Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft
File: ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft (raw, json)
Hash identifier: BbG564rOzSqZi/p9h0Gk0a2WbyazA42pBNcN4kXRNnM=
Subject key identifier: AC:D0:EF:7B:76:D3:6C:1D:4B:48:20:A8:0B:2A:1C:EA:22:58:DF:1D
Authority key identifier: 96:D9:5F:E2:D9:09:43:C9:2F:6C:28:F3:B3:29:F8:20:15:CD:92:AE
Certificate issuer: /CN=96d95fe2d90943c92f6c28f3b329f82015cd92ae
Certificate serial: 019847AE0964F711E624131A34B2086D4856
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft
Manifest number: 0969
Signing time: Sat 26 Jul 2025 17:00:44 +0000
Manifest this update: Sat 26 Jul 2025 17:00:44 +0000
Manifest next update: Sun 27 Jul 2025 17:00:44 +0000
Files and hashes: 1: HmN4gqQ32E9Rqx-4t1qedvdMoH4.roa (hash: LX7NEJ+NlRiJfL2YQ6zxCjTe/Dn2kPvQcp14my1Cmso=)
2: ltlf4tkJQ8kvbCjzsyn4IBXNkq4.crl (hash: YfFoUIH2JjN9bl+qYnh8YhPFnOsdIFGs31Id2xqsjCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 17:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:ae:09:64:f7:11:e6:24:13:1a:34:b2:08:6d:48:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96d95fe2d90943c92f6c28f3b329f82015cd92ae
Validity
Not Before: Jul 26 17:00:44 2025 GMT
Not After : Jul 27 17:00:44 2025 GMT
Subject: CN=acd0ef7b76d36c1d4b4820a80b2a1cea2258df1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:45:9f:9b:29:22:d2:ff:a0:b6:2a:f8:c4:27:
70:52:e7:69:0d:24:69:32:03:9b:73:a7:92:98:c3:
b5:53:d5:ed:99:8a:40:9d:ba:4c:fb:d6:f7:5b:6a:
52:6a:59:e1:44:e7:ef:a6:08:e8:a5:5b:40:60:53:
73:7b:6a:ca:27:68:de:aa:6c:cf:bb:0a:af:23:b3:
78:e7:57:e6:04:8a:ee:64:2b:1f:fd:dd:63:88:5c:
c4:4e:50:e9:e5:36:a1:4a:21:db:95:46:24:99:35:
04:1c:45:c2:7f:1a:1c:7f:0e:93:08:53:c8:cb:0a:
3c:d8:2f:e9:22:a7:e5:b0:6d:13:2f:9e:c3:fc:1d:
9b:5a:a4:d7:8a:cc:d3:b7:53:ca:23:6d:15:f2:44:
c3:fd:6a:0b:68:c0:16:22:6a:4e:3c:08:c6:a6:da:
1b:50:4a:5f:7a:ce:b6:10:04:9b:bd:a9:c0:3a:39:
8d:1e:3d:8d:17:3a:c4:de:20:e0:5c:4f:80:8a:78:
e8:8f:ce:19:71:89:78:4a:90:23:44:4b:12:70:f4:
65:96:69:0a:6b:56:55:e9:97:25:33:d3:82:72:24:
37:7b:d5:d9:c4:14:2e:ef:eb:39:ae:4f:c8:66:b9:
31:06:43:aa:b0:aa:8a:c6:9b:4d:2b:7f:65:73:93:
f9:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:D0:EF:7B:76:D3:6C:1D:4B:48:20:A8:0B:2A:1C:EA:22:58:DF:1D
X509v3 Authority Key Identifier:
keyid:96:D9:5F:E2:D9:09:43:C9:2F:6C:28:F3:B3:29:F8:20:15:CD:92:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:81:70:41:c5:93:fe:5f:bf:6d:6b:26:4e:4c:b5:1c:37:0e:
b5:f1:2a:4d:98:e7:87:cb:33:9c:a1:f6:b2:9c:ca:95:7b:d5:
e4:b0:53:dc:bf:12:c2:eb:5c:95:74:3a:03:41:0d:76:16:1d:
6e:5b:92:c9:31:9d:45:c8:b5:cc:1f:9b:ae:a8:b9:1a:3a:4e:
cc:51:c4:74:30:5d:e6:3f:29:50:f8:e5:64:4b:28:91:b2:e7:
c9:3c:00:dd:31:3b:4d:18:be:96:2f:6b:cf:a0:bd:f3:a5:59:
1e:f5:4a:6c:3e:ce:76:57:bd:af:26:18:00:4c:23:d9:4b:c2:
fc:bc:ab:c8:60:f8:7b:02:b4:40:f2:89:f3:95:ef:90:6a:c1:
ef:00:66:c7:8c:24:3a:5f:c9:7f:4a:17:4d:56:db:9d:b7:ed:
cc:f4:6a:01:c8:58:da:60:94:ae:95:36:51:d7:f1:23:cd:d7:
03:99:e2:a7:e8:d3:c9:77:64:f2:72:c4:af:58:25:82:55:f8:
7a:17:84:3c:3d:48:27:ed:de:62:d1:6d:7e:f2:b3:1b:1e:be:
c4:f6:6b:00:a4:48:01:db:50:a6:7e:73:22:ce:25:3e:31:ca:
29:3b:e5:1a:f3:36:eb:9e:57:85:c3:fa:9d:f7:54:c1:99:73:
42:7e:0a:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:38:01 2025 by rpki-client