Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/e67b1b-4b6f-4535-9311-4b9187d91c66/1/LosErWkLczj3wP51zzs6eFabquU.mft
File: LosErWkLczj3wP51zzs6eFabquU.mft (raw, json)
Hash identifier: gEsS+DbCRtFs+WKhzRJtJvLurkfNTNt/ITW3/pIO3xU=
Subject key identifier: 55:F1:30:86:C5:B8:DB:B2:59:1C:18:66:49:E0:C8:E3:5C:BB:B2:C5
Authority key identifier: 2E:8B:04:AD:69:0B:73:38:F7:C0:FE:75:CF:3B:3A:78:56:9B:AA:E5
Certificate issuer: /CN=2e8b04ad690b7338f7c0fe75cf3b3a78569baae5
Certificate serial: 0198D661458A5D4921EB48F5270A3AA925DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LosErWkLczj3wP51zzs6eFabquU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/e67b1b-4b6f-4535-9311-4b9187d91c66/1/LosErWkLczj3wP51zzs6eFabquU.mft
Manifest number: 10D8
Signing time: Sat 23 Aug 2025 10:02:35 +0000
Manifest this update: Sat 23 Aug 2025 10:02:35 +0000
Manifest next update: Sun 24 Aug 2025 10:02:35 +0000
Files and hashes: 1: LosErWkLczj3wP51zzs6eFabquU.crl (hash: tlc5n2V9H1khVnNShzyNSRyZbDZFidNKLU4QGqAaSRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/e67b1b-4b6f-4535-9311-4b9187d91c66/1/LosErWkLczj3wP51zzs6eFabquU.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/e67b1b-4b6f-4535-9311-4b9187d91c66/1/LosErWkLczj3wP51zzs6eFabquU.mft
rsync://rpki.ripe.net/repository/DEFAULT/LosErWkLczj3wP51zzs6eFabquU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:45:8a:5d:49:21:eb:48:f5:27:0a:3a:a9:25:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e8b04ad690b7338f7c0fe75cf3b3a78569baae5
Validity
Not Before: Aug 23 10:02:35 2025 GMT
Not After : Aug 24 10:02:35 2025 GMT
Subject: CN=55f13086c5b8dbb2591c186649e0c8e35cbbb2c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:79:e1:bf:ec:4e:a2:50:f6:fa:5d:5a:aa:f7:
9d:9b:d7:b2:6c:cc:88:7b:e3:bd:ac:ec:3b:aa:49:
a0:ad:4f:43:7c:68:50:87:1f:30:39:a2:be:75:3f:
4a:fa:53:a3:95:7c:2a:37:04:e4:12:01:45:af:24:
d1:61:e5:0e:64:c5:58:91:cf:b5:f9:bd:ac:46:0f:
0e:49:b1:f6:e9:95:89:32:bf:a6:7e:8a:a7:05:3b:
59:1f:67:93:e4:8b:84:5f:31:5b:fd:bc:00:f4:b1:
37:2b:07:21:bb:16:02:8a:83:f9:38:48:16:7e:12:
8d:09:11:2d:2d:bf:69:5c:bf:8d:db:d9:bd:25:cf:
76:3d:27:27:ae:ea:5f:bb:4f:1c:c1:03:c6:5f:32:
c8:17:0c:5d:4e:cb:6b:cc:ff:01:81:1b:b9:ff:6e:
0b:5c:18:80:d9:2c:a9:94:4c:70:ce:7d:84:ac:4f:
61:de:55:43:0e:36:17:b6:e8:74:cd:6f:36:a0:20:
4a:50:57:af:f3:45:d3:91:c9:b3:a5:26:2f:4b:09:
d0:fa:06:2e:68:b0:8a:4b:53:df:b4:98:de:07:85:
e0:f3:01:93:72:a0:19:04:25:c6:99:62:5a:58:f0:
bf:e5:c5:e5:f7:39:59:3b:d2:6e:96:91:95:55:5c:
58:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:F1:30:86:C5:B8:DB:B2:59:1C:18:66:49:E0:C8:E3:5C:BB:B2:C5
X509v3 Authority Key Identifier:
keyid:2E:8B:04:AD:69:0B:73:38:F7:C0:FE:75:CF:3B:3A:78:56:9B:AA:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LosErWkLczj3wP51zzs6eFabquU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e67b1b-4b6f-4535-9311-4b9187d91c66/1/LosErWkLczj3wP51zzs6eFabquU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e67b1b-4b6f-4535-9311-4b9187d91c66/1/LosErWkLczj3wP51zzs6eFabquU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:2c:3f:2f:53:fb:40:fc:4e:a2:8c:e0:46:97:b1:9a:a9:b4:
4c:46:da:8e:3d:16:41:23:94:07:02:61:f4:55:d9:4a:0d:20:
f7:f4:92:68:a1:08:84:2d:ca:69:86:8c:2b:03:4c:40:6b:85:
4e:34:67:89:30:01:16:ab:e1:a2:55:d9:10:8f:1b:55:ed:52:
2a:49:74:ed:e1:f2:45:c3:25:e9:d6:01:2e:89:9c:b1:59:34:
4d:da:9e:ec:0e:ec:1c:6b:0d:86:45:9b:9f:52:5b:df:89:b0:
24:7c:ca:1e:2b:4a:49:59:14:96:0d:93:57:3e:35:be:cf:7f:
65:ec:73:f0:1f:61:47:a1:a0:d3:9e:df:db:11:b5:75:97:cb:
3d:dd:80:8f:0c:77:89:e5:0b:3d:fa:6c:e6:63:69:3e:58:98:
c6:df:1a:bb:2a:ab:83:cd:df:98:cb:50:20:3f:e7:df:92:66:
fd:b9:cc:bc:94:02:1d:8d:71:99:86:73:5f:4a:48:00:3c:85:
4b:36:8d:de:1b:3d:2b:42:0d:02:0e:34:18:f3:35:4c:61:99:
5a:20:f5:3b:8a:9e:1b:ab:9a:1b:16:51:2d:4e:d2:a0:af:c9:
5a:52:11:0e:2b:70:0c:ec:9a:63:8c:5e:a0:92:1a:72:9e:cd:
fd:5f:78:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:19:34 2025 by rpki-client