
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/e477bd-ac8b-455d-bc7f-eddac0c7a1f2/1/LtxXg3JdWVAZYqostbWQxCtX314.mft
File: LtxXg3JdWVAZYqostbWQxCtX314.mft (raw, json)
Hash identifier: QyicpznezcCqKsznqXOftsKXof5O+rVVriNA5Xn1CLo=
Subject key identifier: 16:30:32:B9:1E:B0:7D:F9:3D:D1:1D:6F:92:22:A1:7A:2A:4E:CC:D4
Authority key identifier: 2E:DC:57:83:72:5D:59:50:19:62:AA:2C:B5:B5:90:C4:2B:57:DF:5E
Certificate issuer: /CN=2edc5783725d59501962aa2cb5b590c42b57df5e
Certificate serial: 0198D58374303F321A317F26109A6224B60C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LtxXg3JdWVAZYqostbWQxCtX314.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/e477bd-ac8b-455d-bc7f-eddac0c7a1f2/1/LtxXg3JdWVAZYqostbWQxCtX314.mft
Manifest number: 1394
Signing time: Sat 23 Aug 2025 06:00:18 +0000
Manifest this update: Sat 23 Aug 2025 06:00:18 +0000
Manifest next update: Sun 24 Aug 2025 06:00:18 +0000
Files and hashes: 1: LtxXg3JdWVAZYqostbWQxCtX314.crl (hash: uwkg9Rr5Ad4L4jWzCDkdISULcfdX9cY+Dqch7Rdi4G8=)
2: r9FlEVdK2kxGPhNPo_-PFZXz5Hg.roa (hash: /9b7HSJW7nIal7/NVxztFoZrvte6gjhfTeD0u5Uqs6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/e477bd-ac8b-455d-bc7f-eddac0c7a1f2/1/LtxXg3JdWVAZYqostbWQxCtX314.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/e477bd-ac8b-455d-bc7f-eddac0c7a1f2/1/LtxXg3JdWVAZYqostbWQxCtX314.mft
rsync://rpki.ripe.net/repository/DEFAULT/LtxXg3JdWVAZYqostbWQxCtX314.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:74:30:3f:32:1a:31:7f:26:10:9a:62:24:b6:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2edc5783725d59501962aa2cb5b590c42b57df5e
Validity
Not Before: Aug 23 06:00:18 2025 GMT
Not After : Aug 24 06:00:18 2025 GMT
Subject: CN=163032b91eb07df93dd11d6f9222a17a2a4eccd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:0c:d8:ef:0e:46:d9:ae:01:ae:4a:b5:47:db:
76:b1:e2:06:80:a2:1c:9a:9a:99:22:c3:91:64:8f:
b3:80:be:76:97:04:a7:97:01:a6:06:45:3c:73:b3:
e8:1b:ac:36:65:76:92:1d:a7:54:2a:59:fa:91:3a:
d9:2a:76:a0:f7:72:20:f7:7d:f1:17:b9:0a:18:08:
64:28:9a:44:53:ca:9b:89:14:05:bd:db:30:66:2d:
84:88:bc:a5:d2:e4:89:1e:6d:aa:be:5a:83:6d:04:
4f:71:b2:4d:b9:a0:f7:e7:b8:89:4f:72:01:61:d4:
d2:10:f2:24:d0:fb:21:98:06:d8:10:5a:66:0d:36:
ff:e2:a0:3f:ee:cb:b5:50:02:0b:1a:f9:de:9c:1c:
00:a1:3f:e3:67:4c:0d:61:df:98:75:08:9e:5f:ea:
35:d8:3d:0c:55:1b:71:99:83:d3:af:d5:f4:a8:a7:
43:17:8b:f1:58:b3:71:ba:b8:ad:ac:8c:53:92:ce:
4f:e7:a1:4d:2a:21:fa:fe:c6:9d:01:35:23:b6:97:
69:ef:a3:4b:5c:72:c4:6b:a9:22:8e:e8:02:39:f5:
4b:32:39:60:00:88:a5:14:d4:f6:20:d4:96:6b:70:
ce:9e:82:bd:c2:63:ce:78:b5:3d:ad:70:5e:97:08:
02:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:30:32:B9:1E:B0:7D:F9:3D:D1:1D:6F:92:22:A1:7A:2A:4E:CC:D4
X509v3 Authority Key Identifier:
keyid:2E:DC:57:83:72:5D:59:50:19:62:AA:2C:B5:B5:90:C4:2B:57:DF:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LtxXg3JdWVAZYqostbWQxCtX314.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e477bd-ac8b-455d-bc7f-eddac0c7a1f2/1/LtxXg3JdWVAZYqostbWQxCtX314.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e477bd-ac8b-455d-bc7f-eddac0c7a1f2/1/LtxXg3JdWVAZYqostbWQxCtX314.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:b1:0d:7b:82:a4:e9:40:89:06:29:49:33:b6:17:b7:f7:68:
86:fe:2d:ba:0a:0c:d1:6b:fb:a8:f9:57:3e:09:92:7a:77:23:
e4:d0:da:76:02:9a:2e:c9:6a:d2:07:8b:7c:9c:5b:b8:e9:18:
07:30:52:1e:3d:5d:9a:93:54:2b:6b:23:45:47:eb:7d:39:f8:
29:52:77:94:27:e7:45:db:29:38:1b:9c:fe:00:71:70:c8:2e:
0d:c8:a5:54:03:5a:dd:c3:19:7b:5a:70:f5:dc:24:a6:d6:d5:
dc:02:d2:84:67:f7:7e:fa:e3:1b:65:c1:61:ef:78:f4:8d:cd:
7c:2a:0b:8d:8c:4d:6b:33:35:4a:50:6c:95:ee:cd:28:31:10:
e5:c1:a3:33:f4:a7:ac:c3:de:bb:bb:61:f1:39:4d:ce:69:c6:
cb:75:8e:7d:c2:2b:06:ee:b8:1d:c0:46:77:85:d7:52:00:28:
22:b6:1b:22:cf:a1:7f:a0:f5:69:f8:8b:b1:3c:9d:c7:f2:41:
43:b3:5c:1a:24:15:9e:c5:7e:28:46:31:4b:2f:c5:f8:30:61:
ea:4a:99:e6:b6:75:f0:ae:34:6f:5a:21:be:2e:dc:9a:2f:e9:
f5:a5:b4:09:ea:f9:9a:d4:9d:03:0e:29:88:94:b0:dd:6a:70:
54:0e:08:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:27:26 2025 by rpki-client