Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/5e1871-2af1-47d3-b262-08f433daea15/1/LO4pmOhvp0iOa2T47bwDLOFdG8w.mft
File: LO4pmOhvp0iOa2T47bwDLOFdG8w.mft (raw, json)
Hash identifier: zAmOJWYR4bo1w9KdClBPhxxH7lmdPT+MZyvEs66shzM=
Subject key identifier: AF:A3:A3:2A:95:B5:FB:AD:4A:E6:2A:30:11:EA:C7:0F:5E:2D:DF:4C
Authority key identifier: 2C:EE:29:98:E8:6F:A7:48:8E:6B:64:F8:ED:BC:03:2C:E1:5D:1B:CC
Certificate issuer: /CN=2cee2998e86fa7488e6b64f8edbc032ce15d1bcc
Certificate serial: 0198752C18E034EC371F96F508EC5AA49752
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LO4pmOhvp0iOa2T47bwDLOFdG8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/5e1871-2af1-47d3-b262-08f433daea15/1/LO4pmOhvp0iOa2T47bwDLOFdG8w.mft
Manifest number: 0D9B
Signing time: Mon 04 Aug 2025 13:01:20 +0000
Manifest this update: Mon 04 Aug 2025 13:01:20 +0000
Manifest next update: Tue 05 Aug 2025 13:01:20 +0000
Files and hashes: 1: LO4pmOhvp0iOa2T47bwDLOFdG8w.crl (hash: gLty33fQRAwADarKXWlO91x8d6hab87wL2UKDFhPbh8=)
2: YXxh1XSQz2hJg4wU0JwpLVfgRPc.roa (hash: fKQqPt+1938ZgXlhZdhE3xLSu/gu+cSj1bUfoNu6uac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/5e1871-2af1-47d3-b262-08f433daea15/1/LO4pmOhvp0iOa2T47bwDLOFdG8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/5e1871-2af1-47d3-b262-08f433daea15/1/LO4pmOhvp0iOa2T47bwDLOFdG8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/LO4pmOhvp0iOa2T47bwDLOFdG8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:2c:18:e0:34:ec:37:1f:96:f5:08:ec:5a:a4:97:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cee2998e86fa7488e6b64f8edbc032ce15d1bcc
Validity
Not Before: Aug 4 13:01:20 2025 GMT
Not After : Aug 5 13:01:20 2025 GMT
Subject: CN=afa3a32a95b5fbad4ae62a3011eac70f5e2ddf4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2d:c9:08:80:6f:38:9a:a9:b3:4e:8e:6e:3b:
88:8b:0f:bc:7f:cd:3b:c1:9f:70:ad:94:d8:06:6e:
ea:b5:df:0b:0d:1b:37:bf:3f:cd:2c:e5:c1:11:fc:
c0:c3:6c:e6:3d:31:62:a3:4c:12:99:28:17:49:4e:
2e:79:98:cf:3a:96:c7:6a:87:f1:94:a2:7e:a6:4d:
d5:db:d9:50:2a:33:d5:2e:05:39:23:5a:df:27:0c:
4f:1e:8f:f9:66:5d:77:b2:f5:93:35:b7:d7:fe:a5:
68:84:7f:0e:99:8c:14:db:32:ff:ae:9a:db:4c:38:
e3:b3:3d:1b:78:9e:cd:42:2f:95:15:64:0b:e8:ba:
bd:21:a2:29:03:8a:7c:66:36:59:46:07:b3:69:70:
d9:83:62:82:bb:35:63:47:64:d4:f1:c8:12:e5:0a:
89:c2:96:1e:27:53:35:f6:6a:98:e5:c6:f1:a3:00:
f1:b5:fa:6a:97:04:7d:42:b7:63:36:d5:02:20:78:
0f:1a:0d:22:f3:ca:3a:2b:39:4e:3d:2b:96:8c:b5:
99:8e:05:f9:0d:77:09:9c:52:f3:1a:32:7a:f3:28:
87:46:cd:f9:1a:96:ac:ab:b3:b6:57:76:d0:0d:c6:
c2:89:8e:a9:43:94:73:bf:44:f9:96:53:be:76:e5:
20:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:A3:A3:2A:95:B5:FB:AD:4A:E6:2A:30:11:EA:C7:0F:5E:2D:DF:4C
X509v3 Authority Key Identifier:
keyid:2C:EE:29:98:E8:6F:A7:48:8E:6B:64:F8:ED:BC:03:2C:E1:5D:1B:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LO4pmOhvp0iOa2T47bwDLOFdG8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5e1871-2af1-47d3-b262-08f433daea15/1/LO4pmOhvp0iOa2T47bwDLOFdG8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5e1871-2af1-47d3-b262-08f433daea15/1/LO4pmOhvp0iOa2T47bwDLOFdG8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:aa:0e:41:be:5b:c8:40:d4:5b:d0:e5:e9:0c:6e:86:e2:6e:
86:13:2f:d3:f5:e9:41:fe:0f:02:8b:6d:11:0e:b5:02:90:17:
21:a5:bc:0b:9c:ff:84:a7:18:14:65:43:12:3b:a9:9c:c6:c4:
72:46:78:2d:cc:62:7e:de:05:0f:d8:64:d4:ad:7d:05:d4:aa:
e2:59:9c:4f:de:be:77:e2:80:88:84:d3:95:3d:02:b1:db:eb:
6c:30:11:01:0d:1a:c8:e6:0a:44:de:0e:f1:80:c5:61:78:e0:
44:c6:90:54:0c:b0:d5:06:db:08:4b:4e:b9:bc:ad:78:c3:8c:
52:f7:10:02:23:aa:eb:10:52:7d:a5:9c:53:0c:14:c9:b2:bd:
a0:03:c4:9b:dc:d2:e7:30:44:e3:a7:80:59:32:10:fb:75:f4:
9c:9a:47:42:2f:e1:59:ff:0a:aa:d3:25:86:da:0e:af:65:d8:
fe:52:1d:39:96:0d:6c:e0:27:ab:a3:c9:26:f0:3f:24:43:72:
e1:55:fc:1d:58:fd:3b:0f:df:4c:84:7a:e2:e0:db:5c:a9:12:
b1:3e:52:0c:04:d5:ed:8b:5d:f8:be:70:7a:9d:5a:d2:f3:2f:
7b:96:9d:f9:5a:59:e8:2e:e5:dd:d7:4c:b5:c4:14:4f:1f:0f:
02:67:26:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:54:52 2025 by rpki-client