Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/LtQIejcn8EfglttpLgA9bAET8eI.mft
File: LtQIejcn8EfglttpLgA9bAET8eI.mft (raw, json)
Hash identifier: /yjT+RKMmn6gi3eIdZSvrE8OvM/ndpyGFZq/MU2WZRs=
Subject key identifier: 8B:BA:F0:27:40:E1:64:52:13:50:38:14:81:3F:DA:A2:91:FE:B1:D6
Authority key identifier: 2E:D4:08:7A:37:27:F0:47:E0:96:DB:69:2E:00:3D:6C:01:13:F1:E2
Certificate issuer: /CN=2ed4087a3727f047e096db692e003d6c0113f1e2
Certificate serial: 019922C3B76A9B65D96DC1B7AF35F498C6C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LtQIejcn8EfglttpLgA9bAET8eI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/LtQIejcn8EfglttpLgA9bAET8eI.mft
Manifest number: 0F
Signing time: Sun 07 Sep 2025 06:01:15 +0000
Manifest this update: Sun 07 Sep 2025 06:01:15 +0000
Manifest next update: Mon 08 Sep 2025 06:01:15 +0000
Files and hashes: 1: LtQIejcn8EfglttpLgA9bAET8eI.crl (hash: IUgi1aBmINlB+jyOAFfWfTxHBu1H18NhiphOLKVCLFk=)
2: VNwylB5jzhJFsQw7XhMnpKhm9hM.roa (hash: PIi7FYjJvsTdIlhqRHGUehYSEppzu0jevMxOXzAs2Gs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/LtQIejcn8EfglttpLgA9bAET8eI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/LtQIejcn8EfglttpLgA9bAET8eI.mft
rsync://rpki.ripe.net/repository/DEFAULT/LtQIejcn8EfglttpLgA9bAET8eI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:b7:6a:9b:65:d9:6d:c1:b7:af:35:f4:98:c6:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ed4087a3727f047e096db692e003d6c0113f1e2
Validity
Not Before: Sep 7 06:01:15 2025 GMT
Not After : Sep 8 06:01:15 2025 GMT
Subject: CN=8bbaf02740e1645213503814813fdaa291feb1d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:33:52:45:04:e6:65:f4:c7:4b:a3:a7:2b:3e:
9a:fd:80:51:48:fc:a4:39:b0:4a:16:77:4e:ac:6d:
3a:a9:65:e9:54:c7:07:d3:ca:37:1c:0f:76:e2:cc:
cf:92:2e:6c:2b:1d:50:e4:86:2b:f5:38:d1:f3:f7:
36:d7:ed:55:31:b1:38:ff:de:27:46:23:af:9b:19:
34:18:c6:19:09:d7:23:a5:b9:4f:c8:1a:06:cc:b2:
be:0c:e6:50:4f:d8:19:f4:45:ee:9e:33:49:28:3e:
3e:ba:72:e4:15:c5:6c:63:d2:5c:8f:4e:ae:3b:c3:
84:bd:55:52:f0:35:c7:e8:19:21:3c:d4:91:69:cd:
ed:92:1f:4f:bf:56:af:b8:2c:90:db:26:ce:15:ac:
87:a3:4b:2a:be:6d:6e:c3:57:23:52:3c:34:de:ee:
b3:1e:50:d4:d3:76:3a:f0:1f:6e:b0:63:7d:65:21:
50:6e:34:b2:2a:f5:fd:bc:b7:0a:72:36:53:52:da:
99:82:36:12:e6:f6:f5:ee:36:96:b4:6a:13:20:6b:
32:d9:69:94:60:96:c7:7d:41:86:bb:50:6b:bc:7e:
3f:13:e9:1c:fb:f2:4d:80:d5:ed:31:36:33:c7:23:
4d:4f:31:aa:ac:61:77:9d:88:08:dc:ae:fc:50:10:
1b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:BA:F0:27:40:E1:64:52:13:50:38:14:81:3F:DA:A2:91:FE:B1:D6
X509v3 Authority Key Identifier:
keyid:2E:D4:08:7A:37:27:F0:47:E0:96:DB:69:2E:00:3D:6C:01:13:F1:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LtQIejcn8EfglttpLgA9bAET8eI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/LtQIejcn8EfglttpLgA9bAET8eI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/LtQIejcn8EfglttpLgA9bAET8eI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:71:a2:71:65:0b:d8:46:b1:3d:c3:f4:44:5a:95:2d:50:67:
90:48:66:0d:32:88:68:68:09:c8:b2:f5:8a:fa:4e:95:4f:b6:
06:5a:58:90:09:4f:69:95:ac:41:fd:39:be:15:98:af:84:ed:
c5:f7:be:83:d0:81:c0:cf:f0:bc:66:05:0d:3e:64:e1:28:6d:
5b:0f:a7:3e:21:1a:4a:35:19:42:39:5c:cf:1b:ee:15:96:8e:
34:69:3d:d0:65:4d:39:50:a0:0f:d1:f5:e1:8e:9e:e7:35:35:
be:e1:bf:b6:cf:07:a6:a9:8b:28:04:00:c9:c0:af:66:0b:22:
f0:87:ac:00:77:3a:68:14:10:d7:a4:6a:18:a0:c2:d7:13:30:
b5:d2:41:49:be:28:6d:09:89:92:67:04:0d:68:2b:4b:4c:b5:
bb:fd:37:18:8f:44:57:e4:97:b7:00:00:66:d3:ba:85:6c:f8:
d9:dd:10:33:58:c2:b9:cc:84:76:0c:c7:e9:53:62:fd:3a:93:
d6:e9:ea:45:e8:53:05:26:b0:ab:78:7f:c4:2a:86:f2:a6:8c:
32:2b:24:20:74:ee:7c:cf:e6:fa:51:02:72:85:9a:21:58:8e:
09:2e:13:87:e4:ff:73:c6:ab:75:4b:43:85:05:4a:08:d2:4e:
37:b6:ae:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:08:26 2025 by rpki-client