Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/7a6381-8ca4-4045-b837-301fdf114840/1/LTOrAnhiOJzMHx_IsKVkpuvXy40.mft
File: LTOrAnhiOJzMHx_IsKVkpuvXy40.mft (raw, json)
Hash identifier: kBLeESyen0vIlAvPzUl8Rz34WO+rsFP6crD266qN8Dg=
Subject key identifier: 94:1A:0A:D7:2C:0F:D8:DB:E0:B0:A6:B1:B9:B0:18:2D:0F:94:A4:86
Authority key identifier: 2D:33:AB:02:78:62:38:9C:CC:1F:1F:C8:B0:A5:64:A6:EB:D7:CB:8D
Certificate issuer: /CN=2d33ab027862389ccc1f1fc8b0a564a6ebd7cb8d
Certificate serial: 019759491BBB5BE44FB3E7059031F8AA9FC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LTOrAnhiOJzMHx_IsKVkpuvXy40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/7a6381-8ca4-4045-b837-301fdf114840/1/LTOrAnhiOJzMHx_IsKVkpuvXy40.mft
Manifest number: 081D
Signing time: Tue 10 Jun 2025 10:00:52 +0000
Manifest this update: Tue 10 Jun 2025 10:00:52 +0000
Manifest next update: Wed 11 Jun 2025 10:00:52 +0000
Files and hashes: 1: LTOrAnhiOJzMHx_IsKVkpuvXy40.crl (hash: jXgrh4PI7FZLSCN+1+HuLu9HsvQMjDdryM07N4m6MlQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/7a6381-8ca4-4045-b837-301fdf114840/1/LTOrAnhiOJzMHx_IsKVkpuvXy40.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/7a6381-8ca4-4045-b837-301fdf114840/1/LTOrAnhiOJzMHx_IsKVkpuvXy40.mft
rsync://rpki.ripe.net/repository/DEFAULT/LTOrAnhiOJzMHx_IsKVkpuvXy40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 10:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:49:1b:bb:5b:e4:4f:b3:e7:05:90:31:f8:aa:9f:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d33ab027862389ccc1f1fc8b0a564a6ebd7cb8d
Validity
Not Before: Jun 10 10:00:52 2025 GMT
Not After : Jun 11 10:00:52 2025 GMT
Subject: CN=941a0ad72c0fd8dbe0b0a6b1b9b0182d0f94a486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:76:8b:ff:fd:11:e7:15:c3:ed:3e:38:7a:e1:
47:82:b4:06:1a:21:12:39:2a:81:66:94:7f:09:d4:
bd:7d:a1:83:59:27:89:5a:22:59:f9:23:cd:71:69:
33:36:18:b6:6e:48:e5:bb:81:96:69:df:48:b9:8b:
27:0e:a7:93:95:b8:b9:17:b5:36:ca:42:12:3d:24:
b1:a6:40:aa:40:c0:06:c0:1c:41:df:a8:66:21:4e:
c4:f1:63:2d:7e:b7:b7:03:a9:28:cf:1a:2b:76:42:
13:9d:b5:ff:22:f8:4e:80:47:0e:dd:8b:e1:0e:70:
98:2a:a0:e9:9a:0f:d4:44:f3:d6:57:17:c7:ad:e6:
8c:51:32:3a:81:4c:75:22:6d:e1:1e:69:4f:0d:13:
4c:4b:43:bb:a9:ee:61:7a:b4:54:5e:1c:bc:a8:0c:
81:15:de:91:13:86:c9:5a:9e:e8:15:6c:51:93:99:
4c:2a:60:70:e2:4c:47:9b:e9:eb:4f:dc:00:94:04:
6e:67:7b:aa:d8:eb:74:91:aa:12:04:d1:bc:59:a6:
79:f5:86:9e:d2:20:e0:26:39:6a:84:43:12:81:08:
17:1d:dd:73:40:9b:5d:4f:cb:be:ed:04:43:dc:d2:
8e:3d:87:fe:01:6c:97:c6:02:a0:f7:56:a8:7e:34:
53:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:1A:0A:D7:2C:0F:D8:DB:E0:B0:A6:B1:B9:B0:18:2D:0F:94:A4:86
X509v3 Authority Key Identifier:
keyid:2D:33:AB:02:78:62:38:9C:CC:1F:1F:C8:B0:A5:64:A6:EB:D7:CB:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LTOrAnhiOJzMHx_IsKVkpuvXy40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/7a6381-8ca4-4045-b837-301fdf114840/1/LTOrAnhiOJzMHx_IsKVkpuvXy40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/7a6381-8ca4-4045-b837-301fdf114840/1/LTOrAnhiOJzMHx_IsKVkpuvXy40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:0e:fd:60:7f:15:a5:61:c2:ee:19:f1:e2:a5:cb:2e:88:d0:
f0:8c:2f:bc:2a:e4:08:8e:e6:5a:46:99:d2:34:28:a5:87:1a:
fc:18:21:25:96:f4:25:aa:12:5d:d8:9b:1c:ff:1a:53:08:65:
13:c6:03:8f:47:ac:7c:64:fc:4b:e0:b2:9b:b1:81:a9:7e:70:
d5:9f:6f:f8:91:bb:33:f4:b4:60:f3:04:9c:45:d9:ee:94:c9:
48:4a:df:7d:e1:dd:74:d9:38:ec:d6:aa:b3:b6:7f:94:cb:af:
03:4a:c0:1f:52:b5:05:49:89:30:76:72:de:74:7e:1f:59:89:
cf:e6:a4:98:fc:ab:2d:42:e6:99:80:83:46:67:9d:6f:26:64:
df:af:59:c7:4d:08:15:c8:4f:66:a8:b9:66:48:c2:a0:c3:f2:
19:14:c0:35:c4:d2:20:b9:77:e4:c9:f0:c4:e2:8f:e9:06:94:
71:60:1a:df:e7:4a:be:f2:4c:54:28:ff:66:bc:ed:9c:e4:20:
c3:42:ac:25:7e:a4:82:fb:07:21:b2:42:12:e6:bc:df:17:9d:
85:6a:05:0c:b2:61:7f:95:f1:15:46:1b:85:8f:85:2d:af:b0:
42:8b:cf:95:e9:0e:0f:fa:7c:fb:26:cd:f5:93:79:50:ad:62:
69:da:76:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdZSRu7W+RPs+cFkDH4qp/IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkMzNhYjAyNzg2MjM4OWNjYzFmMWZjOGIwYTU2NGE2ZWJk
N2NiOGQwHhcNMjUwNjEwMTAwMDUyWhcNMjUwNjExMTAwMDUyWjAzMTEwLwYDVQQD
Eyg5NDFhMGFkNzJjMGZkOGRiZTBiMGE2YjFiOWIwMTgyZDBmOTRhNDg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3HaL//0R5xXD7T44euFHgrQGGiES
OSqBZpR/CdS9faGDWSeJWiJZ+SPNcWkzNhi2bkjlu4GWad9IuYsnDqeTlbi5F7U2
ykISPSSxpkCqQMAGwBxB36hmIU7E8WMtfre3A6kozxordkITnbX/IvhOgEcO3Yvh
DnCYKqDpmg/URPPWVxfHreaMUTI6gUx1Im3hHmlPDRNMS0O7qe5herRUXhy8qAyB
Fd6RE4bJWp7oFWxRk5lMKmBw4kxHm+nrT9wAlARuZ3uq2Ot0kaoSBNG8WaZ59Yae
0iDgJjlqhEMSgQgXHd1zQJtdT8u+7QRD3NKOPYf+AWyXxgKg91aofjRTvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJQaCtcsD9jb4LCmsbmwGC0PlKSGMB8GA1UdIwQY
MBaAFC0zqwJ4YjiczB8fyLClZKbr18uNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFRPckFuaGlPSnpNSHhfSXNLVmtwdXZYeTQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi83YTYzODEtOGNhNC00MDQ1LWI4Mzct
MzAxZmRmMTE0ODQwLzEvTFRPckFuaGlPSnpNSHhfSXNLVmtwdXZYeTQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi83YTYzODEtOGNhNC00MDQ1LWI4MzctMzAxZmRmMTE0ODQw
LzEvTFRPckFuaGlPSnpNSHhfSXNLVmtwdXZYeTQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEQ79YH8V
pWHC7hnx4qXLLojQ8IwvvCrkCI7mWkaZ0jQopYca/BghJZb0JaoSXdibHP8aUwhl
E8YDj0esfGT8S+Cym7GBqX5w1Z9v+JG7M/S0YPMEnEXZ7pTJSErffeHddNk47Naq
s7Z/lMuvA0rAH1K1BUmJMHZy3nR+H1mJz+akmPyrLULmmYCDRmedbyZk369Zx00I
FchPZqi5ZkjCoMPyGRTANcTSILl35MnwxOKP6QaUcWAa3+dKvvJMVCj/ZrztnOQg
w0KsJX6kgvsHIbJCEua83xedhWoFDLJhf5XxFUYbhY+FLa+wQovPlekOD/p8+ybN
9ZN5UK1iadp2/Q==
-----END CERTIFICATE-----
Generated at Tue Jun 10 16:37:05 2025 by rpki-client