Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/7a6381-8ca4-4045-b837-301fdf114840/1/LTOrAnhiOJzMHx_IsKVkpuvXy40.mft
File: LTOrAnhiOJzMHx_IsKVkpuvXy40.mft (raw, json)
Hash identifier: dc7931LWKd0ENFxzxQoKl+wXL789MHQP22gPRWPBisI=
Subject key identifier: F2:2E:06:91:67:90:22:8B:83:C6:21:57:96:58:8A:62:78:45:0B:64
Authority key identifier: 2D:33:AB:02:78:62:38:9C:CC:1F:1F:C8:B0:A5:64:A6:EB:D7:CB:8D
Certificate issuer: /CN=2d33ab027862389ccc1f1fc8b0a564a6ebd7cb8d
Certificate serial: 01975D25D4BD15DD30EE179028E7B1C125D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LTOrAnhiOJzMHx_IsKVkpuvXy40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/7a6381-8ca4-4045-b837-301fdf114840/1/LTOrAnhiOJzMHx_IsKVkpuvXy40.mft
Manifest number: 081F
Signing time: Wed 11 Jun 2025 04:00:49 +0000
Manifest this update: Wed 11 Jun 2025 04:00:49 +0000
Manifest next update: Thu 12 Jun 2025 04:00:49 +0000
Files and hashes: 1: LTOrAnhiOJzMHx_IsKVkpuvXy40.crl (hash: fZ7bq54GwcGF0hOiznX6r5GtiNaDEGLSg2fwlZ68/dE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/7a6381-8ca4-4045-b837-301fdf114840/1/LTOrAnhiOJzMHx_IsKVkpuvXy40.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/7a6381-8ca4-4045-b837-301fdf114840/1/LTOrAnhiOJzMHx_IsKVkpuvXy40.mft
rsync://rpki.ripe.net/repository/DEFAULT/LTOrAnhiOJzMHx_IsKVkpuvXy40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5d:25:d4:bd:15:dd:30:ee:17:90:28:e7:b1:c1:25:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d33ab027862389ccc1f1fc8b0a564a6ebd7cb8d
Validity
Not Before: Jun 11 04:00:49 2025 GMT
Not After : Jun 12 04:00:49 2025 GMT
Subject: CN=f22e06916790228b83c6215796588a6278450b64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:82:62:b2:85:6c:37:b3:80:f7:e2:d0:6f:45:
e9:3e:1a:cc:8f:53:f2:ee:6a:c2:91:dc:4e:27:10:
98:81:49:4d:db:16:7b:55:bd:05:84:ed:62:f3:e7:
7a:0f:25:fd:17:24:b2:6f:61:b4:0f:a6:77:93:2f:
37:c0:13:bd:7b:3b:21:53:8a:10:f9:5e:45:00:9c:
da:35:6d:b2:bc:13:b5:78:04:f4:f0:e2:1f:73:8f:
c9:bd:26:4f:53:6e:99:4d:17:84:d2:e6:96:49:95:
8a:04:94:3d:16:fe:ba:26:1c:2f:f5:09:13:a6:b6:
dc:c3:03:84:bb:87:90:2a:9d:df:bf:0c:e7:e6:3a:
ed:3a:53:3c:39:58:ae:92:b6:f2:6c:47:aa:df:a9:
ab:04:eb:d0:8d:e0:ec:64:8e:2a:f9:64:17:9c:d4:
66:77:57:cb:fe:47:b9:af:fe:22:6c:80:5b:54:a3:
2c:3b:26:cc:dc:ee:2d:87:7a:82:de:8b:14:bb:bb:
c5:50:3d:88:81:3b:2e:40:fb:cf:48:6b:7c:d3:08:
34:b5:a1:64:0d:78:53:0d:c4:09:eb:d3:a2:b5:71:
d1:9d:40:08:32:f3:4e:a3:0e:46:13:e0:c0:15:59:
fa:c4:5d:ea:cd:ac:92:1c:7f:c1:98:62:27:fb:a5:
1b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:2E:06:91:67:90:22:8B:83:C6:21:57:96:58:8A:62:78:45:0B:64
X509v3 Authority Key Identifier:
keyid:2D:33:AB:02:78:62:38:9C:CC:1F:1F:C8:B0:A5:64:A6:EB:D7:CB:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LTOrAnhiOJzMHx_IsKVkpuvXy40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/7a6381-8ca4-4045-b837-301fdf114840/1/LTOrAnhiOJzMHx_IsKVkpuvXy40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/7a6381-8ca4-4045-b837-301fdf114840/1/LTOrAnhiOJzMHx_IsKVkpuvXy40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:bc:01:23:71:8f:b0:42:4b:3e:5b:47:68:0c:52:e6:b0:d0:
48:c3:61:a6:14:b4:a4:52:7c:1e:0b:8a:fa:a9:1b:e3:c6:d7:
0c:d9:4f:b1:8a:41:5b:dc:26:0f:d0:3f:92:68:f8:cf:d5:1a:
da:38:1d:cb:03:d6:8b:eb:df:c6:ce:28:48:e5:c3:af:a3:70:
e1:95:91:35:aa:5b:50:81:f1:34:12:6e:23:f4:75:03:77:d9:
75:86:9b:23:5f:68:35:cb:73:87:0f:67:e8:59:c1:01:2f:52:
8c:00:a1:d9:af:65:98:44:d1:58:df:9d:10:de:d3:f8:a7:bd:
9d:90:27:f1:dd:f2:58:6c:32:5e:07:8d:d3:f1:bf:45:c8:46:
c3:59:24:ed:69:6c:ab:95:10:5a:8c:52:22:bc:bd:8d:ff:64:
70:25:6f:fa:fe:63:04:e2:f5:2f:23:e3:21:5c:97:4f:87:ba:
41:85:28:26:2a:e5:bf:04:c6:80:a6:22:85:58:86:30:a4:d9:
8f:8b:00:c2:2b:e4:c5:9a:22:42:7d:02:54:86:96:08:d4:9b:
9b:c1:b8:ad:58:b7:6a:a6:8d:f4:98:1b:63:8d:cc:27:f3:77:
d4:dd:ce:03:1b:64:62:ff:93:c1:f8:d4:d3:d2:c6:77:ef:69:
5a:3b:34:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 11:48:44 2025 by rpki-client