Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/e17e9a-d3e9-43b1-a2c7-5f65103e6f70/1/LnOM8y5uT5QCIPO4KPB7d-gT0JY.mft
File: LnOM8y5uT5QCIPO4KPB7d-gT0JY.mft (raw, json)
Hash identifier: dJlNe3n2M4APTJVkoCPa06uCpNKiIys2etgwVxJOjWU=
Subject key identifier: E4:40:A4:23:72:A6:40:E6:AA:15:6E:5A:85:49:92:A2:28:78:1E:F4
Authority key identifier: 2E:73:8C:F3:2E:6E:4F:94:02:20:F3:B8:28:F0:7B:77:E8:13:D0:96
Certificate issuer: /CN=2e738cf32e6e4f940220f3b828f07b77e813d096
Certificate serial: 01988C219EED3FB726878444F4B50FCA1FAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LnOM8y5uT5QCIPO4KPB7d-gT0JY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/e17e9a-d3e9-43b1-a2c7-5f65103e6f70/1/LnOM8y5uT5QCIPO4KPB7d-gT0JY.mft
Manifest number: 0572
Signing time: Sat 09 Aug 2025 00:01:10 +0000
Manifest this update: Sat 09 Aug 2025 00:01:10 +0000
Manifest next update: Sun 10 Aug 2025 00:01:10 +0000
Files and hashes: 1: LnOM8y5uT5QCIPO4KPB7d-gT0JY.crl (hash: MjNwNWChXIpItWD/Wz7rjVevT7vYr1MWiR0ELXWnSkU=)
2: oe97wSbY_88YdH_dfh2cAaxIIGc.roa (hash: rf6pyZdYCbMMLh4GoGVJWNXbBBHbQfaEuZdhu42zCSU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/e17e9a-d3e9-43b1-a2c7-5f65103e6f70/1/LnOM8y5uT5QCIPO4KPB7d-gT0JY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/e17e9a-d3e9-43b1-a2c7-5f65103e6f70/1/LnOM8y5uT5QCIPO4KPB7d-gT0JY.mft
rsync://rpki.ripe.net/repository/DEFAULT/LnOM8y5uT5QCIPO4KPB7d-gT0JY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:21:9e:ed:3f:b7:26:87:84:44:f4:b5:0f:ca:1f:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e738cf32e6e4f940220f3b828f07b77e813d096
Validity
Not Before: Aug 9 00:01:10 2025 GMT
Not After : Aug 10 00:01:10 2025 GMT
Subject: CN=e440a42372a640e6aa156e5a854992a228781ef4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:b3:80:1c:74:80:13:7f:b3:97:b3:51:eb:54:
64:88:63:4e:c8:a1:8d:db:0d:1c:9f:3f:c5:0a:6a:
a6:ea:3e:25:ba:ab:69:49:41:18:79:ba:df:eb:6e:
bf:aa:89:65:67:28:dc:35:a1:75:32:e1:cd:46:f2:
80:e1:9c:24:0c:2f:65:8e:f4:6d:1f:94:f6:5d:4d:
78:8c:42:35:5b:f9:28:98:1b:10:27:76:d1:5c:df:
3c:f0:33:3b:18:6e:2e:d9:4a:2d:1c:6b:0d:22:80:
21:06:9d:a8:0b:dd:08:a4:c5:51:ab:51:13:ce:cc:
bd:81:5e:18:e6:7d:99:1e:7f:a7:13:3e:e9:4c:c2:
25:e1:87:0b:00:40:c9:bd:70:b7:2e:49:01:5d:5a:
4a:e4:64:b1:9e:38:36:59:ff:06:ee:a8:76:22:dc:
72:c2:fa:3e:19:1f:9b:3d:fa:34:36:e7:59:1e:11:
9c:9d:0e:3c:26:42:5c:d6:2c:bb:c5:e0:02:66:92:
a7:58:6d:95:a8:3e:73:0f:55:ee:c9:be:e9:98:a5:
af:64:8b:b1:7c:a3:00:bf:07:3a:41:84:b1:ef:e8:
c8:a2:b6:a5:2c:33:60:60:b1:c6:21:e8:d9:39:12:
35:d9:32:0a:11:4d:1a:46:fa:60:f5:d2:6e:6d:c1:
e9:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:40:A4:23:72:A6:40:E6:AA:15:6E:5A:85:49:92:A2:28:78:1E:F4
X509v3 Authority Key Identifier:
keyid:2E:73:8C:F3:2E:6E:4F:94:02:20:F3:B8:28:F0:7B:77:E8:13:D0:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LnOM8y5uT5QCIPO4KPB7d-gT0JY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e17e9a-d3e9-43b1-a2c7-5f65103e6f70/1/LnOM8y5uT5QCIPO4KPB7d-gT0JY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e17e9a-d3e9-43b1-a2c7-5f65103e6f70/1/LnOM8y5uT5QCIPO4KPB7d-gT0JY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:8d:d6:94:f5:a2:5a:72:5e:c8:8c:ac:f9:fd:00:dd:0c:ab:
6d:18:35:43:1f:f6:c9:3b:52:70:dd:92:7a:f7:31:e6:3c:5c:
6b:73:cd:b3:b5:84:19:eb:98:53:a4:66:ef:d8:e6:a2:3c:6e:
06:7c:b0:e5:ce:7e:3f:77:31:41:d9:15:59:25:b0:0f:58:fb:
b0:98:18:96:b3:ee:18:3c:2b:12:a9:d0:cb:14:23:47:25:4d:
10:69:db:8b:31:fe:fc:e2:53:aa:96:0d:b8:45:fa:af:8a:59:
c4:16:32:94:22:fd:3d:c2:82:f6:52:ec:a7:6a:83:83:f3:f1:
52:eb:28:3a:28:b8:7c:97:aa:11:35:10:ef:04:6e:b1:5e:6f:
c4:b2:37:1c:7a:40:ef:b8:93:f1:6c:2c:3c:80:94:8f:5e:11:
9e:91:8f:37:e7:fd:dd:26:50:11:14:8c:0e:42:be:0e:03:f1:
73:d7:54:ad:ef:5c:b0:a8:d4:50:e9:a8:d3:76:ea:bd:19:49:
02:b2:54:3b:da:56:d9:a7:e9:6f:08:5c:09:48:7d:fe:58:df:
6c:f1:e7:02:33:55:44:ed:13:ac:fc:90:8d:6a:19:1d:5c:ea:
d7:07:78:d0:19:f9:f8:61:a4:cf:6e:b6:84:d5:c2:b9:0d:9c:
17:20:81:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:35:39 2025 by rpki-client