Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/7b20bd-fc4e-4cbf-ad1b-24fa10965e85/1/LoJ8h8u_wmGidOnLGwlQJqgMYTY.mft
File: LoJ8h8u_wmGidOnLGwlQJqgMYTY.mft (raw, json)
Hash identifier: LTvaNqmk84MOi3OzawMXFuWJAgoF2upcmQeFpwcbbkQ=
Subject key identifier: 16:56:3E:68:C2:98:06:6E:99:31:1B:99:8E:B2:15:2D:BF:34:6C:7A
Authority key identifier: 2E:82:7C:87:CB:BF:C2:61:A2:74:E9:CB:1B:09:50:26:A8:0C:61:36
Certificate issuer: /CN=2e827c87cbbfc261a274e9cb1b095026a80c6136
Certificate serial: 01988242F05966E70A43C97988D1C2BC8EE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LoJ8h8u_wmGidOnLGwlQJqgMYTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/7b20bd-fc4e-4cbf-ad1b-24fa10965e85/1/LoJ8h8u_wmGidOnLGwlQJqgMYTY.mft
Manifest number: 1531
Signing time: Thu 07 Aug 2025 02:01:21 +0000
Manifest this update: Thu 07 Aug 2025 02:01:21 +0000
Manifest next update: Fri 08 Aug 2025 02:01:21 +0000
Files and hashes: 1: LAKkoAndva90SPNLZD7phJpzuqA.roa (hash: OPV3y3ajSvAOqXe2gXH83vJ/FKUxnXcCmYMqv/uyJZU=)
2: LoJ8h8u_wmGidOnLGwlQJqgMYTY.crl (hash: t16f96ajYPeJYgNGBg3BRh0aRef/p86eYRZAHgG7dx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/7b20bd-fc4e-4cbf-ad1b-24fa10965e85/1/LoJ8h8u_wmGidOnLGwlQJqgMYTY.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/7b20bd-fc4e-4cbf-ad1b-24fa10965e85/1/LoJ8h8u_wmGidOnLGwlQJqgMYTY.mft
rsync://rpki.ripe.net/repository/DEFAULT/LoJ8h8u_wmGidOnLGwlQJqgMYTY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:42:f0:59:66:e7:0a:43:c9:79:88:d1:c2:bc:8e:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e827c87cbbfc261a274e9cb1b095026a80c6136
Validity
Not Before: Aug 7 02:01:21 2025 GMT
Not After : Aug 8 02:01:21 2025 GMT
Subject: CN=16563e68c298066e99311b998eb2152dbf346c7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4c:19:2d:4c:65:bf:dd:dd:88:db:c4:3a:35:
66:a6:7e:c6:10:c5:ef:3e:c2:21:80:dd:b9:6c:81:
f7:d6:66:40:b5:9d:9e:65:0c:4d:46:2d:54:28:07:
3b:34:6b:43:61:ed:ff:6b:3c:4d:50:9c:db:86:07:
ee:73:25:b1:7c:36:5e:ec:ba:48:f9:82:8d:17:3b:
af:17:72:86:29:3a:5f:9e:eb:ba:f4:c4:9c:e7:a7:
0a:0a:29:5e:e4:ef:f5:f6:4e:95:07:7d:d4:51:66:
06:f6:eb:db:62:2b:1e:42:95:89:ba:43:eb:2f:44:
c4:a9:56:9f:a0:95:5e:fc:38:15:66:f4:fb:a6:9b:
9c:f4:5a:e1:14:10:b3:70:b3:f9:c2:40:a5:74:fa:
b2:1c:5c:33:0d:9e:6a:fa:56:b7:13:e5:e5:8e:10:
8b:66:ac:ff:45:5d:e8:b2:3a:66:7b:a7:5f:cc:9c:
e2:05:d9:bd:3d:38:75:85:74:25:f4:71:c9:3d:81:
ca:41:6e:e6:c4:27:d4:e1:8e:ae:a9:ca:97:15:c6:
3d:d4:a9:02:55:66:94:83:80:45:da:68:16:71:bd:
4f:be:a7:26:56:fb:5c:e8:53:ca:ba:9e:f5:cb:7d:
7e:b3:39:75:72:7d:dd:05:92:9b:f2:c7:2a:48:c2:
18:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:56:3E:68:C2:98:06:6E:99:31:1B:99:8E:B2:15:2D:BF:34:6C:7A
X509v3 Authority Key Identifier:
keyid:2E:82:7C:87:CB:BF:C2:61:A2:74:E9:CB:1B:09:50:26:A8:0C:61:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoJ8h8u_wmGidOnLGwlQJqgMYTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7b20bd-fc4e-4cbf-ad1b-24fa10965e85/1/LoJ8h8u_wmGidOnLGwlQJqgMYTY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7b20bd-fc4e-4cbf-ad1b-24fa10965e85/1/LoJ8h8u_wmGidOnLGwlQJqgMYTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:70:de:37:42:90:da:fe:65:48:97:2a:1a:2f:3f:9f:c0:d8:
c4:cb:8c:33:36:53:b3:f0:e2:d7:07:c3:e3:02:a3:e9:3c:d2:
ee:41:ee:dd:e0:18:cc:fd:41:57:a1:85:99:f2:3f:d0:c2:77:
be:ea:b0:d5:1b:0b:5f:5f:84:a9:e3:d4:d3:7d:1b:4b:c4:d4:
52:0c:77:28:b3:e0:9f:12:34:37:1e:a7:70:68:11:db:d3:8f:
20:fc:49:c8:d1:78:b2:24:c3:28:7e:f0:7a:e6:04:49:e1:ee:
e5:56:36:c4:e1:76:1a:d3:31:c2:76:81:da:6a:17:3d:ab:3a:
c2:1d:23:88:75:1e:33:ef:4b:07:65:ff:88:56:50:06:04:4c:
88:0a:a8:f4:95:23:c5:03:17:ec:da:73:a1:62:35:a8:3c:49:
58:21:51:91:fc:a7:d6:df:fa:67:f5:a0:7d:79:35:33:bc:8c:
ba:6a:0c:f5:dc:f1:16:8f:57:6c:97:5d:5e:6a:2f:4f:ee:8e:
f1:53:92:45:5e:43:be:61:b7:02:af:e4:43:bc:fc:d9:21:d9:
04:1e:a0:fa:bb:c6:b9:d1:6d:9b:89:46:2a:74:77:d8:bb:fb:
76:f2:b6:42:4f:32:dc:40:61:1a:3a:24:70:52:a7:6c:37:e1:
8b:2b:82:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 05:02:50 2025 by rpki-client