Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/7a6381-8ca4-4045-b837-301fdf114840/1/LTOrAnhiOJzMHx_IsKVkpuvXy40.mft
File: LTOrAnhiOJzMHx_IsKVkpuvXy40.mft (raw, json)
Hash identifier: bs5Ysb7T922Xbv7+bohdSYLczPxx6q7OWQA1064CPlk=
Subject key identifier: 66:2D:72:5E:AE:79:3E:6A:EA:D2:BB:48:91:3D:FB:04:F4:1E:D7:1B
Authority key identifier: 2D:33:AB:02:78:62:38:9C:CC:1F:1F:C8:B0:A5:64:A6:EB:D7:CB:8D
Certificate issuer: /CN=2d33ab027862389ccc1f1fc8b0a564a6ebd7cb8d
Certificate serial: 01976E873EF78356FA0FDC37421A471B649F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LTOrAnhiOJzMHx_IsKVkpuvXy40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/7a6381-8ca4-4045-b837-301fdf114840/1/LTOrAnhiOJzMHx_IsKVkpuvXy40.mft
Manifest number: 0828
Signing time: Sat 14 Jun 2025 13:00:46 +0000
Manifest this update: Sat 14 Jun 2025 13:00:46 +0000
Manifest next update: Sun 15 Jun 2025 13:00:46 +0000
Files and hashes: 1: LTOrAnhiOJzMHx_IsKVkpuvXy40.crl (hash: jg1IPgFlNew/8Nsreg6Xuh/CZlHPtgwfASm4DCJBnzY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/7a6381-8ca4-4045-b837-301fdf114840/1/LTOrAnhiOJzMHx_IsKVkpuvXy40.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/7a6381-8ca4-4045-b837-301fdf114840/1/LTOrAnhiOJzMHx_IsKVkpuvXy40.mft
rsync://rpki.ripe.net/repository/DEFAULT/LTOrAnhiOJzMHx_IsKVkpuvXy40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 13:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:87:3e:f7:83:56:fa:0f:dc:37:42:1a:47:1b:64:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d33ab027862389ccc1f1fc8b0a564a6ebd7cb8d
Validity
Not Before: Jun 14 13:00:46 2025 GMT
Not After : Jun 15 13:00:46 2025 GMT
Subject: CN=662d725eae793e6aead2bb48913dfb04f41ed71b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1d:58:0f:25:04:12:b6:83:e7:d9:68:7e:fc:
b5:f0:b3:ee:ce:32:de:fd:81:1a:d2:76:6a:ed:44:
79:0d:15:13:35:9f:a7:2b:0d:b8:0d:4b:a3:d1:74:
06:46:6d:b3:86:9a:46:57:94:29:19:ce:0a:48:5b:
87:c4:c7:fd:2b:25:1d:9a:8d:9b:b8:07:ad:9b:a1:
2e:fd:df:c5:6a:46:29:66:7e:f0:ac:0e:54:1e:f1:
52:48:ba:65:cb:cf:eb:eb:f0:30:96:22:51:1d:0d:
13:02:b5:e7:64:0a:c4:1a:68:fd:65:c4:61:16:f3:
d5:09:d4:c0:7e:89:f2:42:4e:65:3b:64:43:5d:a8:
ec:72:ca:56:dd:4c:38:5e:31:ea:b0:4c:9a:a0:90:
99:a5:85:cc:a0:5b:b8:25:64:ca:cd:cd:9b:c0:0f:
e8:9a:be:42:ab:06:98:6f:ed:9e:89:ca:bc:0e:10:
84:f3:f5:f8:4f:d3:db:f2:ea:22:75:ca:59:45:a6:
b3:16:f0:fc:63:31:40:e3:a0:26:9a:39:1d:b4:f1:
51:70:d9:ea:47:a0:b4:9e:19:89:fa:bb:9a:5c:ae:
37:33:b8:66:23:a3:69:ee:28:7e:36:55:68:aa:54:
40:97:46:22:cf:f0:63:aa:00:61:f7:ec:c4:0d:2d:
df:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:2D:72:5E:AE:79:3E:6A:EA:D2:BB:48:91:3D:FB:04:F4:1E:D7:1B
X509v3 Authority Key Identifier:
keyid:2D:33:AB:02:78:62:38:9C:CC:1F:1F:C8:B0:A5:64:A6:EB:D7:CB:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LTOrAnhiOJzMHx_IsKVkpuvXy40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/7a6381-8ca4-4045-b837-301fdf114840/1/LTOrAnhiOJzMHx_IsKVkpuvXy40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/7a6381-8ca4-4045-b837-301fdf114840/1/LTOrAnhiOJzMHx_IsKVkpuvXy40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:38:3a:98:24:bc:f4:ff:fa:73:27:c3:7d:35:19:ca:3e:44:
49:58:e0:f9:67:bf:93:b3:4d:f1:cc:da:a6:31:3f:50:a0:33:
3d:82:28:40:f5:9d:9d:12:4d:7a:a8:00:3b:6b:d5:e6:90:9d:
53:62:64:13:a7:4b:a3:16:53:d1:9a:8f:e7:e9:57:46:0a:92:
18:92:37:cc:83:cb:02:89:28:35:a4:16:ce:7a:9f:4d:31:20:
cc:2e:7a:31:98:f3:8d:29:5d:dd:db:62:4b:4e:9f:64:cb:1f:
13:08:04:bb:82:04:91:c8:67:6d:a0:a2:aa:c9:63:fe:df:15:
eb:92:31:4e:5c:40:42:22:9b:e1:b3:f7:46:09:47:15:c8:33:
10:67:b7:ef:b3:53:e4:f5:55:73:81:97:bd:56:62:43:06:c6:
9b:2c:a8:98:db:7f:83:ca:9c:26:b4:17:88:ac:23:cc:33:e3:
e6:71:5a:d1:df:a5:65:4d:94:28:b9:b2:93:07:d4:43:e5:e6:
ad:0f:76:4b:b2:f1:d8:cf:ed:5e:dc:2b:cb:e7:45:47:06:87:
94:75:cf:12:0e:88:9e:2b:a0:d1:04:f2:de:83:18:0c:ae:a8:
bc:d3:c1:2f:3f:03:e4:8e:57:df:d6:78:ad:87:2c:fc:15:09:
c1:cb:ce:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:23:42 2025 by rpki-client