Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/7a6381-8ca4-4045-b837-301fdf114840/1/LTOrAnhiOJzMHx_IsKVkpuvXy40.mft
File: LTOrAnhiOJzMHx_IsKVkpuvXy40.mft (raw, json)
Hash identifier: JFDzXJS4IoktuaAhzHMDoPyL3EJ5HSNIXvPqhwR2Cg0=
Subject key identifier: 5C:AA:9E:81:31:A5:C6:62:98:F4:58:94:8E:3C:12:12:7F:14:95:88
Authority key identifier: 2D:33:AB:02:78:62:38:9C:CC:1F:1F:C8:B0:A5:64:A6:EB:D7:CB:8D
Certificate issuer: /CN=2d33ab027862389ccc1f1fc8b0a564a6ebd7cb8d
Certificate serial: 0197B7EA5150B28095AA3D5E00E12F3849C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LTOrAnhiOJzMHx_IsKVkpuvXy40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/7a6381-8ca4-4045-b837-301fdf114840/1/LTOrAnhiOJzMHx_IsKVkpuvXy40.mft
Manifest number: 084E
Signing time: Sat 28 Jun 2025 19:01:16 +0000
Manifest this update: Sat 28 Jun 2025 19:01:16 +0000
Manifest next update: Sun 29 Jun 2025 19:01:16 +0000
Files and hashes: 1: LTOrAnhiOJzMHx_IsKVkpuvXy40.crl (hash: mDxFYve8nmov7AH6Ih0RkjCCn6eRlcSQKrHt7qF9ObQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/7a6381-8ca4-4045-b837-301fdf114840/1/LTOrAnhiOJzMHx_IsKVkpuvXy40.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/7a6381-8ca4-4045-b837-301fdf114840/1/LTOrAnhiOJzMHx_IsKVkpuvXy40.mft
rsync://rpki.ripe.net/repository/DEFAULT/LTOrAnhiOJzMHx_IsKVkpuvXy40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:51:50:b2:80:95:aa:3d:5e:00:e1:2f:38:49:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d33ab027862389ccc1f1fc8b0a564a6ebd7cb8d
Validity
Not Before: Jun 28 19:01:16 2025 GMT
Not After : Jun 29 19:01:16 2025 GMT
Subject: CN=5caa9e8131a5c66298f458948e3c12127f149588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:5b:21:ae:81:e4:c5:bb:8f:80:a8:da:a9:1c:
0b:83:91:2c:6e:94:8f:44:93:06:b9:64:23:12:bd:
61:8e:3d:30:4f:ef:4e:a2:aa:72:7e:b9:38:0d:12:
a9:5a:74:4d:cb:db:da:21:11:8a:5e:8f:41:d9:a4:
f3:2f:cf:4c:a1:f1:f1:48:8a:20:fe:68:2d:ce:3c:
30:c0:a3:9a:27:17:34:a3:fd:b7:51:2d:f4:47:95:
62:15:3c:70:1b:28:15:22:3f:b1:e3:ca:ac:24:6d:
41:30:e6:fa:d8:2f:45:e5:2f:77:bf:a7:b2:fc:23:
1a:26:0b:7d:45:c5:a0:2a:32:c0:f4:62:66:5f:21:
c6:ba:12:17:0c:cf:2c:98:37:92:e9:d4:3b:cb:b7:
b1:ef:58:e3:ac:66:8e:2a:6a:f1:5c:c4:f4:24:7d:
38:a9:49:62:f2:8c:b6:88:8b:25:5d:9d:03:6d:a3:
a3:cc:3b:b6:c6:73:92:66:b8:4d:b6:1c:d8:5b:80:
34:b8:6f:b3:97:58:cc:70:16:cb:1a:3f:06:ca:da:
aa:df:2f:f0:f3:19:57:48:68:7f:99:10:92:b2:67:
e3:1f:ab:17:24:bb:cc:30:31:fe:69:04:b7:85:14:
3e:0a:59:f5:7f:f9:7d:ef:c3:5a:02:b9:f9:1a:7e:
20:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:AA:9E:81:31:A5:C6:62:98:F4:58:94:8E:3C:12:12:7F:14:95:88
X509v3 Authority Key Identifier:
keyid:2D:33:AB:02:78:62:38:9C:CC:1F:1F:C8:B0:A5:64:A6:EB:D7:CB:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LTOrAnhiOJzMHx_IsKVkpuvXy40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/7a6381-8ca4-4045-b837-301fdf114840/1/LTOrAnhiOJzMHx_IsKVkpuvXy40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/7a6381-8ca4-4045-b837-301fdf114840/1/LTOrAnhiOJzMHx_IsKVkpuvXy40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:0f:fc:23:5d:2e:16:73:10:26:a1:ff:b1:e3:f8:83:d2:a7:
e7:35:02:57:d4:c0:77:98:b6:31:ac:c6:3b:fa:0f:92:27:5a:
f5:5f:a3:61:94:10:1f:73:31:0f:11:7a:49:6d:e5:0b:d7:f5:
4d:a3:5a:71:7b:af:4e:15:02:04:36:25:77:5d:5c:c7:42:88:
99:db:92:81:15:0a:e1:20:23:4f:52:0b:fe:70:ef:1f:73:29:
ba:4c:d4:ff:95:46:4e:16:da:f9:f6:fb:b5:37:89:02:64:cd:
15:85:5a:38:72:aa:11:6d:51:bd:5f:d1:f6:6e:60:71:87:7b:
84:30:68:fe:77:c5:fa:1e:0d:c2:03:87:90:19:cb:c4:f5:a9:
66:ed:dd:10:12:3a:45:aa:39:3e:bc:5b:9f:85:4a:10:dd:d1:
ee:b6:69:a8:29:30:d7:f8:70:6e:2b:4f:12:6a:81:83:8a:49:
02:b6:5a:14:c1:f3:23:78:9a:95:d8:ec:f8:12:7b:fa:82:1f:
0a:11:16:f0:5d:cd:87:ce:10:e0:22:f5:5f:a2:b4:dd:64:b6:
8d:2b:49:3f:28:e7:8f:58:db:02:c8:91:1e:3e:c8:f4:c4:05:
93:2e:4a:c1:dc:36:1d:77:c2:d3:70:ce:72:07:bb:06:1d:c4:
3d:be:d5:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:02:17 2025 by rpki-client