Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/LoOL9dPe_8At-hhOTw6FEVNeUX0.mft
File: LoOL9dPe_8At-hhOTw6FEVNeUX0.mft (raw, json)
Hash identifier: wdGsJcRfyO90y5D4EAY3nKGRq5pkpjYgY8xlWnaQVz0=
Subject key identifier: F1:82:2A:91:CA:3C:69:76:6D:F3:6B:D5:7F:75:4E:37:54:8C:DC:AC
Authority key identifier: 2E:83:8B:F5:D3:DE:FF:C0:2D:FA:18:4E:4F:0E:85:11:53:5E:51:7D
Certificate issuer: /CN=2e838bf5d3deffc02dfa184e4f0e8511535e517d
Certificate serial: 0197B632B0C6CFF705B842C52D5E9B9B6FCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LoOL9dPe_8At-hhOTw6FEVNeUX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/LoOL9dPe_8At-hhOTw6FEVNeUX0.mft
Manifest number: 059A
Signing time: Sat 28 Jun 2025 11:01:04 +0000
Manifest this update: Sat 28 Jun 2025 11:01:04 +0000
Manifest next update: Sun 29 Jun 2025 11:01:04 +0000
Files and hashes: 1: LoOL9dPe_8At-hhOTw6FEVNeUX0.crl (hash: IpuTVHBk/0bzX9f7lF58peAhj0VpkW1hghwhX7kB1+M=)
2: S8Gv615Ih2EECVB1a2b3J3u_PZw.roa (hash: QLn7xaZ0/yy3B92jWZmiyfhzxbYSpkw1Q0HqcssnojQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/LoOL9dPe_8At-hhOTw6FEVNeUX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/LoOL9dPe_8At-hhOTw6FEVNeUX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/LoOL9dPe_8At-hhOTw6FEVNeUX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:b0:c6:cf:f7:05:b8:42:c5:2d:5e:9b:9b:6f:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e838bf5d3deffc02dfa184e4f0e8511535e517d
Validity
Not Before: Jun 28 11:01:04 2025 GMT
Not After : Jun 29 11:01:04 2025 GMT
Subject: CN=f1822a91ca3c69766df36bd57f754e37548cdcac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:48:c4:f9:92:08:b7:43:a7:63:1d:82:0e:c2:
0b:6a:15:ee:1d:5b:dd:d7:24:a2:3a:82:aa:e6:7a:
e4:11:c3:99:6b:18:47:01:c1:ee:08:b2:7e:52:88:
96:fc:6e:94:0e:a0:bb:8e:1b:d6:84:7c:d5:3e:60:
92:54:2b:e9:94:30:c4:15:34:bb:1f:6a:bb:0e:46:
90:00:aa:5b:2a:ca:40:5b:1f:a6:86:ef:a4:c0:ed:
7a:fe:27:f3:43:78:ed:af:6d:0a:b7:ee:70:d2:13:
7f:9c:67:4b:1e:5b:56:dc:e8:d9:ee:51:0a:a7:b1:
7f:3d:b9:2a:c6:6f:3f:82:7f:f8:2b:0a:b5:bd:68:
e6:d4:43:e6:ab:52:c8:13:27:2e:15:fa:f8:60:68:
76:3f:87:f8:9b:3c:e8:36:66:fe:cd:5c:c5:77:ee:
5a:f3:af:2c:7d:04:bd:60:f9:ff:88:71:da:33:4a:
b4:c2:da:48:00:de:02:7c:03:bd:70:4a:04:6f:71:
71:cb:ab:21:13:e1:3b:11:26:81:8e:47:5a:09:83:
b9:b2:9f:c2:f4:b0:0a:a5:48:35:ac:e6:c5:7e:1c:
ec:70:e9:16:34:0c:d6:b8:12:1b:ff:54:49:9a:cb:
46:72:c9:9b:ec:ab:ac:67:e0:8b:a3:ad:d2:df:5d:
de:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:82:2A:91:CA:3C:69:76:6D:F3:6B:D5:7F:75:4E:37:54:8C:DC:AC
X509v3 Authority Key Identifier:
keyid:2E:83:8B:F5:D3:DE:FF:C0:2D:FA:18:4E:4F:0E:85:11:53:5E:51:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoOL9dPe_8At-hhOTw6FEVNeUX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/LoOL9dPe_8At-hhOTw6FEVNeUX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/LoOL9dPe_8At-hhOTw6FEVNeUX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:a6:6e:5d:1c:8b:59:f3:79:e8:94:3b:34:fb:15:97:39:ed:
62:60:e2:46:f6:3e:c2:bb:00:41:59:7a:53:34:07:c1:f1:e0:
15:36:db:43:83:38:77:07:da:09:73:01:a6:ad:90:e8:de:e0:
98:8d:b2:29:9f:fc:fe:c2:10:b2:14:2c:2f:ab:f4:b3:f6:df:
12:33:ab:d2:79:ce:0c:d6:36:04:75:7d:d2:c4:77:99:2c:af:
88:f4:0b:de:1b:e6:3e:bb:86:48:48:fa:3a:b9:97:eb:42:09:
85:7c:43:5f:ff:51:75:b9:11:bf:86:b0:51:9a:0d:5f:13:eb:
e1:58:90:1c:67:e6:ec:87:61:98:36:2f:59:59:20:18:c0:db:
6e:b1:5b:6f:42:08:c7:76:65:47:69:08:a7:c9:79:05:14:9a:
31:87:19:0f:70:fa:3c:5f:3f:8f:3a:1a:37:46:9b:38:23:c4:
a5:73:c2:e0:db:39:cb:68:59:cc:41:9e:da:de:09:29:76:ed:
a0:57:19:d6:df:24:a7:58:a9:1f:d1:ec:32:dc:ed:e6:9d:43:
cf:87:71:08:0c:2e:5e:54:97:cf:b8:35:59:3c:2c:bf:17:71:
a5:f8:7f:c0:ae:e5:c4:d1:93:2c:d1:e5:ba:d1:98:9f:ae:87:
7f:00:41:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:58:21 2025 by rpki-client