Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/b238e3-0ad8-4a99-bf2f-ce782aed30b4/1/LOuI0A5SCtZgtBbZIInGDVyPE-E.mft
File: LOuI0A5SCtZgtBbZIInGDVyPE-E.mft (raw, json)
Hash identifier: dACpY3ixITCdS8ujbiJ8RvQOxnmM7rG74iVkq2u53K4=
Subject key identifier: 42:15:A6:86:62:1E:24:42:27:FE:04:41:9A:12:01:03:8E:5E:23:9B
Authority key identifier: 2C:EB:88:D0:0E:52:0A:D6:60:B4:16:D9:20:89:C6:0D:5C:8F:13:E1
Certificate issuer: /CN=2ceb88d00e520ad660b416d92089c60d5c8f13e1
Certificate serial: 0198D51576B04DDCABF66017628C4FB36410
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LOuI0A5SCtZgtBbZIInGDVyPE-E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/b238e3-0ad8-4a99-bf2f-ce782aed30b4/1/LOuI0A5SCtZgtBbZIInGDVyPE-E.mft
Manifest number: 02BA
Signing time: Sat 23 Aug 2025 04:00:10 +0000
Manifest this update: Sat 23 Aug 2025 04:00:10 +0000
Manifest next update: Sun 24 Aug 2025 04:00:10 +0000
Files and hashes: 1: LOuI0A5SCtZgtBbZIInGDVyPE-E.crl (hash: c+BWDSLbN5bfYYyXQO0+ESThZkZizKcDD39DbKJ/qjE=)
2: Y46vCOXYHw7rQaQKH4vVvjsoPj0.roa (hash: x4bPgE4P0Zq2nwgUR4AjUuUSz6sm/lpYmxdn5ktx7oM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/b238e3-0ad8-4a99-bf2f-ce782aed30b4/1/LOuI0A5SCtZgtBbZIInGDVyPE-E.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/b238e3-0ad8-4a99-bf2f-ce782aed30b4/1/LOuI0A5SCtZgtBbZIInGDVyPE-E.mft
rsync://rpki.ripe.net/repository/DEFAULT/LOuI0A5SCtZgtBbZIInGDVyPE-E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:76:b0:4d:dc:ab:f6:60:17:62:8c:4f:b3:64:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ceb88d00e520ad660b416d92089c60d5c8f13e1
Validity
Not Before: Aug 23 04:00:10 2025 GMT
Not After : Aug 24 04:00:10 2025 GMT
Subject: CN=4215a686621e244227fe04419a1201038e5e239b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:40:cc:73:85:e7:d5:2b:15:b1:33:47:5b:19:
a2:a3:11:94:c1:7e:9f:ad:97:4b:50:13:20:ec:ca:
c1:cf:7e:e1:52:8a:94:11:b5:26:7d:f1:7a:57:e0:
4c:1e:77:2b:5f:fd:e8:51:3e:be:21:6e:38:26:57:
d1:c4:1e:b7:a2:99:f2:2e:bc:ff:b5:e9:4c:aa:a0:
77:e0:d8:1f:75:46:5c:10:2b:95:3a:87:85:86:0d:
a9:43:68:dd:96:d4:03:d0:0d:20:10:ca:aa:a8:8d:
6d:a9:e0:c9:2d:a9:37:06:4f:73:1b:2b:98:70:25:
ac:e8:60:25:1a:ec:a6:b8:f6:46:7e:c4:e9:81:9b:
26:88:31:51:5a:df:0e:e1:be:d4:9a:84:29:6f:b0:
1e:86:8a:04:2c:06:6b:f7:00:21:52:ef:b8:9e:b2:
5d:7f:5f:ee:63:cd:b9:3a:43:34:37:32:38:d9:78:
9c:6b:40:8b:d4:6a:52:ab:93:cd:8d:fe:13:d2:af:
77:91:a5:3f:a2:48:09:42:4e:a8:6f:d7:f4:82:37:
cb:21:ed:66:c8:ae:0c:af:cb:eb:c8:76:f4:de:a8:
73:59:e4:e9:30:c2:01:4e:f4:af:74:5c:96:0d:fd:
79:ae:09:05:b4:0b:e0:27:c2:43:e7:81:5e:5d:be:
80:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:15:A6:86:62:1E:24:42:27:FE:04:41:9A:12:01:03:8E:5E:23:9B
X509v3 Authority Key Identifier:
keyid:2C:EB:88:D0:0E:52:0A:D6:60:B4:16:D9:20:89:C6:0D:5C:8F:13:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LOuI0A5SCtZgtBbZIInGDVyPE-E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b238e3-0ad8-4a99-bf2f-ce782aed30b4/1/LOuI0A5SCtZgtBbZIInGDVyPE-E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b238e3-0ad8-4a99-bf2f-ce782aed30b4/1/LOuI0A5SCtZgtBbZIInGDVyPE-E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:db:1b:d3:70:9a:c7:63:5d:ed:1f:4b:4e:82:f0:75:f1:c4:
1e:eb:c0:27:83:9a:5c:5f:88:a0:ae:78:a9:66:d0:61:45:0e:
5f:1c:a6:24:34:99:95:be:86:40:72:89:2e:a9:18:0e:e0:89:
53:9b:67:6b:ed:18:5f:ba:73:e9:1c:a3:45:5b:2e:22:58:ca:
10:3e:00:59:98:28:8f:22:6f:e9:8f:f5:46:57:08:48:de:5d:
ca:a7:2a:03:11:91:8f:fa:11:49:96:44:ef:f6:f1:7a:7a:fb:
f8:6b:ee:37:19:d6:9d:5f:4e:4b:83:29:cb:9e:a9:77:09:23:
a3:9e:5d:10:c1:04:e3:77:a2:b6:3f:3b:47:39:f0:9c:59:33:
8e:96:bb:26:b4:97:14:36:a8:11:76:b2:c4:d4:60:bd:cf:c7:
20:cd:93:b0:13:a7:7d:f5:52:cc:ae:e8:47:30:ab:ad:a2:79:
60:db:de:15:b5:f6:11:26:16:d1:6c:80:1e:85:42:a3:38:fc:
e1:fb:1c:68:5d:84:8f:8c:a7:7f:9b:cd:e0:3d:0f:9b:b8:a7:
c1:f3:66:f2:20:54:84:e9:da:be:3f:a8:46:3e:ae:31:ad:85:
0d:aa:1b:7c:cd:84:ba:ce:ad:f1:55:63:ee:8c:6b:12:f0:2d:
9e:36:14:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:19:29 2025 by rpki-client