Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/46a1b0-10c0-4cf9-9502-10d1734d7b83/1/LTDDBwxuYe3FimTzIz-pf8X1c5s.mft
File: LTDDBwxuYe3FimTzIz-pf8X1c5s.mft (raw, json)
Hash identifier: ozwhA6pmlA5toeQY9GEVa2wsOYQ4LhUmCf5xdIKTP8Q=
Subject key identifier: A1:20:59:3F:EB:78:53:A1:05:3A:EB:12:E8:81:71:7B:14:C5:65:62
Authority key identifier: 2D:30:C3:07:0C:6E:61:ED:C5:8A:64:F3:23:3F:A9:7F:C5:F5:73:9B
Certificate issuer: /CN=2d30c3070c6e61edc58a64f3233fa97fc5f5739b
Certificate serial: 019A5151098D489262449812BAA4EFFB3A71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LTDDBwxuYe3FimTzIz-pf8X1c5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/46a1b0-10c0-4cf9-9502-10d1734d7b83/1/LTDDBwxuYe3FimTzIz-pf8X1c5s.mft
Manifest number: 1711
Signing time: Wed 05 Nov 2025 00:00:56 +0000
Manifest this update: Wed 05 Nov 2025 00:00:56 +0000
Manifest next update: Thu 06 Nov 2025 00:00:56 +0000
Files and hashes: 1: 8zTP6bF-8Ig21O-GNkBs9OXORp0.roa (hash: 9YznWSa8FHqt+jbmFpmAFvzlfMFLjOXYAA2TeVtspuE=)
2: LTDDBwxuYe3FimTzIz-pf8X1c5s.crl (hash: vADbmly7ZRysuxHwpwUvT5/93TIwUrSetGg+lxslt2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/46a1b0-10c0-4cf9-9502-10d1734d7b83/1/LTDDBwxuYe3FimTzIz-pf8X1c5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/46a1b0-10c0-4cf9-9502-10d1734d7b83/1/LTDDBwxuYe3FimTzIz-pf8X1c5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/LTDDBwxuYe3FimTzIz-pf8X1c5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:51:09:8d:48:92:62:44:98:12:ba:a4:ef:fb:3a:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d30c3070c6e61edc58a64f3233fa97fc5f5739b
Validity
Not Before: Nov 5 00:00:56 2025 GMT
Not After : Nov 6 00:00:56 2025 GMT
Subject: CN=a120593feb7853a1053aeb12e881717b14c56562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:7a:72:e3:a2:35:e6:9f:8d:28:93:a5:8c:d4:
76:a7:7d:3b:93:77:db:90:31:da:84:01:fa:b1:5b:
11:5a:e3:0d:66:7b:03:f3:32:f6:66:92:e0:b2:91:
04:bb:a1:75:04:61:56:37:6f:1f:94:f9:5d:4b:e8:
6d:81:42:59:2a:ec:98:cc:01:ee:af:96:8a:64:59:
78:39:5b:1a:29:f1:c1:5c:6c:d1:1b:05:2b:0d:3d:
fa:9d:bf:d3:07:94:b7:35:f1:64:9f:8f:d0:aa:27:
61:07:c5:53:a3:a7:c0:f0:e9:26:3c:88:4e:f7:70:
16:ac:67:aa:3e:fd:90:99:ca:53:5e:0e:7e:c1:8f:
6a:ba:d0:d8:b4:ee:4a:45:ab:e7:95:6f:67:04:6f:
32:ee:a4:37:a6:2f:8c:8e:43:42:c7:aa:2d:4f:f5:
12:24:47:24:70:2c:89:81:a6:6f:33:74:2c:3c:7d:
1d:20:b2:27:fe:20:70:75:dc:cb:03:ea:bb:47:09:
40:7f:1f:ab:19:55:53:dd:05:e2:31:c1:25:5b:54:
49:09:e3:0c:d2:10:dd:ef:aa:c2:10:ba:65:f6:a3:
0f:c7:32:ba:9d:a3:4e:40:8d:10:b7:4a:4b:36:c9:
17:68:9f:bf:7d:9c:ed:65:be:f6:25:9f:47:39:82:
a5:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:20:59:3F:EB:78:53:A1:05:3A:EB:12:E8:81:71:7B:14:C5:65:62
X509v3 Authority Key Identifier:
keyid:2D:30:C3:07:0C:6E:61:ED:C5:8A:64:F3:23:3F:A9:7F:C5:F5:73:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LTDDBwxuYe3FimTzIz-pf8X1c5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/46a1b0-10c0-4cf9-9502-10d1734d7b83/1/LTDDBwxuYe3FimTzIz-pf8X1c5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/46a1b0-10c0-4cf9-9502-10d1734d7b83/1/LTDDBwxuYe3FimTzIz-pf8X1c5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:3d:42:8f:07:bb:c0:be:88:b6:5b:df:f3:b6:5f:18:62:46:
87:28:12:6d:17:11:c5:5f:a5:fe:b7:98:54:03:9c:df:f1:d2:
7f:47:0b:d8:cc:b7:2e:b6:ad:ce:b5:3d:c2:15:14:31:37:53:
6a:03:82:2a:dc:40:73:22:54:f4:96:73:3f:91:57:ce:21:ed:
b6:d7:1e:db:76:0b:8d:05:b1:37:53:c3:71:3f:94:36:cd:ba:
12:78:f8:9b:a3:89:5f:0b:a3:0d:58:ee:8a:27:e4:1f:cc:17:
12:84:1f:87:46:f6:3f:47:87:e5:09:aa:02:f5:e5:65:55:85:
b4:9d:b1:3b:30:ed:c0:ec:82:4d:c3:21:23:d7:34:16:ac:3a:
7f:e0:47:d9:ed:73:25:f1:93:53:a9:35:4d:97:54:4d:7e:0b:
b6:70:27:64:f5:ed:7d:9e:20:b0:80:5a:4c:0e:4c:97:ad:de:
29:e0:fa:27:2f:c3:1c:f5:b8:f3:32:5e:6e:1f:42:ec:8b:2a:
9e:94:5b:c8:84:91:a0:85:b8:42:be:0e:a5:e5:0c:ff:91:c0:
19:c4:b3:61:28:e9:3f:05:23:5b:c1:c8:10:cf:5b:a9:1f:b4:
6e:4f:66:62:b5:6f:fe:6a:58:66:7e:49:e4:44:14:4c:0e:fc:
43:4f:ed:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:13:51 2025 by rpki-client