Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/LtQIejcn8EfglttpLgA9bAET8eI.mft
File: LtQIejcn8EfglttpLgA9bAET8eI.mft (raw, json)
Hash identifier: e6LssFGD1uYDSZHFXmRwOpqbqBva6SbCRu8rpDqnxGI=
Subject key identifier: 7E:B0:12:BA:42:37:1F:C1:EB:77:10:AE:6E:C2:C2:31:91:52:24:12
Authority key identifier: 2E:D4:08:7A:37:27:F0:47:E0:96:DB:69:2E:00:3D:6C:01:13:F1:E2
Certificate issuer: /CN=2ed4087a3727f047e096db692e003d6c0113f1e2
Certificate serial: 019A21AE08DD6CA085495FF4B149942CA9F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LtQIejcn8EfglttpLgA9bAET8eI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/LtQIejcn8EfglttpLgA9bAET8eI.mft
Manifest number: 93
Signing time: Sun 26 Oct 2025 18:00:44 +0000
Manifest this update: Sun 26 Oct 2025 18:00:44 +0000
Manifest next update: Mon 27 Oct 2025 18:00:44 +0000
Files and hashes: 1: LtQIejcn8EfglttpLgA9bAET8eI.crl (hash: CmOVf5W0F6SDMch5G1JqjX0KKeOhZw4LJr7wj6AnBxU=)
2: VNwylB5jzhJFsQw7XhMnpKhm9hM.roa (hash: PIi7FYjJvsTdIlhqRHGUehYSEppzu0jevMxOXzAs2Gs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/LtQIejcn8EfglttpLgA9bAET8eI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/LtQIejcn8EfglttpLgA9bAET8eI.mft
rsync://rpki.ripe.net/repository/DEFAULT/LtQIejcn8EfglttpLgA9bAET8eI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 14:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:ae:08:dd:6c:a0:85:49:5f:f4:b1:49:94:2c:a9:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ed4087a3727f047e096db692e003d6c0113f1e2
Validity
Not Before: Oct 26 18:00:44 2025 GMT
Not After : Oct 27 18:00:44 2025 GMT
Subject: CN=7eb012ba42371fc1eb7710ae6ec2c23191522412
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c9:04:37:6a:b1:1e:f4:c0:65:c4:fd:08:75:
2d:7b:d5:b1:c4:f2:1e:ec:e5:ee:46:6c:11:d2:d1:
d1:39:e9:48:ce:39:0a:ab:69:e5:28:aa:ef:ba:28:
2b:81:ff:f8:5c:cd:2c:0f:59:0b:dd:bb:19:16:41:
9e:ef:48:20:61:9a:b2:70:b2:a1:36:47:af:a1:e0:
96:eb:46:f5:da:0a:18:76:91:ca:13:a9:24:2f:d1:
22:bd:aa:6a:6f:ee:3c:1f:42:a4:8e:0e:42:7d:78:
32:8b:e5:ab:41:7f:f4:ab:34:85:b0:22:f3:8f:a9:
67:7d:f5:55:33:4f:7c:a4:38:c6:86:9e:ee:c2:77:
5c:dc:01:19:25:f4:05:74:e2:5a:ba:b2:20:98:17:
43:b4:36:18:24:61:58:be:f1:47:aa:38:78:85:78:
18:0c:49:4c:11:75:6b:99:75:28:6f:8b:d5:3a:15:
6f:a9:ea:49:6c:56:e4:33:e4:89:d5:ea:ae:4f:48:
fe:e1:96:09:86:c6:4f:f9:ed:58:58:7e:90:f1:50:
d9:8f:8a:69:6f:b3:59:ee:6b:d7:b7:c6:d8:fd:2c:
bb:e3:75:37:49:f1:1e:4e:fb:77:35:e2:ee:0b:59:
10:ae:b8:92:62:34:fd:c6:28:be:49:b8:5b:e1:f2:
95:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:B0:12:BA:42:37:1F:C1:EB:77:10:AE:6E:C2:C2:31:91:52:24:12
X509v3 Authority Key Identifier:
keyid:2E:D4:08:7A:37:27:F0:47:E0:96:DB:69:2E:00:3D:6C:01:13:F1:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LtQIejcn8EfglttpLgA9bAET8eI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/LtQIejcn8EfglttpLgA9bAET8eI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/LtQIejcn8EfglttpLgA9bAET8eI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:d6:52:60:f5:23:05:d2:67:be:1e:64:7b:ba:d7:c3:7c:28:
22:77:b1:d8:c4:80:35:04:7e:69:d3:8b:d8:80:ce:99:d1:7b:
b7:31:71:fc:69:76:1c:a9:7f:0c:f6:7d:d5:b0:ba:3f:9d:d6:
9c:a8:a8:4b:1a:b8:52:4e:90:f6:09:41:ef:b5:b1:bb:ed:82:
94:e3:a6:77:40:02:d0:d6:08:bf:30:41:01:d0:fb:91:57:8b:
ac:a8:5e:d9:0b:23:7b:19:55:e7:dc:12:9c:be:fc:b9:38:4b:
49:e1:ea:06:c5:19:96:ee:17:1a:ba:10:d8:53:a4:62:4f:b7:
a2:be:8f:46:b8:6b:bd:c8:41:65:1b:c9:28:ea:ef:47:1f:c0:
74:36:4c:9b:37:f7:6e:5a:4d:e9:72:25:73:09:20:3b:3c:69:
b4:1a:dc:89:8f:8c:2a:0b:9a:9b:98:ca:5a:e4:1b:ae:39:69:
b0:8e:78:92:09:f9:fd:ae:20:b0:de:98:73:3d:4a:e8:d8:3c:
98:58:21:2b:c5:52:99:27:af:a6:d2:48:4c:76:29:f0:71:dc:
e2:19:16:aa:3b:4c:c0:88:c5:77:48:fe:bd:d0:77:a1:f6:02:
6b:cd:2e:2c:e8:6f:5f:a3:a1:d8:4e:02:32:16:04:09:67:ef:
ad:6b:95:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 22:58:23 2025 by rpki-client