Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft
File: Loskx2rYemwf7f-vCNmxe0UkmZE.mft (raw, json)
Hash identifier: xYe4CD1HYu0GvU43hFh7HBu2kLFZbZxQRvNI+QmGchY=
Subject key identifier: B5:2E:88:6A:B6:6D:E0:EB:C0:D6:DD:00:CD:2E:D7:D4:67:D3:66:8C
Authority key identifier: 2E:8B:24:C7:6A:D8:7A:6C:1F:ED:FF:AF:08:D9:B1:7B:45:24:99:91
Certificate issuer: /CN=2e8b24c76ad87a6c1fedffaf08d9b17b45249991
Certificate serial: 01967E6A835FD0D374F1E57B5C5B8E93774F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Loskx2rYemwf7f-vCNmxe0UkmZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft
Manifest number: 1522
Signing time: Mon 28 Apr 2025 22:00:31 +0000
Manifest this update: Mon 28 Apr 2025 22:00:31 +0000
Manifest next update: Tue 29 Apr 2025 22:00:31 +0000
Files and hashes: 1: Loskx2rYemwf7f-vCNmxe0UkmZE.crl (hash: b6PBVnKq1XT0bHuHZLYZkfH5FbQbT+hqNXgeDi5V0Q8=)
2: U7x9NHrOtVwpLBD4RJMdKYPQ-Mo.roa (hash: COXA0MHjLmP0wp5vDjDiQUXIbxhZE0gntg3Uospeavg=)
3: qBk8yEy6XQzjJQM_m4xKxUxOGWY.roa (hash: MrQEI7rx7w7zwtpbP6zhx6P3UqAEniYO/sUrOOmnWv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Loskx2rYemwf7f-vCNmxe0UkmZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:6a:83:5f:d0:d3:74:f1:e5:7b:5c:5b:8e:93:77:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e8b24c76ad87a6c1fedffaf08d9b17b45249991
Validity
Not Before: Apr 28 22:00:31 2025 GMT
Not After : Apr 29 22:00:31 2025 GMT
Subject: CN=b52e886ab66de0ebc0d6dd00cd2ed7d467d3668c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e4:95:e7:36:7c:8e:d6:57:4d:9b:01:ec:26:
c4:70:bc:c4:be:b9:83:34:98:7a:62:3a:67:43:48:
79:18:21:52:46:72:cc:bb:71:63:db:bc:2f:f5:65:
8e:5b:ef:e7:17:dd:14:3c:83:a5:59:ad:53:7a:b7:
b4:f6:76:bf:d9:92:14:8b:29:19:e3:ac:8b:1b:3b:
4f:8a:be:4d:dc:39:8d:f6:2a:8b:3b:54:f8:41:e5:
77:5a:3b:14:0a:9d:e1:78:f9:21:94:9b:88:04:47:
5f:47:c8:06:3d:84:da:60:0e:9d:5b:d9:27:2a:d5:
8a:b7:d5:59:37:97:cd:26:e5:6a:fe:cd:b0:c5:6c:
f3:79:e6:9e:d5:9c:f9:ba:6c:4c:ae:0a:60:db:94:
69:77:8d:74:b2:c4:99:d6:4f:3b:e6:b9:90:11:cc:
90:0c:f5:41:dd:6a:43:54:d7:b8:88:10:d7:d5:68:
2c:a3:a4:7a:36:92:29:93:d3:a5:36:6e:e2:d9:31:
25:ba:43:c2:da:38:d9:7d:72:09:53:80:c1:49:85:
77:6b:14:e0:1d:be:9b:7a:61:2c:70:4c:0c:25:3a:
f4:eb:f1:94:65:47:ad:1a:4e:78:3f:17:a8:71:a8:
50:74:69:05:d3:ac:67:fc:70:49:70:dd:d8:3c:83:
68:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:2E:88:6A:B6:6D:E0:EB:C0:D6:DD:00:CD:2E:D7:D4:67:D3:66:8C
X509v3 Authority Key Identifier:
keyid:2E:8B:24:C7:6A:D8:7A:6C:1F:ED:FF:AF:08:D9:B1:7B:45:24:99:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Loskx2rYemwf7f-vCNmxe0UkmZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:1e:b7:39:95:26:10:8b:56:82:97:c6:1e:d0:0a:b6:b3:57:
2f:1e:c9:20:b6:ef:50:66:23:fe:a7:eb:7f:47:f1:4c:02:78:
ae:e4:40:6b:ff:8f:01:19:e9:f4:6c:f6:85:2c:2a:1d:97:11:
65:c2:af:77:12:0c:65:9f:87:5b:7b:42:cb:9a:5d:8e:5f:4e:
5f:e7:b5:c1:2f:7b:1b:b5:c4:ba:c3:5e:c0:d9:1d:90:f2:16:
34:18:06:29:4f:b2:57:7f:d7:f6:f2:54:1a:e7:ae:bb:0a:b7:
96:d0:ed:29:aa:ca:36:cd:be:12:48:a5:15:b3:fd:28:96:d2:
5c:8e:52:64:53:b8:fb:cd:75:f1:86:6c:6d:52:fc:46:2f:fc:
29:d9:fa:ba:c9:f8:2c:92:3e:f8:3e:92:77:f7:fd:29:a7:38:
59:0e:2d:c2:9e:01:ba:29:af:a0:82:35:ef:c4:7d:c4:11:b6:
95:d5:44:8d:35:dc:9e:9a:ee:f4:63:0a:ae:aa:11:f5:4b:31:
e3:a9:1c:7f:63:38:7a:b1:e0:1e:7e:aa:de:02:07:aa:86:99:
40:00:11:4a:20:f4:92:90:29:9c:63:d1:e1:5d:5a:33:8a:42:
f7:3b:bb:20:2c:f4:93:c0:05:d0:d6:ba:64:7c:c2:e8:a1:77:
e8:cc:4d:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:40:33 2025 by rpki-client