Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/353f3d-6afa-4e31-91a9-5e6a92e7f68f/1/_LteLg_Zgy1zse-Pnkhv_QCz14k.mft
File: _LteLg_Zgy1zse-Pnkhv_QCz14k.mft (raw, json)
Hash identifier: lO7VcfeCgsV7eFNw+SYQfPdCaqfVIBZ+C5maQYKqw/o=
Subject key identifier: 5A:2B:5A:D4:00:95:C4:93:32:5C:27:77:FA:B4:E1:A6:57:1C:E4:67
Authority key identifier: FC:BB:5E:2E:0F:D9:83:2D:73:B1:EF:8F:9E:48:6F:FD:00:B3:D7:89
Certificate issuer: /CN=fcbb5e2e0fd9832d73b1ef8f9e486ffd00b3d789
Certificate serial: 019921E7476F393B74F1518371A68A4B16C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_LteLg_Zgy1zse-Pnkhv_QCz14k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/353f3d-6afa-4e31-91a9-5e6a92e7f68f/1/_LteLg_Zgy1zse-Pnkhv_QCz14k.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 02:00:29 +0000
Manifest this update: Sun 07 Sep 2025 02:00:29 +0000
Manifest next update: Mon 08 Sep 2025 02:00:29 +0000
Files and hashes: 1: IK8VN_iyq26ReyybdZRgLTbp_h4.roa (hash: dThLkrPmFPQLdA53lP5J5dXCbHy3K9TicE7H7Mr22pg=)
2: _LteLg_Zgy1zse-Pnkhv_QCz14k.crl (hash: e+KoaATy9iKePO2r25p1C/FIjPvfLQEZi39WRGcna8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/353f3d-6afa-4e31-91a9-5e6a92e7f68f/1/_LteLg_Zgy1zse-Pnkhv_QCz14k.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/353f3d-6afa-4e31-91a9-5e6a92e7f68f/1/_LteLg_Zgy1zse-Pnkhv_QCz14k.mft
rsync://rpki.ripe.net/repository/DEFAULT/_LteLg_Zgy1zse-Pnkhv_QCz14k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:47:6f:39:3b:74:f1:51:83:71:a6:8a:4b:16:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcbb5e2e0fd9832d73b1ef8f9e486ffd00b3d789
Validity
Not Before: Sep 7 02:00:29 2025 GMT
Not After : Sep 8 02:00:29 2025 GMT
Subject: CN=5a2b5ad40095c493325c2777fab4e1a6571ce467
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:92:2b:1b:d5:23:3a:02:f0:9f:4d:53:41:71:
bd:71:e3:2b:9c:3d:5d:d9:83:3c:38:6e:b9:98:b5:
2c:5d:d5:52:b6:b5:45:10:d3:1d:b3:2b:d0:cc:ee:
1c:f7:c6:dc:10:0b:1f:c5:12:5d:86:86:41:8c:4c:
e9:55:a4:38:4a:69:d6:0f:0e:2b:a3:12:64:bb:ea:
10:18:6c:d4:7b:a7:fb:c6:63:2d:7d:3a:0f:08:25:
d7:6e:70:94:61:33:8d:8d:06:28:4b:c3:3b:68:f4:
94:5b:0a:94:f5:37:84:be:60:a0:e6:89:a6:89:82:
34:68:45:aa:fa:18:07:c8:7d:62:05:14:0a:3d:51:
8b:d6:e3:9a:fd:df:80:c4:a0:bd:83:25:46:e2:3a:
fd:5e:11:52:61:4d:91:c5:c1:a8:15:3a:81:d2:5f:
68:dd:3b:c7:68:93:6a:fc:92:b4:20:6d:ab:ee:8d:
c9:24:68:41:0b:0f:cc:a4:4a:93:99:ef:bb:04:21:
19:4a:da:48:ee:6b:40:da:a1:2b:aa:87:dc:9b:20:
ae:78:f5:54:76:4b:b2:0b:57:cd:76:c2:f3:a4:71:
f2:54:66:1b:c7:7c:5d:6a:43:2d:4e:4a:86:1d:69:
6f:e6:90:3f:dc:da:aa:eb:15:d2:65:2b:28:10:7b:
98:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:2B:5A:D4:00:95:C4:93:32:5C:27:77:FA:B4:E1:A6:57:1C:E4:67
X509v3 Authority Key Identifier:
keyid:FC:BB:5E:2E:0F:D9:83:2D:73:B1:EF:8F:9E:48:6F:FD:00:B3:D7:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_LteLg_Zgy1zse-Pnkhv_QCz14k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/353f3d-6afa-4e31-91a9-5e6a92e7f68f/1/_LteLg_Zgy1zse-Pnkhv_QCz14k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/353f3d-6afa-4e31-91a9-5e6a92e7f68f/1/_LteLg_Zgy1zse-Pnkhv_QCz14k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:cb:3f:55:c4:6a:4e:2f:03:fa:97:42:37:66:0e:73:f1:e6:
4b:b7:e1:78:fb:34:b5:b6:b3:f5:64:37:1e:1f:01:6d:67:40:
35:7d:03:ae:37:92:26:d3:67:db:4d:a7:45:56:8e:8c:14:00:
22:7c:92:3f:12:e6:45:04:e7:81:68:3b:8f:fa:30:0c:61:54:
9b:a2:04:85:5f:49:a9:cb:68:4d:48:5d:74:06:ce:c8:40:de:
02:d4:c8:8a:3a:c3:a9:ee:38:5e:d2:df:62:c9:5d:8c:fe:a0:
fc:5f:34:4b:85:59:31:53:01:fc:18:3d:92:3c:28:b9:ef:13:
78:94:15:1e:6b:a0:65:b5:cf:b8:44:16:81:2e:23:40:48:a6:
7f:c8:64:95:ad:de:42:11:2e:7b:f8:f0:97:9d:29:d5:14:1d:
1f:b4:db:61:fa:5c:77:3c:a2:9a:bf:af:36:f8:c3:33:18:1a:
b4:5b:92:da:2f:a7:b0:8b:fd:9a:02:81:9e:79:b6:61:77:eb:
a4:57:e0:d5:ba:fd:58:c2:a0:fa:71:15:91:ad:13:b1:c0:83:
5b:a4:70:bf:85:29:f6:8e:05:00:7a:5b:3a:54:0a:c9:c6:76:
38:53:95:d5:c6:b6:a3:03:6c:0c:76:c0:ca:14:70:93:b5:40:
8a:7f:6d:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:24:27 2025 by rpki-client