Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/552e68-611d-4ad8-a7e1-48bfac2cdc72/1/Ltf7wd8AcKz1s6Z85OIS29A6-tc.mft
File: Ltf7wd8AcKz1s6Z85OIS29A6-tc.mft (raw, json)
Hash identifier: nTNTrQvzV0hKCxnrkoT3nlUxODmfbC3mx97+8RDPhXg=
Subject key identifier: 27:2E:3B:93:AC:53:49:DB:93:C1:08:E6:C7:C2:53:2E:40:11:BE:F2
Authority key identifier: 2E:D7:FB:C1:DF:00:70:AC:F5:B3:A6:7C:E4:E2:12:DB:D0:3A:FA:D7
Certificate issuer: /CN=2ed7fbc1df0070acf5b3a67ce4e212dbd03afad7
Certificate serial: 0198D4739B674827606765C8C48D63B829A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ltf7wd8AcKz1s6Z85OIS29A6-tc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/552e68-611d-4ad8-a7e1-48bfac2cdc72/1/Ltf7wd8AcKz1s6Z85OIS29A6-tc.mft
Manifest number: 0675
Signing time: Sat 23 Aug 2025 01:03:22 +0000
Manifest this update: Sat 23 Aug 2025 01:03:22 +0000
Manifest next update: Sun 24 Aug 2025 01:03:22 +0000
Files and hashes: 1: Ltf7wd8AcKz1s6Z85OIS29A6-tc.crl (hash: NvygsBlxanmYY4060KU5xmHSSE3xbz6iIbYK+OsNsLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/552e68-611d-4ad8-a7e1-48bfac2cdc72/1/Ltf7wd8AcKz1s6Z85OIS29A6-tc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/552e68-611d-4ad8-a7e1-48bfac2cdc72/1/Ltf7wd8AcKz1s6Z85OIS29A6-tc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ltf7wd8AcKz1s6Z85OIS29A6-tc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:9b:67:48:27:60:67:65:c8:c4:8d:63:b8:29:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ed7fbc1df0070acf5b3a67ce4e212dbd03afad7
Validity
Not Before: Aug 23 01:03:22 2025 GMT
Not After : Aug 24 01:03:22 2025 GMT
Subject: CN=272e3b93ac5349db93c108e6c7c2532e4011bef2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:24:ad:17:54:22:e3:b9:9b:19:9b:05:cd:90:
21:a1:31:73:dc:63:52:48:45:c2:a5:ec:d3:d8:8d:
a0:61:1b:34:b2:46:dc:ce:1a:db:a7:49:ad:57:6f:
78:12:b4:b5:fd:26:30:40:0c:ae:70:ce:f6:dd:4b:
a9:67:b5:dc:98:b4:77:21:86:05:67:5a:bf:95:c5:
52:3d:51:7b:47:b5:9b:e4:e6:45:e5:ad:0e:2b:ed:
66:ef:dd:f4:30:f2:d9:b5:a5:49:9e:b5:ba:fa:13:
41:67:6e:28:2f:5e:6e:f2:b1:da:8d:ab:47:b7:21:
0f:fa:cc:db:41:4f:d4:e5:1f:75:9b:8d:b6:9e:04:
bb:30:2f:93:ee:0d:d8:38:9a:2f:84:a2:76:7e:bc:
ac:91:ce:1f:e5:4f:cb:48:4d:44:2d:17:00:b5:57:
7a:f8:d7:6b:14:ef:46:ff:2e:b2:06:ac:10:0c:64:
2c:89:31:5d:da:59:f7:cc:79:33:88:ba:35:55:78:
e3:d7:c3:6c:a7:d9:43:b7:5c:e7:cd:25:04:53:1b:
93:d0:41:a9:1a:f4:e4:d6:d1:db:0d:02:82:80:f4:
71:31:61:76:eb:a0:49:c8:17:61:62:8e:16:0b:c4:
db:eb:5a:64:93:9a:25:f9:ff:1d:aa:68:76:dd:e1:
0b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:2E:3B:93:AC:53:49:DB:93:C1:08:E6:C7:C2:53:2E:40:11:BE:F2
X509v3 Authority Key Identifier:
keyid:2E:D7:FB:C1:DF:00:70:AC:F5:B3:A6:7C:E4:E2:12:DB:D0:3A:FA:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ltf7wd8AcKz1s6Z85OIS29A6-tc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/552e68-611d-4ad8-a7e1-48bfac2cdc72/1/Ltf7wd8AcKz1s6Z85OIS29A6-tc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/552e68-611d-4ad8-a7e1-48bfac2cdc72/1/Ltf7wd8AcKz1s6Z85OIS29A6-tc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:5a:8e:1d:f4:a9:3b:66:70:ae:ff:db:75:6e:4e:16:ba:39:
65:7b:62:f5:08:9e:5d:d5:06:ab:14:be:36:6e:21:73:a8:d4:
fd:c9:f9:bf:2d:a4:1a:1a:b7:cb:e7:b1:fb:8e:2d:45:53:62:
0e:5f:4f:db:1b:f2:7c:16:08:5e:4b:e6:84:4b:33:d6:f4:1b:
33:f5:a6:60:df:2c:d8:07:18:d0:d3:32:01:4b:28:5a:0a:36:
f2:29:a2:82:a4:9d:52:a4:92:ed:08:8e:68:b6:ed:f9:10:70:
59:a7:75:8e:bd:48:cf:2f:b7:e8:be:e5:0d:47:9b:d3:6e:bf:
5a:d3:ac:f2:a5:7b:12:8c:2f:37:c6:93:c5:03:c4:6d:51:fe:
3e:9f:3f:1c:f5:3d:19:c7:f0:33:88:6c:9b:82:ad:91:ac:7b:
8a:de:99:e7:db:9e:84:56:7e:63:d5:29:66:87:c5:2e:b3:19:
2f:d8:23:63:b0:6a:1d:f3:5c:6d:54:15:76:26:3a:08:56:a0:
6e:9b:1e:39:5e:4f:c5:54:d7:f0:45:b6:f8:75:0e:37:a6:b4:
87:74:8d:47:89:8b:ad:f4:0e:66:54:66:7a:f1:5d:d7:d6:00:
50:d7:3f:66:aa:f8:49:61:10:b5:fd:a6:63:dc:ee:f6:bd:72:
dd:5d:57:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:18:22 2025 by rpki-client