Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/e67b1b-4b6f-4535-9311-4b9187d91c66/1/LosErWkLczj3wP51zzs6eFabquU.mft
File: LosErWkLczj3wP51zzs6eFabquU.mft (raw, json)
Hash identifier: od/4u++wa87CBC9Xjn1A+qD1hHobU5R/I5FdMYNnHLk=
Subject key identifier: D6:A9:1B:B6:D7:5C:9F:37:37:D2:84:61:18:0C:C6:CD:C8:4E:CB:29
Authority key identifier: 2E:8B:04:AD:69:0B:73:38:F7:C0:FE:75:CF:3B:3A:78:56:9B:AA:E5
Certificate issuer: /CN=2e8b04ad690b7338f7c0fe75cf3b3a78569baae5
Certificate serial: 019896A50749E0E7F10BE1ABB8A66CCC7FBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LosErWkLczj3wP51zzs6eFabquU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/e67b1b-4b6f-4535-9311-4b9187d91c66/1/LosErWkLczj3wP51zzs6eFabquU.mft
Manifest number: 10B7
Signing time: Mon 11 Aug 2025 01:00:54 +0000
Manifest this update: Mon 11 Aug 2025 01:00:54 +0000
Manifest next update: Tue 12 Aug 2025 01:00:54 +0000
Files and hashes: 1: LosErWkLczj3wP51zzs6eFabquU.crl (hash: olhdkSiZvTclOhpr8Qa1ESKProSDN/i7id3dXOkoPdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/e67b1b-4b6f-4535-9311-4b9187d91c66/1/LosErWkLczj3wP51zzs6eFabquU.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/e67b1b-4b6f-4535-9311-4b9187d91c66/1/LosErWkLczj3wP51zzs6eFabquU.mft
rsync://rpki.ripe.net/repository/DEFAULT/LosErWkLczj3wP51zzs6eFabquU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a5:07:49:e0:e7:f1:0b:e1:ab:b8:a6:6c:cc:7f:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e8b04ad690b7338f7c0fe75cf3b3a78569baae5
Validity
Not Before: Aug 11 01:00:54 2025 GMT
Not After : Aug 12 01:00:54 2025 GMT
Subject: CN=d6a91bb6d75c9f3737d28461180cc6cdc84ecb29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8e:d5:3a:93:e8:39:10:18:81:ed:3a:bd:24:
9f:45:28:97:2c:6c:b7:76:d5:1d:20:9e:34:8f:86:
a9:00:00:92:aa:83:56:61:03:6b:c7:c8:d8:36:f3:
38:7c:af:27:2d:67:8d:79:77:ee:c6:ca:21:0b:fb:
e9:bc:e1:a8:ae:e1:b1:25:02:4e:50:6e:fc:dc:31:
66:47:42:d0:fe:1f:a5:89:04:3a:ed:bc:11:6d:2c:
55:6e:57:10:b1:f2:14:dc:36:80:41:7b:64:31:c3:
06:6d:c4:c5:a1:39:51:5b:44:62:2d:7e:15:8c:70:
20:47:94:06:3d:b2:72:24:eb:4f:0c:ac:9b:8e:9c:
85:70:7f:67:27:80:fa:ec:60:56:5a:b0:48:a5:da:
aa:27:bd:97:8c:5e:fd:80:ad:ff:a2:a5:63:88:8c:
a2:f1:9a:77:35:26:41:db:21:be:69:65:a6:bf:f2:
f8:87:6b:02:71:e5:59:f3:2f:35:19:5d:09:46:e0:
8d:96:ad:51:61:1a:0a:b3:0f:ab:26:b8:17:62:1b:
cb:96:1b:96:c2:37:c8:e4:38:61:21:e7:fb:8d:13:
d3:be:65:b4:12:83:e5:33:93:62:69:c6:d9:67:9b:
b7:9f:8d:f2:87:2d:06:db:e0:5e:fa:52:5b:e8:49:
c1:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:A9:1B:B6:D7:5C:9F:37:37:D2:84:61:18:0C:C6:CD:C8:4E:CB:29
X509v3 Authority Key Identifier:
keyid:2E:8B:04:AD:69:0B:73:38:F7:C0:FE:75:CF:3B:3A:78:56:9B:AA:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LosErWkLczj3wP51zzs6eFabquU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e67b1b-4b6f-4535-9311-4b9187d91c66/1/LosErWkLczj3wP51zzs6eFabquU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e67b1b-4b6f-4535-9311-4b9187d91c66/1/LosErWkLczj3wP51zzs6eFabquU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:d6:3a:99:d2:90:09:86:b5:de:c5:72:01:1d:b6:dc:2c:e0:
25:6d:9e:5f:ff:cc:b1:3f:34:93:d4:d2:f5:28:e1:5d:f2:33:
5a:3f:9e:5e:b7:37:9b:73:70:fd:e9:98:a9:92:d4:00:f1:c7:
4b:9a:0c:ea:82:50:91:7e:59:ec:b8:27:5f:ed:58:3d:2b:f7:
3f:7a:e3:3c:e5:58:55:e0:97:18:fc:7c:8b:5f:48:c2:a5:58:
66:4a:36:eb:55:0b:da:68:24:69:bb:2c:30:dd:7b:99:71:c0:
c4:8d:98:4c:e6:84:b4:48:4b:cf:13:e1:a4:7c:33:07:6c:af:
f3:39:2c:92:c4:2b:f9:65:9b:f8:0b:4a:c3:6b:a3:4b:9a:8f:
60:63:98:46:5e:99:8f:68:f3:46:8b:15:0a:a5:e8:16:da:6a:
a8:a6:70:d9:fc:d5:13:b6:ea:28:b3:c2:13:19:8d:cc:7a:ee:
60:fc:49:4b:4b:18:23:c7:e9:fe:2c:bc:1b:e6:82:e8:ed:d3:
6f:1d:1d:bb:9b:5b:43:fd:38:67:66:5f:b4:55:08:43:cc:bc:
6a:b9:1f:f5:7d:eb:54:cf:5c:bd:de:b1:b5:f2:59:58:11:7e:
12:5b:7b:b6:75:e2:79:e6:18:d2:9b:8c:2e:b4:eb:d2:3f:97:
35:88:c5:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:46:44 2025 by rpki-client