Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/5e1871-2af1-47d3-b262-08f433daea15/1/LO4pmOhvp0iOa2T47bwDLOFdG8w.mft
File: LO4pmOhvp0iOa2T47bwDLOFdG8w.mft (raw, json)
Hash identifier: tMni2X5mTVmRSuZmHmm/Rx1RFrJjHaqtg/m/OCsV4MA=
Subject key identifier: 26:D8:60:C9:13:29:47:4B:C2:98:CC:C2:04:22:E5:CC:10:14:BA:CC
Authority key identifier: 2C:EE:29:98:E8:6F:A7:48:8E:6B:64:F8:ED:BC:03:2C:E1:5D:1B:CC
Certificate issuer: /CN=2cee2998e86fa7488e6b64f8edbc032ce15d1bcc
Certificate serial: 0198D7A978B4F07AB4A2883EA8DB14998B60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LO4pmOhvp0iOa2T47bwDLOFdG8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/5e1871-2af1-47d3-b262-08f433daea15/1/LO4pmOhvp0iOa2T47bwDLOFdG8w.mft
Manifest number: 0DCE
Signing time: Sat 23 Aug 2025 16:01:04 +0000
Manifest this update: Sat 23 Aug 2025 16:01:04 +0000
Manifest next update: Sun 24 Aug 2025 16:01:04 +0000
Files and hashes: 1: LO4pmOhvp0iOa2T47bwDLOFdG8w.crl (hash: k0upiiBIvGjCg9kiXSY56uFrkvFN6K57GWDKTLf2W4M=)
2: YXxh1XSQz2hJg4wU0JwpLVfgRPc.roa (hash: fKQqPt+1938ZgXlhZdhE3xLSu/gu+cSj1bUfoNu6uac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/5e1871-2af1-47d3-b262-08f433daea15/1/LO4pmOhvp0iOa2T47bwDLOFdG8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/5e1871-2af1-47d3-b262-08f433daea15/1/LO4pmOhvp0iOa2T47bwDLOFdG8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/LO4pmOhvp0iOa2T47bwDLOFdG8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a9:78:b4:f0:7a:b4:a2:88:3e:a8:db:14:99:8b:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cee2998e86fa7488e6b64f8edbc032ce15d1bcc
Validity
Not Before: Aug 23 16:01:04 2025 GMT
Not After : Aug 24 16:01:04 2025 GMT
Subject: CN=26d860c91329474bc298ccc20422e5cc1014bacc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:84:40:80:ae:62:e6:61:85:55:e2:df:e4:16:
e1:a9:d4:c9:64:33:c0:29:e8:db:ee:6b:7b:ef:4f:
46:95:eb:c9:fe:7c:75:54:61:61:e8:74:86:1d:97:
70:be:94:f2:c8:a8:ab:84:c4:dc:ef:1a:39:4b:b6:
6e:d9:e7:13:4a:f6:a4:93:a0:3f:b8:73:43:e6:e7:
cf:91:95:8a:0d:91:95:56:e4:b2:a2:f5:2d:88:34:
ab:0b:c6:44:68:61:9f:81:00:57:2d:c1:ee:03:e1:
52:6d:ee:50:94:71:6b:c1:df:65:ec:52:08:c3:48:
ea:9c:8a:a9:d8:1e:b4:fc:77:d2:7d:b0:d9:ce:0e:
74:f1:80:e9:6e:51:ed:fa:3a:63:e6:58:3d:4b:05:
92:60:50:44:ca:98:41:5e:2a:d5:32:2a:ad:f8:19:
bd:e2:5b:33:1c:b8:79:75:2c:cf:8a:cf:94:03:cd:
cb:b9:e6:27:1a:7b:ab:ec:d8:ae:95:72:1e:0f:cd:
3a:ba:5d:e8:19:a0:86:35:d2:32:e8:de:13:db:d6:
a6:75:7d:e5:f3:47:a4:2b:00:6b:b0:b6:e1:46:c3:
1f:27:5b:c2:5d:9b:f4:c6:99:e0:21:88:72:d7:4e:
4e:3b:87:d6:ff:4a:7d:c6:b8:3f:bd:ed:9c:8b:c8:
3f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:D8:60:C9:13:29:47:4B:C2:98:CC:C2:04:22:E5:CC:10:14:BA:CC
X509v3 Authority Key Identifier:
keyid:2C:EE:29:98:E8:6F:A7:48:8E:6B:64:F8:ED:BC:03:2C:E1:5D:1B:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LO4pmOhvp0iOa2T47bwDLOFdG8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5e1871-2af1-47d3-b262-08f433daea15/1/LO4pmOhvp0iOa2T47bwDLOFdG8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5e1871-2af1-47d3-b262-08f433daea15/1/LO4pmOhvp0iOa2T47bwDLOFdG8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:60:eb:e5:3b:2b:d5:12:3e:48:54:86:85:a5:a5:c5:0b:99:
22:ac:1f:ce:fa:62:e5:72:c5:90:2d:a9:c1:94:29:a5:dd:98:
38:d6:b6:8d:4b:2e:29:3d:fb:19:86:ae:99:b7:1a:6b:70:df:
a2:5a:b2:04:26:00:c6:8e:d5:4d:6e:65:b8:39:04:5a:13:fa:
f1:4f:4d:68:5b:be:6e:a4:fc:5a:8f:30:7f:b0:87:7f:07:ae:
88:84:2d:e4:ec:ab:58:86:10:a4:27:7e:47:1c:4c:81:3d:f2:
46:b6:9c:2d:26:3f:23:60:a5:1e:8a:67:69:dd:91:b9:7c:8e:
d3:01:6f:4f:05:b9:d2:82:83:39:ef:12:89:31:11:84:30:71:
74:fd:8b:4f:7a:c6:12:69:26:a9:fd:18:a8:1e:87:a1:ca:67:
c4:67:3a:86:fb:c9:09:61:a1:f4:b5:e8:08:d3:e2:f6:ed:67:
4e:cd:68:00:2d:1f:e0:9b:22:d8:e7:bb:a2:2e:59:a0:7d:c6:
fe:22:8e:51:d2:69:b7:fb:16:45:f9:f5:90:de:ad:7d:2b:4d:
49:70:88:c2:82:7e:21:d7:29:17:ea:03:22:15:a3:2b:17:8d:
5a:35:25:3a:47:b7:0b:4c:9f:01:e4:0b:e2:ea:2e:1a:b2:6f:
73:58:5e:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:21:56 2025 by rpki-client