Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/0697c0-98ae-44ab-b4ab-b615c5c60652/1/ltzrqozTLcS_HWbQhzobbz1zSY8.mft
File: ltzrqozTLcS_HWbQhzobbz1zSY8.mft (raw, json)
Hash identifier: AOHvLkboybdGxLTJol6AHYxOTMO32MLkoFCNLYw+/3k=
Subject key identifier: C2:48:90:F3:1F:04:68:7B:B7:7D:52:4A:11:3F:FA:08:AB:20:4E:D6
Authority key identifier: 96:DC:EB:AA:8C:D3:2D:C4:BF:1D:66:D0:87:3A:1B:6F:3D:73:49:8F
Certificate issuer: /CN=96dcebaa8cd32dc4bf1d66d0873a1b6f3d73498f
Certificate serial: 019A54518D1F73971C5DAAB91E678AB26A81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ltzrqozTLcS_HWbQhzobbz1zSY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/0697c0-98ae-44ab-b4ab-b615c5c60652/1/ltzrqozTLcS_HWbQhzobbz1zSY8.mft
Manifest number: 1711
Signing time: Wed 05 Nov 2025 14:00:21 +0000
Manifest this update: Wed 05 Nov 2025 14:00:21 +0000
Manifest next update: Thu 06 Nov 2025 14:00:21 +0000
Files and hashes: 1: ltzrqozTLcS_HWbQhzobbz1zSY8.crl (hash: 2CuIy7fI+UIOabCEQfLkgcmHvAt5HuVyiibqrFC6ZYk=)
2: wAvxAueoqpHLtk8XQwnNyU9MpT8.roa (hash: BRt8y2qLbXewc3lf068PubvnKUoQIDgwBq9aCv3+KLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/0697c0-98ae-44ab-b4ab-b615c5c60652/1/ltzrqozTLcS_HWbQhzobbz1zSY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/0697c0-98ae-44ab-b4ab-b615c5c60652/1/ltzrqozTLcS_HWbQhzobbz1zSY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ltzrqozTLcS_HWbQhzobbz1zSY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:51:8d:1f:73:97:1c:5d:aa:b9:1e:67:8a:b2:6a:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96dcebaa8cd32dc4bf1d66d0873a1b6f3d73498f
Validity
Not Before: Nov 5 14:00:21 2025 GMT
Not After : Nov 6 14:00:21 2025 GMT
Subject: CN=c24890f31f04687bb77d524a113ffa08ab204ed6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:e3:5a:f7:c2:6d:64:39:bc:29:fb:f5:96:82:
3f:c1:10:90:2c:0c:9f:82:0d:02:9d:b1:f9:15:b2:
f5:ca:83:38:b7:73:f8:db:ed:dc:71:f6:46:b3:cf:
16:7a:75:33:58:9b:c0:64:76:1e:36:b4:39:e6:c2:
8c:43:b6:7f:39:46:21:f6:f0:70:fe:15:5b:17:1d:
f3:e4:a5:47:bf:20:a3:e7:a1:88:ce:bd:4c:e9:ae:
43:86:ae:49:73:a5:c6:33:23:45:c2:f4:56:63:cc:
aa:02:88:d3:ac:35:6c:f7:90:37:92:d7:cb:7f:db:
d2:e1:fc:3d:20:b2:bb:7e:0a:bf:64:d5:93:9a:92:
6e:ff:43:08:1f:b6:1f:56:41:65:25:85:2c:91:c2:
57:ff:ed:c0:86:9a:f0:76:8e:a3:06:9d:28:3f:fd:
86:d6:33:df:4e:1b:63:6a:73:c0:6a:f7:2a:58:29:
d6:28:98:36:bf:a8:54:1d:d2:a8:af:78:92:df:f6:
60:c0:fa:c1:27:e5:fe:8f:00:af:a3:37:41:1b:58:
13:7b:2d:51:1c:88:63:cc:b0:6b:02:40:44:ef:4c:
7e:f8:ed:7a:fd:19:33:34:15:3d:8e:11:b5:8a:73:
59:fb:92:5f:81:00:4a:c5:01:ea:db:42:3a:ed:3d:
df:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:48:90:F3:1F:04:68:7B:B7:7D:52:4A:11:3F:FA:08:AB:20:4E:D6
X509v3 Authority Key Identifier:
keyid:96:DC:EB:AA:8C:D3:2D:C4:BF:1D:66:D0:87:3A:1B:6F:3D:73:49:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ltzrqozTLcS_HWbQhzobbz1zSY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/0697c0-98ae-44ab-b4ab-b615c5c60652/1/ltzrqozTLcS_HWbQhzobbz1zSY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/0697c0-98ae-44ab-b4ab-b615c5c60652/1/ltzrqozTLcS_HWbQhzobbz1zSY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:c8:2d:6d:b0:32:1f:03:10:aa:e6:c3:a7:ac:8a:9f:28:bc:
20:f9:a9:de:1d:0f:28:48:a4:9c:63:c7:c2:a7:8c:61:a1:5b:
f6:8b:85:a6:1f:8b:d2:5a:a7:b4:7c:9b:6a:23:ee:c8:fe:97:
7c:ae:a6:8b:c2:58:c7:58:12:59:2b:33:35:60:b8:eb:d2:a0:
01:f2:7f:3b:d8:3a:86:d1:1b:e2:34:c9:41:4a:b2:3a:ae:e5:
11:67:f3:85:0e:e6:0a:da:2f:10:08:f3:e2:92:cb:7f:da:b5:
02:8e:43:5f:02:f1:39:80:77:c0:99:60:a1:9d:36:3c:a0:22:
ca:1d:a0:2b:9e:cb:4b:21:15:f1:b7:f1:d7:81:f6:4d:51:06:
e3:f2:1b:c6:ef:da:e1:0a:55:21:37:de:b5:08:76:5e:f3:ef:
c5:6b:e6:95:86:0a:c2:47:82:3d:80:dd:a3:2e:35:7e:7d:07:
8f:11:19:1c:f1:21:2f:f3:32:2a:f3:a1:a6:41:6f:22:59:37:
79:05:ad:af:fc:c1:19:43:b9:b6:a9:2d:67:d4:5e:ec:39:4b:
17:d2:1a:33:99:34:d5:8d:f8:4f:42:80:2d:60:ee:2f:94:08:
83:48:21:d8:b6:57:53:d4:d6:c5:58:16:9e:6d:89:ef:64:ba:
40:1b:52:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 23:06:20 2025 by rpki-client