Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/7a6381-8ca4-4045-b837-301fdf114840/1/LTOrAnhiOJzMHx_IsKVkpuvXy40.mft
File: LTOrAnhiOJzMHx_IsKVkpuvXy40.mft (raw, json)
Hash identifier: Vw8uIoh8j+kVueA7D9we4o+m2q5H/kJDvxv8WbImhuw=
Subject key identifier: 1C:B6:2F:60:B5:B6:C0:CE:83:1F:D4:A0:9D:A9:48:EF:CE:F0:CE:36
Authority key identifier: 2D:33:AB:02:78:62:38:9C:CC:1F:1F:C8:B0:A5:64:A6:EB:D7:CB:8D
Certificate issuer: /CN=2d33ab027862389ccc1f1fc8b0a564a6ebd7cb8d
Certificate serial: 01988C585C9F6094C156322897CCBD6BE6E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LTOrAnhiOJzMHx_IsKVkpuvXy40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/7a6381-8ca4-4045-b837-301fdf114840/1/LTOrAnhiOJzMHx_IsKVkpuvXy40.mft
Manifest number: 08BC
Signing time: Sat 09 Aug 2025 01:00:57 +0000
Manifest this update: Sat 09 Aug 2025 01:00:57 +0000
Manifest next update: Sun 10 Aug 2025 01:00:57 +0000
Files and hashes: 1: LTOrAnhiOJzMHx_IsKVkpuvXy40.crl (hash: fb0WHXexu9BlCg4bJfxbLcRxxdAgwaaqnl3Vxl6cQfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/7a6381-8ca4-4045-b837-301fdf114840/1/LTOrAnhiOJzMHx_IsKVkpuvXy40.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/7a6381-8ca4-4045-b837-301fdf114840/1/LTOrAnhiOJzMHx_IsKVkpuvXy40.mft
rsync://rpki.ripe.net/repository/DEFAULT/LTOrAnhiOJzMHx_IsKVkpuvXy40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:58:5c:9f:60:94:c1:56:32:28:97:cc:bd:6b:e6:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d33ab027862389ccc1f1fc8b0a564a6ebd7cb8d
Validity
Not Before: Aug 9 01:00:57 2025 GMT
Not After : Aug 10 01:00:57 2025 GMT
Subject: CN=1cb62f60b5b6c0ce831fd4a09da948efcef0ce36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e7:cf:e8:14:db:20:df:81:4a:bc:c3:ab:5e:
d4:34:7f:60:71:29:5e:97:8c:a0:9c:85:9c:e3:05:
5c:9f:4b:0e:02:8c:30:58:db:9f:68:cc:a3:82:22:
b4:57:d5:26:d1:54:39:98:c5:62:0e:f2:af:68:56:
82:f0:d2:c9:71:aa:af:1c:05:e4:29:d6:dd:0d:39:
bf:73:ff:ec:73:db:a9:bb:0f:51:58:37:ae:af:ec:
bf:80:9c:37:c0:67:4d:bf:5e:e8:d2:74:d3:fb:f2:
53:f6:77:f9:a5:5f:09:08:f6:5b:b0:58:5a:ab:17:
0d:b7:e9:18:fa:ac:18:bb:89:24:0b:7e:dc:3f:05:
ca:fe:e1:ce:ca:65:7c:f7:2d:e1:85:d1:fd:9f:da:
ec:f1:24:0b:56:1d:95:e5:3e:97:60:de:c8:17:9c:
ff:1d:28:0c:a5:e9:99:8b:f3:8d:4e:17:b0:a4:63:
5c:b4:7d:69:93:48:c4:dd:11:b4:3c:66:3c:28:9f:
1d:f3:e4:20:df:33:d8:7d:44:1c:57:fd:c7:4d:7a:
f5:98:8c:e3:83:0c:eb:44:5c:69:36:2b:f1:22:1b:
96:05:e7:44:2e:4b:44:23:d3:c8:d5:8f:6d:05:df:
0e:79:89:52:cd:bc:4e:c0:0a:dd:ba:c2:34:56:1b:
b5:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:B6:2F:60:B5:B6:C0:CE:83:1F:D4:A0:9D:A9:48:EF:CE:F0:CE:36
X509v3 Authority Key Identifier:
keyid:2D:33:AB:02:78:62:38:9C:CC:1F:1F:C8:B0:A5:64:A6:EB:D7:CB:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LTOrAnhiOJzMHx_IsKVkpuvXy40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/7a6381-8ca4-4045-b837-301fdf114840/1/LTOrAnhiOJzMHx_IsKVkpuvXy40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/7a6381-8ca4-4045-b837-301fdf114840/1/LTOrAnhiOJzMHx_IsKVkpuvXy40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:e4:4c:4e:e8:04:57:37:62:29:04:c0:36:d5:f3:6c:46:e2:
4f:84:10:67:23:9c:b0:0d:23:19:8d:21:37:2f:70:6d:c8:9e:
01:80:51:fc:d8:02:46:68:b4:b1:cd:ae:8f:5a:f4:58:5d:3a:
b3:ed:25:e6:f4:8d:07:d5:d6:1a:02:1f:7c:37:82:b4:fc:b3:
f9:d5:21:f3:45:3b:92:a0:5e:02:57:00:8a:9b:1e:36:63:c3:
c2:ce:8e:fb:3f:5a:1c:0e:96:b4:36:73:26:a1:09:d9:ba:ab:
8e:d1:44:46:75:88:42:22:e9:2d:0c:3a:b3:1f:61:08:10:64:
75:62:c4:79:27:c5:c0:8d:5c:62:bf:33:da:3d:84:85:5d:95:
84:f4:79:3a:ef:54:77:c2:0f:0d:f3:59:8e:1a:0f:51:f8:45:
91:19:04:f3:22:71:be:f8:be:c2:ea:34:78:8c:4d:20:2e:d4:
68:cd:e1:b1:84:b6:9c:d5:f0:ab:77:b6:2e:aa:09:08:4b:63:
2e:3c:c8:0f:63:d8:46:37:1c:3f:22:b2:e8:a0:fe:01:e6:f4:
10:4e:d4:8e:be:23:b9:38:ba:42:16:e3:c3:0b:94:61:51:62:
8a:98:3a:0c:27:74:4c:5f:d0:c1:a9:9d:1b:9c:cb:97:98:b7:
0e:e3:92:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 03:03:01 2025 by rpki-client