Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/0697c0-98ae-44ab-b4ab-b615c5c60652/1/ltzrqozTLcS_HWbQhzobbz1zSY8.mft
File: ltzrqozTLcS_HWbQhzobbz1zSY8.mft (raw, json)
Hash identifier: th/xySAzwaEw/oULEoawY7qcTcXzGbM62rfV0Fh88Ro=
Subject key identifier: CB:FD:AE:FB:18:72:4F:35:09:CA:F1:C2:2B:40:C2:6A:60:79:96:28
Authority key identifier: 96:DC:EB:AA:8C:D3:2D:C4:BF:1D:66:D0:87:3A:1B:6F:3D:73:49:8F
Certificate issuer: /CN=96dcebaa8cd32dc4bf1d66d0873a1b6f3d73498f
Certificate serial: 019A714A23E8C74F788A72F9FB3A10B51D04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ltzrqozTLcS_HWbQhzobbz1zSY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/0697c0-98ae-44ab-b4ab-b615c5c60652/1/ltzrqozTLcS_HWbQhzobbz1zSY8.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 05:01:15 +0000
Manifest this update: Tue 11 Nov 2025 05:01:15 +0000
Manifest next update: Wed 12 Nov 2025 05:01:15 +0000
Files and hashes: 1: ltzrqozTLcS_HWbQhzobbz1zSY8.crl (hash: bIzOb986s1YP2bbx1p4pEmKJf+HnETCnrRlIwwXHPB0=)
2: wAvxAueoqpHLtk8XQwnNyU9MpT8.roa (hash: BRt8y2qLbXewc3lf068PubvnKUoQIDgwBq9aCv3+KLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/0697c0-98ae-44ab-b4ab-b615c5c60652/1/ltzrqozTLcS_HWbQhzobbz1zSY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/0697c0-98ae-44ab-b4ab-b615c5c60652/1/ltzrqozTLcS_HWbQhzobbz1zSY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ltzrqozTLcS_HWbQhzobbz1zSY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:4a:23:e8:c7:4f:78:8a:72:f9:fb:3a:10:b5:1d:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96dcebaa8cd32dc4bf1d66d0873a1b6f3d73498f
Validity
Not Before: Nov 11 05:01:15 2025 GMT
Not After : Nov 12 05:01:15 2025 GMT
Subject: CN=cbfdaefb18724f3509caf1c22b40c26a60799628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:23:e6:e8:bd:8e:23:1e:42:6e:26:4b:51:73:
18:11:73:bc:55:fb:ab:2e:e1:5c:cf:70:27:57:9d:
c0:ae:6e:71:e7:b3:45:4b:bf:6e:58:3e:d1:a2:92:
a6:3c:4e:bf:ab:9e:c5:42:e4:78:fb:92:aa:50:e0:
ea:01:cc:1b:f7:59:4e:6d:c8:9f:36:fd:2a:27:99:
7e:56:9f:62:35:0f:32:80:3b:41:9f:51:8a:e3:06:
c7:96:82:e8:7d:d3:e5:c8:b6:b4:0c:67:77:9b:8d:
ae:d2:24:88:a2:da:75:b1:d4:64:1c:7f:08:c1:ae:
e7:76:e3:e0:97:59:8c:27:d8:f1:bf:26:ac:d2:ef:
2a:85:8e:c7:00:3c:47:07:85:ba:81:c7:2e:aa:51:
84:c0:8f:a7:15:f5:ae:76:2a:2f:11:30:f1:34:89:
b6:86:0b:f9:e1:2a:0a:04:f7:3e:ae:b8:ed:6f:ff:
48:b4:f5:43:39:d2:48:2f:7d:95:fa:da:ce:ab:47:
68:93:e3:26:a7:d6:89:89:14:12:fb:78:48:ca:33:
b4:f0:dc:cb:35:8c:77:b6:9b:ce:11:f4:5f:0a:aa:
4c:52:96:a9:60:83:b8:74:3e:76:28:66:91:d9:bb:
9d:fd:8d:42:cd:d4:6e:4c:83:3d:a8:0d:08:23:f3:
3b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:FD:AE:FB:18:72:4F:35:09:CA:F1:C2:2B:40:C2:6A:60:79:96:28
X509v3 Authority Key Identifier:
keyid:96:DC:EB:AA:8C:D3:2D:C4:BF:1D:66:D0:87:3A:1B:6F:3D:73:49:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ltzrqozTLcS_HWbQhzobbz1zSY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/0697c0-98ae-44ab-b4ab-b615c5c60652/1/ltzrqozTLcS_HWbQhzobbz1zSY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/0697c0-98ae-44ab-b4ab-b615c5c60652/1/ltzrqozTLcS_HWbQhzobbz1zSY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:7d:8e:b5:40:58:ec:5e:59:a9:8b:10:41:d5:9a:ba:08:27:
54:b2:da:cd:ab:48:cc:ee:46:6e:fc:a2:51:8f:db:5e:dc:66:
ec:d7:fa:13:ad:5b:3a:8e:35:e8:9b:98:b1:26:53:56:d2:fe:
cf:19:32:f7:13:1e:f6:ae:94:db:c1:4f:c6:5c:57:8e:ff:1a:
e7:d7:ed:9e:f7:5d:2c:3e:23:aa:75:ce:59:c2:f3:69:b0:5e:
34:e8:fb:c4:d6:c3:fc:8c:e5:f1:24:f8:fe:8a:96:d7:42:9a:
80:83:6d:27:e5:3e:2b:d6:03:b6:93:45:fe:af:11:09:8d:05:
89:92:d8:12:6b:41:cd:94:fc:89:1d:71:18:7a:ca:e8:c1:8b:
43:1e:34:f2:51:93:fa:76:fa:56:f7:92:d8:c0:7f:af:28:91:
a1:11:e2:11:cc:b2:5d:61:79:cf:2f:09:f9:dd:57:19:19:9d:
2b:06:a0:8c:51:de:74:1c:98:a3:be:92:84:28:56:f7:75:68:
0b:3b:bb:9c:79:1f:c2:1e:d1:87:54:81:77:f8:d1:6f:b9:42:
dc:1a:5f:e1:f3:9c:fc:bb:c0:20:b3:33:99:f4:fb:76:f6:80:
1f:08:ab:be:22:01:8e:af:4b:02:9b:ee:44:28:15:93:6a:25:
86:26:f9:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:13:55 2025 by rpki-client