Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft
File: Loskx2rYemwf7f-vCNmxe0UkmZE.mft (raw, json)
Hash identifier: 5N9FzADT6Fngci2IpJEcIEfTrCWN7utP4C2wmq9tzik=
Subject key identifier: 1A:44:E9:7F:94:18:1E:5F:AB:45:DA:AD:EE:78:D5:6B:3B:D3:B9:26
Authority key identifier: 2E:8B:24:C7:6A:D8:7A:6C:1F:ED:FF:AF:08:D9:B1:7B:45:24:99:91
Certificate issuer: /CN=2e8b24c76ad87a6c1fedffaf08d9b17b45249991
Certificate serial: 01977B66B5263BC89DB1C6C7FA88A4A8B32D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Loskx2rYemwf7f-vCNmxe0UkmZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft
Manifest number: 15A5
Signing time: Tue 17 Jun 2025 01:00:17 +0000
Manifest this update: Tue 17 Jun 2025 01:00:17 +0000
Manifest next update: Wed 18 Jun 2025 01:00:17 +0000
Files and hashes: 1: Loskx2rYemwf7f-vCNmxe0UkmZE.crl (hash: UROBsEVaydhuODCNXQKO7AZg1xy3xxBkg7sqcYQZhMo=)
2: U7x9NHrOtVwpLBD4RJMdKYPQ-Mo.roa (hash: COXA0MHjLmP0wp5vDjDiQUXIbxhZE0gntg3Uospeavg=)
3: qBk8yEy6XQzjJQM_m4xKxUxOGWY.roa (hash: MrQEI7rx7w7zwtpbP6zhx6P3UqAEniYO/sUrOOmnWv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Loskx2rYemwf7f-vCNmxe0UkmZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 21:51:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7b:66:b5:26:3b:c8:9d:b1:c6:c7:fa:88:a4:a8:b3:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e8b24c76ad87a6c1fedffaf08d9b17b45249991
Validity
Not Before: Jun 17 01:00:17 2025 GMT
Not After : Jun 18 01:00:17 2025 GMT
Subject: CN=1a44e97f94181e5fab45daadee78d56b3bd3b926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1d:f7:4f:33:c1:ef:93:06:f7:1c:43:d4:b8:
a5:7b:77:4b:49:c0:f3:3f:31:22:8a:f4:7b:5a:62:
ca:96:c7:50:fe:ca:8b:55:63:d5:77:6e:81:84:8a:
58:24:84:9f:e5:50:7e:ff:b2:63:c0:08:5a:91:70:
8f:16:33:15:b7:cc:da:15:b4:5b:73:4f:05:76:68:
4d:ff:93:57:b7:79:a1:7b:76:0a:e5:f0:11:54:3f:
15:71:85:bd:20:5f:a9:7f:2c:af:12:4a:4e:1c:23:
38:f1:16:7d:0a:3c:b4:10:60:e9:78:bd:ab:ae:75:
0c:5e:2e:7c:7a:97:70:e1:fc:1d:17:1b:05:37:56:
f7:6a:f6:ea:4c:84:fb:28:6a:30:a0:64:9b:83:67:
84:00:d5:48:e2:72:d3:72:a8:6c:69:da:53:ed:82:
f0:4f:d8:04:b5:97:1a:bb:ec:27:d3:82:42:ea:32:
16:63:0b:7f:80:a9:df:c6:7a:70:19:9e:d1:b2:8e:
25:de:e2:26:7f:48:e0:74:ca:0f:53:66:87:96:63:
82:5f:80:01:12:69:b7:b2:40:7e:1c:76:65:49:cd:
93:22:51:c4:de:03:bb:eb:f8:e1:d4:b3:3f:05:d4:
d3:6e:00:cd:e2:f8:55:03:be:62:27:3a:b0:35:4a:
0b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:44:E9:7F:94:18:1E:5F:AB:45:DA:AD:EE:78:D5:6B:3B:D3:B9:26
X509v3 Authority Key Identifier:
keyid:2E:8B:24:C7:6A:D8:7A:6C:1F:ED:FF:AF:08:D9:B1:7B:45:24:99:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Loskx2rYemwf7f-vCNmxe0UkmZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:a7:11:3a:5b:ae:e8:60:26:f0:93:25:04:75:81:c1:0e:1c:
33:01:69:5d:13:ac:65:b3:f6:63:7b:4e:e9:85:81:10:f1:dd:
58:fe:a7:a1:b9:de:db:7d:a4:d0:f7:5b:f9:6d:91:b4:01:d2:
9f:03:d0:89:da:c0:b6:46:eb:70:a5:0a:25:14:63:b3:ed:37:
3e:17:2d:a8:0d:11:bc:c9:aa:bf:62:8e:31:b4:27:10:e9:73:
50:45:5e:53:84:6e:e9:01:d9:6e:72:2b:06:64:6f:94:21:a9:
7c:86:3d:5d:33:ec:b3:4e:9b:ec:81:6b:3b:8a:45:c8:d4:36:
8d:9e:e8:83:59:d1:58:fc:44:10:b6:d8:94:75:80:f0:0f:57:
c8:51:92:e0:d4:94:76:9a:cd:f3:db:89:fc:cc:be:7e:2f:5b:
94:4c:b8:b5:7f:79:d9:72:9d:5d:4a:95:14:9b:4f:a6:88:7d:
1b:19:2b:5b:16:02:1d:19:76:f7:e3:0b:1b:5a:1c:61:50:0d:
2c:59:75:36:9d:20:6f:b3:f7:af:f6:34:ab:9e:89:1c:63:14:
2d:ee:cc:8d:66:bf:0f:75:64:e1:08:0e:ad:4b:17:fa:a7:d6:
e9:5c:06:a5:71:59:40:3e:e8:bb:67:cd:86:a3:36:a5:ab:6e:
72:8f:97:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 04:02:13 2025 by rpki-client