Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/7a6381-8ca4-4045-b837-301fdf114840/1/LTOrAnhiOJzMHx_IsKVkpuvXy40.mft
File: LTOrAnhiOJzMHx_IsKVkpuvXy40.mft (raw, json)
Hash identifier: Q1/JT4qvcXdUz0M19ujoRLkPS6wTvQGBLPmX1n2hUGA=
Subject key identifier: A4:E4:05:CA:F9:92:47:88:61:D0:CE:DB:5F:58:96:56:7E:F2:53:D9
Authority key identifier: 2D:33:AB:02:78:62:38:9C:CC:1F:1F:C8:B0:A5:64:A6:EB:D7:CB:8D
Certificate issuer: /CN=2d33ab027862389ccc1f1fc8b0a564a6ebd7cb8d
Certificate serial: 01975F143962D03967B7115D88238EF333AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LTOrAnhiOJzMHx_IsKVkpuvXy40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/7a6381-8ca4-4045-b837-301fdf114840/1/LTOrAnhiOJzMHx_IsKVkpuvXy40.mft
Manifest number: 0820
Signing time: Wed 11 Jun 2025 13:00:50 +0000
Manifest this update: Wed 11 Jun 2025 13:00:50 +0000
Manifest next update: Thu 12 Jun 2025 13:00:50 +0000
Files and hashes: 1: LTOrAnhiOJzMHx_IsKVkpuvXy40.crl (hash: CSLcN/pSutpGlCLiYwEkb753nBkDrXn4iEVSfgm019k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/7a6381-8ca4-4045-b837-301fdf114840/1/LTOrAnhiOJzMHx_IsKVkpuvXy40.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/7a6381-8ca4-4045-b837-301fdf114840/1/LTOrAnhiOJzMHx_IsKVkpuvXy40.mft
rsync://rpki.ripe.net/repository/DEFAULT/LTOrAnhiOJzMHx_IsKVkpuvXy40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 13:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5f:14:39:62:d0:39:67:b7:11:5d:88:23:8e:f3:33:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d33ab027862389ccc1f1fc8b0a564a6ebd7cb8d
Validity
Not Before: Jun 11 13:00:50 2025 GMT
Not After : Jun 12 13:00:50 2025 GMT
Subject: CN=a4e405caf992478861d0cedb5f5896567ef253d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:4a:37:bb:7c:bf:1c:53:8d:c9:4d:df:c8:33:
d6:83:34:aa:4b:c7:ce:22:59:85:c2:e7:0e:b3:27:
76:83:e1:af:8c:13:ce:13:27:bf:5b:0a:5d:d4:91:
f2:96:ce:85:52:4b:69:b0:62:9b:04:77:a2:76:d5:
c1:98:5f:eb:38:4c:f7:3a:2f:8b:bb:53:9c:af:03:
4d:ab:76:40:ee:a6:1d:fd:32:70:4e:ca:13:54:5a:
2c:c4:69:e8:cc:f9:6d:77:a3:f7:d6:68:ba:8b:b0:
5e:8b:c4:7e:ba:0c:1e:e0:3a:c0:bf:71:e5:46:99:
da:da:03:f5:05:8e:fe:55:23:a7:e1:71:15:15:f7:
dd:eb:04:1d:fa:07:12:26:50:7d:d1:9f:d3:ce:57:
f3:07:a2:fa:d5:8e:44:06:32:a4:5b:f7:7c:6b:4b:
36:3d:cc:e2:c0:6c:43:d4:6d:8c:5e:70:29:15:61:
14:d8:81:83:53:5c:79:e4:8a:55:af:09:96:b6:5d:
78:ac:ad:f4:da:6e:c9:61:ac:65:f5:a3:8c:ce:9e:
6a:ef:3f:50:fc:88:d6:1f:0d:75:1c:70:87:30:2b:
c8:62:7f:a0:36:21:c7:e6:4f:4a:b8:e7:bf:03:0e:
f2:22:01:11:d4:5f:d0:21:c3:6d:c3:32:7a:6d:c9:
fe:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:E4:05:CA:F9:92:47:88:61:D0:CE:DB:5F:58:96:56:7E:F2:53:D9
X509v3 Authority Key Identifier:
keyid:2D:33:AB:02:78:62:38:9C:CC:1F:1F:C8:B0:A5:64:A6:EB:D7:CB:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LTOrAnhiOJzMHx_IsKVkpuvXy40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/7a6381-8ca4-4045-b837-301fdf114840/1/LTOrAnhiOJzMHx_IsKVkpuvXy40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/7a6381-8ca4-4045-b837-301fdf114840/1/LTOrAnhiOJzMHx_IsKVkpuvXy40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:67:c3:a1:f9:29:48:90:c6:06:86:b6:d8:af:7c:28:d4:b7:
81:05:5c:51:24:83:ca:58:74:ef:10:89:04:d8:fe:84:aa:6d:
92:9e:1a:b6:72:ca:fd:82:71:1b:66:79:b7:07:e4:35:70:47:
a4:36:a5:4a:88:8e:be:86:52:ab:9c:d2:63:9e:a3:9a:c2:3c:
0c:45:e5:e9:b9:f9:bc:8d:05:33:a7:1a:0e:dd:8a:a5:ec:1b:
52:41:8a:24:1a:af:e8:0c:e6:74:0f:ba:35:25:95:0f:13:45:
48:8a:1a:6f:ef:f7:30:b7:d3:4c:ae:c1:34:ed:bc:47:ad:05:
5b:1f:0c:79:a0:ae:55:04:9a:96:a8:ef:b5:e3:82:72:7c:57:
10:9b:f8:23:23:e9:57:05:ad:c4:8a:4c:1d:55:08:61:41:c9:
fe:c6:1a:24:88:1a:5f:07:8d:e7:13:2c:9d:f1:66:f1:d3:08:
cd:c8:51:70:a9:24:87:05:7b:99:91:c1:27:21:df:04:e2:1b:
76:d1:75:ee:53:81:32:45:8f:9e:f1:2a:cf:ab:59:32:dd:e4:
ac:71:9c:e6:90:15:57:5b:96:f9:c6:e4:2a:55:83:fc:f1:b8:
08:3f:f7:00:c8:9b:aa:29:31:d6:56:33:86:0e:f8:c7:02:ff:
a6:01:fd:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdfFDli0DlntxFdiCOO8zOvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkMzNhYjAyNzg2MjM4OWNjYzFmMWZjOGIwYTU2NGE2ZWJk
N2NiOGQwHhcNMjUwNjExMTMwMDUwWhcNMjUwNjEyMTMwMDUwWjAzMTEwLwYDVQQD
EyhhNGU0MDVjYWY5OTI0Nzg4NjFkMGNlZGI1ZjU4OTY1NjdlZjI1M2Q5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ko3u3y/HFONyU3fyDPWgzSqS8fO
IlmFwucOsyd2g+GvjBPOEye/Wwpd1JHyls6FUktpsGKbBHeidtXBmF/rOEz3Oi+L
u1OcrwNNq3ZA7qYd/TJwTsoTVFosxGnozPltd6P31mi6i7Bei8R+ugwe4DrAv3Hl
Rpna2gP1BY7+VSOn4XEVFffd6wQd+gcSJlB90Z/TzlfzB6L61Y5EBjKkW/d8a0s2
PcziwGxD1G2MXnApFWEU2IGDU1x55IpVrwmWtl14rK302m7JYaxl9aOMzp5q7z9Q
/IjWHw11HHCHMCvIYn+gNiHH5k9KuOe/Aw7yIgER1F/QIcNtwzJ6bcn+EwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKTkBcr5kkeIYdDO219YllZ+8lPZMB8GA1UdIwQY
MBaAFC0zqwJ4YjiczB8fyLClZKbr18uNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFRPckFuaGlPSnpNSHhfSXNLVmtwdXZYeTQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi83YTYzODEtOGNhNC00MDQ1LWI4Mzct
MzAxZmRmMTE0ODQwLzEvTFRPckFuaGlPSnpNSHhfSXNLVmtwdXZYeTQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi83YTYzODEtOGNhNC00MDQ1LWI4MzctMzAxZmRmMTE0ODQw
LzEvTFRPckFuaGlPSnpNSHhfSXNLVmtwdXZYeTQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsWfDofkp
SJDGBoa22K98KNS3gQVcUSSDylh07xCJBNj+hKptkp4atnLK/YJxG2Z5twfkNXBH
pDalSoiOvoZSq5zSY56jmsI8DEXl6bn5vI0FM6caDt2KpewbUkGKJBqv6AzmdA+6
NSWVDxNFSIoab+/3MLfTTK7BNO28R60FWx8MeaCuVQSalqjvteOCcnxXEJv4IyPp
VwWtxIpMHVUIYUHJ/sYaJIgaXweN5xMsnfFm8dMIzchRcKkkhwV7mZHBJyHfBOIb
dtF17lOBMkWPnvEqz6tZMt3krHGc5pAVV1uW+cbkKlWD/PG4CD/3AMibqikx1lYz
hg74xwL/pgH9HA==
-----END CERTIFICATE-----
Generated at Wed Jun 11 20:43:36 2025 by rpki-client