Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft
File: ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft (raw, json)
Hash identifier: k5cmQ9W0mFTB9JPdT2peQ3jeSRaCYtWsS+E6dY7QGSg=
Subject key identifier: C1:3C:53:17:47:7B:58:0F:90:65:22:CD:41:34:BE:69:88:92:97:E3
Authority key identifier: 96:D9:5F:E2:D9:09:43:C9:2F:6C:28:F3:B3:29:F8:20:15:CD:92:AE
Certificate issuer: /CN=96d95fe2d90943c92f6c28f3b329f82015cd92ae
Certificate serial: 0198D4A81EC044394FEF29B7E59B0ECAB7CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft
Manifest number: 09B2
Signing time: Sat 23 Aug 2025 02:00:44 +0000
Manifest this update: Sat 23 Aug 2025 02:00:44 +0000
Manifest next update: Sun 24 Aug 2025 02:00:44 +0000
Files and hashes: 1: HmN4gqQ32E9Rqx-4t1qedvdMoH4.roa (hash: LX7NEJ+NlRiJfL2YQ6zxCjTe/Dn2kPvQcp14my1Cmso=)
2: ltlf4tkJQ8kvbCjzsyn4IBXNkq4.crl (hash: 8aqeZAOXevX6J75uVaqzmGz/LWyq1XMvA7f4PUBt740=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:1e:c0:44:39:4f:ef:29:b7:e5:9b:0e:ca:b7:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96d95fe2d90943c92f6c28f3b329f82015cd92ae
Validity
Not Before: Aug 23 02:00:44 2025 GMT
Not After : Aug 24 02:00:44 2025 GMT
Subject: CN=c13c5317477b580f906522cd4134be69889297e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7f:b0:28:1e:7c:90:ca:c4:af:0b:8c:4e:0d:
d0:bb:b7:c9:24:a4:ab:e5:a4:51:48:0c:f0:51:fb:
39:f6:ac:bd:d0:8f:f0:42:4b:5d:dc:c9:1d:6e:76:
c3:49:d0:3b:96:c4:c8:ed:bb:bd:e6:30:af:4b:bc:
5d:aa:2b:9d:eb:20:c7:de:84:9a:de:a9:6c:e6:ce:
7b:7c:9a:8c:2b:4e:c1:d6:68:64:9f:35:a2:67:43:
2f:d0:08:c5:3d:d7:13:39:55:b7:a0:10:23:03:a3:
10:62:49:ad:8b:5e:dc:68:e0:f5:b0:69:d0:e9:56:
a2:b8:a9:8c:9a:84:94:e1:1c:8f:92:82:54:4a:b2:
8d:3b:45:1d:56:1e:1a:be:7f:2e:9c:35:c3:e8:18:
14:47:17:13:7e:5b:02:a2:9d:a5:cd:b4:cc:83:0e:
86:3d:97:5a:54:23:d7:7f:2d:48:35:8d:ac:33:2a:
37:5e:d0:07:03:8c:28:18:36:8f:4e:1d:f5:22:2c:
4a:6c:5a:cb:4b:73:e4:cb:91:ed:a6:4c:44:7d:ed:
bd:1b:10:77:e4:94:fe:f2:34:47:69:12:4c:38:f3:
f8:4d:ec:2d:07:53:d4:6c:c1:43:f9:3e:a0:d5:fb:
8f:d7:ea:72:e5:54:12:b0:4c:f8:ab:ce:92:f3:d9:
d8:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:3C:53:17:47:7B:58:0F:90:65:22:CD:41:34:BE:69:88:92:97:E3
X509v3 Authority Key Identifier:
keyid:96:D9:5F:E2:D9:09:43:C9:2F:6C:28:F3:B3:29:F8:20:15:CD:92:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:8b:0e:27:97:f6:02:93:13:4d:37:7c:b7:9c:62:a4:e1:55:
49:a9:04:8c:00:f8:58:38:84:40:37:6a:5d:4f:e3:bf:62:18:
4c:46:64:f9:51:23:34:90:7c:16:05:53:f1:0b:95:fe:1a:2b:
91:66:ce:7a:85:99:3c:10:8e:fb:d8:15:ea:44:55:d7:dd:6d:
0d:37:49:41:10:22:10:a2:bc:42:3d:17:7e:00:57:7e:51:88:
fb:e6:1c:03:d1:0a:41:6b:38:94:d8:89:de:30:7c:34:d3:0c:
b6:79:ef:c6:f2:fb:41:f5:e7:69:56:b3:96:6f:c0:11:92:4e:
b6:a6:45:72:36:d2:ca:54:c3:0e:ca:91:d2:01:5e:9c:67:63:
b0:b8:97:c5:2d:04:fd:de:fb:2b:6a:15:37:ca:5f:c8:0c:90:
99:43:34:a2:5a:97:e6:c8:3d:c0:35:d8:84:cd:04:d3:36:f2:
1d:ca:de:4f:b2:e9:f6:84:88:28:48:f5:c5:2b:07:a7:dd:a6:
f9:1b:92:e4:0e:ab:fe:8c:bd:1a:b6:45:3e:a8:f5:c9:48:92:
d6:27:97:3d:e6:f2:ae:36:42:30:56:02:9a:0d:3e:05:d8:7a:
c7:17:4c:8a:9a:be:3d:00:0d:c8:4c:44:57:40:42:17:1e:13:
f3:6b:3d:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:28:37 2025 by rpki-client