Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/dddf3d-e887-4273-bb7b-681fa0d99821/1/lo-QT-7x95FiuCGaikg7hY9UC_o.mft
File: lo-QT-7x95FiuCGaikg7hY9UC_o.mft (raw, json)
Hash identifier: MEtDiEd9ckViPCJ+BlYSs6a8qYclk4I27arBy7F4Kvg=
Subject key identifier: 5E:B6:15:61:45:84:39:08:06:09:8B:EE:6B:A5:8F:A3:05:91:C7:14
Authority key identifier: 96:8F:90:4F:EE:F1:F7:91:62:B8:21:9A:8A:48:3B:85:8F:54:0B:FA
Certificate issuer: /CN=968f904feef1f79162b8219a8a483b858f540bfa
Certificate serial: 01976D3E11001D62686A682BDAE1DF0790B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lo-QT-7x95FiuCGaikg7hY9UC_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/dddf3d-e887-4273-bb7b-681fa0d99821/1/lo-QT-7x95FiuCGaikg7hY9UC_o.mft
Manifest number: 158B
Signing time: Sat 14 Jun 2025 07:01:13 +0000
Manifest this update: Sat 14 Jun 2025 07:01:13 +0000
Manifest next update: Sun 15 Jun 2025 07:01:13 +0000
Files and hashes: 1: lo-QT-7x95FiuCGaikg7hY9UC_o.crl (hash: d7ZRicG6aCcuoSg0+5xgp+BZdOjddGi2SoHeZA7She8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/dddf3d-e887-4273-bb7b-681fa0d99821/1/lo-QT-7x95FiuCGaikg7hY9UC_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/dddf3d-e887-4273-bb7b-681fa0d99821/1/lo-QT-7x95FiuCGaikg7hY9UC_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/lo-QT-7x95FiuCGaikg7hY9UC_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3e:11:00:1d:62:68:6a:68:2b:da:e1:df:07:90:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=968f904feef1f79162b8219a8a483b858f540bfa
Validity
Not Before: Jun 14 07:01:13 2025 GMT
Not After : Jun 15 07:01:13 2025 GMT
Subject: CN=5eb615614584390806098bee6ba58fa30591c714
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:74:62:34:5e:88:1e:b4:6f:ff:d6:45:35:61:
28:b6:b1:67:42:db:c8:4f:79:06:a4:a9:0e:cd:bf:
84:18:a4:c7:1b:b9:41:9c:aa:79:7c:07:4f:eb:c7:
7b:9b:3b:aa:43:aa:68:d6:24:89:12:b2:de:05:f2:
11:6f:c6:8b:c8:76:cd:44:20:2d:39:2b:69:ee:26:
a8:d9:a0:02:cb:14:ea:6e:cf:f8:01:30:94:59:43:
22:1a:8b:49:45:6d:97:75:fb:fd:8f:64:ad:1c:8a:
ba:ad:41:4d:f7:53:b5:0e:b9:51:e9:84:84:c3:34:
94:bc:94:10:62:38:3a:7f:86:04:f8:76:f3:65:1e:
1a:4a:6f:25:cc:2d:22:b3:1e:68:f5:f6:c0:12:64:
93:16:3e:6b:02:bb:a1:d3:60:b1:1d:d7:5b:5e:d4:
a9:ca:a3:ed:1c:4d:86:17:7e:b2:4e:ca:21:f2:ce:
f4:2a:78:d9:cf:ca:86:00:52:ce:db:c6:f6:3d:3a:
91:1a:0d:d9:a7:fb:e0:1a:30:24:1e:32:fe:10:28:
2b:80:48:57:44:6a:58:6c:ce:6e:cb:e9:90:25:81:
3f:42:6c:12:94:1e:29:a5:9f:c0:d6:f0:dd:9e:b3:
54:cb:15:47:b7:6a:c5:69:5f:db:bc:32:ae:b1:2a:
56:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:B6:15:61:45:84:39:08:06:09:8B:EE:6B:A5:8F:A3:05:91:C7:14
X509v3 Authority Key Identifier:
keyid:96:8F:90:4F:EE:F1:F7:91:62:B8:21:9A:8A:48:3B:85:8F:54:0B:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lo-QT-7x95FiuCGaikg7hY9UC_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/dddf3d-e887-4273-bb7b-681fa0d99821/1/lo-QT-7x95FiuCGaikg7hY9UC_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/dddf3d-e887-4273-bb7b-681fa0d99821/1/lo-QT-7x95FiuCGaikg7hY9UC_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:93:6b:7b:54:74:1a:68:d8:a4:51:a2:53:2e:c6:60:3c:a4:
b6:29:ac:c7:2a:be:b8:3a:8c:3e:54:06:9f:70:45:c6:30:49:
41:fa:0f:37:bf:b3:e9:28:93:0e:43:74:f9:87:3f:3e:4f:ff:
d8:fd:2a:75:7b:c7:ad:f8:51:53:ff:30:8a:f0:16:ff:d4:43:
c3:86:5e:01:d4:b4:ec:4b:6b:57:9d:8a:62:37:da:f5:b3:da:
6d:92:b3:84:d1:45:94:f1:a8:84:ab:82:66:6a:52:e3:88:ed:
a9:72:40:3a:76:e6:dd:d6:5f:57:5d:c4:7b:54:23:91:bc:5a:
c1:db:19:90:0f:17:b3:ea:47:c2:dd:7f:1f:50:fb:d5:62:44:
87:97:02:5f:70:d7:01:87:64:d5:01:99:93:63:cf:f6:a1:b4:
e0:13:d3:ff:ff:e5:fd:b4:48:f6:68:7b:66:7a:84:63:1c:72:
53:ec:23:8a:c6:b7:c9:68:e7:cf:bf:3d:42:ad:73:fc:13:ec:
4e:51:5b:56:cc:86:9f:ca:14:53:2f:7e:ab:25:d2:2e:80:f4:
15:d9:c6:60:10:c0:93:4c:da:b4:30:3a:1c:cf:d6:4c:2d:31:
8e:16:f9:2f:43:88:13:8e:fd:41:92:82:c4:79:37:56:5e:de:
59:41:01:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:51:50 2025 by rpki-client