Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/2c054e-cef0-4af6-980e-8babac8a465a/1/LOlVOpsse8oStoG8CmMF4z-2QMg.mft
File: LOlVOpsse8oStoG8CmMF4z-2QMg.mft (raw, json)
Hash identifier: BjYZ/2RoAlB1ifueGL+a2Lx/ls0uZj+/NxxZ4iVEcBk=
Subject key identifier: DB:BB:4C:F9:40:77:1E:1F:73:6D:81:20:D3:F0:89:11:EF:44:AF:BC
Authority key identifier: 2C:E9:55:3A:9B:2C:7B:CA:12:B6:81:BC:0A:63:05:E3:3F:B6:40:C8
Certificate issuer: /CN=2ce9553a9b2c7bca12b681bc0a6305e33fb640c8
Certificate serial: 019745F8C85C163DAF9BD33F2A183EA9CE30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LOlVOpsse8oStoG8CmMF4z-2QMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/2c054e-cef0-4af6-980e-8babac8a465a/1/LOlVOpsse8oStoG8CmMF4z-2QMg.mft
Manifest number: 0CF6
Signing time: Fri 06 Jun 2025 16:00:21 +0000
Manifest this update: Fri 06 Jun 2025 16:00:21 +0000
Manifest next update: Sat 07 Jun 2025 16:00:21 +0000
Files and hashes: 1: LOlVOpsse8oStoG8CmMF4z-2QMg.crl (hash: 9M6oNgajFb10BVlszlch46ZpyhyyoqKjaqXjf9zXD+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/2c054e-cef0-4af6-980e-8babac8a465a/1/LOlVOpsse8oStoG8CmMF4z-2QMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/2c054e-cef0-4af6-980e-8babac8a465a/1/LOlVOpsse8oStoG8CmMF4z-2QMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LOlVOpsse8oStoG8CmMF4z-2QMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:f8:c8:5c:16:3d:af:9b:d3:3f:2a:18:3e:a9:ce:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ce9553a9b2c7bca12b681bc0a6305e33fb640c8
Validity
Not Before: Jun 6 16:00:21 2025 GMT
Not After : Jun 7 16:00:21 2025 GMT
Subject: CN=dbbb4cf940771e1f736d8120d3f08911ef44afbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4f:24:a8:ce:fe:60:55:1f:d6:99:6b:c1:28:
39:a7:83:27:f0:fc:38:d4:59:fd:d6:82:eb:a4:95:
ad:20:5e:25:af:7d:5a:32:51:9a:33:4b:00:54:7e:
57:3c:0d:79:73:79:b6:df:21:87:a0:05:ff:dc:ef:
58:d1:ee:89:60:46:49:2c:3a:79:95:06:5e:bb:84:
c2:35:61:c6:c6:d6:8e:98:22:51:3d:13:db:25:78:
c4:5e:d8:fa:f9:ac:0d:c9:31:49:47:5b:a5:5b:c4:
bc:44:b1:4d:af:0d:96:77:29:aa:ea:ef:bd:cc:d9:
a0:5d:ae:d3:b5:0d:3f:59:12:13:fb:0d:76:c5:13:
01:a7:20:d6:99:79:62:6f:7d:1a:2a:3b:05:b1:ce:
e4:ae:54:23:7b:31:8c:d5:18:49:06:bc:83:01:1c:
58:52:28:6a:f4:42:b9:86:6b:c8:d5:01:64:48:73:
7a:98:23:57:fb:42:51:f0:ca:13:1a:9d:a9:20:69:
e8:23:05:a9:1c:84:0f:c3:3b:99:6c:fe:e3:1d:5d:
6d:f7:71:c2:53:9f:2d:d5:e6:4e:07:e7:c9:91:d5:
ef:ef:f4:5e:71:2f:42:99:31:74:49:a9:2e:a5:1b:
0f:fa:17:0b:69:3c:35:76:c2:d0:ad:4a:e5:6f:40:
ea:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:BB:4C:F9:40:77:1E:1F:73:6D:81:20:D3:F0:89:11:EF:44:AF:BC
X509v3 Authority Key Identifier:
keyid:2C:E9:55:3A:9B:2C:7B:CA:12:B6:81:BC:0A:63:05:E3:3F:B6:40:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LOlVOpsse8oStoG8CmMF4z-2QMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/2c054e-cef0-4af6-980e-8babac8a465a/1/LOlVOpsse8oStoG8CmMF4z-2QMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/2c054e-cef0-4af6-980e-8babac8a465a/1/LOlVOpsse8oStoG8CmMF4z-2QMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:b3:1c:2c:0b:0d:65:d6:ce:79:db:87:51:7a:2e:9a:f1:52:
9e:20:81:7a:82:23:30:c7:21:3a:b0:e3:9a:9d:2b:d0:97:9a:
af:8b:04:d5:b3:06:cb:2e:a2:18:bf:49:76:d1:be:46:a1:ad:
b6:d1:25:08:da:4e:88:47:99:3c:ea:b4:5a:ab:7d:21:d6:98:
52:87:4c:59:52:97:60:89:9e:a1:b0:4b:9c:20:af:13:f7:8e:
01:a4:e8:04:da:2e:5e:32:ae:26:ee:2f:56:9c:c1:36:a3:ec:
60:19:7d:8e:ca:5d:40:2d:d2:27:8a:d9:aa:03:f3:44:66:f7:
01:22:18:6a:f2:29:5b:03:29:85:a3:07:89:c4:b1:32:8c:a6:
90:f9:bb:3d:6a:f7:6b:d5:c3:9e:0f:fa:f3:0a:21:a5:86:04:
2a:bb:27:95:c4:e9:50:37:ae:42:2d:ec:cd:16:e6:4c:30:5c:
e9:2a:2a:37:f1:32:fb:b8:27:38:bc:10:65:ee:3f:9d:92:f9:
9d:cc:62:07:ef:90:c9:f9:23:ba:82:7c:9a:56:d0:40:6f:2a:
69:8e:7b:c1:bf:54:a7:13:34:a8:f4:83:14:63:eb:59:38:41:
d9:4b:c7:88:75:c8:56:c8:21:47:fd:c6:6a:7d:79:24:ab:41:
b0:64:9c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:02:05 2025 by rpki-client