Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/410be2-374d-439b-9ec9-cc337bfb58b1/1/ltl3-HCvlNbcEWribZDw5mWOMqg.mft
File: ltl3-HCvlNbcEWribZDw5mWOMqg.mft (raw, json)
Hash identifier: 3zW+h+phtWMR7nowydowRjCgC8RDRXfzr9i5SQCKJvo=
Subject key identifier: 6D:F3:E9:3D:0A:22:22:03:65:16:A6:55:69:38:E8:1A:40:5A:9C:F8
Authority key identifier: 96:D9:77:F8:70:AF:94:D6:DC:11:6A:E2:6D:90:F0:E6:65:8E:32:A8
Certificate issuer: /CN=96d977f870af94d6dc116ae26d90f0e6658e32a8
Certificate serial: 019A71B79D508D147AC79BB5CCB4AB1BADB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ltl3-HCvlNbcEWribZDw5mWOMqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/410be2-374d-439b-9ec9-cc337bfb58b1/1/ltl3-HCvlNbcEWribZDw5mWOMqg.mft
Manifest number: 0B2B
Signing time: Tue 11 Nov 2025 07:00:49 +0000
Manifest this update: Tue 11 Nov 2025 07:00:49 +0000
Manifest next update: Wed 12 Nov 2025 07:00:49 +0000
Files and hashes: 1: ltl3-HCvlNbcEWribZDw5mWOMqg.crl (hash: jA6hWR47qKZ0JORTdW0HHpREO3thTW+egX0gfkPc/0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/410be2-374d-439b-9ec9-cc337bfb58b1/1/ltl3-HCvlNbcEWribZDw5mWOMqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/410be2-374d-439b-9ec9-cc337bfb58b1/1/ltl3-HCvlNbcEWribZDw5mWOMqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ltl3-HCvlNbcEWribZDw5mWOMqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:9d:50:8d:14:7a:c7:9b:b5:cc:b4:ab:1b:ad:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96d977f870af94d6dc116ae26d90f0e6658e32a8
Validity
Not Before: Nov 11 07:00:49 2025 GMT
Not After : Nov 12 07:00:49 2025 GMT
Subject: CN=6df3e93d0a2222036516a6556938e81a405a9cf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:20:48:d8:68:5a:84:f3:61:63:76:51:c6:9d:
59:0c:ca:38:08:68:09:68:91:f9:5f:07:ff:79:9a:
ec:c0:88:ca:97:49:51:fb:93:ff:8a:b3:c6:db:bb:
d1:9b:cc:6e:b9:82:d2:42:75:91:7a:4b:45:87:a9:
3f:dd:26:49:0b:d1:f7:fd:c9:72:6d:58:09:cf:62:
5f:e8:a3:1e:63:e1:66:61:70:5a:95:7e:50:1c:3d:
92:23:cf:0c:fe:02:0d:35:c0:84:10:fc:af:77:90:
9c:b9:17:1c:02:f1:2a:71:bb:48:a2:97:5b:e6:84:
02:af:c5:90:f2:46:88:92:21:98:dd:e3:d9:f9:1e:
e4:3e:fa:80:3a:9a:98:c0:a7:2f:14:d6:ac:70:ff:
c3:67:d8:45:11:85:dd:24:e2:91:22:61:1f:67:d6:
87:54:66:1a:9d:25:1a:5d:2b:5f:0a:18:51:b0:c6:
06:37:f8:69:af:8a:d5:7a:aa:50:86:37:cc:49:41:
02:d6:a5:a0:e4:99:f0:4a:ad:87:f2:00:4c:8e:2c:
ca:dc:9c:9b:e2:56:c6:c3:c0:0a:bb:04:a4:94:02:
67:7b:15:93:19:c0:81:b5:5d:1e:9d:da:b2:f8:43:
e6:8f:13:41:91:62:4a:88:38:a1:0c:2b:bb:4c:d2:
87:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:F3:E9:3D:0A:22:22:03:65:16:A6:55:69:38:E8:1A:40:5A:9C:F8
X509v3 Authority Key Identifier:
keyid:96:D9:77:F8:70:AF:94:D6:DC:11:6A:E2:6D:90:F0:E6:65:8E:32:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ltl3-HCvlNbcEWribZDw5mWOMqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/410be2-374d-439b-9ec9-cc337bfb58b1/1/ltl3-HCvlNbcEWribZDw5mWOMqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/410be2-374d-439b-9ec9-cc337bfb58b1/1/ltl3-HCvlNbcEWribZDw5mWOMqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:e9:5d:01:53:5e:81:34:3c:ce:77:16:bb:79:6a:66:b9:06:
00:8d:af:57:df:14:1d:4b:ed:f6:ac:82:d2:e8:24:bd:4e:96:
b0:d2:5b:61:8b:7e:92:70:f3:2d:a3:46:3f:da:87:7b:7e:6f:
10:7b:60:89:70:d8:c2:61:bf:f2:8d:04:90:cb:a3:a6:ef:0d:
9d:0e:95:2c:54:86:e1:5e:d0:53:12:35:25:3b:2c:06:f5:15:
1d:a0:b1:f3:76:2a:42:fc:2c:06:1c:53:01:81:1f:69:6e:3e:
69:37:0c:0d:69:a7:9d:c5:c8:c9:ae:17:51:2e:ec:b7:1e:cf:
51:66:95:8e:39:e8:af:56:ec:65:40:38:d7:82:a8:0f:30:3f:
0a:93:49:7a:8d:dd:37:fd:77:4e:e9:4a:d4:ac:2f:43:58:c9:
38:e9:e9:13:e5:f0:d0:98:12:ae:80:e3:7d:53:a6:46:79:6a:
02:52:d2:02:0f:24:ce:35:21:a4:ca:aa:04:8d:d7:a6:46:2c:
ce:fa:48:70:e1:ca:5e:35:50:9b:48:7c:d1:96:2a:4d:05:0b:
bf:e5:ba:20:df:69:c8:78:cb:a2:74:30:83:22:05:c7:d7:37:
57:86:bb:d3:c4:58:19:90:6b:36:f4:98:14:e1:5f:dc:98:25:
c1:0d:de:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:14:32 2025 by rpki-client