Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/0c5265-32af-48f2-906d-b652c85556bb/1/lt2IX_TTiauqvQOlF10JdBrLpg0.mft
File: lt2IX_TTiauqvQOlF10JdBrLpg0.mft (raw, json)
Hash identifier: Zij51Z777gHDnUpQrSddmzO+jB5PNSfCuXJILy4/mr4=
Subject key identifier: D5:E4:C5:6A:F7:AD:C5:47:A1:B6:80:28:AE:35:62:0D:FF:30:BB:E8
Authority key identifier: 96:DD:88:5F:F4:D3:89:AB:AA:BD:03:A5:17:5D:09:74:1A:CB:A6:0D
Certificate issuer: /CN=96dd885ff4d389abaabd03a5175d09741acba60d
Certificate serial: 0198819E0D81E3DF896FE6838473FB55215B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lt2IX_TTiauqvQOlF10JdBrLpg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/0c5265-32af-48f2-906d-b652c85556bb/1/lt2IX_TTiauqvQOlF10JdBrLpg0.mft
Manifest number: 76
Signing time: Wed 06 Aug 2025 23:01:15 +0000
Manifest this update: Wed 06 Aug 2025 23:01:15 +0000
Manifest next update: Thu 07 Aug 2025 23:01:15 +0000
Files and hashes: 1: hdbgy59MRssZX30bGqV8gIYXM48.roa (hash: g1IyZ0aHYMFjjiI9SIYZwd4GtNo/PD9i0KvcrdPt5KQ=)
2: lt2IX_TTiauqvQOlF10JdBrLpg0.crl (hash: hKEv55IdR0tlkSYohs9Brp0jBnV+iayAHemWcN+nl3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/0c5265-32af-48f2-906d-b652c85556bb/1/lt2IX_TTiauqvQOlF10JdBrLpg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/0c5265-32af-48f2-906d-b652c85556bb/1/lt2IX_TTiauqvQOlF10JdBrLpg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lt2IX_TTiauqvQOlF10JdBrLpg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:9e:0d:81:e3:df:89:6f:e6:83:84:73:fb:55:21:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96dd885ff4d389abaabd03a5175d09741acba60d
Validity
Not Before: Aug 6 23:01:15 2025 GMT
Not After : Aug 7 23:01:15 2025 GMT
Subject: CN=d5e4c56af7adc547a1b68028ae35620dff30bbe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:97:32:f7:b5:e6:44:93:05:b7:e5:89:e6:31:
7d:ab:de:5a:4f:65:1e:42:3e:33:dc:6c:ff:f5:2d:
4b:da:46:fe:4a:f2:cc:a6:a0:a1:1d:58:60:c6:c7:
97:b5:24:85:74:be:50:33:42:be:3e:a4:66:09:84:
59:7d:b8:1a:8d:fa:11:94:fb:7a:b7:18:d1:c3:f8:
e8:0c:46:23:8f:05:87:4c:e0:20:bc:10:87:7d:f8:
07:8c:06:12:20:57:10:96:e2:d5:a0:f5:ed:2f:26:
a7:51:98:e6:5c:2f:89:62:52:da:9b:0e:74:47:00:
dd:be:e0:60:9c:4b:a8:23:36:c2:03:1c:41:00:9c:
b0:f4:f6:e0:57:91:8d:58:88:79:04:9b:e9:fc:a4:
23:78:1d:73:bc:38:38:0e:7b:af:00:ae:74:5c:dc:
a7:8c:91:a4:c3:c5:09:70:2e:95:d8:15:27:d6:5b:
44:23:18:3b:16:44:3c:27:00:73:60:da:6d:79:f7:
03:34:3a:d2:fa:7d:8b:17:7a:60:10:bb:a2:3b:b5:
a4:30:5c:9a:2e:fd:e9:70:bf:d0:15:e2:91:18:be:
79:74:dd:4d:1e:4b:32:11:8c:e7:ad:10:6b:b2:10:
3d:2d:88:07:62:fc:ea:0d:26:c5:a2:ee:47:97:0c:
30:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:E4:C5:6A:F7:AD:C5:47:A1:B6:80:28:AE:35:62:0D:FF:30:BB:E8
X509v3 Authority Key Identifier:
keyid:96:DD:88:5F:F4:D3:89:AB:AA:BD:03:A5:17:5D:09:74:1A:CB:A6:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lt2IX_TTiauqvQOlF10JdBrLpg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/0c5265-32af-48f2-906d-b652c85556bb/1/lt2IX_TTiauqvQOlF10JdBrLpg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/0c5265-32af-48f2-906d-b652c85556bb/1/lt2IX_TTiauqvQOlF10JdBrLpg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:ab:4c:85:df:f5:b4:e5:19:13:0b:30:7f:69:d0:1a:f0:fc:
5b:f0:35:0d:ca:61:52:17:05:a2:16:63:f2:b0:ee:3f:9b:fb:
a5:db:81:4d:2e:9b:4e:31:22:f1:f5:dd:78:30:f4:f1:10:77:
1c:fc:c8:7c:2a:27:3e:a4:1c:81:17:ac:9c:d7:2a:9e:85:98:
8b:8d:24:6b:f7:a5:db:30:81:6f:9c:b6:e6:43:eb:77:12:a0:
61:30:08:dc:44:42:4b:9c:ba:dc:a8:c1:db:16:db:35:c3:4c:
88:c0:6c:6e:8a:7e:7b:25:60:19:44:65:93:dd:d9:82:ba:23:
07:43:38:f0:4d:50:fa:f7:67:c0:75:23:2c:da:25:a9:97:cc:
59:f8:12:19:d5:99:b8:43:c9:39:18:d1:45:6d:93:0d:61:c6:
1b:ef:76:4e:01:f6:c2:19:34:4c:d7:31:e5:76:4f:67:17:70:
50:7e:f2:e7:ba:b5:84:8d:01:1f:cd:41:66:43:8c:bb:51:7f:
a6:2f:89:8d:77:2e:eb:74:bc:59:b6:ab:90:8d:80:72:b1:d6:
91:fc:d8:56:33:de:da:a6:f6:1b:bb:65:d7:63:e7:e9:fe:d4:
52:49:30:5e:1b:cb:83:d8:21:58:d2:cb:15:0d:2d:fd:67:6b:
e1:f1:c5:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 02:01:08 2025 by rpki-client