Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/552e68-611d-4ad8-a7e1-48bfac2cdc72/1/Ltf7wd8AcKz1s6Z85OIS29A6-tc.mft
File: Ltf7wd8AcKz1s6Z85OIS29A6-tc.mft (raw, json)
Hash identifier: SugWSLgxOVJ9hvSu3w/tjjgEe5lg3b497FqJL2bhysY=
Subject key identifier: D2:B8:B3:65:7C:83:A5:7A:D7:9A:80:34:55:65:9F:58:B1:78:DC:79
Authority key identifier: 2E:D7:FB:C1:DF:00:70:AC:F5:B3:A6:7C:E4:E2:12:DB:D0:3A:FA:D7
Certificate issuer: /CN=2ed7fbc1df0070acf5b3a67ce4e212dbd03afad7
Certificate serial: 019849660B377C137A0EE93C72BE96FAAB3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ltf7wd8AcKz1s6Z85OIS29A6-tc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/552e68-611d-4ad8-a7e1-48bfac2cdc72/1/Ltf7wd8AcKz1s6Z85OIS29A6-tc.mft
Manifest number: 062D
Signing time: Sun 27 Jul 2025 01:01:20 +0000
Manifest this update: Sun 27 Jul 2025 01:01:20 +0000
Manifest next update: Mon 28 Jul 2025 01:01:20 +0000
Files and hashes: 1: Ltf7wd8AcKz1s6Z85OIS29A6-tc.crl (hash: eKCOAFhExT0PA+17doCrHvUCDpz9F0a1iK6+ReuQsUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/552e68-611d-4ad8-a7e1-48bfac2cdc72/1/Ltf7wd8AcKz1s6Z85OIS29A6-tc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/552e68-611d-4ad8-a7e1-48bfac2cdc72/1/Ltf7wd8AcKz1s6Z85OIS29A6-tc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ltf7wd8AcKz1s6Z85OIS29A6-tc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:0b:37:7c:13:7a:0e:e9:3c:72:be:96:fa:ab:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ed7fbc1df0070acf5b3a67ce4e212dbd03afad7
Validity
Not Before: Jul 27 01:01:20 2025 GMT
Not After : Jul 28 01:01:20 2025 GMT
Subject: CN=d2b8b3657c83a57ad79a803455659f58b178dc79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:07:4c:e8:77:0d:fd:20:d2:24:40:7c:0e:b8:
cc:e4:95:93:e8:40:ba:a8:76:da:3a:28:58:12:f8:
b1:88:56:3a:92:ee:0e:f4:b9:9c:87:e1:82:b3:99:
35:36:c5:7c:5f:ec:cf:80:d0:af:6a:d8:01:10:93:
46:27:a6:0b:37:91:77:bc:7b:c1:3f:31:67:4d:ee:
12:0b:ff:a0:2c:c2:18:d0:08:21:51:80:22:3c:4a:
65:8e:b7:74:12:05:f6:55:7b:0a:d3:f3:ef:f7:d9:
10:60:35:7f:0a:c4:41:cb:50:55:41:3c:f0:bd:59:
25:f6:d0:1f:7f:7e:da:24:1d:7e:53:88:b3:54:57:
6f:6b:3b:e0:95:ea:d5:74:13:53:25:6f:b6:ea:90:
a0:f4:26:33:c7:ec:d1:4c:4f:59:f1:b7:3f:42:ff:
0e:84:50:6d:63:97:b5:d9:49:10:1e:f3:13:95:01:
00:ba:2f:3c:53:1d:67:9c:81:dc:a6:0b:a4:60:0d:
05:1e:28:47:ee:86:90:c7:bb:17:e6:15:49:e0:74:
54:9b:7a:e9:be:94:f9:4f:0d:29:c1:35:54:b5:0c:
5d:70:49:64:00:6a:3d:8e:65:78:70:2c:40:d7:bc:
98:c0:6a:2e:58:e2:f1:d0:f4:6d:56:fb:d2:bf:c9:
bd:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:B8:B3:65:7C:83:A5:7A:D7:9A:80:34:55:65:9F:58:B1:78:DC:79
X509v3 Authority Key Identifier:
keyid:2E:D7:FB:C1:DF:00:70:AC:F5:B3:A6:7C:E4:E2:12:DB:D0:3A:FA:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ltf7wd8AcKz1s6Z85OIS29A6-tc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/552e68-611d-4ad8-a7e1-48bfac2cdc72/1/Ltf7wd8AcKz1s6Z85OIS29A6-tc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/552e68-611d-4ad8-a7e1-48bfac2cdc72/1/Ltf7wd8AcKz1s6Z85OIS29A6-tc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:87:b2:9a:06:fc:d5:81:d8:e6:6f:c7:40:e0:da:d8:d2:c1:
ed:42:4e:e1:80:ba:45:f9:74:b1:28:f1:3c:8f:23:db:e1:22:
cb:41:19:50:67:9f:17:f5:3c:29:fa:11:88:54:e3:c0:fd:46:
6a:60:6a:85:4d:c3:f0:8d:04:d1:47:dc:50:4d:11:86:19:d9:
f6:a2:40:33:7e:2e:7b:50:37:c0:eb:67:85:33:76:c2:26:37:
f8:ea:cc:f2:3b:02:1f:c8:53:03:ef:2f:84:9c:76:3d:40:59:
be:99:21:62:4c:9d:36:8d:eb:64:0f:c7:20:5e:3f:55:4b:83:
30:4c:67:ff:dc:40:d1:32:21:51:0c:56:4c:96:32:4e:3a:0e:
36:f3:21:41:78:8a:25:28:70:32:21:a8:1a:50:0f:b1:2f:47:
45:cd:c7:3f:eb:2e:69:a9:87:1d:67:8c:09:56:4f:d6:f1:b1:
fa:88:18:c5:30:ad:90:d2:44:23:5a:77:96:39:8e:f0:09:ba:
31:88:77:13:b8:60:35:b8:59:ce:83:9b:b0:8a:88:49:68:0b:
5b:c4:bd:f9:a4:bb:39:f8:dc:b2:ca:60:45:e2:91:a4:93:39:
49:28:9d:6d:63:2a:c6:7d:09:64:58:34:b1:dc:f2:23:00:6c:
19:8e:ac:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 03:11:34 2025 by rpki-client