Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/e477bd-ac8b-455d-bc7f-eddac0c7a1f2/1/LtxXg3JdWVAZYqostbWQxCtX314.mft
File: LtxXg3JdWVAZYqostbWQxCtX314.mft (raw, json)
Hash identifier: olgPJ+aXWnGHrSCHK/PxC570EfbMCmxLiqNjUxbvPHs=
Subject key identifier: 2D:CA:FE:C7:54:39:2D:7D:89:D0:DB:2D:35:8F:2F:3D:AB:6F:E3:66
Authority key identifier: 2E:DC:57:83:72:5D:59:50:19:62:AA:2C:B5:B5:90:C4:2B:57:DF:5E
Certificate issuer: /CN=2edc5783725d59501962aa2cb5b590c42b57df5e
Certificate serial: 0197B5C4C66EBFC3E5B3183E6771C42F1780
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LtxXg3JdWVAZYqostbWQxCtX314.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/e477bd-ac8b-455d-bc7f-eddac0c7a1f2/1/LtxXg3JdWVAZYqostbWQxCtX314.mft
Manifest number: 12FF
Signing time: Sat 28 Jun 2025 09:01:01 +0000
Manifest this update: Sat 28 Jun 2025 09:01:01 +0000
Manifest next update: Sun 29 Jun 2025 09:01:01 +0000
Files and hashes: 1: LtxXg3JdWVAZYqostbWQxCtX314.crl (hash: 0xtV8f9YJ8DFNkn5WV0LaIIjt9F0VPMhJHiL8PSB3YA=)
2: r9FlEVdK2kxGPhNPo_-PFZXz5Hg.roa (hash: /9b7HSJW7nIal7/NVxztFoZrvte6gjhfTeD0u5Uqs6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/e477bd-ac8b-455d-bc7f-eddac0c7a1f2/1/LtxXg3JdWVAZYqostbWQxCtX314.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/e477bd-ac8b-455d-bc7f-eddac0c7a1f2/1/LtxXg3JdWVAZYqostbWQxCtX314.mft
rsync://rpki.ripe.net/repository/DEFAULT/LtxXg3JdWVAZYqostbWQxCtX314.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 09:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:c4:c6:6e:bf:c3:e5:b3:18:3e:67:71:c4:2f:17:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2edc5783725d59501962aa2cb5b590c42b57df5e
Validity
Not Before: Jun 28 09:01:01 2025 GMT
Not After : Jun 29 09:01:01 2025 GMT
Subject: CN=2dcafec754392d7d89d0db2d358f2f3dab6fe366
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f7:3d:4f:fa:b7:56:1a:45:9d:93:e0:7a:33:
0c:2f:a7:e4:20:45:0e:ae:d2:67:5c:c5:32:0a:13:
8c:4f:85:01:ab:e3:ad:c0:78:63:9f:25:a7:f1:8f:
37:31:57:90:cf:67:dc:ee:73:e8:40:ad:29:3f:f2:
67:c6:66:1f:c9:3d:c9:73:27:80:5b:28:12:2b:a3:
f4:3b:4c:2d:23:2a:94:2f:86:96:0c:ea:30:15:16:
d6:a8:7f:20:5b:79:91:ae:a9:33:8d:30:7c:2e:34:
fc:89:d9:53:c4:e5:c6:67:eb:3a:fa:2d:d0:cc:8c:
12:91:77:04:d3:d4:c8:9d:a3:e2:b9:f3:9b:46:cd:
2f:e1:b2:e1:9f:ac:98:c8:6d:84:34:c7:68:21:a6:
12:0c:7f:5b:11:42:ed:30:b7:2d:19:b6:dc:82:35:
fb:7c:f4:86:58:eb:47:96:98:12:85:57:d0:17:4f:
aa:e6:6d:d8:bd:8b:36:dc:dd:b5:94:90:21:6e:1a:
f1:26:ad:f6:4c:63:22:70:55:32:81:df:98:c9:4e:
bb:c9:ba:68:06:ad:d5:b5:82:4e:d5:fe:3b:1b:42:
08:d5:b4:27:d4:56:71:e4:d9:55:cb:b4:a9:ce:18:
9b:19:fb:a5:7e:12:90:eb:59:e7:09:8b:87:ad:5d:
bf:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:CA:FE:C7:54:39:2D:7D:89:D0:DB:2D:35:8F:2F:3D:AB:6F:E3:66
X509v3 Authority Key Identifier:
keyid:2E:DC:57:83:72:5D:59:50:19:62:AA:2C:B5:B5:90:C4:2B:57:DF:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LtxXg3JdWVAZYqostbWQxCtX314.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e477bd-ac8b-455d-bc7f-eddac0c7a1f2/1/LtxXg3JdWVAZYqostbWQxCtX314.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e477bd-ac8b-455d-bc7f-eddac0c7a1f2/1/LtxXg3JdWVAZYqostbWQxCtX314.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:4e:73:da:09:b1:4a:e1:a7:94:51:6e:9a:e4:a0:05:60:37:
ff:93:c3:eb:61:10:c6:ee:a7:b7:e3:6c:05:db:65:7a:66:06:
79:2d:b9:46:6c:cc:49:3f:eb:f0:fe:44:cd:63:a1:bb:8d:d0:
2a:5b:06:d1:c2:fd:da:ef:95:41:56:20:a7:d7:20:de:80:07:
8c:22:60:09:ed:4b:f3:f2:96:fc:14:e1:ad:8f:6f:4d:18:cf:
8f:9d:bd:e9:47:aa:9b:28:3a:06:8a:30:3a:27:2b:f0:bf:e2:
ef:bb:f0:6f:c2:ac:8f:32:39:3a:19:c3:4c:7d:ce:8c:1e:c6:
7d:78:d9:05:cc:d1:13:4a:ff:8d:0e:7d:29:ce:e7:f5:9f:14:
45:74:81:58:30:74:35:2d:eb:da:9f:7a:59:50:d9:69:00:8a:
06:92:67:9a:4f:97:d1:eb:09:f4:35:41:b0:ba:89:6c:dc:cb:
cb:84:51:4f:50:1f:ab:7e:d7:a1:76:e6:07:3d:b6:65:71:89:
ec:a4:61:78:7b:a0:05:8f:c1:96:c5:6d:f8:52:58:75:19:68:
13:a7:11:b4:bb:a1:57:aa:24:31:d3:4c:11:f5:94:2b:fc:9e:
fa:00:8d:5f:b7:57:ad:b5:84:96:2c:3c:17:d9:e6:75:8e:27:
ff:93:a0:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:09:42 2025 by rpki-client