Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft
File: Loskx2rYemwf7f-vCNmxe0UkmZE.mft (raw, json)
Hash identifier: 51JzdS1xn8xEpxDOcesK2gHd4OlHDMIGREmVSofwTeg=
Subject key identifier: 13:FE:DD:BC:FE:15:60:52:A0:8E:F9:F4:3F:36:A0:3C:C2:0A:48:D1
Authority key identifier: 2E:8B:24:C7:6A:D8:7A:6C:1F:ED:FF:AF:08:D9:B1:7B:45:24:99:91
Certificate issuer: /CN=2e8b24c76ad87a6c1fedffaf08d9b17b45249991
Certificate serial: 019887D744AA91B7B208643C857597C88059
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Loskx2rYemwf7f-vCNmxe0UkmZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft
Manifest number: 1630
Signing time: Fri 08 Aug 2025 04:01:28 +0000
Manifest this update: Fri 08 Aug 2025 04:01:28 +0000
Manifest next update: Sat 09 Aug 2025 04:01:28 +0000
Files and hashes: 1: Loskx2rYemwf7f-vCNmxe0UkmZE.crl (hash: KQR5LZHAycYFAUcqrAIsYEUbo7TRwTHrfUysy0SyvN4=)
2: U7x9NHrOtVwpLBD4RJMdKYPQ-Mo.roa (hash: COXA0MHjLmP0wp5vDjDiQUXIbxhZE0gntg3Uospeavg=)
3: qBk8yEy6XQzjJQM_m4xKxUxOGWY.roa (hash: MrQEI7rx7w7zwtpbP6zhx6P3UqAEniYO/sUrOOmnWv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Loskx2rYemwf7f-vCNmxe0UkmZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:87:d7:44:aa:91:b7:b2:08:64:3c:85:75:97:c8:80:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e8b24c76ad87a6c1fedffaf08d9b17b45249991
Validity
Not Before: Aug 8 04:01:28 2025 GMT
Not After : Aug 9 04:01:28 2025 GMT
Subject: CN=13feddbcfe156052a08ef9f43f36a03cc20a48d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d5:f1:49:1a:b4:76:2d:92:04:d0:81:3e:04:
00:38:c2:cb:14:a4:72:a6:38:b9:5c:0d:0f:2c:03:
e1:50:3e:97:a5:bc:ff:7a:2f:e2:10:1a:01:2c:98:
ac:a0:79:78:dd:6c:42:8f:c9:ba:fd:65:f9:65:ef:
17:b7:95:af:c1:0b:91:25:97:e3:20:eb:dc:8f:0c:
bc:82:ab:46:aa:c5:3e:f2:34:8e:77:bf:35:22:a3:
6d:a7:26:ce:22:f7:8a:07:b0:dd:8f:f8:e8:72:2a:
17:a1:6e:ec:9b:c4:85:dc:66:ec:30:ea:7a:1b:e3:
61:c5:fc:a5:fa:e0:a5:73:da:3c:01:30:2e:41:e0:
a4:2e:37:74:e1:d6:85:0b:74:9b:77:ad:d0:d6:d6:
cd:25:b7:2e:bf:6e:f9:10:5a:a6:10:b3:86:89:00:
16:63:38:7d:39:aa:fc:0b:52:8f:70:d3:5f:3f:c9:
69:67:13:3a:52:47:75:c5:47:13:d4:15:31:c0:53:
99:3e:02:16:50:1e:f2:e7:c6:ff:58:6d:6d:52:af:
a8:6c:78:42:7d:e4:60:22:32:b0:8d:1f:9a:62:db:
8a:ec:26:00:22:bc:96:ab:86:5a:2a:b2:06:aa:dd:
d5:c7:ee:1f:f4:f2:5f:0d:8a:29:4a:e6:55:e8:3d:
3d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:FE:DD:BC:FE:15:60:52:A0:8E:F9:F4:3F:36:A0:3C:C2:0A:48:D1
X509v3 Authority Key Identifier:
keyid:2E:8B:24:C7:6A:D8:7A:6C:1F:ED:FF:AF:08:D9:B1:7B:45:24:99:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Loskx2rYemwf7f-vCNmxe0UkmZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:bb:70:e9:da:89:c8:d6:bc:1d:0a:af:96:85:6e:45:8c:ae:
dc:6f:7e:3e:58:0b:06:70:cc:29:35:cc:d1:d9:cf:2d:07:87:
cd:fe:fe:99:bb:e8:fa:ba:ed:43:83:5b:a5:a5:4b:c4:3e:08:
28:52:b4:b7:3b:34:60:da:b2:59:79:bc:ae:d9:86:ce:d8:4d:
01:96:03:fb:7e:dd:23:f3:67:4f:dc:a3:ae:c6:e0:62:aa:86:
01:53:88:43:bc:a1:d6:6c:71:b5:c0:e7:d3:9c:53:e5:f0:56:
b6:00:a4:0a:4d:22:9e:1f:8d:c0:0f:00:7c:14:65:33:da:7a:
03:3f:e5:08:30:cf:04:fd:55:7e:00:91:ad:24:c3:56:79:ce:
09:9b:1a:26:a4:ed:ce:d3:21:27:af:72:67:dc:98:59:3b:80:
81:27:42:2e:8d:9d:52:b7:15:d0:75:d8:b5:2c:e4:94:87:37:
a0:2d:38:a6:59:09:55:2b:2b:d9:e7:4a:c0:17:e1:ea:14:ad:
bb:c1:28:0a:f1:db:01:1c:63:b7:a3:44:b2:6e:e1:f5:67:ae:
b8:3f:e2:8b:1b:14:5d:ed:34:5f:a2:8f:3d:c8:fe:9f:53:bd:
71:73:7b:48:d0:b4:0a:39:1e:62:56:40:94:78:fd:cd:c8:9b:
fe:f7:86:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 10:26:52 2025 by rpki-client