Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/0c5265-32af-48f2-906d-b652c85556bb/1/lt2IX_TTiauqvQOlF10JdBrLpg0.mft
File: lt2IX_TTiauqvQOlF10JdBrLpg0.mft (raw, json)
Hash identifier: AKv0ZNCLpuj48F516AdAN0G7OklfNSB994lcHCef3/U=
Subject key identifier: 32:26:C9:23:B9:61:D8:D6:F6:B8:C6:E0:C1:25:6B:93:F2:6A:D5:EA
Authority key identifier: 96:DD:88:5F:F4:D3:89:AB:AA:BD:03:A5:17:5D:09:74:1A:CB:A6:0D
Certificate issuer: /CN=96dd885ff4d389abaabd03a5175d09741acba60d
Certificate serial: 0199FDDA53197C83604BBE4B169FEA29EABF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lt2IX_TTiauqvQOlF10JdBrLpg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/0c5265-32af-48f2-906d-b652c85556bb/1/lt2IX_TTiauqvQOlF10JdBrLpg0.mft
Manifest number: 013B
Signing time: Sun 19 Oct 2025 19:02:47 +0000
Manifest this update: Sun 19 Oct 2025 19:02:47 +0000
Manifest next update: Mon 20 Oct 2025 19:02:47 +0000
Files and hashes: 1: hdbgy59MRssZX30bGqV8gIYXM48.roa (hash: g1IyZ0aHYMFjjiI9SIYZwd4GtNo/PD9i0KvcrdPt5KQ=)
2: lt2IX_TTiauqvQOlF10JdBrLpg0.crl (hash: sGt23EKlt2yL7LGZnJehlJ1bpNf4lFvB9qcKvjL+21w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/0c5265-32af-48f2-906d-b652c85556bb/1/lt2IX_TTiauqvQOlF10JdBrLpg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/0c5265-32af-48f2-906d-b652c85556bb/1/lt2IX_TTiauqvQOlF10JdBrLpg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lt2IX_TTiauqvQOlF10JdBrLpg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:53:19:7c:83:60:4b:be:4b:16:9f:ea:29:ea:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96dd885ff4d389abaabd03a5175d09741acba60d
Validity
Not Before: Oct 19 19:02:47 2025 GMT
Not After : Oct 20 19:02:47 2025 GMT
Subject: CN=3226c923b961d8d6f6b8c6e0c1256b93f26ad5ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:eb:3f:04:67:74:8c:6d:ac:c7:f6:05:f6:fa:
da:a2:cb:1a:e0:f1:95:c6:f5:72:ad:38:ef:a2:22:
21:0c:45:7b:89:27:0a:de:ea:c7:38:62:11:94:1e:
0f:0f:49:d1:4f:1a:a6:03:67:c7:51:33:18:48:f2:
31:59:50:28:2e:4a:67:4e:98:66:2a:c3:56:82:b8:
10:90:48:44:20:75:7a:cb:8c:a3:f2:2f:10:42:6b:
49:93:32:bb:f6:4d:e6:09:91:a8:c2:53:90:6f:17:
af:ef:48:b1:10:a6:e3:6a:f3:d0:17:41:1f:ec:fe:
78:01:d7:27:a6:59:db:c5:0f:4e:36:1f:2b:8f:80:
30:ea:4c:3c:78:1c:cb:3e:39:3f:7f:5e:27:95:86:
18:a3:7a:06:c6:b5:68:d5:26:2c:eb:2b:61:7a:bd:
46:dc:b8:1b:d2:1a:93:8a:59:23:e0:55:77:13:4d:
2a:ea:3a:51:db:e1:b6:67:1f:5d:fa:c7:a5:07:d0:
cc:7c:6a:79:01:6b:50:55:43:e2:b2:e5:dd:1b:43:
78:a3:29:6f:01:2d:de:58:4d:b7:69:2d:02:4d:54:
19:9c:1c:ed:c6:1a:70:7c:08:30:6f:22:41:36:cd:
58:1c:8b:26:9c:06:bc:fe:f7:21:1c:02:4a:8c:a0:
9a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:26:C9:23:B9:61:D8:D6:F6:B8:C6:E0:C1:25:6B:93:F2:6A:D5:EA
X509v3 Authority Key Identifier:
keyid:96:DD:88:5F:F4:D3:89:AB:AA:BD:03:A5:17:5D:09:74:1A:CB:A6:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lt2IX_TTiauqvQOlF10JdBrLpg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/0c5265-32af-48f2-906d-b652c85556bb/1/lt2IX_TTiauqvQOlF10JdBrLpg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/0c5265-32af-48f2-906d-b652c85556bb/1/lt2IX_TTiauqvQOlF10JdBrLpg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:78:ea:41:7f:78:e3:6e:34:34:4b:cd:f4:5d:07:ba:b8:8d:
1f:28:6d:fe:7c:03:e1:9a:1e:52:30:72:92:89:c4:89:40:04:
1a:42:eb:26:55:2b:e9:fc:7a:a0:81:22:b3:a8:9d:b8:b2:2e:
0f:ab:8f:0e:41:7f:0f:2b:90:ca:31:ce:94:e7:3e:68:d0:62:
15:8a:3b:c7:8a:ab:58:b1:39:07:3c:8a:90:9b:d1:36:fe:43:
e1:cf:11:9c:ec:d8:9d:9e:4d:50:40:14:50:ab:d2:07:34:06:
9d:ff:ce:c9:6c:44:84:21:13:c9:85:e4:47:f4:5c:39:fb:c4:
76:03:1e:c2:ac:a1:8e:31:e8:79:06:d5:cf:4b:70:a3:61:36:
8b:78:29:93:48:98:39:85:97:ce:20:8d:50:eb:31:08:25:60:
72:d6:08:48:45:3a:e5:da:61:9c:a4:bf:49:19:dd:a0:80:ef:
26:48:c5:f0:fc:56:63:e6:db:4e:0b:97:e0:0b:3c:06:ee:60:
b7:be:88:6b:3c:2c:3a:99:ca:67:b9:d3:2f:81:f0:15:3e:f4:
f1:75:ce:55:14:0c:52:0d:35:37:ea:9b:31:bd:3e:99:91:37:
53:2b:8f:d6:44:2f:ae:09:f7:22:a1:9e:1b:51:31:bf:ad:22:
60:cc:31:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:53:40 2025 by rpki-client