Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/5e1871-2af1-47d3-b262-08f433daea15/1/LO4pmOhvp0iOa2T47bwDLOFdG8w.mft
File: LO4pmOhvp0iOa2T47bwDLOFdG8w.mft (raw, json)
Hash identifier: YGHoo3usWCqr+R/0r5R4O8Z2zZo+S09RJz6ZJraK9tg=
Subject key identifier: 79:EF:EC:8E:69:D7:04:1D:3D:3D:6C:C4:79:99:5B:0F:B1:E6:7E:28
Authority key identifier: 2C:EE:29:98:E8:6F:A7:48:8E:6B:64:F8:ED:BC:03:2C:E1:5D:1B:CC
Certificate issuer: /CN=2cee2998e86fa7488e6b64f8edbc032ce15d1bcc
Certificate serial: 019749D5DEA7A272F2ABD8663009ACE84E4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LO4pmOhvp0iOa2T47bwDLOFdG8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/5e1871-2af1-47d3-b262-08f433daea15/1/LO4pmOhvp0iOa2T47bwDLOFdG8w.mft
Manifest number: 0D00
Signing time: Sat 07 Jun 2025 10:00:42 +0000
Manifest this update: Sat 07 Jun 2025 10:00:42 +0000
Manifest next update: Sun 08 Jun 2025 10:00:42 +0000
Files and hashes: 1: LO4pmOhvp0iOa2T47bwDLOFdG8w.crl (hash: CnvAQlyK1RxQ7MPtkKd5A+DBzAGLyoS1wmIrGeJjqRU=)
2: YXxh1XSQz2hJg4wU0JwpLVfgRPc.roa (hash: fKQqPt+1938ZgXlhZdhE3xLSu/gu+cSj1bUfoNu6uac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/5e1871-2af1-47d3-b262-08f433daea15/1/LO4pmOhvp0iOa2T47bwDLOFdG8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/5e1871-2af1-47d3-b262-08f433daea15/1/LO4pmOhvp0iOa2T47bwDLOFdG8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/LO4pmOhvp0iOa2T47bwDLOFdG8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:de:a7:a2:72:f2:ab:d8:66:30:09:ac:e8:4e:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cee2998e86fa7488e6b64f8edbc032ce15d1bcc
Validity
Not Before: Jun 7 10:00:42 2025 GMT
Not After : Jun 8 10:00:42 2025 GMT
Subject: CN=79efec8e69d7041d3d3d6cc479995b0fb1e67e28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:60:78:65:21:42:19:3c:cd:99:ea:9d:44:98:
8c:ae:bf:9d:09:34:60:35:31:0f:0d:1a:fa:28:c4:
05:61:d2:c8:6f:a8:d8:a6:df:e8:90:95:0a:83:ef:
1f:d3:a4:9e:dd:b5:d7:80:3d:16:e1:ae:ce:2c:dc:
7d:22:b7:a0:e0:27:87:a4:50:f2:d4:14:c4:6d:65:
98:47:ef:c8:91:58:92:da:f1:8d:55:9f:11:ea:df:
8a:9c:8a:ef:b1:bd:86:74:ab:55:1c:cd:f4:cb:9a:
4a:8d:fe:00:47:c1:20:de:be:e9:29:88:28:c1:0b:
cf:a9:74:a3:4a:3d:00:a2:e1:c0:f2:fa:4b:a0:36:
87:f8:5c:0c:72:13:a1:45:34:57:8b:69:2a:d1:d6:
ca:59:02:f2:dc:75:8c:79:23:d6:be:91:48:82:a7:
3a:33:c9:ce:4d:d8:39:88:f0:f1:bf:6c:9e:81:3e:
4c:6e:6a:8e:79:c1:96:7f:bb:c1:a5:5b:b0:83:d6:
8d:f0:28:21:d2:b1:45:cc:3b:f3:02:f7:a4:94:22:
9a:dd:e3:30:fd:8a:16:32:f2:6e:4b:ad:82:60:86:
66:23:94:20:c9:33:18:06:15:5a:89:fd:bd:fe:a4:
ba:49:70:cf:eb:10:4f:aa:17:5c:0f:5d:cb:55:c1:
a7:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:EF:EC:8E:69:D7:04:1D:3D:3D:6C:C4:79:99:5B:0F:B1:E6:7E:28
X509v3 Authority Key Identifier:
keyid:2C:EE:29:98:E8:6F:A7:48:8E:6B:64:F8:ED:BC:03:2C:E1:5D:1B:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LO4pmOhvp0iOa2T47bwDLOFdG8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5e1871-2af1-47d3-b262-08f433daea15/1/LO4pmOhvp0iOa2T47bwDLOFdG8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5e1871-2af1-47d3-b262-08f433daea15/1/LO4pmOhvp0iOa2T47bwDLOFdG8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:31:2b:b0:c7:0f:26:bc:b2:a7:56:8b:83:0b:af:f4:22:93:
17:f1:3c:a6:7a:ac:36:bb:8c:ec:18:2b:4d:a4:e1:3b:d7:d3:
1f:ab:b1:3b:fd:31:68:da:23:f7:8c:75:21:34:65:7b:97:43:
18:34:1c:5e:37:9c:27:99:a7:22:d3:7f:f8:f0:88:8b:e1:24:
3f:dc:56:18:dd:3a:b0:7d:10:dc:d1:31:6e:3a:ca:d3:14:27:
34:e7:32:f6:52:d9:5e:3c:80:39:2e:2a:df:3b:98:2f:44:43:
2b:38:7e:c0:bd:90:20:0c:48:4f:50:f3:e2:c3:3d:43:dc:ec:
7a:4f:93:04:fe:62:8c:d9:22:2d:52:c2:b3:be:6c:f1:14:a2:
86:2d:4d:c9:a2:01:6c:9a:b1:34:3d:13:2f:76:ec:a4:71:e0:
c7:eb:39:a5:c8:d1:53:1b:7b:5c:10:cc:75:6c:7e:c3:48:71:
51:d6:84:b1:03:4b:7e:61:04:85:6c:bd:a4:2f:a8:a0:08:2e:
b6:34:56:55:3d:39:d2:61:91:1d:b6:69:a0:ae:9c:d2:3f:fe:
08:8c:ed:a4:58:03:a5:a6:24:18:7b:3b:46:99:6e:61:47:a5:
90:1e:da:a6:c4:77:01:b1:c1:34:bc:2a:e1:b2:a5:54:31:87:
bc:f6:be:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:45:22 2025 by rpki-client