Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/dddf3d-e887-4273-bb7b-681fa0d99821/1/lo-QT-7x95FiuCGaikg7hY9UC_o.mft
File: lo-QT-7x95FiuCGaikg7hY9UC_o.mft (raw, json)
Hash identifier: ktjXFcYxWpX6kHzlhE7EM2NAIuq+c6VIjV2XvLVA4XM=
Subject key identifier: B9:E7:03:03:78:D0:B6:D4:77:6B:30:9D:F6:F4:D7:36:19:87:CF:93
Authority key identifier: 96:8F:90:4F:EE:F1:F7:91:62:B8:21:9A:8A:48:3B:85:8F:54:0B:FA
Certificate issuer: /CN=968f904feef1f79162b8219a8a483b858f540bfa
Certificate serial: 01974C69EDFB46BC25AFBCAF0E5820F370AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lo-QT-7x95FiuCGaikg7hY9UC_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/dddf3d-e887-4273-bb7b-681fa0d99821/1/lo-QT-7x95FiuCGaikg7hY9UC_o.mft
Manifest number: 157A
Signing time: Sat 07 Jun 2025 22:01:39 +0000
Manifest this update: Sat 07 Jun 2025 22:01:39 +0000
Manifest next update: Sun 08 Jun 2025 22:01:39 +0000
Files and hashes: 1: lo-QT-7x95FiuCGaikg7hY9UC_o.crl (hash: I1WtJF7iET41A/FrxaGXCHzPDmXIJjYiMbLS98KgLhs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/dddf3d-e887-4273-bb7b-681fa0d99821/1/lo-QT-7x95FiuCGaikg7hY9UC_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/dddf3d-e887-4273-bb7b-681fa0d99821/1/lo-QT-7x95FiuCGaikg7hY9UC_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/lo-QT-7x95FiuCGaikg7hY9UC_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 22:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:69:ed:fb:46:bc:25:af:bc:af:0e:58:20:f3:70:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=968f904feef1f79162b8219a8a483b858f540bfa
Validity
Not Before: Jun 7 22:01:39 2025 GMT
Not After : Jun 8 22:01:39 2025 GMT
Subject: CN=b9e7030378d0b6d4776b309df6f4d7361987cf93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d1:a2:23:b1:44:71:3b:0b:ae:dd:b3:ef:47:
67:e6:4f:fd:cb:b5:c1:3e:ed:c9:cb:94:ea:19:8f:
fb:64:92:39:63:a6:91:d6:c4:1a:52:fc:e4:0c:f2:
13:e2:e9:be:e8:55:5a:15:5e:de:8e:e6:4f:0b:ed:
7f:bb:fb:b4:4f:4d:be:13:42:17:3a:ff:e2:ff:fd:
7b:61:fe:41:e6:f0:bd:2f:bb:30:2c:52:96:3b:24:
3c:f0:e6:3b:6d:dd:00:40:3f:33:ed:25:87:49:7d:
b7:97:4d:f4:27:c7:a5:9a:d4:31:98:71:8e:89:f9:
dc:ff:99:82:c8:de:70:0d:20:38:00:e4:3f:2f:33:
6b:af:8e:eb:fa:6a:f3:f2:ea:86:16:49:a5:30:5f:
14:6a:7f:5c:41:d4:1c:38:c1:12:78:29:61:8f:e7:
61:41:be:34:6c:4c:1a:e2:ad:eb:f7:49:1f:3e:37:
16:d2:f3:92:28:fa:9b:55:ee:2e:26:5d:48:9b:19:
f3:d8:99:8c:52:3f:21:91:02:f3:c2:e5:04:75:c7:
f0:ae:92:91:ec:68:21:0c:36:b5:8c:d9:0d:cc:7e:
00:6d:78:05:4f:69:1b:d6:22:f6:6f:b4:00:97:9e:
9b:8d:63:e5:8b:38:4f:01:2b:f9:3c:5c:6e:c1:68:
f7:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:E7:03:03:78:D0:B6:D4:77:6B:30:9D:F6:F4:D7:36:19:87:CF:93
X509v3 Authority Key Identifier:
keyid:96:8F:90:4F:EE:F1:F7:91:62:B8:21:9A:8A:48:3B:85:8F:54:0B:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lo-QT-7x95FiuCGaikg7hY9UC_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/dddf3d-e887-4273-bb7b-681fa0d99821/1/lo-QT-7x95FiuCGaikg7hY9UC_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/dddf3d-e887-4273-bb7b-681fa0d99821/1/lo-QT-7x95FiuCGaikg7hY9UC_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:89:73:a1:44:2b:07:88:b2:25:47:58:41:9c:34:94:4b:e0:
14:27:25:88:b8:ea:d2:8b:c9:f3:70:f8:e4:4f:8f:dd:42:8a:
3d:c0:65:e5:8a:34:f0:49:6b:66:77:03:45:01:4b:39:8f:e5:
06:38:32:1f:05:1e:64:7d:06:f9:34:60:96:5e:bc:23:b2:3a:
72:d1:59:00:cf:d9:84:50:93:4a:dd:ac:b7:85:84:30:52:25:
9f:09:53:7c:cb:aa:ec:18:c6:5e:df:ad:45:f0:a0:97:c1:73:
7e:55:71:72:5f:2d:3a:28:42:95:6a:f4:f1:d3:00:ba:6e:f7:
22:84:6a:2f:f0:a1:93:65:95:15:e9:c1:0f:92:4d:6c:5c:a9:
e9:61:9c:22:bc:a8:f8:00:e2:02:5f:17:8e:3d:45:90:f6:87:
bd:48:ee:88:e9:97:8f:ab:fb:52:59:8c:9c:31:1d:76:18:42:
35:55:21:5a:03:4a:fb:73:5e:2b:10:89:a9:db:97:a9:df:31:
4e:ae:3a:57:cd:18:85:68:a7:66:8c:7f:58:24:86:21:eb:d7:
bb:53:f4:d0:63:c6:8c:38:a8:c0:04:9b:09:96:23:0f:68:8a:
0f:7c:5c:11:8d:2f:af:5f:15:72:77:6b:2f:44:56:7e:6e:03:
8c:68:db:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:19:05 2025 by rpki-client