Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/3b58d8-6d94-4302-aa91-7c2bd984d735/1/LofD1fRf7zjBBbk91E3ST1vuYOc.mft
File: LofD1fRf7zjBBbk91E3ST1vuYOc.mft (raw, json)
Hash identifier: P0oe0xS8nq30CQ6z6LQu1WOKKvMVyCVDw+F+c7kyJVA=
Subject key identifier: 4E:43:C5:3E:05:3B:8F:44:34:1B:A4:03:9D:7D:1C:4D:99:28:3E:AE
Authority key identifier: 2E:87:C3:D5:F4:5F:EF:38:C1:05:B9:3D:D4:4D:D2:4F:5B:EE:60:E7
Certificate issuer: /CN=2e87c3d5f45fef38c105b93dd44dd24f5bee60e7
Certificate serial: 019883555271DFB7653B7B99B23071511B0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LofD1fRf7zjBBbk91E3ST1vuYOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/3b58d8-6d94-4302-aa91-7c2bd984d735/1/LofD1fRf7zjBBbk91E3ST1vuYOc.mft
Manifest number: 0E6F
Signing time: Thu 07 Aug 2025 07:01:03 +0000
Manifest this update: Thu 07 Aug 2025 07:01:03 +0000
Manifest next update: Fri 08 Aug 2025 07:01:03 +0000
Files and hashes: 1: LofD1fRf7zjBBbk91E3ST1vuYOc.crl (hash: ZOqJBwvF1sKGWMc7PtQfn4Yay1HXBsJLQbVYCCf19BI=)
2: QDqzI6mtk0OSKHPd6aEPhi6zaB8.roa (hash: EsH+qC6DrpZNrpMwjRlDLqXBAg493TRAVaOfxpJfUMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/3b58d8-6d94-4302-aa91-7c2bd984d735/1/LofD1fRf7zjBBbk91E3ST1vuYOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/3b58d8-6d94-4302-aa91-7c2bd984d735/1/LofD1fRf7zjBBbk91E3ST1vuYOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/LofD1fRf7zjBBbk91E3ST1vuYOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 07:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:83:55:52:71:df:b7:65:3b:7b:99:b2:30:71:51:1b:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e87c3d5f45fef38c105b93dd44dd24f5bee60e7
Validity
Not Before: Aug 7 07:01:03 2025 GMT
Not After : Aug 8 07:01:03 2025 GMT
Subject: CN=4e43c53e053b8f44341ba4039d7d1c4d99283eae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f9:ee:c5:4c:29:d6:73:0b:2d:84:0f:33:69:
2d:33:43:a6:d1:31:49:89:0e:dc:25:ca:9a:d4:26:
8f:2d:6f:60:27:46:a4:1a:b1:40:64:8f:ea:31:fd:
9d:70:47:77:fd:18:81:45:bd:94:fc:90:ff:f1:ee:
5b:b2:56:7b:77:28:ef:10:1c:45:d0:f5:ca:f2:d6:
c8:ff:eb:6a:93:ca:5d:80:45:d3:88:ca:47:c3:ca:
fe:b8:70:8d:6b:b9:89:90:23:ff:a3:c4:fe:7a:46:
f2:fc:f3:48:4c:45:e4:b6:68:2f:04:97:b9:57:e2:
46:41:6e:b9:5d:d5:5e:b2:11:64:37:d5:fc:ae:c2:
02:b6:1f:50:3b:ef:1f:51:1e:4e:47:e9:cf:aa:da:
d2:73:b2:f2:4f:84:5d:1f:cc:5e:ac:29:c5:79:16:
be:fa:55:f7:ff:ac:37:f6:71:58:30:ac:f5:78:0a:
63:12:6b:57:8d:47:91:92:81:10:1b:a5:22:70:7c:
22:af:13:30:4b:8e:cf:0a:b8:f3:37:5e:a3:44:60:
8e:94:80:ed:a3:d1:6a:b3:dc:a8:c6:ca:14:3a:50:
e8:0c:a7:e2:49:05:15:ba:26:c9:ce:32:e4:65:57:
86:6e:47:bb:45:58:8e:23:61:f2:d3:37:99:27:52:
42:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:43:C5:3E:05:3B:8F:44:34:1B:A4:03:9D:7D:1C:4D:99:28:3E:AE
X509v3 Authority Key Identifier:
keyid:2E:87:C3:D5:F4:5F:EF:38:C1:05:B9:3D:D4:4D:D2:4F:5B:EE:60:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LofD1fRf7zjBBbk91E3ST1vuYOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3b58d8-6d94-4302-aa91-7c2bd984d735/1/LofD1fRf7zjBBbk91E3ST1vuYOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3b58d8-6d94-4302-aa91-7c2bd984d735/1/LofD1fRf7zjBBbk91E3ST1vuYOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:a1:78:f6:35:3e:71:10:58:4c:e1:9b:b3:5e:00:2d:1c:a1:
f1:5e:41:2f:70:65:21:7f:3c:5f:2b:54:bb:96:b0:86:2f:f0:
94:e5:2e:c8:e0:65:3d:d5:68:68:36:a9:cc:07:68:29:0e:cd:
42:b5:12:de:01:87:4f:36:35:41:53:a9:e5:c3:d5:8e:23:d9:
ec:63:11:ca:8d:ee:a1:46:c7:85:57:fc:5b:25:2a:03:a0:7d:
44:04:c9:d6:f4:27:d5:b8:98:63:50:c0:6d:1e:96:85:40:fc:
5b:4b:3d:b9:34:ef:6f:02:67:11:0d:9f:9a:b0:49:7c:be:d0:
50:ea:e2:28:79:7d:99:0a:0d:90:07:f7:7a:b9:1f:82:18:5b:
f7:52:f9:fa:4c:30:e0:33:31:3e:9c:7c:7e:e7:80:88:93:7c:
2e:ed:02:56:ed:f6:68:40:ea:ed:15:bb:f0:3c:2f:48:84:be:
ee:ee:4a:d4:e3:82:d2:26:07:35:5d:d1:79:8a:07:ff:3f:66:
4e:6e:13:96:ff:fa:63:39:63:cb:37:ed:59:d8:bb:9b:af:d3:
b4:aa:69:9f:93:3d:7f:46:c1:11:b1:cd:97:99:3e:ea:0d:ac:
3b:c5:a4:65:bc:9c:09:1c:f3:b9:a5:1d:64:49:54:a5:66:3a:
5c:0c:d4:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 14:37:00 2025 by rpki-client