Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft
File: ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft (raw, json)
Hash identifier: Y4nXLLzCFGWfBfs5iarr35SrnpwGm+KcHQdMkAkaxKc=
Subject key identifier: 3A:22:5C:74:E5:83:F3:25:30:9F:81:34:EC:66:02:B2:3A:E1:97:C1
Authority key identifier: 96:D9:5F:E2:D9:09:43:C9:2F:6C:28:F3:B3:29:F8:20:15:CD:92:AE
Certificate issuer: /CN=96d95fe2d90943c92f6c28f3b329f82015cd92ae
Certificate serial: 0196A2AE01D189FD106E80FB6EC6716F90CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft
Manifest number: 088F
Signing time: Mon 05 May 2025 23:00:34 +0000
Manifest this update: Mon 05 May 2025 23:00:34 +0000
Manifest next update: Tue 06 May 2025 23:00:34 +0000
Files and hashes: 1: HmN4gqQ32E9Rqx-4t1qedvdMoH4.roa (hash: LX7NEJ+NlRiJfL2YQ6zxCjTe/Dn2kPvQcp14my1Cmso=)
2: ltlf4tkJQ8kvbCjzsyn4IBXNkq4.crl (hash: YBcvSZkabyz934zkOtXVyeZoycBsg163hhcYGD4KmXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:ae:01:d1:89:fd:10:6e:80:fb:6e:c6:71:6f:90:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96d95fe2d90943c92f6c28f3b329f82015cd92ae
Validity
Not Before: May 5 23:00:34 2025 GMT
Not After : May 6 23:00:34 2025 GMT
Subject: CN=3a225c74e583f325309f8134ec6602b23ae197c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:c9:ef:f1:56:76:21:4e:e9:db:b0:1f:c4:99:
a1:0c:ee:95:ee:5e:1a:6f:75:7e:ba:d7:02:e9:fc:
af:45:da:83:8e:36:58:b4:64:5c:fc:f7:6a:20:b4:
f3:b5:0e:03:fe:aa:75:05:25:13:3d:24:65:89:2a:
ad:2f:aa:f1:b9:f7:4e:95:1c:bb:c8:19:2d:f9:e8:
59:1b:bd:79:5c:04:91:6d:63:a4:5c:e4:21:24:94:
e1:76:b2:78:ef:05:a6:e9:55:45:6c:b7:88:26:f7:
0e:ac:84:54:03:75:a2:cf:f1:c4:39:2f:34:c3:c7:
35:d9:58:c4:73:5d:c8:73:a5:a2:85:ed:73:a9:a7:
0c:e1:ac:d4:58:05:0b:a3:b5:0c:f5:85:5b:d3:d6:
2d:f3:4b:5b:88:a9:66:52:97:3f:d3:a5:07:4b:df:
b4:8b:c9:bd:ac:93:45:9f:77:ce:39:4c:50:82:0a:
34:dd:f9:82:5e:f6:4f:81:9b:61:3d:66:bd:a4:d1:
cb:c1:56:fd:41:0f:28:78:19:33:22:9f:a2:7f:a8:
2a:e4:fe:e9:16:bf:51:0c:55:02:42:36:60:aa:22:
40:42:a7:0e:f8:70:7f:db:cf:f3:1d:72:86:89:4a:
8b:99:f4:8c:33:ca:be:95:68:0e:a6:d1:ba:fe:f3:
eb:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:22:5C:74:E5:83:F3:25:30:9F:81:34:EC:66:02:B2:3A:E1:97:C1
X509v3 Authority Key Identifier:
keyid:96:D9:5F:E2:D9:09:43:C9:2F:6C:28:F3:B3:29:F8:20:15:CD:92:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:65:65:81:00:b9:d5:31:60:59:40:5a:a6:b8:22:4b:2e:2a:
55:c9:f3:d6:41:af:75:2d:86:c4:60:bc:d1:44:d4:66:da:7d:
05:d2:33:2f:eb:65:7c:7e:15:fc:d1:42:44:0a:f4:76:ef:58:
61:1c:61:2c:46:a0:bc:c6:0e:b5:35:46:ef:7d:26:d0:b1:4d:
d4:ef:f9:2f:de:50:8c:28:69:04:2a:36:46:17:73:b5:e7:21:
3e:86:e4:e2:36:dd:64:a9:06:a3:45:d1:dd:28:1c:ae:06:45:
3c:9a:09:0c:d6:97:91:d9:11:da:d5:33:79:5a:ab:2a:ce:19:
f1:13:5e:65:50:fd:79:91:5f:0d:38:a0:fe:fb:f1:f3:d2:71:
b8:94:5d:7c:2e:6d:1a:3c:7c:29:46:85:9c:55:9c:de:97:d6:
bb:0a:b2:6c:d6:95:e7:1f:10:28:43:82:9d:3d:b5:7e:d3:ca:
19:d7:b9:bf:63:ae:77:93:19:da:1a:ee:87:47:3d:a5:83:d1:
b7:43:e0:44:3b:e5:10:fa:95:0a:1e:80:9e:0d:0c:83:77:ce:
5c:56:43:4f:bc:da:ae:e1:21:84:d7:af:7b:dc:42:29:c3:33:
f7:38:5d:cc:f3:2e:f3:78:51:cf:2d:1c:63:c9:04:43:44:1c:
0a:6f:aa:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 05:14:27 2025 by rpki-client