Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/2c054e-cef0-4af6-980e-8babac8a465a/1/LOlVOpsse8oStoG8CmMF4z-2QMg.mft
File: LOlVOpsse8oStoG8CmMF4z-2QMg.mft (raw, json)
Hash identifier: ub3nmvMuHtnrP1oURDKe1w2aeR+Y4760v/YHYyjbkTQ=
Subject key identifier: 9E:BB:00:3B:65:62:93:D1:AC:06:9E:74:6D:48:E9:C5:D3:5D:42:55
Authority key identifier: 2C:E9:55:3A:9B:2C:7B:CA:12:B6:81:BC:0A:63:05:E3:3F:B6:40:C8
Certificate issuer: /CN=2ce9553a9b2c7bca12b681bc0a6305e33fb640c8
Certificate serial: 0198D5BC2A8C06724680159F634791F004C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LOlVOpsse8oStoG8CmMF4z-2QMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/2c054e-cef0-4af6-980e-8babac8a465a/1/LOlVOpsse8oStoG8CmMF4z-2QMg.mft
Manifest number: 0DC5
Signing time: Sat 23 Aug 2025 07:02:15 +0000
Manifest this update: Sat 23 Aug 2025 07:02:15 +0000
Manifest next update: Sun 24 Aug 2025 07:02:15 +0000
Files and hashes: 1: LOlVOpsse8oStoG8CmMF4z-2QMg.crl (hash: oP1vugjhlry9A9/fLIEthOI6IvSavr2yc9AkQYcrRQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/2c054e-cef0-4af6-980e-8babac8a465a/1/LOlVOpsse8oStoG8CmMF4z-2QMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/2c054e-cef0-4af6-980e-8babac8a465a/1/LOlVOpsse8oStoG8CmMF4z-2QMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LOlVOpsse8oStoG8CmMF4z-2QMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:2a:8c:06:72:46:80:15:9f:63:47:91:f0:04:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ce9553a9b2c7bca12b681bc0a6305e33fb640c8
Validity
Not Before: Aug 23 07:02:15 2025 GMT
Not After : Aug 24 07:02:15 2025 GMT
Subject: CN=9ebb003b656293d1ac069e746d48e9c5d35d4255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:79:7d:9c:d4:b4:09:94:de:75:e3:31:01:45:
07:49:4a:5c:b3:65:63:a2:f5:6b:d0:3a:a8:ad:07:
de:d4:b9:75:15:64:31:ce:86:b9:64:e4:3c:03:18:
a6:66:ee:83:29:4f:d9:90:b3:33:3c:a7:c4:01:0e:
8f:7f:92:52:77:3e:91:0e:ab:5f:0c:ec:38:f8:e4:
6c:22:9d:a9:a3:4c:6f:87:5f:fa:ea:4b:bb:c0:6c:
2f:3d:3c:ae:ab:78:fe:44:85:9f:87:73:ca:47:9f:
61:9a:e0:3b:3e:22:e2:20:1b:0f:fe:92:4b:f5:c4:
11:9a:79:b9:d4:18:63:0c:ed:21:4e:9a:e8:d3:af:
11:69:7c:fe:28:df:d1:e8:d6:54:2e:af:52:fb:f1:
ae:9a:80:2e:4f:8f:c5:26:40:c0:86:30:c4:7a:8c:
24:58:09:18:84:41:d9:70:02:2a:0f:f6:6c:6b:b8:
b4:ae:ab:40:66:28:08:79:43:99:2c:04:36:e0:fc:
a0:96:28:1f:12:56:8f:11:6a:68:b1:64:6d:c9:71:
c4:15:e1:1b:e3:c7:de:17:2c:b8:05:94:66:25:10:
6c:2d:fe:b3:e6:33:d2:48:42:62:80:5d:7e:a0:e8:
4d:ee:96:6f:93:22:ba:45:0d:18:31:81:08:b8:9d:
a2:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:BB:00:3B:65:62:93:D1:AC:06:9E:74:6D:48:E9:C5:D3:5D:42:55
X509v3 Authority Key Identifier:
keyid:2C:E9:55:3A:9B:2C:7B:CA:12:B6:81:BC:0A:63:05:E3:3F:B6:40:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LOlVOpsse8oStoG8CmMF4z-2QMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/2c054e-cef0-4af6-980e-8babac8a465a/1/LOlVOpsse8oStoG8CmMF4z-2QMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/2c054e-cef0-4af6-980e-8babac8a465a/1/LOlVOpsse8oStoG8CmMF4z-2QMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:61:c6:9e:f4:6a:1f:3f:10:58:85:7c:60:14:01:ca:cc:da:
40:9e:ae:bc:d9:15:7b:5f:42:07:ab:23:bd:b3:13:e3:31:ac:
d2:18:ee:a0:4b:c7:2a:a9:17:d5:1a:c9:46:a7:fb:5c:c1:59:
1a:ee:c8:f4:dd:56:56:f2:9b:3e:a9:51:73:f6:a1:37:30:9c:
7e:b3:0e:94:21:19:cb:8f:7c:e7:fb:9b:9e:b4:27:a7:8f:00:
6f:a0:77:13:81:91:67:11:d7:4f:13:b4:b3:dc:a3:11:d7:4d:
56:79:f0:03:51:55:1f:51:c0:aa:35:e3:43:38:78:f7:be:61:
1c:01:e1:8a:62:8e:c4:fc:c7:02:d9:39:28:c1:30:b4:46:63:
ac:60:67:8c:67:87:18:92:14:83:71:ff:26:a7:d6:21:52:50:
82:79:d5:fd:18:b6:2f:fc:a3:a7:3a:23:33:a9:f1:eb:f0:87:
4a:86:0f:da:51:57:3a:51:5f:ec:91:ec:4a:5c:aa:8a:bc:5f:
ea:1c:1b:8b:8d:85:fd:fa:75:eb:79:34:25:65:14:22:ed:27:
94:c6:93:5b:0c:a7:9b:45:9a:4f:53:ef:37:d3:28:19:64:40:
e8:a7:b2:c8:de:c6:95:07:34:fe:41:f1:36:dd:78:95:15:33:
f0:4a:b0:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:29:06 2025 by rpki-client