Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/LoOL9dPe_8At-hhOTw6FEVNeUX0.mft
File: LoOL9dPe_8At-hhOTw6FEVNeUX0.mft (raw, json)
Hash identifier: Jxlsut9PeVe0Je2TPargn9cLyIzPAg83pfepkrzKlak=
Subject key identifier: 18:FB:31:17:B2:94:70:36:4C:A6:A8:B0:15:4B:40:76:29:3A:03:61
Authority key identifier: 2E:83:8B:F5:D3:DE:FF:C0:2D:FA:18:4E:4F:0E:85:11:53:5E:51:7D
Certificate issuer: /CN=2e838bf5d3deffc02dfa184e4f0e8511535e517d
Certificate serial: 01976EBE498D0F7AF5825A0881B82B38C9FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LoOL9dPe_8At-hhOTw6FEVNeUX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/LoOL9dPe_8At-hhOTw6FEVNeUX0.mft
Manifest number: 0575
Signing time: Sat 14 Jun 2025 14:00:53 +0000
Manifest this update: Sat 14 Jun 2025 14:00:53 +0000
Manifest next update: Sun 15 Jun 2025 14:00:53 +0000
Files and hashes: 1: LoOL9dPe_8At-hhOTw6FEVNeUX0.crl (hash: Npl27pQ27yNkmpW9svvzzLQueBUtP1wZp3RiTLaq5sM=)
2: S8Gv615Ih2EECVB1a2b3J3u_PZw.roa (hash: QLn7xaZ0/yy3B92jWZmiyfhzxbYSpkw1Q0HqcssnojQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/LoOL9dPe_8At-hhOTw6FEVNeUX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/LoOL9dPe_8At-hhOTw6FEVNeUX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/LoOL9dPe_8At-hhOTw6FEVNeUX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:be:49:8d:0f:7a:f5:82:5a:08:81:b8:2b:38:c9:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e838bf5d3deffc02dfa184e4f0e8511535e517d
Validity
Not Before: Jun 14 14:00:53 2025 GMT
Not After : Jun 15 14:00:53 2025 GMT
Subject: CN=18fb3117b29470364ca6a8b0154b4076293a0361
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:47:18:c1:f2:0c:18:21:64:8e:54:ba:ee:7b:
85:86:f0:62:c6:9a:c4:dd:dd:02:07:88:3c:e9:1c:
77:01:2a:51:0b:25:b9:d5:47:43:10:be:c3:e9:fe:
9a:1b:b3:83:06:15:52:72:91:af:2c:fe:b7:41:51:
11:70:8e:0c:c7:f1:20:8c:86:3f:b3:a0:9a:ac:3b:
5f:fd:0b:13:32:8a:9b:54:cd:7f:d4:c5:5d:e3:8f:
22:ac:af:3f:14:13:7d:75:bd:0d:bb:d8:ce:c2:44:
16:d1:e4:31:fa:4c:a4:c3:49:0e:34:c9:e8:bb:e8:
b2:f1:a0:d3:7d:32:5c:86:39:21:17:8b:d6:85:93:
4c:bb:a9:28:9e:60:f7:b3:67:4d:47:37:5f:59:7e:
d2:bc:96:25:32:ca:c1:19:be:23:c3:1e:88:64:e9:
6c:98:80:ee:67:f1:44:b5:ec:ef:09:e1:1d:d6:14:
a6:c1:55:22:a6:d2:0c:4b:89:eb:7b:b7:72:9d:d3:
7b:c5:d9:72:69:a6:1a:14:f8:78:d5:9f:b1:51:e7:
fb:5c:dc:f9:04:ac:23:fc:b0:ca:b3:b7:bb:cf:52:
35:6e:47:2b:a2:00:cd:2f:50:78:43:d7:40:72:3f:
d2:fe:2d:81:27:d2:2c:b1:1e:2f:ba:22:ba:29:04:
91:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:FB:31:17:B2:94:70:36:4C:A6:A8:B0:15:4B:40:76:29:3A:03:61
X509v3 Authority Key Identifier:
keyid:2E:83:8B:F5:D3:DE:FF:C0:2D:FA:18:4E:4F:0E:85:11:53:5E:51:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoOL9dPe_8At-hhOTw6FEVNeUX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/LoOL9dPe_8At-hhOTw6FEVNeUX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/LoOL9dPe_8At-hhOTw6FEVNeUX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:44:ef:62:8e:31:cf:79:7b:18:4f:ee:02:6a:62:3d:60:f2:
c9:a1:e0:79:36:63:fb:44:50:32:14:62:0e:90:c2:39:f7:4d:
87:0a:16:85:d1:80:2e:4e:d4:c5:5f:f0:88:d4:b6:ea:45:9c:
a0:d1:48:1f:73:a0:da:a3:e8:6b:4b:68:54:87:ff:34:cb:9d:
12:1d:8c:ba:f2:45:73:c4:f3:d2:fb:66:b9:16:22:3c:74:4a:
b8:23:d8:a6:8b:11:32:ca:9f:68:fb:b3:73:5c:d6:d2:99:9d:
b9:f0:3d:69:f9:ad:a9:14:21:61:df:3d:da:db:36:c8:ec:cd:
9b:e7:36:f0:52:3b:e3:20:21:52:fe:83:60:57:39:04:3d:88:
a8:25:78:76:35:4a:6c:06:28:45:81:2b:68:97:d6:ff:7a:55:
49:0a:d0:69:e7:75:7c:59:cb:9d:89:bc:44:77:de:b7:6d:be:
e0:65:79:c3:a2:b8:77:20:be:bd:78:a4:7a:80:8b:40:e5:5b:
eb:65:73:78:e1:ae:aa:15:fd:ed:aa:94:7c:15:06:bf:fb:6d:
60:c2:95:7e:31:a1:a4:75:2e:86:af:dc:20:0b:52:6a:b8:14:
8e:a0:73:d9:75:5c:a8:66:77:37:8d:1a:b3:22:10:9c:95:8a:
3a:4a:a3:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZduvkmND3r1gloIgbgrOMn6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlODM4YmY1ZDNkZWZmYzAyZGZhMTg0ZTRmMGU4NTExNTM1
ZTUxN2QwHhcNMjUwNjE0MTQwMDUzWhcNMjUwNjE1MTQwMDUzWjAzMTEwLwYDVQQD
EygxOGZiMzExN2IyOTQ3MDM2NGNhNmE4YjAxNTRiNDA3NjI5M2EwMzYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUcYwfIMGCFkjlS67nuFhvBixprE
3d0CB4g86Rx3ASpRCyW51UdDEL7D6f6aG7ODBhVScpGvLP63QVERcI4Mx/EgjIY/
s6CarDtf/QsTMoqbVM1/1MVd448irK8/FBN9db0Nu9jOwkQW0eQx+kykw0kONMno
u+iy8aDTfTJchjkhF4vWhZNMu6konmD3s2dNRzdfWX7SvJYlMsrBGb4jwx6IZOls
mIDuZ/FEtezvCeEd1hSmwVUiptIMS4nre7dyndN7xdlyaaYaFPh41Z+xUef7XNz5
BKwj/LDKs7e7z1I1bkcrogDNL1B4Q9dAcj/S/i2BJ9IssR4vuiK6KQSRiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBj7MReylHA2TKaosBVLQHYpOgNhMB8GA1UdIwQY
MBaAFC6Di/XT3v/ALfoYTk8OhRFTXlF9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTG9PTDlkUGVfOEF0LWhoT1R3NkZFVk5lVVgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9jNDQzODktODFiNS00NTVjLTg1YWMt
NGNkODAzMDgxNzFhLzEvTG9PTDlkUGVfOEF0LWhoT1R3NkZFVk5lVVgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC9jNDQzODktODFiNS00NTVjLTg1YWMtNGNkODAzMDgxNzFh
LzEvTG9PTDlkUGVfOEF0LWhoT1R3NkZFVk5lVVgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYETvYo4x
z3l7GE/uAmpiPWDyyaHgeTZj+0RQMhRiDpDCOfdNhwoWhdGALk7UxV/wiNS26kWc
oNFIH3Og2qPoa0toVIf/NMudEh2MuvJFc8Tz0vtmuRYiPHRKuCPYposRMsqfaPuz
c1zW0pmdufA9afmtqRQhYd892ts2yOzNm+c28FI74yAhUv6DYFc5BD2IqCV4djVK
bAYoRYEraJfW/3pVSQrQaed1fFnLnYm8RHfet22+4GV5w6K4dyC+vXikeoCLQOVb
62VzeOGuqhX97aqUfBUGv/ttYMKVfjGhpHUuhq/cIAtSargUjqBz2XVcqGZ3N40a
syIQnJWKOkqjCQ==
-----END CERTIFICATE-----
Generated at Sat Jun 14 19:50:09 2025 by rpki-client