Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/072b46-0da1-42d2-899c-a0bda8af756a/1/O_LCDaTWMBgu7jNFrZ0cStkXDVA.mft
File: O_LCDaTWMBgu7jNFrZ0cStkXDVA.mft (raw, json)
Hash identifier: lZlm6i5CfmZEWfBqf4Z3tElpl5cnodtbiEgtiV45On4=
Subject key identifier: 9B:E0:A3:E0:58:92:50:6C:37:42:0E:9A:42:9A:7C:15:3D:B8:0C:34
Authority key identifier: 3B:F2:C2:0D:A4:D6:30:18:2E:EE:33:45:AD:9D:1C:4A:D9:17:0D:50
Certificate issuer: /CN=3bf2c20da4d630182eee3345ad9d1c4ad9170d50
Certificate serial: 0198733DCB657D83550AACC7DCD532C54398
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O_LCDaTWMBgu7jNFrZ0cStkXDVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/072b46-0da1-42d2-899c-a0bda8af756a/1/O_LCDaTWMBgu7jNFrZ0cStkXDVA.mft
Manifest number: 1055
Signing time: Mon 04 Aug 2025 04:01:26 +0000
Manifest this update: Mon 04 Aug 2025 04:01:26 +0000
Manifest next update: Tue 05 Aug 2025 04:01:26 +0000
Files and hashes: 1: O_LCDaTWMBgu7jNFrZ0cStkXDVA.crl (hash: z4poODCPxEm6Ero7LIM/RvsCa7B3W0/6NFyKcGA2Xvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/072b46-0da1-42d2-899c-a0bda8af756a/1/O_LCDaTWMBgu7jNFrZ0cStkXDVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/072b46-0da1-42d2-899c-a0bda8af756a/1/O_LCDaTWMBgu7jNFrZ0cStkXDVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/O_LCDaTWMBgu7jNFrZ0cStkXDVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:cb:65:7d:83:55:0a:ac:c7:dc:d5:32:c5:43:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bf2c20da4d630182eee3345ad9d1c4ad9170d50
Validity
Not Before: Aug 4 04:01:26 2025 GMT
Not After : Aug 5 04:01:26 2025 GMT
Subject: CN=9be0a3e05892506c37420e9a429a7c153db80c34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9e:5d:81:fa:59:87:d2:3e:a6:2b:76:3e:a6:
77:f1:33:f7:62:7e:a3:b9:0a:7c:cc:47:52:66:01:
37:79:be:ba:8b:d8:a3:71:c1:4b:f8:f1:47:95:85:
37:4b:86:10:da:3b:5b:45:33:47:6f:78:3e:7b:9a:
04:cc:7a:96:71:e5:79:b3:50:5e:0e:f7:0f:8f:aa:
aa:f5:ab:b1:e1:27:46:64:32:d3:d2:6d:0a:46:aa:
95:e5:94:3a:3a:b8:cb:7f:ee:75:d6:ff:53:78:c8:
e4:36:51:f2:2d:d1:0d:06:d7:5f:a7:b3:50:e0:9e:
d4:07:58:e7:01:08:a2:bd:95:73:30:37:86:2a:36:
dd:b8:0a:a2:19:0b:ea:42:73:09:d6:d2:bb:7b:89:
aa:50:1a:8d:49:a2:87:0b:93:39:eb:13:32:ea:ea:
0c:51:64:6b:28:d6:ab:ce:e1:01:92:cb:82:c8:e2:
aa:b3:5c:c3:57:f9:97:dd:b4:5b:b4:b5:10:0e:a5:
93:3a:30:cb:9e:df:c9:6f:c0:0f:5b:63:bf:8c:85:
37:0f:57:fb:72:b9:2d:af:d2:83:45:32:9b:d6:a1:
29:7e:e6:44:0f:cf:be:39:aa:2a:1c:cc:af:79:bd:
ae:8c:1f:b7:f3:97:54:b0:3a:c8:a2:1a:21:0a:d6:
1a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:E0:A3:E0:58:92:50:6C:37:42:0E:9A:42:9A:7C:15:3D:B8:0C:34
X509v3 Authority Key Identifier:
keyid:3B:F2:C2:0D:A4:D6:30:18:2E:EE:33:45:AD:9D:1C:4A:D9:17:0D:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O_LCDaTWMBgu7jNFrZ0cStkXDVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/072b46-0da1-42d2-899c-a0bda8af756a/1/O_LCDaTWMBgu7jNFrZ0cStkXDVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/072b46-0da1-42d2-899c-a0bda8af756a/1/O_LCDaTWMBgu7jNFrZ0cStkXDVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:e3:46:00:6d:96:e4:c0:43:8c:ce:d3:aa:47:c0:95:4e:3d:
7a:cc:e3:1c:e9:20:06:6c:22:7b:a2:5a:96:ce:a2:6d:c1:e3:
e8:ba:74:7f:32:b8:a8:07:5f:b1:f4:48:a3:ee:f5:ef:d2:f1:
13:ea:09:a3:20:90:e8:31:f0:79:af:d3:43:51:50:d0:84:b4:
bd:c7:bf:a9:9f:a1:24:14:5f:36:82:0f:4d:74:35:fa:a1:45:
e5:f4:06:83:bf:85:45:69:e0:7b:d1:bc:cb:9e:a6:bc:55:33:
33:16:d5:18:25:6f:99:18:4f:3b:f9:77:87:e9:b1:27:4d:13:
10:33:d9:c7:9f:2d:9d:ae:6d:e7:70:d9:49:9c:96:9c:6c:52:
d1:f9:6d:88:84:08:bb:1d:4b:b3:15:17:22:6a:8d:46:9e:cb:
5d:97:e4:5e:c1:e6:cf:77:ec:f4:82:db:15:82:d8:d5:eb:1c:
43:0a:f8:f0:d8:24:83:cb:49:4c:41:43:9d:33:0a:d9:c5:63:
a5:e7:cb:8c:4c:fd:bb:02:7c:a1:0d:05:aa:76:c9:d4:76:09:
3b:79:54:9d:c9:ac:50:a3:b2:75:da:81:47:41:38:2e:8e:32:
33:ae:b2:8d:65:6a:c9:63:95:e1:eb:74:16:37:f2:25:c5:f2:
9b:6b:ab:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:12:06 2025 by rpki-client