Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/LoOL9dPe_8At-hhOTw6FEVNeUX0.mft
File: LoOL9dPe_8At-hhOTw6FEVNeUX0.mft (raw, json)
Hash identifier: zr9T8TBgzJZ+pgpb3KuQh1h7u/V9PQsXWtyeM0xB9Uk=
Subject key identifier: FD:3A:23:74:CA:ED:49:FF:21:47:56:1F:F3:03:9E:23:09:85:D4:90
Authority key identifier: 2E:83:8B:F5:D3:DE:FF:C0:2D:FA:18:4E:4F:0E:85:11:53:5E:51:7D
Certificate issuer: /CN=2e838bf5d3deffc02dfa184e4f0e8511535e517d
Certificate serial: 0198D404B7DF40C6545F25B3C6EFEB6CDAD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LoOL9dPe_8At-hhOTw6FEVNeUX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/LoOL9dPe_8At-hhOTw6FEVNeUX0.mft
Manifest number: 062E
Signing time: Fri 22 Aug 2025 23:02:15 +0000
Manifest this update: Fri 22 Aug 2025 23:02:15 +0000
Manifest next update: Sat 23 Aug 2025 23:02:15 +0000
Files and hashes: 1: LoOL9dPe_8At-hhOTw6FEVNeUX0.crl (hash: tcepv0ogFtcEKiIyXhmFcki1f+PRSyuaojejWxBge6A=)
2: S8Gv615Ih2EECVB1a2b3J3u_PZw.roa (hash: QLn7xaZ0/yy3B92jWZmiyfhzxbYSpkw1Q0HqcssnojQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/LoOL9dPe_8At-hhOTw6FEVNeUX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/LoOL9dPe_8At-hhOTw6FEVNeUX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/LoOL9dPe_8At-hhOTw6FEVNeUX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:b7:df:40:c6:54:5f:25:b3:c6:ef:eb:6c:da:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e838bf5d3deffc02dfa184e4f0e8511535e517d
Validity
Not Before: Aug 22 23:02:15 2025 GMT
Not After : Aug 23 23:02:15 2025 GMT
Subject: CN=fd3a2374caed49ff2147561ff3039e230985d490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ee:f0:cc:af:27:44:d5:35:9e:60:c1:54:28:
a7:20:bf:c2:94:1d:86:f8:da:bd:4e:40:01:e8:d0:
c3:70:cf:5d:c5:51:81:64:75:b4:c3:19:30:9c:30:
03:14:35:4b:d1:69:25:e4:32:04:f2:b2:f8:69:28:
38:60:e6:dd:45:81:91:95:38:05:da:d5:1c:21:a3:
35:b9:b0:60:20:c3:2c:46:06:83:f6:87:a8:3c:27:
59:f2:f5:87:05:63:ec:ba:68:81:55:ef:76:7e:8b:
b9:6a:aa:13:1e:67:d1:ae:70:21:54:14:77:25:5c:
3f:6c:2f:1e:be:8a:1e:2a:34:55:be:ba:c7:ba:8b:
c5:cc:18:c5:10:6c:fc:17:bc:07:65:da:9b:d1:d8:
01:63:4a:d7:a1:03:d2:a1:92:cb:51:d7:c8:40:0f:
f0:38:a2:26:58:62:33:f3:20:8e:a1:9a:76:12:ec:
fc:ee:a5:b2:4a:8a:e8:b1:0d:f9:6d:e4:3f:6d:02:
0e:4a:42:03:2e:d5:7d:42:b3:0a:c1:aa:a1:20:49:
c8:ef:8e:0a:46:da:40:d5:6b:52:06:30:a6:51:88:
61:58:3e:63:ce:4f:c2:38:09:4a:36:3c:c3:19:6c:
50:59:93:89:1c:69:7b:98:88:3a:1a:3c:7b:a2:b8:
82:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:3A:23:74:CA:ED:49:FF:21:47:56:1F:F3:03:9E:23:09:85:D4:90
X509v3 Authority Key Identifier:
keyid:2E:83:8B:F5:D3:DE:FF:C0:2D:FA:18:4E:4F:0E:85:11:53:5E:51:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoOL9dPe_8At-hhOTw6FEVNeUX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/LoOL9dPe_8At-hhOTw6FEVNeUX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/LoOL9dPe_8At-hhOTw6FEVNeUX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:89:c8:ce:43:04:69:4e:99:83:31:dd:d4:3f:23:d5:0b:5f:
56:f9:95:95:ae:5f:dc:68:26:c1:69:76:d1:49:d7:d0:bf:42:
ef:7f:ab:ca:94:81:49:73:35:bf:4f:c9:da:82:52:c3:64:5e:
13:77:a8:95:85:cf:f7:e9:86:e9:13:33:8b:73:99:99:74:bb:
2c:9c:5d:fe:60:5b:fd:1e:b1:bd:d8:61:aa:b4:9e:b2:fe:55:
46:25:fd:a8:f7:12:09:af:48:d6:8d:53:b8:ad:8e:fd:cc:12:
df:6c:d6:fb:84:1b:6e:44:0a:68:9c:74:f7:6e:f3:51:1c:64:
01:41:ec:56:58:7a:6e:2c:00:88:92:02:ca:b8:1c:e3:29:82:
c9:30:69:76:4a:a6:74:85:90:6f:1a:53:cc:77:b8:14:b4:7e:
21:6d:48:56:a2:82:da:e4:4c:7f:0b:c9:2e:fa:fc:36:d4:28:
20:39:98:a3:97:55:77:28:c2:a3:59:d5:2c:2b:73:c8:69:8e:
77:66:5a:aa:fa:40:09:e5:9d:a0:0d:82:84:c8:a5:df:c1:92:
42:82:e6:ed:3b:1e:05:d0:3d:e3:5d:e0:72:fc:61:73:1f:fa:
28:21:25:c2:bd:dc:cb:a8:b1:db:ee:8a:ee:71:5a:fa:eb:82:
20:97:b6:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:36:29 2025 by rpki-client