Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/e17e9a-d3e9-43b1-a2c7-5f65103e6f70/1/LnOM8y5uT5QCIPO4KPB7d-gT0JY.mft
File: LnOM8y5uT5QCIPO4KPB7d-gT0JY.mft (raw, json)
Hash identifier: Urezvk/qS6Y9oujVZf98uKGMNrVgOIeeTZ+vtASxIzM=
Subject key identifier: E8:87:5F:8F:75:8F:AE:E2:FE:80:9F:E1:A3:B5:54:48:0C:8B:3A:19
Authority key identifier: 2E:73:8C:F3:2E:6E:4F:94:02:20:F3:B8:28:F0:7B:77:E8:13:D0:96
Certificate issuer: /CN=2e738cf32e6e4f940220f3b828f07b77e813d096
Certificate serial: 0198D583DC07BAF92DCA20679BF3BDB75DFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LnOM8y5uT5QCIPO4KPB7d-gT0JY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/e17e9a-d3e9-43b1-a2c7-5f65103e6f70/1/LnOM8y5uT5QCIPO4KPB7d-gT0JY.mft
Manifest number: 0598
Signing time: Sat 23 Aug 2025 06:00:45 +0000
Manifest this update: Sat 23 Aug 2025 06:00:45 +0000
Manifest next update: Sun 24 Aug 2025 06:00:45 +0000
Files and hashes: 1: LnOM8y5uT5QCIPO4KPB7d-gT0JY.crl (hash: YS7Rakvy3jU4tEpNJWkw6/N6oZD0cnQeM5PLKPNocOs=)
2: oe97wSbY_88YdH_dfh2cAaxIIGc.roa (hash: rf6pyZdYCbMMLh4GoGVJWNXbBBHbQfaEuZdhu42zCSU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/e17e9a-d3e9-43b1-a2c7-5f65103e6f70/1/LnOM8y5uT5QCIPO4KPB7d-gT0JY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/e17e9a-d3e9-43b1-a2c7-5f65103e6f70/1/LnOM8y5uT5QCIPO4KPB7d-gT0JY.mft
rsync://rpki.ripe.net/repository/DEFAULT/LnOM8y5uT5QCIPO4KPB7d-gT0JY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:dc:07:ba:f9:2d:ca:20:67:9b:f3:bd:b7:5d:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e738cf32e6e4f940220f3b828f07b77e813d096
Validity
Not Before: Aug 23 06:00:45 2025 GMT
Not After : Aug 24 06:00:45 2025 GMT
Subject: CN=e8875f8f758faee2fe809fe1a3b554480c8b3a19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:38:a8:2e:b0:5e:0f:9d:5c:a0:c3:76:4d:6b:
c5:62:b5:d7:b2:16:2b:de:4f:f5:0a:81:f6:fb:58:
d1:dd:0c:41:4b:ca:90:a6:1b:01:5e:27:f3:4f:66:
45:30:13:a0:b4:bb:7a:36:d9:a6:e2:02:c8:1c:73:
b2:77:02:96:a3:d7:6a:9e:ae:4b:40:9f:fd:09:fe:
05:0f:e2:59:a9:fa:6e:94:56:1e:f7:a0:96:71:c4:
b6:53:9b:15:0a:6b:88:ab:77:5f:4d:e4:f6:23:a6:
2a:e1:a3:c7:09:2d:6d:78:d3:b7:97:4c:31:25:5b:
3d:56:08:b2:b1:d0:e1:88:67:61:89:c3:75:90:56:
ff:99:8c:7f:05:44:d4:98:9b:eb:de:96:d0:d5:fe:
e4:01:8d:4a:51:2b:e6:b0:ab:82:71:1c:29:e4:6e:
fd:93:b8:34:a9:9e:e5:00:bc:10:47:e0:2c:c1:22:
20:d5:30:65:99:1b:47:76:9d:72:b4:08:7f:f7:d8:
00:f6:52:0d:8e:60:9c:58:2b:22:07:a8:f3:8c:05:
16:f9:d5:27:38:a3:66:26:0f:4d:4c:70:b3:e3:16:
d6:4d:06:25:6d:f4:03:2d:b4:36:b1:b5:62:aa:96:
58:d5:8f:36:5d:54:61:4d:28:43:ac:ee:7c:40:37:
69:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:87:5F:8F:75:8F:AE:E2:FE:80:9F:E1:A3:B5:54:48:0C:8B:3A:19
X509v3 Authority Key Identifier:
keyid:2E:73:8C:F3:2E:6E:4F:94:02:20:F3:B8:28:F0:7B:77:E8:13:D0:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LnOM8y5uT5QCIPO4KPB7d-gT0JY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e17e9a-d3e9-43b1-a2c7-5f65103e6f70/1/LnOM8y5uT5QCIPO4KPB7d-gT0JY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e17e9a-d3e9-43b1-a2c7-5f65103e6f70/1/LnOM8y5uT5QCIPO4KPB7d-gT0JY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:fb:78:a8:79:4f:32:cf:57:fe:4e:35:12:a1:d8:94:92:c1:
62:14:b6:7a:2f:c4:4a:d9:29:73:d6:08:e1:e3:7d:c9:61:c4:
0f:db:a6:9f:6c:a6:d6:d0:4f:6d:54:d3:f2:ab:ad:e0:0a:f7:
76:31:ef:15:8e:2b:86:04:d4:1d:a5:0c:4a:0d:8e:19:37:b1:
e8:03:59:bb:51:41:6d:e0:86:f5:40:63:9b:df:96:d5:41:b1:
9e:99:68:bd:99:d3:07:53:0d:56:4e:dc:04:0f:f5:1e:91:44:
40:41:e4:37:0f:5c:0b:16:1d:0a:40:48:8d:11:8c:ce:f4:e7:
17:73:b2:86:72:44:cc:37:26:72:54:6d:be:14:fb:5d:5d:d5:
d0:55:d8:2b:80:a2:8d:9e:0b:87:a9:d5:1b:ee:f9:55:96:92:
17:66:90:95:3e:40:5d:f8:f8:ba:2c:e4:4f:0c:ae:69:ad:84:
86:65:0c:6c:02:b3:90:58:90:2c:18:83:46:7d:67:0e:64:e5:
a5:df:10:e7:37:f6:02:6b:88:c6:17:03:5e:b6:5a:72:0f:b7:
ef:37:76:90:d7:c2:3d:5f:fd:93:27:7a:a4:0e:a8:19:a4:30:
7c:f2:a1:d7:78:e1:16:8e:59:c5:f6:06:91:f1:b1:3d:85:d7:
7c:65:b0:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg9wHuvktyiBnm/O9t137MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlNzM4Y2YzMmU2ZTRmOTQwMjIwZjNiODI4ZjA3Yjc3ZTgx
M2QwOTYwHhcNMjUwODIzMDYwMDQ1WhcNMjUwODI0MDYwMDQ1WjAzMTEwLwYDVQQD
EyhlODg3NWY4Zjc1OGZhZWUyZmU4MDlmZTFhM2I1NTQ0ODBjOGIzYTE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4DioLrBeD51coMN2TWvFYrXXshYr
3k/1CoH2+1jR3QxBS8qQphsBXifzT2ZFMBOgtLt6Ntmm4gLIHHOydwKWo9dqnq5L
QJ/9Cf4FD+JZqfpulFYe96CWccS2U5sVCmuIq3dfTeT2I6Yq4aPHCS1teNO3l0wx
JVs9VgiysdDhiGdhicN1kFb/mYx/BUTUmJvr3pbQ1f7kAY1KUSvmsKuCcRwp5G79
k7g0qZ7lALwQR+AswSIg1TBlmRtHdp1ytAh/99gA9lINjmCcWCsiB6jzjAUW+dUn
OKNmJg9NTHCz4xbWTQYlbfQDLbQ2sbViqpZY1Y82XVRhTShDrO58QDdp5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOiHX491j67i/oCf4aO1VEgMizoZMB8GA1UdIwQY
MBaAFC5zjPMubk+UAiDzuCjwe3foE9CWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTG5PTTh5NXVUNVFDSVBPNEtQQjdkLWdUMEpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9lMTdlOWEtZDNlOS00M2IxLWEyYzct
NWY2NTEwM2U2ZjcwLzEvTG5PTTh5NXVUNVFDSVBPNEtQQjdkLWdUMEpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS9lMTdlOWEtZDNlOS00M2IxLWEyYzctNWY2NTEwM2U2Zjcw
LzEvTG5PTTh5NXVUNVFDSVBPNEtQQjdkLWdUMEpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIvt4qHlP
Ms9X/k41EqHYlJLBYhS2ei/EStkpc9YI4eN9yWHED9umn2ym1tBPbVTT8qut4Ar3
djHvFY4rhgTUHaUMSg2OGTex6ANZu1FBbeCG9UBjm9+W1UGxnplovZnTB1MNVk7c
BA/1HpFEQEHkNw9cCxYdCkBIjRGMzvTnF3OyhnJEzDcmclRtvhT7XV3V0FXYK4Ci
jZ4Lh6nVG+75VZaSF2aQlT5AXfj4uizkTwyuaa2EhmUMbAKzkFiQLBiDRn1nDmTl
pd8Q5zf2AmuIxhcDXrZacg+37zd2kNfCPV/9kyd6pA6oGaQwfPKh13jhFo5ZxfYG
kfGxPYXXfGWwag==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:06:40 2025 by rpki-client