Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/LtQIejcn8EfglttpLgA9bAET8eI.mft
File: LtQIejcn8EfglttpLgA9bAET8eI.mft (raw, json)
Hash identifier: Vu7hhqOcAGzsyNVtKv/yvhxtrCj/nBiFvyT3BptgV9A=
Subject key identifier: B7:27:83:AE:76:A4:BF:39:AB:89:1E:0F:91:34:A3:20:08:90:CF:59
Authority key identifier: 2E:D4:08:7A:37:27:F0:47:E0:96:DB:69:2E:00:3D:6C:01:13:F1:E2
Certificate issuer: /CN=2ed4087a3727f047e096db692e003d6c0113f1e2
Certificate serial: 0199FB0ED67F3EE310A1BB629CE78867207C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LtQIejcn8EfglttpLgA9bAET8eI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/LtQIejcn8EfglttpLgA9bAET8eI.mft
Manifest number: 7F
Signing time: Sun 19 Oct 2025 06:01:17 +0000
Manifest this update: Sun 19 Oct 2025 06:01:17 +0000
Manifest next update: Mon 20 Oct 2025 06:01:17 +0000
Files and hashes: 1: LtQIejcn8EfglttpLgA9bAET8eI.crl (hash: NZ2ak+jcdbWBXT1PdWkvVjdcuKJfWV+slmawqWjTcr0=)
2: VNwylB5jzhJFsQw7XhMnpKhm9hM.roa (hash: PIi7FYjJvsTdIlhqRHGUehYSEppzu0jevMxOXzAs2Gs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/LtQIejcn8EfglttpLgA9bAET8eI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/LtQIejcn8EfglttpLgA9bAET8eI.mft
rsync://rpki.ripe.net/repository/DEFAULT/LtQIejcn8EfglttpLgA9bAET8eI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0e:d6:7f:3e:e3:10:a1:bb:62:9c:e7:88:67:20:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ed4087a3727f047e096db692e003d6c0113f1e2
Validity
Not Before: Oct 19 06:01:17 2025 GMT
Not After : Oct 20 06:01:17 2025 GMT
Subject: CN=b72783ae76a4bf39ab891e0f9134a3200890cf59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ec:5d:66:c6:66:68:c5:62:25:c6:cc:84:10:
8e:d7:d2:d3:63:4c:e2:02:8d:16:01:7a:22:da:6f:
ba:ba:d9:63:88:6f:83:1e:b2:07:00:2d:34:e8:f1:
90:c6:43:61:09:79:2b:56:34:87:3b:23:ef:ce:cc:
13:63:1b:7f:93:82:4e:0a:4c:ec:75:e2:82:86:6d:
ae:3c:4b:41:e6:bf:7e:20:66:43:dd:75:50:36:42:
b3:be:be:8a:1e:64:b8:1d:c0:c9:b4:89:49:28:6d:
bc:80:77:69:ab:80:82:90:93:68:6c:90:fa:fa:26:
de:64:3b:bb:87:67:23:94:30:5b:3f:33:15:14:ae:
5d:5c:7f:7d:b6:34:9e:58:ae:1b:78:85:76:f6:b1:
8d:75:62:86:7d:f1:85:14:b4:55:60:b0:6c:78:7c:
ab:b6:c4:86:4b:32:53:4a:64:fd:f6:86:b1:a6:82:
d0:e0:19:4b:e4:36:43:9d:65:59:41:d8:93:3c:56:
b0:e3:56:1e:39:0d:6d:3e:76:8d:20:f7:d0:e4:3f:
d0:13:37:18:de:fd:31:fe:64:49:84:91:97:ed:16:
72:9a:41:f0:2a:12:25:3f:d7:a6:76:ca:00:20:74:
ee:c6:bb:5e:ea:69:76:b8:9e:16:d4:64:47:e6:20:
7e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:27:83:AE:76:A4:BF:39:AB:89:1E:0F:91:34:A3:20:08:90:CF:59
X509v3 Authority Key Identifier:
keyid:2E:D4:08:7A:37:27:F0:47:E0:96:DB:69:2E:00:3D:6C:01:13:F1:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LtQIejcn8EfglttpLgA9bAET8eI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/LtQIejcn8EfglttpLgA9bAET8eI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/LtQIejcn8EfglttpLgA9bAET8eI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:29:50:f0:44:1e:59:8f:bd:77:06:ff:a2:f6:21:48:15:04:
17:f3:7c:c4:17:70:a7:6d:7f:b8:ab:73:24:ab:de:75:8c:79:
5a:bd:20:01:1b:1f:e2:ad:14:3b:8b:1e:46:8e:70:8c:98:ec:
b7:11:10:36:1e:f7:02:91:78:c2:10:53:a4:90:82:dd:09:2f:
2d:b5:6e:2e:7b:d7:33:6a:d9:be:06:86:4b:a5:80:76:e4:8f:
42:5d:13:da:10:4a:ad:19:c5:76:a1:b5:d6:c8:68:ee:60:55:
87:87:d4:4d:ad:1c:0a:1e:ce:8c:92:a7:aa:21:88:12:ce:f1:
30:ce:4f:c4:f5:2f:54:0d:dd:68:88:10:b1:2c:7e:5d:a2:e2:
35:c0:19:8a:6b:d3:7d:8f:c3:19:6d:1e:01:6c:5c:70:55:5a:
4a:35:ca:66:7f:4c:32:cb:07:d3:3e:95:e4:2a:10:94:25:21:
c0:d1:78:f3:9b:e1:59:58:a3:c5:bd:b7:65:3f:ef:5b:9a:14:
7e:cb:ab:e7:2a:fc:7e:a4:94:80:6d:d8:0e:c1:5a:c8:53:fc:
fe:c1:0d:e3:71:7c:4c:5c:01:9c:ca:fc:60:a7:35:ea:25:81:
c2:0e:f5:27:60:ef:41:6b:3c:61:8f:fb:07:85:d8:c6:ef:4d:
43:48:46:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:21 2025 by rpki-client