Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.mft
File: LTw5h-fDSzZqoPCcQOpMgL_tDgE.mft (raw, json)
Hash identifier: crKltie/g/nyeSuV5zwSNZvSxB1JSw51mr2L/+HVo44=
Subject key identifier: B9:B3:4D:FD:49:56:A2:C4:86:BC:6C:FE:84:F3:56:A0:C7:FD:C3:DE
Authority key identifier: 2D:3C:39:87:E7:C3:4B:36:6A:A0:F0:9C:40:EA:4C:80:BF:ED:0E:01
Certificate issuer: /CN=2d3c3987e7c34b366aa0f09c40ea4c80bfed0e01
Certificate serial: 019A0AEF1A99ED33D7BBA45E01B27CD97785
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LTw5h-fDSzZqoPCcQOpMgL_tDgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.mft
Manifest number: 19
Signing time: Wed 22 Oct 2025 08:00:33 +0000
Manifest this update: Wed 22 Oct 2025 08:00:33 +0000
Manifest next update: Thu 23 Oct 2025 08:00:33 +0000
Files and hashes: 1: 8RxSWpC3pHJ9hh6qG0BIw2xusZc.roa (hash: dTWrB7/Bcq7TMpdoMtRKk5plCZVXL7i81JXpAEWqK4g=)
2: LTw5h-fDSzZqoPCcQOpMgL_tDgE.crl (hash: 0TMGgccyfSNWlvuwgvqUTr0hBjMEGZPX+cw0mxUoTdI=)
3: TleCnyfGdZ_mECH_iBY0pup0z6g.roa (hash: HrmWALEujgW08ieMDEygOWdRlqfGF9a1VyxcNiVM0Vg=)
4: cs2tcig_htwGIdVMlsEbECr1KUs.roa (hash: Ltjte90H2AR0ZhY5ZboX1HAAoGLfM6x2vjLJ6VTAc2Q=)
5: jhEFknqoK_BS1ZtKoMXlt2OiJ5w.roa (hash: v/53l+XCcGHQ3lOSHv89C7msVDalR3SvpophItFfOiA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LTw5h-fDSzZqoPCcQOpMgL_tDgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 08:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0a:ef:1a:99:ed:33:d7:bb:a4:5e:01:b2:7c:d9:77:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d3c3987e7c34b366aa0f09c40ea4c80bfed0e01
Validity
Not Before: Oct 22 08:00:33 2025 GMT
Not After : Oct 23 08:00:33 2025 GMT
Subject: CN=b9b34dfd4956a2c486bc6cfe84f356a0c7fdc3de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:93:24:63:78:6f:25:24:e3:c0:88:a0:8d:45:
fa:8d:ee:07:75:2f:80:57:15:24:c7:28:73:55:ef:
76:3c:c5:03:f9:2a:c5:a0:ba:cc:2b:92:cf:6a:99:
8f:c4:a3:28:4f:b9:ac:23:32:92:ad:8d:69:dd:ae:
ee:a5:03:25:71:43:38:21:a3:1c:37:26:ff:db:51:
af:c0:03:a0:76:82:bc:3b:c6:9d:d3:a7:7c:25:82:
58:73:ce:4b:19:95:01:69:86:f2:ab:bb:90:2e:ff:
d2:83:bb:a3:01:6f:27:0a:8f:3e:0d:82:3d:1d:fe:
36:a4:c2:33:2b:ea:da:a4:b6:f8:8c:f4:97:01:9f:
a1:e8:14:d3:ae:70:77:4a:56:47:ea:1c:c1:cc:ac:
a4:85:81:29:05:49:52:2f:09:1a:33:2f:94:31:31:
58:e0:3a:5b:05:71:62:f9:a3:44:fc:34:27:d2:0b:
f3:ed:f1:5e:19:26:f7:9d:13:ef:87:83:75:d7:92:
2c:e7:68:6d:a9:a8:eb:04:30:1c:90:32:43:9a:e7:
2f:1e:be:db:02:fe:24:30:65:85:08:ce:cd:19:a6:
91:12:11:66:a7:0a:bd:83:20:a4:56:9a:72:94:eb:
83:69:91:94:af:9c:83:f4:a8:46:f0:39:e5:d9:f8:
ba:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:B3:4D:FD:49:56:A2:C4:86:BC:6C:FE:84:F3:56:A0:C7:FD:C3:DE
X509v3 Authority Key Identifier:
keyid:2D:3C:39:87:E7:C3:4B:36:6A:A0:F0:9C:40:EA:4C:80:BF:ED:0E:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LTw5h-fDSzZqoPCcQOpMgL_tDgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:4f:7a:f3:96:c5:07:97:ab:19:4b:7d:0d:97:90:40:9f:c4:
8f:3d:b6:b9:7a:38:4b:8b:c8:59:f0:93:27:da:b9:e9:0e:c1:
15:d5:20:a6:45:dc:ba:4f:92:18:e3:f9:f0:e4:8d:e8:c4:06:
43:48:62:37:36:6e:62:62:33:5d:aa:d8:2b:0f:43:d1:42:c9:
a2:ba:bf:61:23:88:8b:7c:60:be:9a:b3:41:a2:ba:7c:f9:2e:
36:d1:c1:d4:cc:38:90:f2:2c:80:8d:10:e7:da:8d:f4:f4:5a:
3d:8c:90:95:91:cc:86:67:14:b4:44:9f:f1:6d:45:28:92:8f:
cb:61:84:e1:a5:5b:ab:ea:da:fa:51:55:7c:7c:77:43:c3:5e:
e4:e7:9e:91:66:67:74:77:d8:8f:39:6c:24:f0:ad:f2:76:67:
9f:55:b9:d0:7e:e5:1c:31:58:fa:ae:71:bb:38:35:b3:d6:34:
11:b3:9a:56:52:95:a3:a0:0a:42:ff:a8:8a:7e:1f:97:9f:f1:
5e:1e:d5:ba:14:30:cd:74:1a:f0:e4:a5:49:f0:4e:22:0c:5c:
24:4c:74:ac:f2:b2:19:67:b0:b1:75:5d:81:20:7a:23:b3:7f:
19:28:6e:7c:d3:da:71:96:83:40:f1:e5:17:a7:fd:72:63:68:
44:16:97:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 18:48:01 2025 by rpki-client