Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/7a6381-8ca4-4045-b837-301fdf114840/1/LTOrAnhiOJzMHx_IsKVkpuvXy40.mft
File: LTOrAnhiOJzMHx_IsKVkpuvXy40.mft (raw, json)
Hash identifier: eNGsi87hsJuyTFjqIX4dr/Yf6L1n3I9d6u0quTJu+P4=
Subject key identifier: 1D:54:52:3C:98:F3:AF:8A:9B:0C:7B:EF:1A:71:31:CE:F7:E3:50:DD
Authority key identifier: 2D:33:AB:02:78:62:38:9C:CC:1F:1F:C8:B0:A5:64:A6:EB:D7:CB:8D
Certificate issuer: /CN=2d33ab027862389ccc1f1fc8b0a564a6ebd7cb8d
Certificate serial: 019922FAD936118F1A49B7262712B9BD00A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LTOrAnhiOJzMHx_IsKVkpuvXy40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/7a6381-8ca4-4045-b837-301fdf114840/1/LTOrAnhiOJzMHx_IsKVkpuvXy40.mft
Manifest number: 090A
Signing time: Sun 07 Sep 2025 07:01:28 +0000
Manifest this update: Sun 07 Sep 2025 07:01:28 +0000
Manifest next update: Mon 08 Sep 2025 07:01:28 +0000
Files and hashes: 1: LTOrAnhiOJzMHx_IsKVkpuvXy40.crl (hash: YCORniCOiYiVoRFcHvyQOw18sgKPpam2KrwlFAB3T+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/7a6381-8ca4-4045-b837-301fdf114840/1/LTOrAnhiOJzMHx_IsKVkpuvXy40.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/7a6381-8ca4-4045-b837-301fdf114840/1/LTOrAnhiOJzMHx_IsKVkpuvXy40.mft
rsync://rpki.ripe.net/repository/DEFAULT/LTOrAnhiOJzMHx_IsKVkpuvXy40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:d9:36:11:8f:1a:49:b7:26:27:12:b9:bd:00:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d33ab027862389ccc1f1fc8b0a564a6ebd7cb8d
Validity
Not Before: Sep 7 07:01:28 2025 GMT
Not After : Sep 8 07:01:28 2025 GMT
Subject: CN=1d54523c98f3af8a9b0c7bef1a7131cef7e350dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:dc:84:91:1e:5f:67:c1:2f:4a:9d:53:4a:e0:
73:72:f5:b3:f7:8c:26:3c:fa:e4:13:cb:75:e1:df:
ed:bb:0b:04:fa:e6:22:ea:35:af:ef:f6:18:2a:fe:
5f:b3:9d:6a:7e:92:bf:d5:bd:9a:aa:04:16:37:7e:
0e:7b:be:57:bd:a6:42:99:6f:76:2e:fd:f7:3a:74:
47:d5:95:e7:f0:e4:69:ee:4d:f3:47:e1:2a:16:43:
7d:27:42:10:4d:06:05:7f:fb:e0:4e:75:b5:37:37:
94:69:92:65:34:3c:03:3f:25:90:cb:e7:2d:a8:d9:
58:d1:b5:21:20:e4:51:ad:e2:cd:71:b6:86:5f:04:
3e:11:76:04:6b:c0:c0:d0:1d:e7:45:05:ad:bc:3e:
fe:52:fd:3a:3c:45:7e:e3:56:21:8e:d7:b9:2b:a9:
fd:59:a1:a6:fa:8d:60:be:c0:82:55:8b:b1:09:09:
25:f6:aa:ed:bc:75:34:a2:ac:a6:8c:5a:de:97:7d:
66:ea:e4:d2:f2:1b:cb:d7:77:c6:b3:fb:16:0f:4a:
13:b9:f6:7d:9f:d4:c9:d6:39:88:b6:71:23:f8:bc:
32:a2:b1:c0:cc:8b:d1:7f:8d:8b:0c:76:91:cf:6a:
29:29:c1:6d:3b:15:97:19:58:f8:bc:fa:76:fc:96:
6f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:54:52:3C:98:F3:AF:8A:9B:0C:7B:EF:1A:71:31:CE:F7:E3:50:DD
X509v3 Authority Key Identifier:
keyid:2D:33:AB:02:78:62:38:9C:CC:1F:1F:C8:B0:A5:64:A6:EB:D7:CB:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LTOrAnhiOJzMHx_IsKVkpuvXy40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/7a6381-8ca4-4045-b837-301fdf114840/1/LTOrAnhiOJzMHx_IsKVkpuvXy40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/7a6381-8ca4-4045-b837-301fdf114840/1/LTOrAnhiOJzMHx_IsKVkpuvXy40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:f9:fc:97:b2:2d:a3:de:cc:b0:55:f9:92:fc:83:18:44:03:
72:4f:59:3e:ae:e3:d9:43:16:74:e0:a4:6d:b6:6b:cd:2f:80:
c9:28:d1:37:64:d1:45:cb:a4:a0:47:40:65:00:45:f0:dc:d5:
14:ea:bd:96:eb:1f:29:79:07:4e:55:45:1f:1e:17:17:85:75:
44:35:82:94:73:55:6b:74:28:5f:e4:ec:9b:31:4c:94:03:37:
4d:eb:40:f2:f1:2a:3e:1a:bd:e1:86:04:3f:7a:f5:69:d9:f9:
df:de:54:4f:6c:24:d1:54:69:0b:04:ce:8f:56:f8:af:af:50:
00:2a:fa:10:6e:55:12:10:be:da:40:30:ab:60:37:9f:fe:c0:
99:d0:8e:88:3e:cb:67:2f:04:25:79:0b:b1:fb:b3:e2:32:7d:
c3:d2:0a:45:c8:62:1a:da:b9:d7:0a:6f:f7:46:53:50:cc:b8:
48:8e:40:ca:97:65:08:b6:87:b4:e6:f9:29:e2:bf:cb:7c:45:
cd:7e:28:a0:24:fa:55:e5:a7:ef:79:cc:11:de:72:2c:9a:fd:
42:2b:a2:5f:17:76:0e:07:35:b7:29:d2:3f:14:da:57:80:41:
5d:c2:b2:07:c3:8d:6b:e5:22:55:47:21:96:45:d3:b5:10:07:
3a:38:ea:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:53:27 2025 by rpki-client