Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/410be2-374d-439b-9ec9-cc337bfb58b1/1/ltl3-HCvlNbcEWribZDw5mWOMqg.mft
File: ltl3-HCvlNbcEWribZDw5mWOMqg.mft (raw, json)
Hash identifier: NjVa+VbBscO9/jA41WheixUSKrmmcjfkt6NuZu7j748=
Subject key identifier: 5E:3F:49:B6:F4:66:D3:66:A9:8F:79:5F:C6:AF:A9:D9:9B:F8:DD:A0
Authority key identifier: 96:D9:77:F8:70:AF:94:D6:DC:11:6A:E2:6D:90:F0:E6:65:8E:32:A8
Certificate issuer: /CN=96d977f870af94d6dc116ae26d90f0e6658e32a8
Certificate serial: 0197C613A9A98EEEE3B6A7F618789B58EE26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ltl3-HCvlNbcEWribZDw5mWOMqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/410be2-374d-439b-9ec9-cc337bfb58b1/1/ltl3-HCvlNbcEWribZDw5mWOMqg.mft
Manifest number: 09C9
Signing time: Tue 01 Jul 2025 13:01:06 +0000
Manifest this update: Tue 01 Jul 2025 13:01:06 +0000
Manifest next update: Wed 02 Jul 2025 13:01:06 +0000
Files and hashes: 1: ltl3-HCvlNbcEWribZDw5mWOMqg.crl (hash: gacIUB5SwxbhXp2RD7M2CBlWEaP8OJlM8ssP6M4JedU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/410be2-374d-439b-9ec9-cc337bfb58b1/1/ltl3-HCvlNbcEWribZDw5mWOMqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/410be2-374d-439b-9ec9-cc337bfb58b1/1/ltl3-HCvlNbcEWribZDw5mWOMqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ltl3-HCvlNbcEWribZDw5mWOMqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:13:a9:a9:8e:ee:e3:b6:a7:f6:18:78:9b:58:ee:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96d977f870af94d6dc116ae26d90f0e6658e32a8
Validity
Not Before: Jul 1 13:01:06 2025 GMT
Not After : Jul 2 13:01:06 2025 GMT
Subject: CN=5e3f49b6f466d366a98f795fc6afa9d99bf8dda0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:90:f5:c5:a9:fd:7b:ec:7e:de:a7:7f:aa:5d:
56:55:a3:a4:db:a9:65:45:15:64:eb:ec:d6:43:96:
aa:b4:d1:3a:16:34:d5:5d:7f:3f:ba:3a:63:3c:8d:
14:03:6f:5d:81:be:c8:9c:bf:83:8c:eb:c0:aa:25:
4e:84:43:1d:71:f7:46:61:fc:26:18:eb:35:15:3e:
51:c9:50:36:bb:80:cb:a8:5e:24:f8:5b:3a:f0:ab:
f7:2d:3a:72:dd:23:c6:e6:92:f1:a8:ea:a4:a4:04:
04:dd:90:5c:32:c6:f9:98:d8:02:c4:22:e2:77:31:
88:e3:ba:6d:b7:52:21:c8:4e:23:67:66:af:37:13:
c3:09:73:52:27:53:ec:46:8f:55:09:45:cf:d0:58:
de:65:51:7d:e2:72:3b:5f:53:f5:99:3f:8c:56:33:
52:48:cb:08:0e:cd:33:2f:ce:44:e8:0f:6d:68:a6:
7e:c2:3a:29:f2:03:d8:55:82:96:11:6f:91:c5:44:
63:11:c6:9e:d4:2f:85:2f:9c:b6:f3:c0:cd:a7:8a:
41:42:01:9b:66:8f:9e:4b:70:9c:e3:38:85:ce:b0:
d7:67:72:31:9e:f9:16:d6:43:01:da:f6:6c:83:f1:
74:e1:b3:75:fa:60:ac:72:99:a1:ab:1b:0a:95:31:
5f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:3F:49:B6:F4:66:D3:66:A9:8F:79:5F:C6:AF:A9:D9:9B:F8:DD:A0
X509v3 Authority Key Identifier:
keyid:96:D9:77:F8:70:AF:94:D6:DC:11:6A:E2:6D:90:F0:E6:65:8E:32:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ltl3-HCvlNbcEWribZDw5mWOMqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/410be2-374d-439b-9ec9-cc337bfb58b1/1/ltl3-HCvlNbcEWribZDw5mWOMqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/410be2-374d-439b-9ec9-cc337bfb58b1/1/ltl3-HCvlNbcEWribZDw5mWOMqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:57:51:22:9c:3b:50:91:a8:ff:1d:35:17:b2:a0:5f:b5:a6:
5e:76:0e:ad:d8:3a:86:bb:69:c0:51:fd:61:55:66:c3:d8:62:
8b:0a:e4:bc:e0:65:b9:4b:c7:be:80:2f:31:28:de:b4:a7:ff:
d4:a4:92:12:90:e4:24:ce:c9:72:d1:0e:36:70:86:21:5d:b4:
ff:7f:8c:73:8f:a7:12:d7:95:a6:15:31:f8:d4:e0:f6:34:d8:
31:b1:8b:17:d3:ee:60:c9:81:1b:4e:da:7d:a7:12:b8:52:70:
7e:19:65:14:66:aa:0c:d6:48:32:e0:18:92:00:4a:19:2d:af:
9b:46:47:80:95:ee:d8:26:91:dd:d7:df:35:5d:cc:c3:cc:95:
83:ab:66:eb:d5:45:d2:f5:a0:61:e7:e8:a7:43:ce:6d:4d:de:
4c:e6:a2:0a:ef:39:c6:c4:c2:7a:ee:15:8f:4b:27:77:cd:1b:
05:96:b6:dd:72:09:2c:0c:46:b8:a5:95:74:6e:a9:aa:93:9c:
90:13:db:99:59:03:fb:14:f9:ad:1b:f4:a9:30:62:7d:e7:fe:
43:d3:06:12:1e:b6:00:70:7d:ad:96:e4:1e:72:ba:e1:90:f6:
61:40:bc:07:6f:a2:54:d4:b3:11:30:40:c0:6f:0e:6c:17:4a:
bc:b9:5f:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfGE6mpju7jtqf2GHibWO4mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2ZDk3N2Y4NzBhZjk0ZDZkYzExNmFlMjZkOTBmMGU2NjU4
ZTMyYTgwHhcNMjUwNzAxMTMwMTA2WhcNMjUwNzAyMTMwMTA2WjAzMTEwLwYDVQQD
Eyg1ZTNmNDliNmY0NjZkMzY2YTk4Zjc5NWZjNmFmYTlkOTliZjhkZGEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupD1xan9e+x+3qd/ql1WVaOk26ll
RRVk6+zWQ5aqtNE6FjTVXX8/ujpjPI0UA29dgb7InL+DjOvAqiVOhEMdcfdGYfwm
GOs1FT5RyVA2u4DLqF4k+Fs68Kv3LTpy3SPG5pLxqOqkpAQE3ZBcMsb5mNgCxCLi
dzGI47ptt1IhyE4jZ2avNxPDCXNSJ1PsRo9VCUXP0FjeZVF94nI7X1P1mT+MVjNS
SMsIDs0zL85E6A9taKZ+wjop8gPYVYKWEW+RxURjEcae1C+FL5y288DNp4pBQgGb
Zo+eS3Cc4ziFzrDXZ3IxnvkW1kMB2vZsg/F04bN1+mCscpmhqxsKlTFf/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF4/Sbb0ZtNmqY95X8avqdmb+N2gMB8GA1UdIwQY
MBaAFJbZd/hwr5TW3BFq4m2Q8OZljjKoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHRsMy1IQ3ZsTmJjRVdyaWJaRHc1bVdPTXFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy80MTBiZTItMzc0ZC00MzliLTllYzkt
Y2MzMzdiZmI1OGIxLzEvbHRsMy1IQ3ZsTmJjRVdyaWJaRHc1bVdPTXFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy80MTBiZTItMzc0ZC00MzliLTllYzktY2MzMzdiZmI1OGIx
LzEvbHRsMy1IQ3ZsTmJjRVdyaWJaRHc1bVdPTXFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFldRIpw7
UJGo/x01F7KgX7WmXnYOrdg6hrtpwFH9YVVmw9hiiwrkvOBluUvHvoAvMSjetKf/
1KSSEpDkJM7JctEONnCGIV20/3+Mc4+nEteVphUx+NTg9jTYMbGLF9PuYMmBG07a
facSuFJwfhllFGaqDNZIMuAYkgBKGS2vm0ZHgJXu2CaR3dffNV3Mw8yVg6tm69VF
0vWgYefop0PObU3eTOaiCu85xsTCeu4Vj0snd80bBZa23XIJLAxGuKWVdG6pqpOc
kBPbmVkD+xT5rRv0qTBifef+Q9MGEh62AHB9rZbkHnK64ZD2YUC8B2+iVNSzETBA
wG8ObBdKvLlfBQ==
-----END CERTIFICATE-----
Generated at Tue Jul 1 15:30:41 2025 by rpki-client