Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b1b128-4f10-486e-a1ee-952f6fc02672/1/ltTArxW-ONL8XjD-NFdHXTS3g5o.mft
File: ltTArxW-ONL8XjD-NFdHXTS3g5o.mft (raw, json)
Hash identifier: ZGh5tOpq/Sauc+zaVMQDYOw86chFfZQkZPFaK2FKlnY=
Subject key identifier: 50:90:12:94:44:D4:80:CD:3F:C8:89:87:53:A4:75:CB:54:71:90:4F
Authority key identifier: 96:D4:C0:AF:15:BE:38:D2:FC:5E:30:FE:34:57:47:5D:34:B7:83:9A
Certificate issuer: /CN=96d4c0af15be38d2fc5e30fe3457475d34b7839a
Certificate serial: 0198D660982470523E61D0469828E90C3AB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ltTArxW-ONL8XjD-NFdHXTS3g5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b1b128-4f10-486e-a1ee-952f6fc02672/1/ltTArxW-ONL8XjD-NFdHXTS3g5o.mft
Manifest number: 12BA
Signing time: Sat 23 Aug 2025 10:01:51 +0000
Manifest this update: Sat 23 Aug 2025 10:01:51 +0000
Manifest next update: Sun 24 Aug 2025 10:01:51 +0000
Files and hashes: 1: ltTArxW-ONL8XjD-NFdHXTS3g5o.crl (hash: q6aDi1EOZKWRdziesBQ26EtRlGXSM7twOVzD0A+id5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b1b128-4f10-486e-a1ee-952f6fc02672/1/ltTArxW-ONL8XjD-NFdHXTS3g5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/b1b128-4f10-486e-a1ee-952f6fc02672/1/ltTArxW-ONL8XjD-NFdHXTS3g5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ltTArxW-ONL8XjD-NFdHXTS3g5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:98:24:70:52:3e:61:d0:46:98:28:e9:0c:3a:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96d4c0af15be38d2fc5e30fe3457475d34b7839a
Validity
Not Before: Aug 23 10:01:51 2025 GMT
Not After : Aug 24 10:01:51 2025 GMT
Subject: CN=5090129444d480cd3fc8898753a475cb5471904f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8f:9b:f0:c1:c8:53:50:e6:6f:97:b7:e9:83:
af:28:fb:5c:1c:7e:6b:3e:3f:c9:49:ed:05:23:c7:
c2:c3:49:c2:f8:05:3d:02:89:fa:47:83:86:eb:7b:
d6:78:8f:bc:d0:66:ea:25:8b:ab:3b:74:81:c0:4e:
95:e5:11:a8:7c:1b:66:1f:5a:ee:07:9c:60:44:3d:
35:b5:27:74:7e:f8:55:44:cd:e4:85:3f:d9:8d:c2:
28:73:c8:c8:8b:35:7c:ba:5f:ca:53:73:43:48:c8:
7a:b4:71:93:cc:e4:b6:bf:ac:d2:d0:16:d3:d3:73:
26:04:2a:12:53:5f:64:94:26:89:4d:55:ae:72:53:
52:85:e1:ad:7e:35:8d:c9:e0:62:77:5e:59:e0:8d:
9a:4a:b2:aa:64:cd:f0:b3:68:74:e0:5a:41:75:7b:
d3:a7:53:d9:44:e5:26:9e:b7:48:24:69:ac:78:8b:
51:b7:4c:16:fb:58:04:a8:02:bd:a8:80:74:b1:b7:
a3:bc:cd:e6:3c:8c:24:d7:35:6a:da:2c:9c:d6:b7:
19:13:43:00:83:e8:32:73:58:d9:6a:e6:f4:95:32:
5f:78:4f:93:86:56:f4:9a:63:2e:17:88:69:af:ec:
7c:60:d8:b5:83:e6:8e:e2:d6:f4:57:2e:ac:fb:20:
78:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:90:12:94:44:D4:80:CD:3F:C8:89:87:53:A4:75:CB:54:71:90:4F
X509v3 Authority Key Identifier:
keyid:96:D4:C0:AF:15:BE:38:D2:FC:5E:30:FE:34:57:47:5D:34:B7:83:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ltTArxW-ONL8XjD-NFdHXTS3g5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b1b128-4f10-486e-a1ee-952f6fc02672/1/ltTArxW-ONL8XjD-NFdHXTS3g5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b1b128-4f10-486e-a1ee-952f6fc02672/1/ltTArxW-ONL8XjD-NFdHXTS3g5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:36:75:6e:7a:0c:71:91:d0:ef:19:c5:00:1b:11:b7:06:66:
57:41:da:d1:4f:b0:d2:85:b2:1f:7b:57:21:a2:0f:3b:f9:09:
b0:04:16:35:a2:6c:22:11:cf:81:68:cb:d5:07:85:55:54:71:
9f:1a:3b:95:fc:b4:a9:28:0b:32:c9:be:22:77:55:69:7d:cd:
a9:0f:06:16:5a:b1:0c:82:f7:d9:0f:03:95:62:00:b7:95:34:
cf:d3:29:76:25:54:32:6f:42:d6:63:2f:f1:a5:f1:e1:1f:41:
87:ce:a8:7c:c1:dc:19:6a:34:b1:78:47:d2:11:3c:7d:6f:0e:
9b:3f:65:b6:05:10:ff:4b:97:00:42:67:bf:e1:c4:c2:c4:9b:
8f:e2:46:9f:f7:c6:05:fc:94:5b:01:e4:3a:42:4c:b3:7a:74:
aa:05:2e:4b:90:e7:c8:60:bf:d3:f0:d4:7c:d0:cc:2d:50:24:
54:c9:e3:2c:6f:5c:33:b9:5e:23:99:f4:63:c3:d3:e5:d7:7e:
3f:5d:3e:10:8e:a4:c6:54:b8:c3:06:cf:36:36:b2:22:32:ff:
7b:f4:15:bc:6a:e2:ab:7e:91:a1:df:e4:52:cf:23:f1:cd:e4:
89:3f:a3:0a:8f:f0:5a:93:72:72:9b:00:ff:48:92:cc:14:ad:
e0:68:ab:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:08:18 2025 by rpki-client