Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft
File: ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft (raw, json)
Hash identifier: 0ySjRQTkQix2CVqSd/qctwAYycqtOBWKV1F3VT85eog=
Subject key identifier: 11:98:A2:BD:AB:D2:15:12:E0:9D:1E:4D:5F:FA:84:6D:3C:41:AE:DE
Authority key identifier: 96:D9:5F:E2:D9:09:43:C9:2F:6C:28:F3:B3:29:F8:20:15:CD:92:AE
Certificate issuer: /CN=96d95fe2d90943c92f6c28f3b329f82015cd92ae
Certificate serial: 0198741959B07CF37F26D23ADBCA3474E484
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft
Manifest number: 0980
Signing time: Mon 04 Aug 2025 08:01:14 +0000
Manifest this update: Mon 04 Aug 2025 08:01:14 +0000
Manifest next update: Tue 05 Aug 2025 08:01:14 +0000
Files and hashes: 1: HmN4gqQ32E9Rqx-4t1qedvdMoH4.roa (hash: LX7NEJ+NlRiJfL2YQ6zxCjTe/Dn2kPvQcp14my1Cmso=)
2: ltlf4tkJQ8kvbCjzsyn4IBXNkq4.crl (hash: LgnAV1oZBfRjhZCHL7XgzjegLXqb4dntbJrwmfd3fRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:19:59:b0:7c:f3:7f:26:d2:3a:db:ca:34:74:e4:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96d95fe2d90943c92f6c28f3b329f82015cd92ae
Validity
Not Before: Aug 4 08:01:14 2025 GMT
Not After : Aug 5 08:01:14 2025 GMT
Subject: CN=1198a2bdabd21512e09d1e4d5ffa846d3c41aede
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:53:b5:22:5c:19:b9:18:44:32:fa:d7:07:84:
48:21:bb:91:e2:ed:64:d7:71:23:0a:8c:84:04:c2:
b4:97:fc:2c:7c:ef:e2:c7:8b:41:d0:b5:2e:37:08:
a1:83:de:44:46:44:51:7f:c7:32:30:ad:76:ad:30:
e4:7e:50:38:13:da:54:6d:4c:8e:99:8f:ba:7a:5f:
33:1f:71:9f:b1:b6:00:cc:a6:78:8c:e0:ea:f2:95:
e9:00:ff:c2:70:7d:12:0e:84:d3:75:8d:a6:3e:42:
ad:fa:b3:39:3b:47:d2:af:62:24:1d:d2:cf:40:d9:
cf:ec:58:45:45:32:71:2b:e6:6e:6e:a7:f8:6e:45:
8e:37:f1:2b:5d:32:00:b4:97:3c:88:55:86:6c:ea:
d7:31:db:82:d2:a3:de:90:06:0f:25:df:f4:75:6b:
57:b0:e5:bd:aa:fa:a5:0c:6f:77:54:eb:84:55:69:
50:3d:3c:03:1d:5a:5c:6b:44:29:14:19:4b:e0:08:
d9:71:d1:d9:db:5e:d7:c3:fd:58:7f:20:2f:a4:a9:
1f:de:51:8c:ad:ae:b2:0d:78:b2:42:92:41:92:d7:
da:94:71:df:ae:b9:18:4a:9d:e3:9a:14:b7:8e:c2:
24:bb:11:37:17:77:0e:16:c2:be:a8:56:f6:f1:2c:
ac:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:98:A2:BD:AB:D2:15:12:E0:9D:1E:4D:5F:FA:84:6D:3C:41:AE:DE
X509v3 Authority Key Identifier:
keyid:96:D9:5F:E2:D9:09:43:C9:2F:6C:28:F3:B3:29:F8:20:15:CD:92:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:e5:2e:9c:be:52:44:12:a5:2e:ee:b9:fe:b0:94:19:52:a8:
89:fa:3f:9c:e3:ac:91:91:05:5a:f3:7f:ed:8d:78:49:68:5c:
6f:eb:0e:ad:47:f1:55:ef:08:67:97:35:82:4b:da:7a:39:c7:
c0:ae:24:c3:e0:f4:1f:4f:e4:d4:3c:79:ba:9d:f6:e5:e6:95:
60:6c:63:65:94:f5:5d:00:4c:9a:7d:b8:7e:f7:bc:f5:e5:25:
63:65:8b:35:d4:98:cc:50:1b:ad:cf:64:ca:f6:05:3d:69:85:
7a:29:d7:e1:a8:65:36:0c:c3:c7:81:a9:bb:eb:3b:51:ea:b5:
8f:55:85:53:da:62:8c:60:48:c3:15:35:64:90:cc:6e:b6:ff:
0f:94:c1:d6:ed:2c:a8:f0:ca:40:fb:9a:2a:32:f7:57:63:14:
5d:02:64:f3:62:e9:13:af:8a:2a:4e:b0:4a:17:80:a9:1e:4a:
85:5b:eb:d8:27:f3:d1:e4:3e:53:b3:ce:cf:43:bd:fa:3e:a9:
ce:c2:4b:b2:f0:ff:1b:84:30:0a:a1:fc:9a:83:ef:86:22:18:
28:55:86:ba:47:1d:34:f8:e8:f8:1b:eb:9e:58:3f:3f:2e:f0:
20:28:73:ae:3e:22:de:8d:f0:67:85:33:eb:24:73:52:65:4a:
ea:8e:48:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:09:40 2025 by rpki-client