Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/LoOL9dPe_8At-hhOTw6FEVNeUX0.mft
File: LoOL9dPe_8At-hhOTw6FEVNeUX0.mft (raw, json)
Hash identifier: NBFJ6U89o1wTuyxrniMnoy9PGsDbKRoSIdw3z7dVFco=
Subject key identifier: B7:30:57:C8:77:7D:8D:7B:28:C8:1D:82:1A:8B:B2:A6:1C:43:DC:51
Authority key identifier: 2E:83:8B:F5:D3:DE:FF:C0:2D:FA:18:4E:4F:0E:85:11:53:5E:51:7D
Certificate issuer: /CN=2e838bf5d3deffc02dfa184e4f0e8511535e517d
Certificate serial: 01984AE5FA7F70AB58EB8269381F3DAB24BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LoOL9dPe_8At-hhOTw6FEVNeUX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/LoOL9dPe_8At-hhOTw6FEVNeUX0.mft
Manifest number: 05E7
Signing time: Sun 27 Jul 2025 08:00:42 +0000
Manifest this update: Sun 27 Jul 2025 08:00:42 +0000
Manifest next update: Mon 28 Jul 2025 08:00:42 +0000
Files and hashes: 1: LoOL9dPe_8At-hhOTw6FEVNeUX0.crl (hash: pwfeDaC0s6cm3x7IiuTc6TeCz1zj9xAxVbbJfaWMLHU=)
2: S8Gv615Ih2EECVB1a2b3J3u_PZw.roa (hash: QLn7xaZ0/yy3B92jWZmiyfhzxbYSpkw1Q0HqcssnojQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/LoOL9dPe_8At-hhOTw6FEVNeUX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/LoOL9dPe_8At-hhOTw6FEVNeUX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/LoOL9dPe_8At-hhOTw6FEVNeUX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:fa:7f:70:ab:58:eb:82:69:38:1f:3d:ab:24:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e838bf5d3deffc02dfa184e4f0e8511535e517d
Validity
Not Before: Jul 27 08:00:42 2025 GMT
Not After : Jul 28 08:00:42 2025 GMT
Subject: CN=b73057c8777d8d7b28c81d821a8bb2a61c43dc51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:2c:08:de:1a:61:11:82:1e:43:4b:81:d3:d6:
9b:66:dd:3c:7c:fb:d7:3b:94:86:bf:a6:6d:60:fc:
40:e8:a0:de:75:70:d4:57:b9:a0:d8:cc:74:c3:cc:
65:ee:c9:00:11:15:e0:01:f3:78:2a:cf:d3:22:3e:
34:3d:77:c5:fe:03:03:c0:bd:17:19:df:0b:cb:59:
68:1f:a2:df:a2:87:50:ec:3b:39:92:b5:72:5c:3a:
f4:02:9d:ab:58:b0:ca:9a:2d:46:8a:8e:73:84:03:
54:0b:1d:21:55:c5:b7:f0:1b:54:70:02:e7:f5:b4:
a7:f0:00:a9:16:e6:4a:d7:32:0a:c7:47:96:48:b4:
d8:bf:d8:63:09:86:8f:37:b1:6e:64:b7:57:8c:aa:
78:8a:e2:46:a1:11:b7:e2:ae:29:4f:82:f8:09:7f:
5c:ba:82:74:74:6f:84:59:83:7a:55:07:2a:01:3a:
b3:0e:ba:c0:ad:ab:76:61:31:be:45:bb:fe:05:fd:
db:21:d7:42:81:a5:3d:dd:8d:ee:82:2f:0e:66:30:
ae:8f:a2:2e:45:36:3d:30:29:dd:0a:65:45:58:3a:
81:24:45:0d:b3:0c:34:b9:77:f0:29:e4:24:bc:7f:
d1:84:42:bf:ef:7d:71:65:43:44:94:ee:fc:04:3e:
b1:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:30:57:C8:77:7D:8D:7B:28:C8:1D:82:1A:8B:B2:A6:1C:43:DC:51
X509v3 Authority Key Identifier:
keyid:2E:83:8B:F5:D3:DE:FF:C0:2D:FA:18:4E:4F:0E:85:11:53:5E:51:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoOL9dPe_8At-hhOTw6FEVNeUX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/LoOL9dPe_8At-hhOTw6FEVNeUX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/LoOL9dPe_8At-hhOTw6FEVNeUX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:dd:51:3d:76:ab:90:ca:b2:01:5b:16:ee:4d:47:17:61:0f:
8c:60:c0:03:c7:af:28:5b:68:69:1d:80:67:ea:2e:54:8c:d0:
df:29:b9:1d:f5:66:5e:51:09:ec:fc:91:db:94:3b:06:a9:98:
22:04:60:e9:4b:25:c0:9c:46:fe:31:60:50:cf:9e:cf:38:15:
08:7b:b2:1a:1f:74:ef:9f:6d:38:c6:2d:9c:2b:97:23:83:8c:
4f:46:73:43:71:ad:ca:df:40:8b:9b:19:54:b0:cc:bf:d4:a0:
f2:e4:48:35:97:a2:c1:20:e8:3c:7f:c6:ad:91:22:70:ab:ec:
08:73:70:79:44:fd:8b:13:26:2c:9e:9e:2a:39:d1:27:fc:36:
0d:90:0e:85:81:6b:1a:85:b4:0a:75:b1:0d:d5:60:6f:9a:91:
f7:58:9c:71:9c:02:f8:b0:6f:57:c3:5b:21:14:f4:ab:83:83:
11:54:40:98:c6:fc:c4:c4:4b:3d:11:bf:b3:35:37:47:f4:a4:
30:57:64:b8:a1:c3:d3:f5:2f:5c:f3:a2:e0:63:7d:c6:5b:c1:
f2:3a:e9:db:16:41:f8:c3:b7:77:e7:8b:b4:10:35:a6:5c:c2:
bd:ca:d2:de:c5:03:91:3a:6b:5a:61:e4:55:67:3c:f3:8b:e3:
9f:05:00:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 18:01:28 2025 by rpki-client