Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/0697c0-98ae-44ab-b4ab-b615c5c60652/1/ltzrqozTLcS_HWbQhzobbz1zSY8.mft
File: ltzrqozTLcS_HWbQhzobbz1zSY8.mft (raw, json)
Hash identifier: q8u8c0/lXduk5nnMYGkbq/VSEy+JVzjypBpsrJIwV58=
Subject key identifier: 21:37:9F:EB:08:AF:16:CA:42:45:C1:E5:1A:B3:9B:C8:A2:D6:43:C0
Authority key identifier: 96:DC:EB:AA:8C:D3:2D:C4:BF:1D:66:D0:87:3A:1B:6F:3D:73:49:8F
Certificate issuer: /CN=96dcebaa8cd32dc4bf1d66d0873a1b6f3d73498f
Certificate serial: 019923316D65C4F9F6B3AB4D9765B84DFF48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ltzrqozTLcS_HWbQhzobbz1zSY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/0697c0-98ae-44ab-b4ab-b615c5c60652/1/ltzrqozTLcS_HWbQhzobbz1zSY8.mft
Manifest number: 1673
Signing time: Sun 07 Sep 2025 08:01:05 +0000
Manifest this update: Sun 07 Sep 2025 08:01:05 +0000
Manifest next update: Mon 08 Sep 2025 08:01:05 +0000
Files and hashes: 1: ltzrqozTLcS_HWbQhzobbz1zSY8.crl (hash: +n1FUxF6QZ8gpFoyBSbRO8nsmg/8ss+rSTLlBQMr4vk=)
2: wAvxAueoqpHLtk8XQwnNyU9MpT8.roa (hash: BRt8y2qLbXewc3lf068PubvnKUoQIDgwBq9aCv3+KLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/0697c0-98ae-44ab-b4ab-b615c5c60652/1/ltzrqozTLcS_HWbQhzobbz1zSY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/0697c0-98ae-44ab-b4ab-b615c5c60652/1/ltzrqozTLcS_HWbQhzobbz1zSY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ltzrqozTLcS_HWbQhzobbz1zSY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:6d:65:c4:f9:f6:b3:ab:4d:97:65:b8:4d:ff:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96dcebaa8cd32dc4bf1d66d0873a1b6f3d73498f
Validity
Not Before: Sep 7 08:01:05 2025 GMT
Not After : Sep 8 08:01:05 2025 GMT
Subject: CN=21379feb08af16ca4245c1e51ab39bc8a2d643c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:fc:fe:fc:af:68:e8:a1:bd:08:22:65:5e:26:
b9:a0:87:bf:d0:76:86:85:df:c5:82:dc:23:e9:d4:
d5:38:9e:a4:cf:46:82:66:bf:d7:52:c4:3e:be:87:
40:25:a2:fa:39:1e:1f:56:ef:81:55:47:6e:12:26:
88:b6:bc:a3:e4:c9:16:5e:99:1f:14:05:42:d4:b7:
37:0d:90:e1:a0:7a:4a:7d:9c:f0:2e:41:5a:7c:65:
18:c2:2e:ee:85:92:c9:d8:0e:d0:f1:4a:31:73:c8:
12:b2:2c:a9:6e:81:a5:e5:40:9f:24:b3:62:ec:4b:
e3:7a:59:f7:18:94:1c:67:8d:a8:83:fc:86:1e:28:
e6:99:37:73:04:d1:45:b8:14:79:f7:9c:9b:3a:43:
1d:80:d6:12:0a:86:63:86:ac:0b:70:bc:87:53:a4:
cb:83:75:14:7b:9f:a6:88:08:64:2a:08:cc:75:ae:
c9:92:3b:89:90:9f:06:68:7f:35:e8:33:7a:6c:0b:
ae:8a:a4:58:51:09:80:b6:67:d0:7c:05:8c:49:52:
6c:ef:12:34:07:84:8d:61:74:dc:fb:58:f9:86:b8:
71:42:3a:6f:e5:c0:ec:1d:d4:31:14:6e:01:34:30:
e5:ca:73:5c:2a:57:3e:fc:54:c6:b1:4f:60:7c:64:
3d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:37:9F:EB:08:AF:16:CA:42:45:C1:E5:1A:B3:9B:C8:A2:D6:43:C0
X509v3 Authority Key Identifier:
keyid:96:DC:EB:AA:8C:D3:2D:C4:BF:1D:66:D0:87:3A:1B:6F:3D:73:49:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ltzrqozTLcS_HWbQhzobbz1zSY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/0697c0-98ae-44ab-b4ab-b615c5c60652/1/ltzrqozTLcS_HWbQhzobbz1zSY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/0697c0-98ae-44ab-b4ab-b615c5c60652/1/ltzrqozTLcS_HWbQhzobbz1zSY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:46:51:98:c3:fe:17:69:47:fc:45:c9:5f:d9:37:35:e3:98:
74:0e:0b:7f:d4:d5:77:c0:0d:f7:7e:83:67:b5:dd:1a:42:cf:
1e:a8:74:16:ae:b8:1b:04:9f:a5:88:24:c7:84:f3:65:bf:a4:
6c:c1:9e:b6:ce:44:20:7f:9a:96:5d:4e:57:9f:50:a6:a6:47:
c0:2c:fc:27:d2:b3:37:8e:3e:ba:da:82:54:6d:75:c0:77:77:
7b:9a:da:27:ff:2f:5e:d3:95:90:fd:9d:5a:64:89:ce:d5:21:
d2:a1:d8:f4:29:e8:d2:32:69:4f:86:ce:45:d1:9f:46:f5:5b:
11:86:ec:86:e5:dc:a6:91:0e:d9:e4:d7:16:e9:52:e1:e5:0d:
ac:fe:68:6b:dc:aa:25:e5:a9:9a:af:c0:d6:5b:fe:25:0f:ff:
a2:f5:06:3f:fb:c4:08:b1:57:23:d0:7a:95:3f:e8:83:20:f1:
57:e9:98:6b:26:01:9d:9c:1f:7b:c3:c6:b7:f5:51:89:b0:b4:
18:85:1f:d6:11:67:4e:69:16:10:a9:3c:22:77:73:17:f7:55:
68:04:23:bc:97:8d:d4:b0:c8:08:69:6f:26:86:91:83:52:70:
82:98:88:cc:45:be:60:fe:38:88:f7:cd:d0:1c:31:4c:75:84:
55:3a:8b:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:18:39 2025 by rpki-client