Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/5e1871-2af1-47d3-b262-08f433daea15/1/LO4pmOhvp0iOa2T47bwDLOFdG8w.mft
File: LO4pmOhvp0iOa2T47bwDLOFdG8w.mft (raw, json)
Hash identifier: 8C/PAKtTPolhxkTQ2+H4tolw0QYLzTAVZd+3mFlSw3c=
Subject key identifier: C2:53:EB:B1:58:F5:A8:7F:35:59:AC:8C:75:12:C8:02:60:C8:1D:51
Authority key identifier: 2C:EE:29:98:E8:6F:A7:48:8E:6B:64:F8:ED:BC:03:2C:E1:5D:1B:CC
Certificate issuer: /CN=2cee2998e86fa7488e6b64f8edbc032ce15d1bcc
Certificate serial: 0197B5FC06CCD92F7015D40342F52AC32A00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LO4pmOhvp0iOa2T47bwDLOFdG8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/5e1871-2af1-47d3-b262-08f433daea15/1/LO4pmOhvp0iOa2T47bwDLOFdG8w.mft
Manifest number: 0D38
Signing time: Sat 28 Jun 2025 10:01:22 +0000
Manifest this update: Sat 28 Jun 2025 10:01:22 +0000
Manifest next update: Sun 29 Jun 2025 10:01:22 +0000
Files and hashes: 1: LO4pmOhvp0iOa2T47bwDLOFdG8w.crl (hash: IHrK0nW7J/FapReMj9zexLQ8jumfAqHrU+L5+fU0ils=)
2: YXxh1XSQz2hJg4wU0JwpLVfgRPc.roa (hash: fKQqPt+1938ZgXlhZdhE3xLSu/gu+cSj1bUfoNu6uac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/5e1871-2af1-47d3-b262-08f433daea15/1/LO4pmOhvp0iOa2T47bwDLOFdG8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/5e1871-2af1-47d3-b262-08f433daea15/1/LO4pmOhvp0iOa2T47bwDLOFdG8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/LO4pmOhvp0iOa2T47bwDLOFdG8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fc:06:cc:d9:2f:70:15:d4:03:42:f5:2a:c3:2a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cee2998e86fa7488e6b64f8edbc032ce15d1bcc
Validity
Not Before: Jun 28 10:01:22 2025 GMT
Not After : Jun 29 10:01:22 2025 GMT
Subject: CN=c253ebb158f5a87f3559ac8c7512c80260c81d51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4a:4f:d0:e2:92:59:3c:dc:f9:4c:cd:ce:23:
e9:c5:cf:e4:95:7b:d8:55:2e:55:08:8a:2f:17:7c:
ef:83:b8:84:fb:5d:d3:a5:ff:ee:a8:a6:16:fb:7f:
86:11:54:dd:8e:c3:19:44:f1:8e:0a:3b:2f:06:74:
93:ce:1b:8d:b4:8a:b9:63:c3:3c:9f:b6:81:a1:ac:
74:de:5d:d5:fc:cb:77:44:9f:2e:40:48:59:84:6c:
a0:d6:fb:c8:21:e0:d7:f4:76:5c:e9:7d:07:92:45:
35:37:fa:c5:cf:b4:07:52:25:d3:37:d3:c1:d3:52:
99:71:17:7b:3d:9b:a2:af:02:80:c9:77:be:a3:bb:
f1:1f:08:ac:36:47:c6:0d:2f:41:a5:fc:ec:90:21:
2b:4a:90:fa:4f:4e:0c:9b:dc:f1:be:ba:f4:aa:d6:
9e:b1:4b:46:1c:c1:9a:21:d0:22:17:30:6a:bb:bd:
4d:9d:c9:f6:61:4e:eb:65:e3:88:11:8e:fc:f0:6a:
90:51:f3:89:82:1a:30:54:df:88:71:49:20:38:e8:
93:c8:fe:09:e6:fe:3a:ee:4a:c6:12:12:59:b5:1b:
6c:4d:bd:d9:49:36:2a:c4:24:79:b0:43:48:4d:27:
ad:20:4f:d3:8e:61:ac:29:4c:24:62:df:14:71:c0:
54:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:53:EB:B1:58:F5:A8:7F:35:59:AC:8C:75:12:C8:02:60:C8:1D:51
X509v3 Authority Key Identifier:
keyid:2C:EE:29:98:E8:6F:A7:48:8E:6B:64:F8:ED:BC:03:2C:E1:5D:1B:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LO4pmOhvp0iOa2T47bwDLOFdG8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5e1871-2af1-47d3-b262-08f433daea15/1/LO4pmOhvp0iOa2T47bwDLOFdG8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5e1871-2af1-47d3-b262-08f433daea15/1/LO4pmOhvp0iOa2T47bwDLOFdG8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:1f:c6:0a:5a:84:a9:13:c8:ea:d8:2d:f9:a0:b3:c9:73:3f:
b0:5c:43:d5:aa:74:b2:f4:65:40:11:ee:7b:d9:30:c1:d8:80:
bd:58:dc:4e:58:75:50:f1:6f:b7:8f:78:ce:8d:8f:c9:ce:fc:
a1:80:04:bd:9b:84:01:27:b4:7f:cd:c4:64:48:64:1c:c6:96:
db:09:f5:49:5f:a9:9d:e2:dd:0c:33:e3:83:ba:21:63:07:0d:
03:96:70:dc:88:b0:8e:8b:e4:6c:13:3c:3c:33:11:5a:42:30:
c3:68:c8:ae:21:bd:5e:4f:8b:e6:93:f0:35:17:f5:62:59:0a:
cf:e3:5d:d9:40:1a:62:04:1c:7b:a6:a8:23:fe:62:49:d4:fd:
bf:b3:06:e5:49:38:84:5e:9c:34:ef:79:80:20:a0:a3:6d:14:
0e:db:2c:ec:ac:1b:5b:36:d0:53:67:ec:02:62:d5:77:d9:7c:
ef:ab:05:23:ed:c4:55:72:4c:2f:f3:83:05:54:c2:f0:e3:83:
83:62:e8:cc:ec:21:93:dc:9f:eb:80:fa:5a:6a:87:79:f8:9d:
b0:71:f2:b7:07:c4:fc:7b:88:d0:03:10:15:ec:12:bb:a7:51:
6d:8e:bb:ab:9b:68:e0:4a:49:db:3b:95:82:a8:b9:09:4c:e9:
bf:8e:dd:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:38:43 2025 by rpki-client