Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/552e68-611d-4ad8-a7e1-48bfac2cdc72/1/Ltf7wd8AcKz1s6Z85OIS29A6-tc.mft
File: Ltf7wd8AcKz1s6Z85OIS29A6-tc.mft (raw, json)
Hash identifier: 7Msv8Rxkvote741W/oA7S7oJ0vRL3xJIDcCcx4wrRuk=
Subject key identifier: 9E:55:16:EE:E9:88:B8:BB:25:02:C7:DD:15:3E:C2:60:CA:FE:D7:D1
Authority key identifier: 2E:D7:FB:C1:DF:00:70:AC:F5:B3:A6:7C:E4:E2:12:DB:D0:3A:FA:D7
Certificate issuer: /CN=2ed7fbc1df0070acf5b3a67ce4e212dbd03afad7
Certificate serial: 0199FBEB263A08E106E408E434F82C089B7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ltf7wd8AcKz1s6Z85OIS29A6-tc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/552e68-611d-4ad8-a7e1-48bfac2cdc72/1/Ltf7wd8AcKz1s6Z85OIS29A6-tc.mft
Manifest number: 070E
Signing time: Sun 19 Oct 2025 10:01:55 +0000
Manifest this update: Sun 19 Oct 2025 10:01:55 +0000
Manifest next update: Mon 20 Oct 2025 10:01:55 +0000
Files and hashes: 1: Ltf7wd8AcKz1s6Z85OIS29A6-tc.crl (hash: CzipNvTXlA561WnZCbNKAxlvXk6YcTiJM3S86KNfI7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/552e68-611d-4ad8-a7e1-48bfac2cdc72/1/Ltf7wd8AcKz1s6Z85OIS29A6-tc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/552e68-611d-4ad8-a7e1-48bfac2cdc72/1/Ltf7wd8AcKz1s6Z85OIS29A6-tc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ltf7wd8AcKz1s6Z85OIS29A6-tc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:26:3a:08:e1:06:e4:08:e4:34:f8:2c:08:9b:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ed7fbc1df0070acf5b3a67ce4e212dbd03afad7
Validity
Not Before: Oct 19 10:01:55 2025 GMT
Not After : Oct 20 10:01:55 2025 GMT
Subject: CN=9e5516eee988b8bb2502c7dd153ec260cafed7d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:9c:d6:2a:34:27:8d:ff:65:45:dc:97:8a:6b:
8b:95:28:57:73:a5:a4:bb:56:f6:a2:5a:94:f2:6f:
2e:b7:00:98:4c:8c:de:8b:bf:e9:f6:4f:48:be:11:
1d:d3:83:09:bd:fe:a5:74:fe:49:42:cb:83:d6:46:
ce:bf:c0:91:b5:aa:6a:e1:db:36:ae:8a:c8:af:51:
d6:a9:eb:23:71:89:df:93:ab:d5:d0:81:a0:58:80:
4e:46:3e:04:d9:82:c3:69:90:1a:df:23:0a:b8:c9:
56:92:e8:30:aa:b8:43:d6:85:30:9d:ae:16:65:0b:
94:b1:ff:ac:db:71:43:cd:0b:be:c3:58:d9:3b:42:
11:7a:a7:ca:6c:56:5e:44:da:99:21:76:2d:76:dc:
ea:3e:5c:fa:40:11:c5:3b:55:20:e7:16:f3:33:db:
16:2b:3b:1f:d7:38:0b:6a:02:01:e1:a0:05:d7:23:
52:60:25:93:4f:90:ff:37:b3:ab:96:68:2b:39:64:
c0:18:60:0c:7d:98:10:16:81:89:47:4f:b9:70:c8:
a8:b3:9b:7d:8c:4f:01:2a:59:e4:00:a6:5b:28:f7:
49:52:93:67:08:1a:fe:dd:2a:d1:63:e8:8f:0e:19:
4f:99:71:7f:3e:f3:46:03:d7:6b:fc:f9:ce:01:c3:
23:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:55:16:EE:E9:88:B8:BB:25:02:C7:DD:15:3E:C2:60:CA:FE:D7:D1
X509v3 Authority Key Identifier:
keyid:2E:D7:FB:C1:DF:00:70:AC:F5:B3:A6:7C:E4:E2:12:DB:D0:3A:FA:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ltf7wd8AcKz1s6Z85OIS29A6-tc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/552e68-611d-4ad8-a7e1-48bfac2cdc72/1/Ltf7wd8AcKz1s6Z85OIS29A6-tc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/552e68-611d-4ad8-a7e1-48bfac2cdc72/1/Ltf7wd8AcKz1s6Z85OIS29A6-tc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:ef:be:9d:bc:51:1e:1e:2f:cf:b2:c3:9a:f0:25:f8:34:52:
5e:a5:f8:e9:85:31:75:10:49:d7:0b:c5:37:f5:6a:1b:49:72:
31:af:d4:55:88:07:71:b3:74:d1:38:15:60:f3:ae:d2:ec:46:
98:cf:f6:57:ca:8a:af:31:0f:04:e3:d5:76:10:6e:bd:13:22:
b9:6e:7d:a3:e5:46:f1:5a:d3:17:1f:95:27:9f:17:d9:e8:32:
65:e2:f5:60:47:6a:ca:92:4e:17:45:1e:71:39:de:10:72:65:
43:fa:05:6c:29:df:84:4e:2a:c8:84:92:ee:b7:91:0e:ad:38:
bb:7e:ad:9e:21:d7:c2:34:6c:18:43:4c:6f:15:c6:28:8c:8e:
74:c8:d1:f8:e4:51:b1:2d:79:b6:6d:42:91:6e:b8:93:90:f3:
36:f1:30:8a:e6:01:74:ad:b6:71:2a:f0:38:2e:03:5d:1d:af:
a7:ad:5c:31:f2:b7:0d:38:5c:70:2b:58:2c:56:6b:13:a5:f4:
43:de:1d:6e:37:03:f8:72:2e:0e:93:16:bc:dc:c1:5d:e7:d8:
ba:d3:06:2d:8b:22:0b:90:6f:90:a9:9a:f3:c4:4d:9f:b0:5c:
0b:b5:75:b2:8a:7a:e3:37:6b:f3:54:cb:88:94:0e:c4:6f:a9:
0f:e2:2a:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76yY6COEG5AjkNPgsCJt+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlZDdmYmMxZGYwMDcwYWNmNWIzYTY3Y2U0ZTIxMmRiZDAz
YWZhZDcwHhcNMjUxMDE5MTAwMTU1WhcNMjUxMDIwMTAwMTU1WjAzMTEwLwYDVQQD
Eyg5ZTU1MTZlZWU5ODhiOGJiMjUwMmM3ZGQxNTNlYzI2MGNhZmVkN2QxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJzWKjQnjf9lRdyXimuLlShXc6Wk
u1b2olqU8m8utwCYTIzei7/p9k9IvhEd04MJvf6ldP5JQsuD1kbOv8CRtapq4ds2
rorIr1HWqesjcYnfk6vV0IGgWIBORj4E2YLDaZAa3yMKuMlWkugwqrhD1oUwna4W
ZQuUsf+s23FDzQu+w1jZO0IReqfKbFZeRNqZIXYtdtzqPlz6QBHFO1Ug5xbzM9sW
Kzsf1zgLagIB4aAF1yNSYCWTT5D/N7OrlmgrOWTAGGAMfZgQFoGJR0+5cMios5t9
jE8BKlnkAKZbKPdJUpNnCBr+3SrRY+iPDhlPmXF/PvNGA9dr/PnOAcMjnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ5VFu7piLi7JQLH3RU+wmDK/tfRMB8GA1UdIwQY
MBaAFC7X+8HfAHCs9bOmfOTiEtvQOvrXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHRmN3dkOEFjS3oxczZaODVPSVMyOUE2LXRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi81NTJlNjgtNjExZC00YWQ4LWE3ZTEt
NDhiZmFjMmNkYzcyLzEvTHRmN3dkOEFjS3oxczZaODVPSVMyOUE2LXRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi81NTJlNjgtNjExZC00YWQ4LWE3ZTEtNDhiZmFjMmNkYzcy
LzEvTHRmN3dkOEFjS3oxczZaODVPSVMyOUE2LXRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAy+++nbxR
Hh4vz7LDmvAl+DRSXqX46YUxdRBJ1wvFN/VqG0lyMa/UVYgHcbN00TgVYPOu0uxG
mM/2V8qKrzEPBOPVdhBuvRMiuW59o+VG8VrTFx+VJ58X2egyZeL1YEdqypJOF0Ue
cTneEHJlQ/oFbCnfhE4qyISS7reRDq04u36tniHXwjRsGENMbxXGKIyOdMjR+ORR
sS15tm1CkW64k5DzNvEwiuYBdK22cSrwOC4DXR2vp61cMfK3DThccCtYLFZrE6X0
Q94dbjcD+HIuDpMWvNzBXefYutMGLYsiC5BvkKma88RNn7BcC7V1sop64zdr81TL
iJQOxG+pD+IqZg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:48 2025 by rpki-client