Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/7a6381-8ca4-4045-b837-301fdf114840/1/LTOrAnhiOJzMHx_IsKVkpuvXy40.mft
File: LTOrAnhiOJzMHx_IsKVkpuvXy40.mft (raw, json)
Hash identifier: FBbH2vHRD6NBuxYosMqYibDyih8xd7w5Oq11I7bvYAo=
Subject key identifier: 58:71:24:3A:3E:60:E1:1A:F0:E7:AA:A4:F1:E2:5F:39:09:11:2B:99
Authority key identifier: 2D:33:AB:02:78:62:38:9C:CC:1F:1F:C8:B0:A5:64:A6:EB:D7:CB:8D
Certificate issuer: /CN=2d33ab027862389ccc1f1fc8b0a564a6ebd7cb8d
Certificate serial: 0198D5BC5964161FF951534DBB58CAEC2F68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LTOrAnhiOJzMHx_IsKVkpuvXy40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/7a6381-8ca4-4045-b837-301fdf114840/1/LTOrAnhiOJzMHx_IsKVkpuvXy40.mft
Manifest number: 08E2
Signing time: Sat 23 Aug 2025 07:02:27 +0000
Manifest this update: Sat 23 Aug 2025 07:02:27 +0000
Manifest next update: Sun 24 Aug 2025 07:02:27 +0000
Files and hashes: 1: LTOrAnhiOJzMHx_IsKVkpuvXy40.crl (hash: EfrllU2N7yoXFYwPve/OtjmMFwBKqQECRo0bCHfQlnQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/7a6381-8ca4-4045-b837-301fdf114840/1/LTOrAnhiOJzMHx_IsKVkpuvXy40.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/7a6381-8ca4-4045-b837-301fdf114840/1/LTOrAnhiOJzMHx_IsKVkpuvXy40.mft
rsync://rpki.ripe.net/repository/DEFAULT/LTOrAnhiOJzMHx_IsKVkpuvXy40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:59:64:16:1f:f9:51:53:4d:bb:58:ca:ec:2f:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d33ab027862389ccc1f1fc8b0a564a6ebd7cb8d
Validity
Not Before: Aug 23 07:02:27 2025 GMT
Not After : Aug 24 07:02:27 2025 GMT
Subject: CN=5871243a3e60e11af0e7aaa4f1e25f3909112b99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d0:bc:7c:78:4f:a8:36:ac:b5:40:47:9e:a7:
66:b1:fb:cf:3d:68:4b:39:ca:d8:83:15:c5:3d:f3:
c6:be:6d:b9:a1:b5:88:76:b9:21:fe:82:4a:bf:79:
dc:31:89:2a:0f:b7:35:85:15:56:2c:a4:06:b3:12:
86:fd:28:01:5e:86:36:99:33:72:f1:d0:6c:81:14:
a4:c1:30:df:97:cd:d7:7a:ad:20:3b:76:37:4e:7b:
23:b2:af:fa:d0:bf:10:91:af:37:ce:c8:6e:93:2f:
5c:f1:c8:51:ab:df:a0:bb:5f:7f:da:38:5f:2a:9d:
b4:41:51:8a:31:a6:22:fd:3b:dd:de:fe:ec:22:b3:
e1:59:f7:9e:7c:8a:6c:97:c5:7d:93:c7:a2:38:41:
58:b0:02:33:08:69:42:7d:81:cd:7a:b3:43:4d:90:
24:be:50:99:45:67:ed:67:e2:b3:1b:1c:5d:fb:dd:
4d:b0:a6:35:1e:fc:a7:fb:8f:a7:ab:1e:a7:fa:c9:
af:0d:7e:17:69:bb:9f:c4:cf:6e:14:c7:26:fe:62:
7f:e6:0e:9a:f2:d9:f0:0f:f6:a5:5a:cd:9d:7c:f5:
d4:5f:3e:43:c9:93:1c:05:5a:44:59:01:bf:0d:d6:
cf:80:31:8f:7c:aa:6b:16:da:8e:da:92:5c:b2:2f:
b0:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:71:24:3A:3E:60:E1:1A:F0:E7:AA:A4:F1:E2:5F:39:09:11:2B:99
X509v3 Authority Key Identifier:
keyid:2D:33:AB:02:78:62:38:9C:CC:1F:1F:C8:B0:A5:64:A6:EB:D7:CB:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LTOrAnhiOJzMHx_IsKVkpuvXy40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/7a6381-8ca4-4045-b837-301fdf114840/1/LTOrAnhiOJzMHx_IsKVkpuvXy40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/7a6381-8ca4-4045-b837-301fdf114840/1/LTOrAnhiOJzMHx_IsKVkpuvXy40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:3f:73:29:46:5d:2a:b8:e8:35:4d:32:bf:ec:24:1e:81:73:
c9:c1:d2:c1:50:77:50:65:f6:a1:53:bd:32:cb:4c:3f:f2:e7:
5d:c8:aa:6e:d4:e5:84:7c:65:fd:06:78:04:c5:37:43:06:81:
46:1b:bb:a4:16:ac:1d:af:22:fa:3f:49:46:8d:5e:9c:4d:16:
cd:f3:29:dd:8f:77:a0:81:ae:f3:90:99:20:11:e8:71:4c:cb:
79:ea:44:8f:de:f4:30:70:97:af:e6:8a:bb:03:67:8b:6b:35:
df:21:de:bf:f8:ef:69:fb:1e:7b:dc:11:56:89:91:8f:87:f1:
62:b2:06:87:7a:3f:2b:49:a8:0e:40:e6:da:17:8b:83:4c:c3:
c4:8e:64:51:0c:97:a4:80:14:ee:31:3c:45:0a:25:d1:91:a2:
e1:b5:95:4a:c8:8f:33:df:25:c8:e6:55:d7:4e:57:b2:cc:83:
6f:4d:8e:8a:94:e0:c5:65:d3:61:f4:06:a4:69:bd:53:cd:48:
50:fa:22:ae:24:ad:ac:b5:cf:b9:54:fa:01:bb:a8:96:a3:24:
0c:27:63:7a:5c:27:e7:6d:c0:68:c9:7b:e1:83:47:2f:9f:87:
70:32:4c:af:60:29:89:fe:fd:45:fa:37:ac:bc:8d:b9:e5:ee:
c4:d3:3f:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:09:56 2025 by rpki-client