Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/2c054e-cef0-4af6-980e-8babac8a465a/1/LOlVOpsse8oStoG8CmMF4z-2QMg.mft
File: LOlVOpsse8oStoG8CmMF4z-2QMg.mft (raw, json)
Hash identifier: CLkdiPkFCTUxPe6bpaaM/TMpZUyBORHWMQHwJFRz+q8=
Subject key identifier: FB:3D:A2:1A:9D:ED:20:19:DA:1F:F6:2A:65:D5:79:54:5C:E7:25:8C
Authority key identifier: 2C:E9:55:3A:9B:2C:7B:CA:12:B6:81:BC:0A:63:05:E3:3F:B6:40:C8
Certificate issuer: /CN=2ce9553a9b2c7bca12b681bc0a6305e33fb640c8
Certificate serial: 0197B7EA729B2D473A93F62FF3DB924DFEAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LOlVOpsse8oStoG8CmMF4z-2QMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/2c054e-cef0-4af6-980e-8babac8a465a/1/LOlVOpsse8oStoG8CmMF4z-2QMg.mft
Manifest number: 0D31
Signing time: Sat 28 Jun 2025 19:01:24 +0000
Manifest this update: Sat 28 Jun 2025 19:01:24 +0000
Manifest next update: Sun 29 Jun 2025 19:01:24 +0000
Files and hashes: 1: LOlVOpsse8oStoG8CmMF4z-2QMg.crl (hash: Eo/AyHZrxXrCJcpnLSXBpIu/xeZ/2sAYgtdi98sjImE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/2c054e-cef0-4af6-980e-8babac8a465a/1/LOlVOpsse8oStoG8CmMF4z-2QMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/2c054e-cef0-4af6-980e-8babac8a465a/1/LOlVOpsse8oStoG8CmMF4z-2QMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LOlVOpsse8oStoG8CmMF4z-2QMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:72:9b:2d:47:3a:93:f6:2f:f3:db:92:4d:fe:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ce9553a9b2c7bca12b681bc0a6305e33fb640c8
Validity
Not Before: Jun 28 19:01:24 2025 GMT
Not After : Jun 29 19:01:24 2025 GMT
Subject: CN=fb3da21a9ded2019da1ff62a65d579545ce7258c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a9:42:00:bc:7a:af:5f:ec:49:21:c0:ae:53:
cc:a1:36:63:52:20:94:83:22:45:2b:37:14:5a:7e:
94:81:eb:3f:f7:5f:fc:3a:56:0b:c8:52:d6:65:d8:
d6:8e:1c:ee:bc:7b:ab:e6:23:30:4b:c4:d8:05:88:
74:26:d1:29:7e:5d:8c:54:48:61:c9:c2:ed:16:62:
57:3c:7d:2d:8f:74:8c:ae:06:58:09:44:a3:8d:64:
60:df:d2:ae:e7:6d:f1:9d:74:e2:31:96:fb:e3:dc:
f5:4c:2f:50:66:80:2b:ce:68:99:be:bd:26:50:1c:
dd:37:59:d4:db:d4:bc:06:a8:b7:b8:ff:4f:74:7b:
af:55:17:6b:19:4d:bc:51:cf:ec:d8:a2:55:36:6f:
28:a2:0c:eb:f7:40:81:b1:bd:ef:b3:e4:c4:23:7c:
f7:55:47:8e:c3:01:83:0b:99:d2:08:9b:0d:f0:87:
45:bc:73:12:5f:9f:7c:12:6b:03:9d:dd:7f:b8:35:
c9:36:bc:bc:12:08:07:d6:ff:e4:45:9f:51:f1:0a:
e5:26:07:44:96:f2:0e:af:88:7a:b2:a8:f3:ea:09:
b7:02:9a:43:88:8a:10:5c:9f:59:5c:0f:11:76:d8:
d7:78:ff:e5:19:5e:4e:b2:e1:ac:27:d6:0f:92:57:
05:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:3D:A2:1A:9D:ED:20:19:DA:1F:F6:2A:65:D5:79:54:5C:E7:25:8C
X509v3 Authority Key Identifier:
keyid:2C:E9:55:3A:9B:2C:7B:CA:12:B6:81:BC:0A:63:05:E3:3F:B6:40:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LOlVOpsse8oStoG8CmMF4z-2QMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/2c054e-cef0-4af6-980e-8babac8a465a/1/LOlVOpsse8oStoG8CmMF4z-2QMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/2c054e-cef0-4af6-980e-8babac8a465a/1/LOlVOpsse8oStoG8CmMF4z-2QMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:75:bd:8d:7d:47:15:c4:4a:8c:97:90:f0:8f:73:63:13:97:
85:a7:7c:2d:23:b9:28:a0:c7:4e:45:21:46:da:31:d8:d5:b8:
0a:ea:7a:5a:d3:20:9d:f3:c7:88:1a:13:72:8e:83:bd:db:c6:
5e:d5:08:45:4f:23:7d:3e:28:fb:4a:a1:a2:f7:fc:9e:62:6d:
68:ad:8f:78:87:94:af:5f:f3:dd:28:75:90:3d:ae:f0:76:95:
db:f1:41:d9:86:8f:b1:57:74:08:58:e8:fa:fd:26:da:43:c6:
34:26:2c:41:f6:d7:d9:88:3c:1d:eb:fd:0d:fe:fe:3f:cf:47:
17:7a:86:9d:17:39:65:d7:b1:e3:1e:d2:c4:93:c2:d7:9d:ac:
a7:0f:85:3a:a0:da:76:8d:f1:17:f6:49:58:09:01:3d:63:9c:
5f:cc:99:9c:cb:fa:d2:bd:16:86:7d:e4:79:7c:d2:77:83:8a:
f0:77:80:06:49:25:a2:72:00:03:5f:25:48:ca:b4:fb:6f:f0:
22:eb:77:4d:c8:91:f4:92:d5:a8:30:99:84:90:49:aa:6b:4a:
0c:40:27:54:ac:54:78:b9:04:ab:9b:8e:19:99:95:a1:2c:5b:
b1:de:6c:43:e6:ac:dd:8e:0a:a2:98:fa:26:3f:df:27:5b:c6:
31:6f:8d:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:43:07 2025 by rpki-client