Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft
File: ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft (raw, json)
Hash identifier: bh0Yq/20Ef8E5o3y79OxMPdPj4JfwHoPga51ptn+1yE=
Subject key identifier: 7F:00:12:C6:6F:44:5D:FA:32:DE:40:96:BA:F0:CC:AF:7D:72:D4:E6
Authority key identifier: 96:D9:5F:E2:D9:09:43:C9:2F:6C:28:F3:B3:29:F8:20:15:CD:92:AE
Certificate issuer: /CN=96d95fe2d90943c92f6c28f3b329f82015cd92ae
Certificate serial: 019A09A52982FFB2B6CEBECE160372B53CA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft
Manifest number: 0A52
Signing time: Wed 22 Oct 2025 02:00:10 +0000
Manifest this update: Wed 22 Oct 2025 02:00:10 +0000
Manifest next update: Thu 23 Oct 2025 02:00:10 +0000
Files and hashes: 1: HmN4gqQ32E9Rqx-4t1qedvdMoH4.roa (hash: LX7NEJ+NlRiJfL2YQ6zxCjTe/Dn2kPvQcp14my1Cmso=)
2: ltlf4tkJQ8kvbCjzsyn4IBXNkq4.crl (hash: hlBzACRk6Q9xpL78GjQZXWgyo8n3f3RV/KNU1aY+6Kg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:09:a5:29:82:ff:b2:b6:ce:be:ce:16:03:72:b5:3c:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96d95fe2d90943c92f6c28f3b329f82015cd92ae
Validity
Not Before: Oct 22 02:00:10 2025 GMT
Not After : Oct 23 02:00:10 2025 GMT
Subject: CN=7f0012c66f445dfa32de4096baf0ccaf7d72d4e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:de:a8:b7:d8:81:c8:95:03:ae:dc:3b:d4:ff:
c9:91:a0:71:cb:b3:b0:46:ad:d5:25:f2:78:62:1f:
11:b0:99:1d:77:ec:7f:6e:62:ac:7e:36:b9:30:da:
92:18:69:18:e4:1c:c8:f0:80:2c:dc:a8:41:b9:91:
2d:79:92:34:23:82:73:23:a5:25:a5:48:d7:f2:a5:
fe:35:d7:3a:86:b5:1d:96:42:fd:29:da:e0:29:92:
dd:3e:af:c9:84:d4:bc:44:6d:8a:c3:8f:3b:9a:fb:
42:9b:91:f6:2f:06:88:79:40:7d:f6:f9:19:c5:1a:
83:af:7d:ef:0a:b9:cd:53:50:cb:4b:16:87:5e:29:
5b:d0:ef:04:53:d9:d7:7a:64:d2:da:9e:d2:4d:00:
f5:9a:fa:3b:48:da:d8:e7:bb:6c:57:6b:db:1c:a8:
eb:71:0d:e0:a4:36:a2:b9:23:4b:f3:10:89:7a:2e:
5b:f3:3c:55:b9:87:95:fa:d3:f9:53:84:ae:c0:20:
b9:43:1f:ba:e0:cf:3e:0e:3f:0c:6a:4c:48:a0:ee:
9e:31:d6:ac:4c:ab:81:e1:81:90:1a:b0:3d:6d:45:
c5:b1:d0:4e:12:a3:b0:80:57:34:89:64:af:12:77:
1e:c8:15:36:ff:f1:68:4f:8a:93:9c:45:e7:29:53:
de:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:00:12:C6:6F:44:5D:FA:32:DE:40:96:BA:F0:CC:AF:7D:72:D4:E6
X509v3 Authority Key Identifier:
keyid:96:D9:5F:E2:D9:09:43:C9:2F:6C:28:F3:B3:29:F8:20:15:CD:92:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:04:3c:1f:48:66:db:b2:57:ff:7a:25:eb:2d:09:76:f8:91:
bb:b4:b8:5d:2a:68:32:d0:bd:ed:18:fa:be:ed:1f:40:c8:95:
bd:f8:18:aa:2d:b1:3d:2c:bc:fc:70:54:8d:f7:41:43:9e:16:
bb:46:23:64:19:4e:4a:aa:ea:96:f1:42:c6:db:17:49:20:22:
75:3a:bf:06:32:76:93:15:4a:72:39:fc:f2:5c:8b:ef:8b:d7:
a4:3d:41:9e:15:41:e1:da:3a:38:5a:c3:42:96:0b:c9:bb:04:
13:49:75:f9:6b:3f:56:3b:fb:97:af:92:91:70:3f:37:db:1f:
ff:15:a0:b2:09:52:e4:e1:d1:ad:27:97:6f:cc:4e:d6:89:8f:
cd:6b:38:b4:67:37:cb:21:4b:b8:a4:66:1a:d3:1e:87:20:a7:
97:40:2f:68:0a:3b:71:9f:49:cf:28:59:9b:16:21:1e:26:d9:
82:76:d3:54:24:ef:6b:f3:87:13:27:dc:0b:94:d2:70:93:0d:
2c:9f:af:3c:ac:93:e0:03:82:65:99:f7:5c:95:00:e2:2a:c0:
9a:b6:16:38:f0:56:91:90:d8:a4:05:de:0d:83:e7:46:4c:82:
aa:d3:31:42:cb:f5:df:8e:43:1a:f5:02:33:ec:bf:39:fd:a6:
93:98:7b:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 12:39:35 2025 by rpki-client