Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/5b4426-a266-43ce-a9e6-b0e6058d4dd7/1/ltZpZv_aCl0OEx0TSnnZMgXIxVA.mft
File: ltZpZv_aCl0OEx0TSnnZMgXIxVA.mft (raw, json)
Hash identifier: oyhwd+lABtYuKrykQmd1MZdOXbyizH7T7rThy1xLcw8=
Subject key identifier: 22:9C:21:26:22:72:8C:50:EB:67:4A:E9:E8:9B:68:26:E3:EC:10:A5
Authority key identifier: 96:D6:69:66:FF:DA:0A:5D:0E:13:1D:13:4A:79:D9:32:05:C8:C5:50
Certificate issuer: /CN=96d66966ffda0a5d0e131d134a79d93205c8c550
Certificate serial: 019795CCBE5A16C3DF27AD661F0E693004C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ltZpZv_aCl0OEx0TSnnZMgXIxVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/5b4426-a266-43ce-a9e6-b0e6058d4dd7/1/ltZpZv_aCl0OEx0TSnnZMgXIxVA.mft
Manifest number: 1C
Signing time: Sun 22 Jun 2025 04:01:52 +0000
Manifest this update: Sun 22 Jun 2025 04:01:52 +0000
Manifest next update: Mon 23 Jun 2025 04:01:52 +0000
Files and hashes: 1: _oaImSL8yQUz7sSolsQ6h1C9hxI.roa (hash: MY6fAwo61gC56U+DvGD1k1/jTW6ufE4wkkyXYvcNP3c=)
2: ltZpZv_aCl0OEx0TSnnZMgXIxVA.crl (hash: epR+TUt07Aed4D0MXzwC9L/YDxB9wmBS0vkSPKYut+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/5b4426-a266-43ce-a9e6-b0e6058d4dd7/1/ltZpZv_aCl0OEx0TSnnZMgXIxVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/5b4426-a266-43ce-a9e6-b0e6058d4dd7/1/ltZpZv_aCl0OEx0TSnnZMgXIxVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ltZpZv_aCl0OEx0TSnnZMgXIxVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 23 Jun 2025 02:19:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:95:cc:be:5a:16:c3:df:27:ad:66:1f:0e:69:30:04:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96d66966ffda0a5d0e131d134a79d93205c8c550
Validity
Not Before: Jun 22 04:01:52 2025 GMT
Not After : Jun 23 04:01:52 2025 GMT
Subject: CN=229c212622728c50eb674ae9e89b6826e3ec10a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:bf:46:b4:39:87:8f:59:e0:6b:7f:18:6c:ec:
8a:9b:1b:2c:5a:a2:ba:02:ba:fd:0b:47:28:ae:b1:
ee:5a:ca:36:fd:4e:63:18:bb:6e:5c:63:3e:78:27:
f4:4e:2b:64:c9:9e:2e:bc:d7:91:f6:e1:dc:30:aa:
c3:89:c9:ca:57:06:17:6b:cf:8f:90:5e:2f:c6:8c:
dc:81:39:cd:bc:aa:d4:f2:d7:7d:b7:07:5b:1a:f0:
37:5d:d0:4a:28:82:18:0c:68:75:89:db:37:75:13:
51:0d:5f:3a:9b:37:39:25:17:0d:6a:bf:d2:c7:f3:
8b:5d:3e:4d:c7:96:a1:f2:29:8b:7a:17:6b:62:25:
06:bd:5a:72:ea:28:17:5b:84:d2:19:3b:2f:97:23:
b5:89:e8:03:94:41:2a:9f:c6:a3:9a:ee:47:14:1d:
f8:e2:f1:44:78:95:86:11:70:b1:55:15:fb:1f:f6:
ce:97:64:34:d3:81:52:0f:fb:c2:38:72:e0:40:3e:
94:fa:4d:df:c1:4a:b1:85:72:17:bc:59:10:d4:b4:
d0:d7:f3:dc:47:86:9b:4e:4a:d6:62:72:ba:6c:06:
c8:54:79:e3:c5:33:7d:18:4d:8e:f3:7f:f4:bd:b2:
89:7f:a0:e7:68:fc:d0:df:e8:b0:fb:f8:10:8e:84:
0d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:9C:21:26:22:72:8C:50:EB:67:4A:E9:E8:9B:68:26:E3:EC:10:A5
X509v3 Authority Key Identifier:
keyid:96:D6:69:66:FF:DA:0A:5D:0E:13:1D:13:4A:79:D9:32:05:C8:C5:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ltZpZv_aCl0OEx0TSnnZMgXIxVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/5b4426-a266-43ce-a9e6-b0e6058d4dd7/1/ltZpZv_aCl0OEx0TSnnZMgXIxVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/5b4426-a266-43ce-a9e6-b0e6058d4dd7/1/ltZpZv_aCl0OEx0TSnnZMgXIxVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:87:47:3b:54:e1:d8:75:ce:b8:94:2d:61:b0:02:22:1a:d9:
88:74:c2:97:f0:1e:4c:f2:ee:87:8c:e8:80:b9:d1:f0:2e:7c:
2d:cf:a8:31:38:8d:24:3c:da:85:c5:bc:0f:a6:4f:13:fe:77:
29:c1:bc:90:7d:c9:90:59:dd:78:66:03:41:29:1a:bf:14:86:
5f:89:6d:0b:8e:b6:22:2d:4b:fb:94:c3:bf:dd:62:31:80:61:
06:14:38:b5:1b:0d:cc:d6:dd:3f:9a:c8:27:82:de:49:c3:ea:
0b:f3:d9:1c:bb:25:72:12:fd:31:50:bf:78:30:d9:e4:bc:00:
20:11:85:21:4e:fb:b0:cd:0d:c1:10:1a:d4:45:e7:8f:8c:11:
cd:37:5d:56:a8:ee:88:88:41:61:10:b6:9e:30:41:cf:bf:3a:
4d:d7:ba:99:18:44:2c:57:d9:88:0a:5f:37:8a:14:7d:fe:a9:
f5:9f:fe:49:36:c0:62:b0:64:c4:15:5c:a2:98:95:73:01:4e:
8d:ee:70:23:d8:0b:a5:2a:ae:03:09:b7:10:25:77:98:66:43:
3d:0c:d9:3a:18:f1:48:b1:0b:66:e8:1f:a9:a3:b0:3d:0e:49:
f0:1f:28:da:39:05:60:f8:da:20:f3:7d:b3:70:10:3d:2b:bd:
79:cc:27:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 12:52:25 2025 by rpki-client