Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/46a1b0-10c0-4cf9-9502-10d1734d7b83/1/LTDDBwxuYe3FimTzIz-pf8X1c5s.mft
File: LTDDBwxuYe3FimTzIz-pf8X1c5s.mft (raw, json)
Hash identifier: G3MIExQsjU52zpf3BP3NL0vqC+B79ltx9GXEfjaB7AA=
Subject key identifier: 08:45:A8:53:8A:30:65:41:1F:BF:3A:24:1A:48:E5:38:46:26:98:02
Authority key identifier: 2D:30:C3:07:0C:6E:61:ED:C5:8A:64:F3:23:3F:A9:7F:C5:F5:73:9B
Certificate issuer: /CN=2d30c3070c6e61edc58a64f3233fa97fc5f5739b
Certificate serial: 019A3459550066FE2978EDAC71860F23B717
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LTDDBwxuYe3FimTzIz-pf8X1c5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/46a1b0-10c0-4cf9-9502-10d1734d7b83/1/LTDDBwxuYe3FimTzIz-pf8X1c5s.mft
Manifest number: 1702
Signing time: Thu 30 Oct 2025 09:01:00 +0000
Manifest this update: Thu 30 Oct 2025 09:01:00 +0000
Manifest next update: Fri 31 Oct 2025 09:01:00 +0000
Files and hashes: 1: 8zTP6bF-8Ig21O-GNkBs9OXORp0.roa (hash: 9YznWSa8FHqt+jbmFpmAFvzlfMFLjOXYAA2TeVtspuE=)
2: LTDDBwxuYe3FimTzIz-pf8X1c5s.crl (hash: NcRbZ9GE1y75l2J+bcXalPSGy4lrVzvCYc9VPatgLp4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/46a1b0-10c0-4cf9-9502-10d1734d7b83/1/LTDDBwxuYe3FimTzIz-pf8X1c5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/46a1b0-10c0-4cf9-9502-10d1734d7b83/1/LTDDBwxuYe3FimTzIz-pf8X1c5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/LTDDBwxuYe3FimTzIz-pf8X1c5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 31 Oct 2025 09:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:34:59:55:00:66:fe:29:78:ed:ac:71:86:0f:23:b7:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d30c3070c6e61edc58a64f3233fa97fc5f5739b
Validity
Not Before: Oct 30 09:01:00 2025 GMT
Not After : Oct 31 09:01:00 2025 GMT
Subject: CN=0845a8538a3065411fbf3a241a48e53846269802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:74:f4:0e:3c:43:7e:cf:24:f9:21:47:4d:30:
95:46:8b:6b:3d:ee:27:f7:ab:cd:7c:71:94:7b:8d:
18:42:d9:10:21:de:55:0d:bd:82:f0:2f:ed:ca:8d:
d2:42:73:c7:fc:2d:c0:71:b6:71:e1:47:06:e2:c6:
3d:35:8c:33:fb:5f:61:94:d7:bf:9c:3c:0c:3d:ac:
65:4b:c5:3e:04:57:59:9a:cd:f2:07:15:77:96:12:
01:36:8c:4c:bc:7b:50:94:ee:9f:a5:59:92:fb:66:
49:20:e3:6c:8c:48:07:32:1f:96:c7:08:b3:9b:2b:
21:fd:ad:0c:41:a0:a3:81:12:64:07:f7:07:38:91:
74:b4:5d:50:76:50:c8:e8:b7:e7:80:5f:e6:78:7a:
71:4f:4b:e6:3c:a3:dd:94:1a:fb:aa:64:f3:11:67:
17:36:d3:56:e3:45:7b:38:e6:51:d7:1d:3d:4c:d8:
45:22:5e:ef:b3:f9:ce:68:e5:e0:52:0d:32:ed:c6:
64:80:d7:8a:dd:d4:d5:db:80:20:62:ed:61:5e:bd:
bd:b9:4d:d8:35:27:de:aa:2a:5e:b4:95:2b:a2:43:
04:d0:7c:35:f2:04:60:6c:e4:cc:9f:d1:53:6c:00:
e2:54:d8:16:7c:24:ef:67:61:29:18:39:e4:46:29:
62:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:45:A8:53:8A:30:65:41:1F:BF:3A:24:1A:48:E5:38:46:26:98:02
X509v3 Authority Key Identifier:
keyid:2D:30:C3:07:0C:6E:61:ED:C5:8A:64:F3:23:3F:A9:7F:C5:F5:73:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LTDDBwxuYe3FimTzIz-pf8X1c5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/46a1b0-10c0-4cf9-9502-10d1734d7b83/1/LTDDBwxuYe3FimTzIz-pf8X1c5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/46a1b0-10c0-4cf9-9502-10d1734d7b83/1/LTDDBwxuYe3FimTzIz-pf8X1c5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:1a:1e:be:6a:e1:d6:ae:85:f8:99:e0:6f:ac:c9:ee:96:80:
86:5b:42:de:20:51:8e:7e:b7:b0:8d:4c:9b:75:57:fb:0c:1b:
63:9c:39:7b:c9:ee:a3:a6:3f:d1:d5:d8:80:87:c4:61:39:8f:
20:3c:40:c6:09:61:df:5b:ca:7d:21:be:ce:6d:86:1c:5b:4d:
d6:80:bb:49:53:be:ff:19:cc:f6:1c:fe:a3:d8:7a:81:49:4f:
f0:fb:93:4c:e7:94:77:a1:b3:38:9a:2e:6a:c5:19:69:75:53:
73:01:2b:df:e2:db:a6:10:38:92:23:de:09:8e:e2:46:44:03:
09:8b:7c:b3:32:24:22:44:ec:b3:ca:bb:b4:f8:11:e7:c8:a0:
97:41:be:3e:20:5b:0c:a6:15:2f:36:ae:a7:b2:15:d6:91:52:
ec:9f:d5:15:63:ed:b5:47:cb:bf:1c:cd:b9:98:86:3a:93:fb:
da:56:55:c8:51:bd:66:84:7d:c0:44:e9:3d:00:b9:4e:ad:88:
4f:2b:6f:82:51:0a:55:69:23:38:71:b4:5d:0a:12:80:06:53:
70:d6:7c:8b:ce:ed:a7:3d:d6:e0:96:41:1e:8d:63:7e:90:86:
e3:49:95:0d:ef:7e:95:67:4c:8f:0f:69:2b:5e:c1:f2:d5:bf:
92:de:7a:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 30 17:31:05 2025 by rpki-client