Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/410be2-374d-439b-9ec9-cc337bfb58b1/1/ltl3-HCvlNbcEWribZDw5mWOMqg.mft
File: ltl3-HCvlNbcEWribZDw5mWOMqg.mft (raw, json)
Hash identifier: TYGDyPR2/QlKayIcWg8yhtKpmQIgel53rql87YqcaUM=
Subject key identifier: 9D:74:B0:57:FC:9B:6C:C8:8A:74:DD:F1:F6:28:11:9C:97:42:DA:6B
Authority key identifier: 96:D9:77:F8:70:AF:94:D6:DC:11:6A:E2:6D:90:F0:E6:65:8E:32:A8
Certificate issuer: /CN=96d977f870af94d6dc116ae26d90f0e6658e32a8
Certificate serial: 0198D472659DC1F62DADA6E597F6FAA46CCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ltl3-HCvlNbcEWribZDw5mWOMqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/410be2-374d-439b-9ec9-cc337bfb58b1/1/ltl3-HCvlNbcEWribZDw5mWOMqg.mft
Manifest number: 0A55
Signing time: Sat 23 Aug 2025 01:02:03 +0000
Manifest this update: Sat 23 Aug 2025 01:02:03 +0000
Manifest next update: Sun 24 Aug 2025 01:02:03 +0000
Files and hashes: 1: ltl3-HCvlNbcEWribZDw5mWOMqg.crl (hash: h0dHIm/cZUsz36DqTyD3FLEeO3F2hEQjIcz5mR8Rcsk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/410be2-374d-439b-9ec9-cc337bfb58b1/1/ltl3-HCvlNbcEWribZDw5mWOMqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/410be2-374d-439b-9ec9-cc337bfb58b1/1/ltl3-HCvlNbcEWribZDw5mWOMqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ltl3-HCvlNbcEWribZDw5mWOMqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:65:9d:c1:f6:2d:ad:a6:e5:97:f6:fa:a4:6c:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96d977f870af94d6dc116ae26d90f0e6658e32a8
Validity
Not Before: Aug 23 01:02:03 2025 GMT
Not After : Aug 24 01:02:03 2025 GMT
Subject: CN=9d74b057fc9b6cc88a74ddf1f628119c9742da6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:22:36:18:b9:bc:7f:7b:4a:75:75:5e:ff:56:
7c:31:30:32:85:c4:e1:1e:b7:37:a1:22:79:37:be:
7b:d7:77:ae:78:b2:bc:b5:67:3b:d1:bf:52:4b:b4:
d7:e4:f2:01:87:41:bb:f4:4a:d0:9b:57:02:23:86:
70:b5:3a:f6:a9:06:3c:e8:22:a8:f3:09:bc:4c:c5:
6d:ba:49:86:be:95:e2:a5:7b:2f:24:38:1a:8a:78:
50:c9:b0:95:3d:aa:6f:f1:a2:04:7c:51:e3:23:26:
fd:6c:3e:14:85:9e:7e:8a:8e:bf:a2:55:a4:4a:f2:
0f:57:81:27:fb:06:62:73:d1:e9:5d:8a:19:fe:3f:
aa:8a:4e:d5:f9:ea:5f:10:b4:29:dc:85:98:b8:07:
53:5d:ee:7b:5b:d1:e5:a0:bf:c9:2b:d1:c0:6c:fb:
88:6b:d2:31:c9:34:17:d6:f0:94:6d:e6:6c:8d:a8:
da:0d:a8:36:3e:51:6d:46:84:76:cc:a4:62:89:1a:
4a:22:6b:6a:f1:f8:26:a6:6e:70:53:c4:2e:8a:45:
35:34:b5:fd:1e:cc:03:49:9a:0b:14:d9:d1:db:44:
85:3b:9f:6e:38:98:ec:d6:47:58:61:03:9f:22:d7:
d6:7d:71:4c:1d:9c:a5:3b:13:9a:7e:3b:d5:7c:a0:
cb:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:74:B0:57:FC:9B:6C:C8:8A:74:DD:F1:F6:28:11:9C:97:42:DA:6B
X509v3 Authority Key Identifier:
keyid:96:D9:77:F8:70:AF:94:D6:DC:11:6A:E2:6D:90:F0:E6:65:8E:32:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ltl3-HCvlNbcEWribZDw5mWOMqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/410be2-374d-439b-9ec9-cc337bfb58b1/1/ltl3-HCvlNbcEWribZDw5mWOMqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/410be2-374d-439b-9ec9-cc337bfb58b1/1/ltl3-HCvlNbcEWribZDw5mWOMqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:2a:c5:1d:0d:b7:76:18:2f:83:47:f9:e8:51:c6:86:6f:09:
c0:f0:6c:48:79:39:99:19:6e:b6:0c:3d:58:5e:3a:a6:5f:61:
39:d0:84:14:d7:c3:4a:ef:b3:90:45:b2:74:b9:03:99:f6:eb:
2e:dd:58:9b:86:af:23:79:42:44:e4:9b:69:93:9e:86:c7:52:
81:dc:f0:e1:57:a3:03:74:9b:47:de:ea:8f:af:98:a2:7b:f2:
b5:54:34:af:ad:f7:18:39:bd:a5:92:85:55:a3:bc:8a:88:ff:
6e:1d:7b:8e:fe:10:d5:06:4f:ca:b8:0f:d2:65:f6:96:0f:a8:
69:b7:19:ae:b5:73:f5:61:45:1a:05:a2:4b:4c:5e:55:56:f0:
47:43:8e:fe:23:e9:4d:56:a7:10:fc:bb:ca:1e:ff:7a:bc:4e:
75:78:d2:12:46:7f:11:ca:73:de:34:73:6a:33:ec:03:88:fb:
08:d2:a6:77:da:ac:92:e4:43:a4:aa:d1:cf:78:2c:c8:48:db:
9d:25:ed:f4:a1:9a:1f:02:f8:c7:a8:29:2b:1d:c6:89:bc:dd:
48:4c:23:bc:8a:b4:4b:62:a5:f4:22:b9:83:93:35:f4:d3:cf:
23:0a:0d:58:96:ed:a5:69:24:f4:96:6e:e8:3c:96:64:8f:0c:
f3:ac:25:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:29:17 2025 by rpki-client