
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b1b128-4f10-486e-a1ee-952f6fc02672/1/ltTArxW-ONL8XjD-NFdHXTS3g5o.mft
File: ltTArxW-ONL8XjD-NFdHXTS3g5o.mft (raw, json)
Hash identifier: 3rdBvFL83Vvwboff0q/+xp4eFGiDRUPoq+IJuw6ZQSw=
Subject key identifier: 5D:96:03:EB:1D:78:DB:73:C3:6A:07:21:8A:ED:1D:E3:5E:F7:CC:93
Authority key identifier: 96:D4:C0:AF:15:BE:38:D2:FC:5E:30:FE:34:57:47:5D:34:B7:83:9A
Certificate issuer: /CN=96d4c0af15be38d2fc5e30fe3457475d34b7839a
Certificate serial: 0199FBEA71979FF2B863517B5E94360AF054
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ltTArxW-ONL8XjD-NFdHXTS3g5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b1b128-4f10-486e-a1ee-952f6fc02672/1/ltTArxW-ONL8XjD-NFdHXTS3g5o.mft
Manifest number: 1352
Signing time: Sun 19 Oct 2025 10:01:09 +0000
Manifest this update: Sun 19 Oct 2025 10:01:09 +0000
Manifest next update: Mon 20 Oct 2025 10:01:09 +0000
Files and hashes: 1: ltTArxW-ONL8XjD-NFdHXTS3g5o.crl (hash: YbsE6kYm6FenFm11U/8dR3CIB5zqs/Dfc1RLJ1tuRs4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b1b128-4f10-486e-a1ee-952f6fc02672/1/ltTArxW-ONL8XjD-NFdHXTS3g5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/b1b128-4f10-486e-a1ee-952f6fc02672/1/ltTArxW-ONL8XjD-NFdHXTS3g5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ltTArxW-ONL8XjD-NFdHXTS3g5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:71:97:9f:f2:b8:63:51:7b:5e:94:36:0a:f0:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96d4c0af15be38d2fc5e30fe3457475d34b7839a
Validity
Not Before: Oct 19 10:01:09 2025 GMT
Not After : Oct 20 10:01:09 2025 GMT
Subject: CN=5d9603eb1d78db73c36a07218aed1de35ef7cc93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:22:da:e2:24:96:8e:ad:27:8e:50:d4:83:aa:
86:b2:c6:9e:9b:99:c6:34:e0:aa:67:04:4b:c2:e9:
22:f9:d6:ed:a3:4f:37:a6:df:14:36:f7:cb:f4:6a:
63:f4:34:14:78:66:9c:c9:95:98:9d:af:68:71:6b:
f6:89:45:5a:ef:63:14:42:b9:37:0f:94:8e:dd:3a:
ba:4a:6c:93:fe:0e:62:ab:96:f0:05:3f:4b:3c:8e:
b0:7b:7e:b0:a3:13:28:34:d4:a3:af:a2:f8:e3:76:
aa:00:ce:b2:41:c6:e8:a5:64:91:11:51:58:a9:3f:
54:49:74:cb:44:80:76:c9:d0:f0:e6:b0:6f:c8:df:
d3:89:8f:1f:98:87:fb:55:86:7f:6a:02:1d:72:cf:
5a:e6:04:69:38:97:dc:a0:de:43:bc:c8:be:96:4f:
b7:9c:08:39:00:37:34:7c:b0:5d:a2:8e:75:da:98:
25:5d:5e:63:19:ac:2d:cb:3f:df:1b:64:58:c4:eb:
fc:59:48:63:a3:ff:a2:d2:9d:1d:1f:c2:71:9a:56:
e4:83:33:6d:78:49:13:34:90:51:14:0e:4a:3a:84:
ca:8c:f0:48:9f:9c:d2:99:65:97:4d:25:12:a3:53:
d9:de:ce:2e:32:9d:56:d3:3a:a6:b1:45:8a:f2:cb:
6c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:96:03:EB:1D:78:DB:73:C3:6A:07:21:8A:ED:1D:E3:5E:F7:CC:93
X509v3 Authority Key Identifier:
keyid:96:D4:C0:AF:15:BE:38:D2:FC:5E:30:FE:34:57:47:5D:34:B7:83:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ltTArxW-ONL8XjD-NFdHXTS3g5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b1b128-4f10-486e-a1ee-952f6fc02672/1/ltTArxW-ONL8XjD-NFdHXTS3g5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b1b128-4f10-486e-a1ee-952f6fc02672/1/ltTArxW-ONL8XjD-NFdHXTS3g5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:b6:4f:33:4e:bc:86:e1:32:3e:e3:70:0c:51:6d:c1:dc:68:
d8:8b:8c:62:91:dd:ed:d4:c0:8b:20:7b:b4:d6:c7:c7:fa:dc:
fa:c7:6d:11:83:0e:3c:5d:52:50:d5:97:fe:fa:6f:e6:7b:c7:
b7:59:4c:85:bc:55:c8:45:5e:45:5a:0d:ce:8b:39:ee:7c:a4:
03:78:f5:58:64:90:2f:ab:aa:70:cf:a3:91:65:26:0a:ba:25:
d4:10:eb:e5:9d:8d:9c:ff:7e:3d:4a:fe:5d:f1:4f:b8:7c:13:
8b:d5:d8:42:ca:84:50:2d:b7:ca:5e:18:af:7b:d8:b5:81:eb:
12:9a:1f:ce:8b:b6:39:e8:90:9c:18:7b:15:f9:ed:b1:21:2f:
68:8b:df:98:af:ce:13:7b:41:1a:5c:25:6c:68:8c:7f:7e:8d:
47:99:e9:18:2e:77:6d:9c:ac:76:43:29:cc:e1:85:3a:01:73:
ad:6d:51:2d:ee:58:c2:4f:77:64:ed:16:08:8f:d7:72:10:5d:
e7:46:a3:9f:1e:83:18:50:6a:eb:f2:bb:8f:a8:72:e6:be:7e:
63:f9:a7:ef:5c:f8:b5:04:b8:f8:dc:71:ea:cb:94:22:a8:8e:
99:f9:30:48:5a:e5:e5:8d:0d:85:d6:fd:d9:21:7c:fd:e3:1f:
27:d9:f5:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:18:34 2025 by rpki-client