Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/dddf3d-e887-4273-bb7b-681fa0d99821/1/lo-QT-7x95FiuCGaikg7hY9UC_o.mft
File: lo-QT-7x95FiuCGaikg7hY9UC_o.mft (raw, json)
Hash identifier: rYO28CXGlUIcvXIVaEtKWUAqkjgrEAX93gGemoZic0Q=
Subject key identifier: FB:BA:CD:AE:C9:DF:74:20:CE:E0:9B:35:04:90:F0:9A:91:67:76:8B
Authority key identifier: 96:8F:90:4F:EE:F1:F7:91:62:B8:21:9A:8A:48:3B:85:8F:54:0B:FA
Certificate issuer: /CN=968f904feef1f79162b8219a8a483b858f540bfa
Certificate serial: 0198835519772285D6E76738938BEEC47285
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lo-QT-7x95FiuCGaikg7hY9UC_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/dddf3d-e887-4273-bb7b-681fa0d99821/1/lo-QT-7x95FiuCGaikg7hY9UC_o.mft
Manifest number: 161B
Signing time: Thu 07 Aug 2025 07:00:49 +0000
Manifest this update: Thu 07 Aug 2025 07:00:49 +0000
Manifest next update: Fri 08 Aug 2025 07:00:49 +0000
Files and hashes: 1: lo-QT-7x95FiuCGaikg7hY9UC_o.crl (hash: j2obeCL+MeNhnTNp1RZwiOOzTn/5WNsVYry7vM1iWe8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/dddf3d-e887-4273-bb7b-681fa0d99821/1/lo-QT-7x95FiuCGaikg7hY9UC_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/dddf3d-e887-4273-bb7b-681fa0d99821/1/lo-QT-7x95FiuCGaikg7hY9UC_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/lo-QT-7x95FiuCGaikg7hY9UC_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:83:55:19:77:22:85:d6:e7:67:38:93:8b:ee:c4:72:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=968f904feef1f79162b8219a8a483b858f540bfa
Validity
Not Before: Aug 7 07:00:49 2025 GMT
Not After : Aug 8 07:00:49 2025 GMT
Subject: CN=fbbacdaec9df7420cee09b350490f09a9167768b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:cf:cc:71:93:54:e8:fa:c2:14:fe:e2:5e:93:
94:e4:08:2a:cc:cc:77:ee:95:a0:2c:d2:b1:c7:5e:
08:d2:c9:59:c9:c0:54:72:89:1f:e8:33:5e:bd:b3:
d4:8c:f1:60:8d:b7:09:de:1d:9a:02:2d:64:5e:e3:
fa:f9:5c:ea:c2:ee:e5:4a:54:d2:99:8a:99:18:84:
6b:2a:23:1d:e3:8e:44:d6:43:23:64:3f:c0:ba:d6:
56:1f:4c:91:19:b3:6d:94:be:e3:88:97:e3:bd:d8:
2e:82:bb:a0:44:ef:7e:43:6d:63:6a:3a:64:01:b9:
c5:8c:d8:41:b9:57:3a:fc:6b:dc:ea:1c:cd:a6:0d:
fa:ac:e5:87:97:df:0c:a5:2b:a0:c1:5d:7a:cf:fa:
ae:26:45:aa:4a:e8:44:c3:bd:6b:5a:f4:b8:f9:b6:
7e:e3:6a:19:79:76:2b:18:83:32:ea:5c:8d:b0:b1:
07:6f:28:cd:1b:53:41:5b:0a:ed:be:ec:74:e9:14:
1b:20:93:62:55:cc:f1:64:cf:f4:13:ea:ab:f5:d3:
23:0e:05:fd:db:08:53:45:cd:cc:9d:0e:b0:6a:27:
44:d0:ca:8f:b6:f3:ca:3e:fc:f9:31:62:0b:16:37:
cb:ce:cc:48:75:7d:d4:15:b4:3e:b2:68:94:90:b3:
f0:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:BA:CD:AE:C9:DF:74:20:CE:E0:9B:35:04:90:F0:9A:91:67:76:8B
X509v3 Authority Key Identifier:
keyid:96:8F:90:4F:EE:F1:F7:91:62:B8:21:9A:8A:48:3B:85:8F:54:0B:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lo-QT-7x95FiuCGaikg7hY9UC_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/dddf3d-e887-4273-bb7b-681fa0d99821/1/lo-QT-7x95FiuCGaikg7hY9UC_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/dddf3d-e887-4273-bb7b-681fa0d99821/1/lo-QT-7x95FiuCGaikg7hY9UC_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:8c:e5:22:99:88:c7:8e:60:e8:15:3f:b6:f7:ce:4c:40:aa:
59:57:01:ce:a2:3e:f6:ab:f9:24:5d:e1:7f:71:a7:4f:b0:72:
30:0c:cd:05:db:47:2d:9d:bf:5d:e4:3e:1d:f0:d5:88:f4:04:
a8:08:c7:f0:d8:66:96:fc:7e:2a:3d:b4:28:3c:01:ff:62:08:
13:c9:aa:0c:c1:1b:ec:a7:ce:15:f8:e6:02:bf:a3:fc:fc:7d:
46:ec:59:ca:ce:f0:44:e2:b4:a6:3a:9e:3a:59:86:32:fb:3b:
68:92:28:a7:c0:38:93:3b:78:6c:03:cd:6d:ee:a3:f9:79:4b:
42:ca:9c:bd:01:7f:6a:26:9e:68:da:55:7d:61:b1:12:e0:57:
56:e9:b9:15:0e:6a:1d:39:43:96:a4:0b:29:f0:7f:c9:c1:95:
9a:86:9d:50:30:4a:a2:16:90:37:04:ca:97:a1:45:7f:e5:39:
36:cb:a3:fe:10:a4:fb:4a:60:72:de:f2:06:0d:f8:ce:cd:9d:
85:1e:9d:23:f7:0c:4d:39:0e:5a:29:32:9b:0b:40:a0:34:81:
b1:fa:5f:a3:8d:69:67:42:a3:10:04:18:ea:71:29:e3:22:f7:
6c:35:8b:c1:7b:60:4e:68:90:ce:07:ca:72:77:99:90:64:5f:
a5:b2:ea:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 17:41:12 2025 by rpki-client