Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/dddf3d-e887-4273-bb7b-681fa0d99821/1/lo-QT-7x95FiuCGaikg7hY9UC_o.mft
File: lo-QT-7x95FiuCGaikg7hY9UC_o.mft (raw, json)
Hash identifier: /YVGsnTeSO752KkRFc7ADF1BtsWWIi24zLFMwXG4/O4=
Subject key identifier: E2:C2:BF:41:65:1A:F7:5E:65:D6:6E:6B:B8:09:C6:58:00:0D:A5:A9
Authority key identifier: 96:8F:90:4F:EE:F1:F7:91:62:B8:21:9A:8A:48:3B:85:8F:54:0B:FA
Certificate issuer: /CN=968f904feef1f79162b8219a8a483b858f540bfa
Certificate serial: 0196760C503DB0AA3015F30038A9EE5B0DEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lo-QT-7x95FiuCGaikg7hY9UC_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/dddf3d-e887-4273-bb7b-681fa0d99821/1/lo-QT-7x95FiuCGaikg7hY9UC_o.mft
Manifest number: 150B
Signing time: Sun 27 Apr 2025 07:00:40 +0000
Manifest this update: Sun 27 Apr 2025 07:00:40 +0000
Manifest next update: Mon 28 Apr 2025 07:00:40 +0000
Files and hashes: 1: lo-QT-7x95FiuCGaikg7hY9UC_o.crl (hash: AkNdBKB6aIwD7OlhS9yzqwN5Havkp/kenUgEs/BNZHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/dddf3d-e887-4273-bb7b-681fa0d99821/1/lo-QT-7x95FiuCGaikg7hY9UC_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/dddf3d-e887-4273-bb7b-681fa0d99821/1/lo-QT-7x95FiuCGaikg7hY9UC_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/lo-QT-7x95FiuCGaikg7hY9UC_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:50:3d:b0:aa:30:15:f3:00:38:a9:ee:5b:0d:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=968f904feef1f79162b8219a8a483b858f540bfa
Validity
Not Before: Apr 27 07:00:40 2025 GMT
Not After : Apr 28 07:00:40 2025 GMT
Subject: CN=e2c2bf41651af75e65d66e6bb809c658000da5a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:39:27:67:35:c0:fb:4f:22:0f:99:b3:ee:e9:
83:bb:87:59:39:fd:4d:51:45:15:59:96:f2:3c:91:
b6:8f:b8:01:12:d5:2d:f0:8b:0c:32:1c:f8:56:0d:
1f:df:3d:a9:e5:6a:23:42:9b:4c:78:9e:2f:24:49:
92:d5:9f:7a:40:82:c9:cd:b6:1d:75:6a:9b:48:cb:
e1:73:37:9e:43:bd:94:e6:fb:76:7b:e6:f3:57:c1:
0a:19:cc:8a:19:89:26:77:f6:74:c6:98:a6:4f:97:
08:0f:aa:cc:8f:d9:88:d5:22:6a:65:cf:d3:c5:39:
1a:69:da:e1:09:60:60:6f:7c:5a:ff:fe:65:98:41:
9e:a2:28:cc:56:77:c0:4e:ef:2d:0a:8a:63:45:3f:
93:86:b7:97:a1:55:f0:59:b6:70:49:cc:e8:48:a6:
ad:b0:cb:9a:4a:3f:66:50:be:c2:e2:cf:16:16:d1:
20:19:83:02:34:fd:45:d8:ed:09:09:c0:76:41:a3:
3a:b1:7e:78:85:66:29:d7:20:4c:1c:58:0b:ef:20:
e6:cc:6c:85:09:3c:63:90:df:11:3f:d1:94:da:31:
0a:89:99:df:f5:6e:13:96:89:7f:61:20:86:f7:27:
61:9b:a2:85:fb:b7:8b:be:9f:1c:d2:c3:0c:08:15:
7b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:C2:BF:41:65:1A:F7:5E:65:D6:6E:6B:B8:09:C6:58:00:0D:A5:A9
X509v3 Authority Key Identifier:
keyid:96:8F:90:4F:EE:F1:F7:91:62:B8:21:9A:8A:48:3B:85:8F:54:0B:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lo-QT-7x95FiuCGaikg7hY9UC_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/dddf3d-e887-4273-bb7b-681fa0d99821/1/lo-QT-7x95FiuCGaikg7hY9UC_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/dddf3d-e887-4273-bb7b-681fa0d99821/1/lo-QT-7x95FiuCGaikg7hY9UC_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:85:54:94:f1:87:24:d2:b5:a8:ab:b3:39:19:3c:bc:25:e5:
f9:b0:bf:42:ae:52:ec:fe:71:ad:d1:c6:b5:dc:cf:bf:51:93:
76:5d:cb:be:e4:62:48:d6:b4:1b:62:e5:dd:f3:fa:e1:93:12:
0e:4c:f2:ba:64:33:76:37:5b:54:fd:9b:d3:be:6f:b9:d9:f7:
eb:64:fe:cc:c6:c0:59:1e:5b:54:5e:c6:ae:46:28:2b:29:d4:
71:e7:55:10:e2:69:1e:1b:6f:36:49:01:24:d8:2a:ae:d5:6d:
0f:4f:9f:f7:34:b3:09:c8:90:a8:68:8e:3a:24:80:21:9c:69:
eb:e1:83:b7:31:1f:bc:ce:0a:99:6a:2c:b1:09:f1:91:3c:09:
73:84:9e:c4:00:78:55:19:1f:57:c9:4c:35:06:fb:ba:13:96:
79:30:c4:5d:9e:29:c8:d6:77:06:76:72:e4:20:4d:e7:67:d5:
58:5a:43:cf:34:31:bf:a7:0f:ab:11:fb:79:63:83:e2:b6:15:
1b:e3:c9:e4:c4:cd:e1:a6:41:2c:8d:8e:0d:75:9e:e9:b8:b1:
81:f0:db:3e:10:a4:07:67:4e:dc:3c:8b:01:fc:79:48:11:31:
78:6f:4f:25:fa:11:bb:15:61:07:7f:d3:35:1d:e0:b7:9c:ab:
15:3e:a7:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ2DFA9sKowFfMAOKnuWw3qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2OGY5MDRmZWVmMWY3OTE2MmI4MjE5YThhNDgzYjg1OGY1
NDBiZmEwHhcNMjUwNDI3MDcwMDQwWhcNMjUwNDI4MDcwMDQwWjAzMTEwLwYDVQQD
EyhlMmMyYmY0MTY1MWFmNzVlNjVkNjZlNmJiODA5YzY1ODAwMGRhNWE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzjknZzXA+08iD5mz7umDu4dZOf1N
UUUVWZbyPJG2j7gBEtUt8IsMMhz4Vg0f3z2p5WojQptMeJ4vJEmS1Z96QILJzbYd
dWqbSMvhczeeQ72U5vt2e+bzV8EKGcyKGYkmd/Z0xpimT5cID6rMj9mI1SJqZc/T
xTkaadrhCWBgb3xa//5lmEGeoijMVnfATu8tCopjRT+ThreXoVXwWbZwSczoSKat
sMuaSj9mUL7C4s8WFtEgGYMCNP1F2O0JCcB2QaM6sX54hWYp1yBMHFgL7yDmzGyF
CTxjkN8RP9GU2jEKiZnf9W4Tlol/YSCG9ydhm6KF+7eLvp8c0sMMCBV7fwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOLCv0FlGvdeZdZua7gJxlgADaWpMB8GA1UdIwQY
MBaAFJaPkE/u8feRYrghmopIO4WPVAv6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbG8tUVQtN3g5NUZpdUNHYWlrZzdoWTlVQ19vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9kZGRmM2QtZTg4Ny00MjczLWJiN2It
NjgxZmEwZDk5ODIxLzEvbG8tUVQtN3g5NUZpdUNHYWlrZzdoWTlVQ19vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9kZGRmM2QtZTg4Ny00MjczLWJiN2ItNjgxZmEwZDk5ODIx
LzEvbG8tUVQtN3g5NUZpdUNHYWlrZzdoWTlVQ19vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuoVUlPGH
JNK1qKuzORk8vCXl+bC/Qq5S7P5xrdHGtdzPv1GTdl3LvuRiSNa0G2Ll3fP64ZMS
DkzyumQzdjdbVP2b075vudn362T+zMbAWR5bVF7GrkYoKynUcedVEOJpHhtvNkkB
JNgqrtVtD0+f9zSzCciQqGiOOiSAIZxp6+GDtzEfvM4KmWossQnxkTwJc4SexAB4
VRkfV8lMNQb7uhOWeTDEXZ4pyNZ3BnZy5CBN52fVWFpDzzQxv6cPqxH7eWOD4rYV
G+PJ5MTN4aZBLI2ODXWe6bixgfDbPhCkB2dO3DyLAfx5SBExeG9PJfoRuxVhB3/T
NR3gt5yrFT6nog==
-----END CERTIFICATE-----
Generated at Sun Apr 27 09:52:41 2025 by rpki-client