Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/552e68-611d-4ad8-a7e1-48bfac2cdc72/1/Ltf7wd8AcKz1s6Z85OIS29A6-tc.mft
File: Ltf7wd8AcKz1s6Z85OIS29A6-tc.mft (raw, json)
Hash identifier: lghYJz1R213izSDpXZZgx8mBUAEdiEBWWGv+7XUqc0g=
Subject key identifier: AE:31:F2:C1:63:7F:CE:0A:35:E3:C3:57:48:25:67:28:EE:C0:6F:95
Authority key identifier: 2E:D7:FB:C1:DF:00:70:AC:F5:B3:A6:7C:E4:E2:12:DB:D0:3A:FA:D7
Certificate issuer: /CN=2ed7fbc1df0070acf5b3a67ce4e212dbd03afad7
Certificate serial: 019873E2A0F534B689CAD563482C23B87AFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ltf7wd8AcKz1s6Z85OIS29A6-tc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/552e68-611d-4ad8-a7e1-48bfac2cdc72/1/Ltf7wd8AcKz1s6Z85OIS29A6-tc.mft
Manifest number: 0643
Signing time: Mon 04 Aug 2025 07:01:28 +0000
Manifest this update: Mon 04 Aug 2025 07:01:28 +0000
Manifest next update: Tue 05 Aug 2025 07:01:28 +0000
Files and hashes: 1: Ltf7wd8AcKz1s6Z85OIS29A6-tc.crl (hash: zymqeZzAQxvqqcCoTcyvMr7JT3BdoOAmx7K73Lq55I8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/552e68-611d-4ad8-a7e1-48bfac2cdc72/1/Ltf7wd8AcKz1s6Z85OIS29A6-tc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/552e68-611d-4ad8-a7e1-48bfac2cdc72/1/Ltf7wd8AcKz1s6Z85OIS29A6-tc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ltf7wd8AcKz1s6Z85OIS29A6-tc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:a0:f5:34:b6:89:ca:d5:63:48:2c:23:b8:7a:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ed7fbc1df0070acf5b3a67ce4e212dbd03afad7
Validity
Not Before: Aug 4 07:01:28 2025 GMT
Not After : Aug 5 07:01:28 2025 GMT
Subject: CN=ae31f2c1637fce0a35e3c35748256728eec06f95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c0:b8:f5:78:9f:76:68:99:6c:3f:3b:7a:ad:
05:98:d4:de:dc:6f:cc:77:b1:e9:70:22:aa:62:98:
51:69:43:9e:4d:35:49:2f:7a:e7:c3:7d:97:d1:91:
b3:ab:74:a6:1a:a9:f6:a6:42:a7:10:ab:59:1d:57:
4b:89:cc:c6:2a:76:27:94:86:30:49:44:01:e7:41:
d7:0e:73:6c:20:f4:45:55:89:d5:96:65:df:5f:76:
30:a4:d2:b3:a9:0f:f2:8d:31:e7:5b:50:c2:90:af:
1b:66:71:7c:88:f7:32:fe:ae:70:57:3b:b7:65:14:
7c:14:b5:76:9b:dc:af:fb:de:f5:f7:b0:05:d4:00:
23:a1:3a:71:af:a8:59:33:41:20:ca:df:cb:ad:1d:
e4:6a:a1:13:5d:74:65:0a:91:2a:a7:2e:2f:7c:16:
13:0b:9d:fc:9b:50:f4:a0:ae:b9:39:e8:dd:96:0a:
4e:81:dc:fa:b7:5b:2b:b6:a6:95:70:c6:e6:b2:f2:
ee:32:31:a3:9c:31:ea:b6:fd:98:70:7e:79:88:03:
6a:d0:ed:74:49:0d:0a:8d:39:df:0b:6f:02:ad:d2:
34:b1:87:bf:a5:b2:eb:b3:94:cc:14:2c:a2:b6:a8:
db:12:70:33:74:7d:5d:fd:86:85:cc:a1:69:98:57:
d3:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:31:F2:C1:63:7F:CE:0A:35:E3:C3:57:48:25:67:28:EE:C0:6F:95
X509v3 Authority Key Identifier:
keyid:2E:D7:FB:C1:DF:00:70:AC:F5:B3:A6:7C:E4:E2:12:DB:D0:3A:FA:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ltf7wd8AcKz1s6Z85OIS29A6-tc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/552e68-611d-4ad8-a7e1-48bfac2cdc72/1/Ltf7wd8AcKz1s6Z85OIS29A6-tc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/552e68-611d-4ad8-a7e1-48bfac2cdc72/1/Ltf7wd8AcKz1s6Z85OIS29A6-tc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:50:09:ba:f7:72:1b:8b:9a:c8:cb:c9:ba:d0:15:37:5c:f0:
85:7c:f7:44:18:0d:bc:4f:10:1f:49:f8:78:d5:34:b4:ce:7c:
fd:f3:fd:a5:da:4f:6e:96:85:03:9f:b6:8d:f1:27:ea:65:d2:
8c:01:2f:69:b1:cb:0c:75:8c:ae:85:32:c0:f6:58:cc:de:48:
58:98:b6:08:52:d1:97:30:b2:8b:bb:6c:ae:e5:47:49:e3:f0:
cd:15:98:46:90:3b:49:25:33:fc:0c:4e:4c:e4:04:9e:db:06:
9e:5c:27:0e:d0:0c:d4:35:b6:17:06:e5:2d:8d:8f:37:0d:ac:
37:45:84:ac:cf:6f:79:4d:26:27:13:27:67:71:7d:ba:04:d4:
a9:0c:c2:a3:a0:3d:f1:4b:df:23:09:79:39:fd:13:64:7f:05:
8e:57:e8:1e:e9:55:fc:3f:16:86:ac:6b:37:b2:4e:5a:bf:44:
e1:19:2d:d5:58:c2:c5:39:46:74:1f:fe:8c:42:fc:c4:d7:15:
2f:b0:b3:83:3a:58:01:6a:78:d3:85:fe:ac:49:e9:03:a1:76:
5a:8e:b2:d2:0f:00:0c:2c:c7:52:09:dd:07:44:c3:5e:7b:f0:
19:ef:a9:99:09:97:3e:d1:c9:5b:a0:57:f1:b9:a5:1a:a0:4b:
07:bb:55:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:01:36 2025 by rpki-client