01:31 2025 GMT
Subject: CN=d42c0692f767a7dcf35045dab026d2218a8c397b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:69:b8:a2:12:70:ba:c6:0b:a8:54:d3:81:20:
c1:a0:54:39:79:15:63:d2:f0:7a:cf:27:4b:2c:ad:
b4:f8:8c:91:fa:78:fd:fc:d8:05:b0:ca:b6:ed:07:
a7:ac:d3:f4:b5:94:f8:95:f2:61:4e:cc:88:d9:3f:
68:40:20:bc:4d:19:6c:39:56:1e:88:f2:2b:57:d7:
0d:58:ec:7f:ac:2a:b3:5f:ec:80:44:a5:b1:7d:62:
3b:89:f4:22:58:f2:a6:ca:d9:86:e5:ad:d9:19:44:
52:1d:bc:d3:8a:ee:a9:35:d9:e5:75:74:1e:a1:c3:
ed:8d:73:20:e1:cc:06:81:77:28:a5:6c:e6:48:88:
9a:1e:08:5f:6a:d6:fa:b6:67:bd:6e:bf:40:df:82:
7e:5e:08:56:40:fb:ab:cd:41:32:b0:da:55:5b:55:
eb:06:fd:72:ec:ef:7f:cc:31:52:bf:f7:41:30:98:
4d:a3:b6:c5:4f:fe:c4:04:db:b4:8a:cf:6b:cb:11:
e1:2d:12:e3:52:58:63:6a:da:56:2e:ca:66:15:8e:
55:81:cf:e3:90:eb:9e:9d:41:26:b8:1a:ad:98:d6:
40:0f:5f:09:0e:13:bf:92:b7:cf:8e:d9:f6:c0:71:
e2:2a:c8:53:ef:75:06:11:b8:20:b2:1a:dc:12:0d:
74:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:2C:06:92:F7:67:A7:DC:F3:50:45:DA:B0:26:D2:21:8A:8C:39:7B
X509v3 Authority Key Identifier:
keyid:96:D6:69:66:FF:DA:0A:5D:0E:13:1D:13:4A:79:D9:32:05:C8:C5:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ltZpZv_aCl0OEx0TSnnZMgXIxVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/5b4426-a266-43ce-a9e6-b0e6058d4dd7/1/ltZpZv_aCl0OEx0TSnnZMgXIxVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/5b4426-a266-43ce-a9e6-b0e6058d4dd7/1/ltZpZv_aCl0OEx0TSnnZMgXIxVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:e2:9d:77:fd:9e:11:ec:c6:d7:10:f5:93:b1:64:e9:ea:13:
00:01:ec:03:a7:d0:fe:a8:51:11:f3:96:82:c3:1e:16:8d:d1:
24:58:b9:86:ac:5e:b3:5c:d9:ba:ca:1f:7b:c9:b6:10:13:61:
ac:17:57:18:28:03:d8:23:9f:0b:ae:7d:86:16:ab:7e:15:d8:
bb:ac:37:ab:6c:28:51:db:31:d5:38:a4:de:3a:d3:d5:b3:74:
b4:49:6d:f5:b5:de:af:77:ea:70:9d:cf:83:bf:db:38:5d:c6:
06:d9:fc:a7:11:64:62:95:b2:8e:16:57:f9:27:37:cf:b9:44:
ae:67:96:22:a0:29:80:e1:5f:de:bc:42:d5:3a:78:88:c9:5e:
44:ba:b9:a3:16:7f:cf:ab:f7:8b:1e:66:5d:ab:ee:8c:fc:94:
e8:74:4a:ec:e4:9f:a0:06:19:ff:30:46:30:41:34:10:97:5f:
95:d5:cb:e3:e0:52:19:b1:88:00:25:ac:00:88:d6:6a:8f:ca:
29:73:f8:54:1f:c3:2d:a6:63:bf:13:68:9d:83:89:42:8f:70:
4f:af:8c:41:e2:bb:34:55:57:4f:a2:fb:9a:87:c3:bc:81:32:
d6:30:eb:9b:2f:2b:f0:38:f3:ae:7a:0b:6b:f7:2a:52:22:40:
f1:67:dd:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:27:14 2025 by rpki-client