Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/dddf3d-e887-4273-bb7b-681fa0d99821/1/lo-QT-7x95FiuCGaikg7hY9UC_o.mft
File: lo-QT-7x95FiuCGaikg7hY9UC_o.mft (raw, json)
Hash identifier: wW/SoBb0AmucsreY87sDvCO7aX/S5ZuEDyFDdJ4DLPE=
Subject key identifier: 66:18:42:B5:62:F3:ED:F7:0B:8E:72:CB:1A:44:A3:BF:8A:C0:2E:D1
Authority key identifier: 96:8F:90:4F:EE:F1:F7:91:62:B8:21:9A:8A:48:3B:85:8F:54:0B:FA
Certificate issuer: /CN=968f904feef1f79162b8219a8a483b858f540bfa
Certificate serial: 0198530D3DB6B04ECCD71CCC7C9488D9941B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lo-QT-7x95FiuCGaikg7hY9UC_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/dddf3d-e887-4273-bb7b-681fa0d99821/1/lo-QT-7x95FiuCGaikg7hY9UC_o.mft
Manifest number: 1602
Signing time: Mon 28 Jul 2025 22:00:33 +0000
Manifest this update: Mon 28 Jul 2025 22:00:33 +0000
Manifest next update: Tue 29 Jul 2025 22:00:33 +0000
Files and hashes: 1: lo-QT-7x95FiuCGaikg7hY9UC_o.crl (hash: wgLdPoyUw4bW3gzJ5/NtilxWYSiXGKT0D8eH5mmK/wo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/dddf3d-e887-4273-bb7b-681fa0d99821/1/lo-QT-7x95FiuCGaikg7hY9UC_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/dddf3d-e887-4273-bb7b-681fa0d99821/1/lo-QT-7x95FiuCGaikg7hY9UC_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/lo-QT-7x95FiuCGaikg7hY9UC_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 22:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:0d:3d:b6:b0:4e:cc:d7:1c:cc:7c:94:88:d9:94:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=968f904feef1f79162b8219a8a483b858f540bfa
Validity
Not Before: Jul 28 22:00:33 2025 GMT
Not After : Jul 29 22:00:33 2025 GMT
Subject: CN=661842b562f3edf70b8e72cb1a44a3bf8ac02ed1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:14:4f:a8:f3:b2:6b:1f:b0:df:7b:da:f2:42:
c3:0b:1f:06:c2:65:95:15:fc:b8:74:08:61:04:bb:
a2:90:66:1b:82:33:dd:fe:78:4b:6a:c9:cf:e6:92:
8f:0d:c9:cd:82:d6:bd:73:52:fa:93:f7:8e:19:5e:
f1:78:ba:90:70:e3:74:59:1f:10:3a:57:0d:b5:41:
56:4e:6d:d6:7d:a3:a7:7b:57:8c:0e:7f:6c:81:ec:
70:7f:ad:c0:9b:36:3c:94:f4:f5:c9:38:fc:94:1e:
45:6b:fc:98:59:76:6f:54:ce:17:7b:a6:c5:87:d1:
c3:34:71:f4:02:3b:79:31:48:3f:8e:8d:28:ba:d3:
f3:3b:bb:f0:e7:a3:11:86:70:d5:12:93:a8:a2:ff:
31:4c:64:1b:02:84:28:c1:23:b1:fb:42:2f:19:45:
19:3d:1f:dc:e3:be:b9:30:c3:2a:ef:bc:e4:4b:11:
49:41:ec:cb:8b:3f:17:38:c5:83:4c:d6:d1:25:af:
90:4e:6a:f4:4e:39:09:15:bb:ac:10:4f:98:9f:c0:
08:1d:bb:2c:32:bf:aa:a7:31:ed:df:10:91:ed:27:
b9:23:58:ea:91:0e:52:b4:38:7e:93:78:d9:f7:35:
cd:4f:2e:76:5e:4a:1c:c7:47:3d:a8:59:e1:cf:d0:
3d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:18:42:B5:62:F3:ED:F7:0B:8E:72:CB:1A:44:A3:BF:8A:C0:2E:D1
X509v3 Authority Key Identifier:
keyid:96:8F:90:4F:EE:F1:F7:91:62:B8:21:9A:8A:48:3B:85:8F:54:0B:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lo-QT-7x95FiuCGaikg7hY9UC_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/dddf3d-e887-4273-bb7b-681fa0d99821/1/lo-QT-7x95FiuCGaikg7hY9UC_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/dddf3d-e887-4273-bb7b-681fa0d99821/1/lo-QT-7x95FiuCGaikg7hY9UC_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:2d:19:b8:a9:7a:9a:cb:82:9f:a3:90:18:f4:10:3d:3b:a5:
11:62:62:26:d8:c2:6b:ff:b3:db:60:11:95:ff:ae:c1:fc:4e:
e4:a0:2f:33:33:d0:c1:57:dc:2d:38:c0:65:4d:e3:f4:4f:1c:
1b:be:31:1e:ae:1e:fc:13:13:56:ae:66:31:e9:07:9b:07:ff:
d6:c5:19:b0:0a:44:d7:58:cd:8f:73:01:fd:b8:a6:fe:df:c4:
0a:06:a8:9d:03:dc:cd:5b:3c:d0:46:fb:ff:a6:7e:db:26:37:
06:62:2d:5f:33:64:e2:2c:fc:02:f9:9a:87:eb:f8:a1:89:19:
03:94:a1:69:e4:15:27:00:d4:34:46:82:39:7d:35:2f:b1:d6:
54:b9:94:bf:e9:87:a7:70:9b:49:41:a6:ce:72:d7:aa:45:d8:
3e:d3:98:a0:61:5a:83:0a:ac:58:32:6a:eb:cf:c9:28:12:b0:
bc:c9:67:09:1f:a3:f9:3d:02:e2:a3:20:4c:70:20:03:99:fa:
3a:46:4c:95:4b:58:6f:d4:9d:4d:86:a4:99:1a:4b:b6:ca:f7:
2c:56:cf:bb:51:71:04:47:ac:b7:86:51:5c:e6:b6:dc:46:92:
9e:58:4c:f0:f9:33:a0:8b:96:39:94:4c:50:34:04:08:a8:cb:
95:dc:b3:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:03:44 2025 by rpki-client