Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/072b46-0da1-42d2-899c-a0bda8af756a/1/O_LCDaTWMBgu7jNFrZ0cStkXDVA.mft
File: O_LCDaTWMBgu7jNFrZ0cStkXDVA.mft (raw, json)
Hash identifier: +ltbGzyr1vjIAALtfzayQHsbKxXBmaYWC60MUquIbC4=
Subject key identifier: 94:0A:47:12:B7:FA:75:B7:82:61:B1:B4:77:1E:AD:62:AB:FC:17:E8
Authority key identifier: 3B:F2:C2:0D:A4:D6:30:18:2E:EE:33:45:AD:9D:1C:4A:D9:17:0D:50
Certificate issuer: /CN=3bf2c20da4d630182eee3345ad9d1c4ad9170d50
Certificate serial: 019749D6008FD226E7C4C71240F2BB7577C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O_LCDaTWMBgu7jNFrZ0cStkXDVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/072b46-0da1-42d2-899c-a0bda8af756a/1/O_LCDaTWMBgu7jNFrZ0cStkXDVA.mft
Manifest number: 0FBB
Signing time: Sat 07 Jun 2025 10:00:50 +0000
Manifest this update: Sat 07 Jun 2025 10:00:50 +0000
Manifest next update: Sun 08 Jun 2025 10:00:50 +0000
Files and hashes: 1: O_LCDaTWMBgu7jNFrZ0cStkXDVA.crl (hash: Pp74dJvdC+Pw0Ah46StKrWJS8iOSBszva/VVNS4+2sc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/072b46-0da1-42d2-899c-a0bda8af756a/1/O_LCDaTWMBgu7jNFrZ0cStkXDVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/072b46-0da1-42d2-899c-a0bda8af756a/1/O_LCDaTWMBgu7jNFrZ0cStkXDVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/O_LCDaTWMBgu7jNFrZ0cStkXDVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d6:00:8f:d2:26:e7:c4:c7:12:40:f2:bb:75:77:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bf2c20da4d630182eee3345ad9d1c4ad9170d50
Validity
Not Before: Jun 7 10:00:50 2025 GMT
Not After : Jun 8 10:00:50 2025 GMT
Subject: CN=940a4712b7fa75b78261b1b4771ead62abfc17e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:15:dd:68:bc:17:e0:e7:16:1a:7f:6e:96:c8:
c4:1f:b0:d4:75:22:85:4c:7d:b4:fe:f7:2d:ab:bc:
8b:fa:01:02:b4:95:07:ed:68:1e:95:89:bf:25:cc:
8f:98:74:28:de:bb:61:1c:cc:fe:08:96:d7:08:2d:
5f:f1:2d:ff:d2:41:a1:fc:7f:a9:cc:63:67:b5:5c:
27:a1:4c:ae:bb:55:86:b5:ca:85:f8:1e:fb:51:3c:
24:c3:91:fc:47:d5:5c:e6:1a:99:45:1f:8d:a8:ff:
63:5e:c7:ef:50:bf:3b:dc:00:5e:6a:50:16:1b:4e:
74:8c:db:84:fd:bf:d5:5d:e5:e5:d0:7a:c0:75:83:
99:e2:80:b3:74:59:ed:2b:a1:2d:30:64:1c:4e:5b:
9c:69:76:78:9a:18:f3:86:f9:4a:49:21:a0:ca:e8:
a2:b8:a2:00:00:e5:ad:c0:3c:4e:8f:f1:fa:96:a9:
db:39:1e:bd:08:98:bd:1b:28:b0:c4:b9:36:a4:27:
8c:f6:30:5e:58:d3:03:bc:be:92:1c:8b:39:ab:5d:
4c:a3:9a:dd:3b:b3:e8:46:6d:87:95:6f:21:d8:ac:
08:10:18:35:7d:bd:96:69:0e:ac:a2:ce:e1:58:a4:
65:ef:67:0c:99:70:8e:0f:05:7a:f3:d0:d9:ea:1d:
ce:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:0A:47:12:B7:FA:75:B7:82:61:B1:B4:77:1E:AD:62:AB:FC:17:E8
X509v3 Authority Key Identifier:
keyid:3B:F2:C2:0D:A4:D6:30:18:2E:EE:33:45:AD:9D:1C:4A:D9:17:0D:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O_LCDaTWMBgu7jNFrZ0cStkXDVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/072b46-0da1-42d2-899c-a0bda8af756a/1/O_LCDaTWMBgu7jNFrZ0cStkXDVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/072b46-0da1-42d2-899c-a0bda8af756a/1/O_LCDaTWMBgu7jNFrZ0cStkXDVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:00:06:a3:41:55:9d:ae:a4:89:53:7c:37:30:6c:45:3f:90:
d2:c0:e5:6c:3a:38:96:b8:26:59:80:7b:e2:ef:18:f5:cd:6f:
73:a2:0f:15:21:4c:e3:9a:d4:6f:9d:21:7a:72:94:12:1d:aa:
6d:f3:30:9b:9e:e3:53:7a:fa:43:5a:c1:2d:1d:aa:1e:ef:2a:
fc:7c:80:33:73:c3:cc:b6:05:78:36:3c:e2:3f:a1:ad:fe:98:
9c:db:91:07:64:60:ad:62:fd:b5:33:b8:92:86:43:ce:a5:5a:
41:f7:6f:5e:28:d4:71:89:27:e8:cb:8a:07:8a:69:35:99:d1:
0a:a3:1d:fa:5b:0e:76:02:80:ab:45:32:75:cf:a9:54:60:eb:
40:fd:b7:85:ba:c6:f8:08:de:78:59:49:b8:78:18:b2:08:d1:
90:ea:29:2f:33:b1:a2:55:99:7b:22:a5:8c:6d:f5:a3:cc:ad:
7f:db:e2:e7:34:f7:6a:8f:40:ea:7d:a5:44:41:17:94:83:f9:
ba:84:45:9e:05:fe:16:3d:2a:c7:53:75:b8:51:35:ca:3a:52:
08:59:41:ab:93:8c:ea:50:54:2a:ae:ff:36:f2:99:b5:31:09:
9b:c7:67:33:8c:0a:38:63:11:ca:12:c0:3e:88:be:53:d7:8a:
41:6e:f8:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJ1gCP0ibnxMcSQPK7dXfIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiZjJjMjBkYTRkNjMwMTgyZWVlMzM0NWFkOWQxYzRhZDkx
NzBkNTAwHhcNMjUwNjA3MTAwMDUwWhcNMjUwNjA4MTAwMDUwWjAzMTEwLwYDVQQD
Eyg5NDBhNDcxMmI3ZmE3NWI3ODI2MWIxYjQ3NzFlYWQ2MmFiZmMxN2U4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhXdaLwX4OcWGn9ulsjEH7DUdSKF
TH20/vctq7yL+gECtJUH7WgelYm/JcyPmHQo3rthHMz+CJbXCC1f8S3/0kGh/H+p
zGNntVwnoUyuu1WGtcqF+B77UTwkw5H8R9Vc5hqZRR+NqP9jXsfvUL873ABealAW
G050jNuE/b/VXeXl0HrAdYOZ4oCzdFntK6EtMGQcTlucaXZ4mhjzhvlKSSGgyuii
uKIAAOWtwDxOj/H6lqnbOR69CJi9GyiwxLk2pCeM9jBeWNMDvL6SHIs5q11Mo5rd
O7PoRm2HlW8h2KwIEBg1fb2WaQ6sos7hWKRl72cMmXCODwV689DZ6h3OZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJQKRxK3+nW3gmGxtHcerWKr/BfoMB8GA1UdIwQY
MBaAFDvywg2k1jAYLu4zRa2dHErZFw1QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT19MQ0RhVFdNQmd1N2pORnJaMGNTdGtYRFZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny8wNzJiNDYtMGRhMS00MmQyLTg5OWMt
YTBiZGE4YWY3NTZhLzEvT19MQ0RhVFdNQmd1N2pORnJaMGNTdGtYRFZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny8wNzJiNDYtMGRhMS00MmQyLTg5OWMtYTBiZGE4YWY3NTZh
LzEvT19MQ0RhVFdNQmd1N2pORnJaMGNTdGtYRFZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHQAGo0FV
na6kiVN8NzBsRT+Q0sDlbDo4lrgmWYB74u8Y9c1vc6IPFSFM45rUb50henKUEh2q
bfMwm57jU3r6Q1rBLR2qHu8q/HyAM3PDzLYFeDY84j+hrf6YnNuRB2RgrWL9tTO4
koZDzqVaQfdvXijUcYkn6MuKB4ppNZnRCqMd+lsOdgKAq0Uydc+pVGDrQP23hbrG
+AjeeFlJuHgYsgjRkOopLzOxolWZeyKljG31o8ytf9vi5zT3ao9A6n2lREEXlIP5
uoRFngX+Fj0qx1N1uFE1yjpSCFlBq5OM6lBUKq7/NvKZtTEJm8dnM4wKOGMRyhLA
Poi+U9eKQW74TQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 13:54:09 2025 by rpki-client