Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/0697c0-98ae-44ab-b4ab-b615c5c60652/1/ltzrqozTLcS_HWbQhzobbz1zSY8.mft
File: ltzrqozTLcS_HWbQhzobbz1zSY8.mft (raw, json)
Hash identifier: ChpWxdj73uZqU93GmXUpVo5IjohCyst9tXdU9ad2Z1c=
Subject key identifier: 6A:14:69:12:7F:FD:BC:B8:82:1E:1D:7D:2C:DD:02:3F:87:0A:8E:CA
Authority key identifier: 96:DC:EB:AA:8C:D3:2D:C4:BF:1D:66:D0:87:3A:1B:6F:3D:73:49:8F
Certificate issuer: /CN=96dcebaa8cd32dc4bf1d66d0873a1b6f3d73498f
Certificate serial: 019768F2FD9A23D25A2F5E243BB4476E3561
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ltzrqozTLcS_HWbQhzobbz1zSY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/0697c0-98ae-44ab-b4ab-b615c5c60652/1/ltzrqozTLcS_HWbQhzobbz1zSY8.mft
Manifest number: 158E
Signing time: Fri 13 Jun 2025 11:00:44 +0000
Manifest this update: Fri 13 Jun 2025 11:00:44 +0000
Manifest next update: Sat 14 Jun 2025 11:00:44 +0000
Files and hashes: 1: ltzrqozTLcS_HWbQhzobbz1zSY8.crl (hash: MBc0VKh2NLLzTswrjrOE+3MM+H0rc8ToKjyjKVOmRYg=)
2: wAvxAueoqpHLtk8XQwnNyU9MpT8.roa (hash: BRt8y2qLbXewc3lf068PubvnKUoQIDgwBq9aCv3+KLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/0697c0-98ae-44ab-b4ab-b615c5c60652/1/ltzrqozTLcS_HWbQhzobbz1zSY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/0697c0-98ae-44ab-b4ab-b615c5c60652/1/ltzrqozTLcS_HWbQhzobbz1zSY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ltzrqozTLcS_HWbQhzobbz1zSY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 11:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:f2:fd:9a:23:d2:5a:2f:5e:24:3b:b4:47:6e:35:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96dcebaa8cd32dc4bf1d66d0873a1b6f3d73498f
Validity
Not Before: Jun 13 11:00:44 2025 GMT
Not After : Jun 14 11:00:44 2025 GMT
Subject: CN=6a1469127ffdbcb8821e1d7d2cdd023f870a8eca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:97:9b:59:51:7f:91:ce:8c:0f:ee:8e:e7:40:
c4:7d:f1:41:dd:dd:61:49:64:b6:8e:3d:19:ff:78:
ed:f7:f8:3a:12:94:43:bb:11:45:07:6d:5e:19:e6:
7a:8b:39:b6:91:81:cf:aa:d4:9d:7f:7c:10:de:21:
57:78:19:6d:f5:05:8d:c9:1b:fe:05:dd:c9:f0:d8:
b3:5d:3b:f8:94:09:f1:56:13:17:cd:3d:fb:7b:7b:
e0:13:da:00:a3:0f:b0:63:08:c8:4c:d8:9b:af:0b:
ae:6b:55:68:94:67:e1:23:a9:15:55:78:5e:c8:7b:
f5:9c:c6:1d:77:77:95:32:b1:d9:5f:da:8d:a5:d1:
30:d1:a7:c5:57:63:58:ac:17:8e:03:08:2f:a9:d7:
52:6e:6f:17:26:42:d0:7e:59:77:20:a8:01:d7:54:
55:2e:08:51:70:12:81:71:6a:54:2e:83:fc:e9:d5:
6b:4d:30:81:09:70:1a:fd:17:d5:c0:a3:8e:c3:a0:
53:bc:0c:06:f2:35:64:05:45:fe:7a:87:5e:79:9d:
9d:6f:f8:22:56:b5:fa:fc:b2:e1:8f:86:0a:be:ef:
a0:d7:07:32:06:be:db:42:3c:f1:a1:8a:ee:76:77:
9e:d3:3b:c8:2b:49:44:d9:b8:e7:24:88:0e:f1:4c:
25:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:14:69:12:7F:FD:BC:B8:82:1E:1D:7D:2C:DD:02:3F:87:0A:8E:CA
X509v3 Authority Key Identifier:
keyid:96:DC:EB:AA:8C:D3:2D:C4:BF:1D:66:D0:87:3A:1B:6F:3D:73:49:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ltzrqozTLcS_HWbQhzobbz1zSY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/0697c0-98ae-44ab-b4ab-b615c5c60652/1/ltzrqozTLcS_HWbQhzobbz1zSY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/0697c0-98ae-44ab-b4ab-b615c5c60652/1/ltzrqozTLcS_HWbQhzobbz1zSY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:1d:f9:50:94:09:8f:0f:fc:30:37:79:76:41:85:15:77:91:
bc:de:97:fc:8d:89:c4:04:88:24:04:58:c5:f2:c5:72:ca:f2:
38:25:56:92:f8:0b:7b:a1:be:3b:28:30:d6:6c:b9:62:0f:bb:
30:07:10:9e:be:6f:a1:bc:b7:62:93:38:3c:60:ab:ce:d3:60:
f4:0c:7e:1f:8c:2e:a8:19:52:d2:51:b1:8a:66:4c:a2:d5:83:
f0:72:71:8d:f1:20:8e:b6:82:84:e5:2c:92:98:89:17:26:9c:
5c:23:e3:ae:aa:f9:10:0a:e4:83:fd:49:fa:d9:aa:5a:e2:68:
61:b5:52:8f:1a:ba:32:de:cb:d6:77:af:b1:8f:6a:57:0b:da:
da:50:d3:85:4f:c3:1f:a8:16:98:1d:04:ab:66:3a:ba:a6:a6:
93:34:cf:b7:74:99:66:02:f7:6e:6c:d9:c6:ba:cb:07:31:0d:
0d:8a:20:4a:53:20:de:40:d1:cd:f6:e7:50:50:2b:e2:c8:1e:
5b:cc:d0:d1:94:ff:81:f8:7c:3f:aa:f9:c7:49:01:bf:da:98:
f0:17:30:50:99:b6:59:29:71:99:48:e2:70:bd:ee:79:b6:bf:
7c:5e:20:83:c4:b3:fc:35:76:d7:5f:da:32:83:f0:54:d2:98:
15:3c:e9:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:42:24 2025 by rpki-client