Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/5b4426-a266-43ce-a9e6-b0e6058d4dd7/1/ltZpZv_aCl0OEx0TSnnZMgXIxVA.mft
File: ltZpZv_aCl0OEx0TSnnZMgXIxVA.mft (raw, json)
Hash identifier: czWBKxxrFuN5pU2aIYc7tpmAr8ZxwD1o3ljiJRxt5WI=
Subject key identifier: B7:6F:9F:30:DF:21:5E:A4:0F:66:4D:88:02:A2:5B:5F:AB:17:CC:A2
Authority key identifier: 96:D6:69:66:FF:DA:0A:5D:0E:13:1D:13:4A:79:D9:32:05:C8:C5:50
Certificate issuer: /CN=96d66966ffda0a5d0e131d134a79d93205c8c550
Certificate serial: 019921B18CC74AFE21B48CC632DE11BD5F5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ltZpZv_aCl0OEx0TSnnZMgXIxVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/5b4426-a266-43ce-a9e6-b0e6058d4dd7/1/ltZpZv_aCl0OEx0TSnnZMgXIxVA.mft
Manifest number: E9
Signing time: Sun 07 Sep 2025 01:01:48 +0000
Manifest this update: Sun 07 Sep 2025 01:01:48 +0000
Manifest next update: Mon 08 Sep 2025 01:01:48 +0000
Files and hashes: 1: _oaImSL8yQUz7sSolsQ6h1C9hxI.roa (hash: MY6fAwo61gC56U+DvGD1k1/jTW6ufE4wkkyXYvcNP3c=)
2: ltZpZv_aCl0OEx0TSnnZMgXIxVA.crl (hash: 9VtzPnuomO0bZl8dhaSqx0piQBAC16Y6AICPTIHIEIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/5b4426-a266-43ce-a9e6-b0e6058d4dd7/1/ltZpZv_aCl0OEx0TSnnZMgXIxVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/5b4426-a266-43ce-a9e6-b0e6058d4dd7/1/ltZpZv_aCl0OEx0TSnnZMgXIxVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ltZpZv_aCl0OEx0TSnnZMgXIxVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:8c:c7:4a:fe:21:b4:8c:c6:32:de:11:bd:5f:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96d66966ffda0a5d0e131d134a79d93205c8c550
Validity
Not Before: Sep 7 01:01:48 2025 GMT
Not After : Sep 8 01:01:48 2025 GMT
Subject: CN=b76f9f30df215ea40f664d8802a25b5fab17cca2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a4:a2:e5:77:6a:4c:be:79:78:21:1d:14:bf:
aa:f3:56:40:ae:85:25:bc:13:de:3c:87:42:96:7e:
08:17:39:24:71:0b:45:17:da:16:b7:b4:95:ce:c8:
79:86:03:64:d2:9b:3b:ae:d0:60:45:d2:9e:4a:c3:
85:da:37:7a:80:9c:35:4b:c0:c1:48:7a:22:d7:c0:
70:1b:32:d9:3b:5f:66:bc:b8:06:20:6b:de:f3:64:
bb:e4:f0:b0:6c:11:81:ed:f5:12:90:05:6d:12:bc:
79:cf:e0:d1:a5:33:ab:cd:79:fe:da:a4:ea:2d:f7:
3c:a0:72:9c:34:0d:08:30:f9:d6:41:3b:5d:e9:62:
a9:6f:6a:6c:8e:6b:30:95:04:a1:af:ce:e9:f9:00:
5d:6f:79:e1:b8:27:d9:11:4b:75:1e:59:c0:27:78:
0a:83:52:71:ad:59:d5:72:59:3b:46:96:e2:10:a7:
5b:a9:31:d9:ad:70:d8:53:85:98:21:c4:65:db:06:
76:ec:4a:16:76:42:67:33:32:e3:43:9f:9b:73:88:
96:20:67:b2:99:9e:cf:dd:46:8d:3a:13:d8:2f:7e:
4b:42:a6:5f:59:10:a4:22:e8:3a:37:2f:be:e6:ff:
2c:c9:84:9e:19:fe:93:81:06:fb:b4:ff:47:80:77:
3f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:6F:9F:30:DF:21:5E:A4:0F:66:4D:88:02:A2:5B:5F:AB:17:CC:A2
X509v3 Authority Key Identifier:
keyid:96:D6:69:66:FF:DA:0A:5D:0E:13:1D:13:4A:79:D9:32:05:C8:C5:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ltZpZv_aCl0OEx0TSnnZMgXIxVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/5b4426-a266-43ce-a9e6-b0e6058d4dd7/1/ltZpZv_aCl0OEx0TSnnZMgXIxVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/5b4426-a266-43ce-a9e6-b0e6058d4dd7/1/ltZpZv_aCl0OEx0TSnnZMgXIxVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:e1:db:f3:ff:9b:c1:0c:52:f0:92:ad:e8:74:73:be:bf:54:
f4:e2:fc:05:63:fb:2a:0a:46:6b:85:3e:0e:5a:83:b9:8e:bb:
1c:08:12:38:47:d9:ec:f9:ef:00:59:84:67:ae:f4:97:0b:40:
76:ac:c2:61:2a:48:9e:e3:49:b6:09:a2:4f:c5:e2:a1:8b:f8:
db:f1:e1:b9:de:c1:61:08:93:c6:37:d2:2a:e1:63:81:83:c5:
82:08:7e:77:c0:38:78:6b:3b:94:b6:3b:cc:a0:98:69:2e:76:
5d:4e:d7:ca:39:52:86:17:8b:c6:40:d5:57:64:b9:e3:ad:f4:
36:92:ae:a4:e5:2e:80:07:19:42:86:c5:6b:e6:8d:e5:f6:e9:
13:7d:29:f5:17:4e:24:f4:13:8f:5d:4b:bb:26:2d:b1:ed:10:
27:62:b8:eb:e5:81:a6:19:8b:bb:3d:5b:9e:9a:d2:4e:54:54:
73:c3:e5:3a:13:24:98:33:8c:b1:5a:2f:45:af:c7:b6:08:bc:
e7:16:58:0e:1c:2b:5b:4d:77:34:09:85:52:db:1d:c8:25:57:
fe:4f:7d:26:f9:56:60:a7:54:42:6f:4b:87:1d:71:43:88:7a:
8c:ec:b2:64:e1:1e:42:bc:61:98:37:80:54:62:65:ad:4d:b8:
e6:73:c1:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:16:14 2025 by rpki-client