Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/LOre5Y-GT0cutCKwuVSXuFB1oSs.mft
File: LOre5Y-GT0cutCKwuVSXuFB1oSs.mft (raw, json)
Hash identifier: rTAA91NI3W3ZQ2MIT+yYZhDBmI54EgC2o35B7IyA8os=
Subject key identifier: 05:CA:41:D9:22:7B:EC:0C:AF:42:41:E5:3C:7F:F2:A4:8F:21:A6:03
Authority key identifier: 2C:EA:DE:E5:8F:86:4F:47:2E:B4:22:B0:B9:54:97:B8:50:75:A1:2B
Certificate issuer: /CN=2ceadee58f864f472eb422b0b95497b85075a12b
Certificate serial: 0196907165BBAEC03BD91B1919F23156DD0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LOre5Y-GT0cutCKwuVSXuFB1oSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/LOre5Y-GT0cutCKwuVSXuFB1oSs.mft
Manifest number: 136B
Signing time: Fri 02 May 2025 10:01:12 +0000
Manifest this update: Fri 02 May 2025 10:01:12 +0000
Manifest next update: Sat 03 May 2025 10:01:12 +0000
Files and hashes: 1: FBdl7VOodLJhSXYfDoAofAIRhnA.roa (hash: I3zrIjexf9/s3BfDjPpCzKMEPfl4E3s1P3fqPquhjIg=)
2: LOre5Y-GT0cutCKwuVSXuFB1oSs.crl (hash: WiJvAdaLBLtVW6ksy+a0bA21qgawHWAWahfTFhl/y3c=)
3: ZBji9OX_VotOWmsBmNsHM021d9w.roa (hash: VbyaXchd5eBQYGJ65pdgdekBYkxDCu5DrAnwaoKvIrc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/LOre5Y-GT0cutCKwuVSXuFB1oSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/LOre5Y-GT0cutCKwuVSXuFB1oSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/LOre5Y-GT0cutCKwuVSXuFB1oSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:90:71:65:bb:ae:c0:3b:d9:1b:19:19:f2:31:56:dd:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ceadee58f864f472eb422b0b95497b85075a12b
Validity
Not Before: May 2 10:01:12 2025 GMT
Not After : May 3 10:01:12 2025 GMT
Subject: CN=05ca41d9227bec0caf4241e53c7ff2a48f21a603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:6a:bb:3e:7d:ce:22:9a:0c:38:f3:26:5c:e7:
f6:91:b3:30:11:17:f3:e4:5e:e5:3f:c0:3f:b0:50:
79:e6:39:32:cd:89:88:cc:b3:7e:49:06:f7:81:da:
de:6d:b4:0e:1d:d1:56:45:e1:ad:9a:f8:f9:19:cb:
bc:9f:52:7d:0d:c9:08:e2:cc:2a:af:bc:be:86:f7:
e2:45:f8:3b:8c:aa:c0:6f:43:f2:53:bf:d6:f1:ad:
ec:cd:b2:6e:59:bf:1c:92:6b:99:16:a1:d9:c7:07:
63:51:0c:a5:47:a7:0c:c9:2c:32:c1:b1:7c:cb:4a:
6d:be:0d:c7:e6:47:e5:75:a3:4b:a0:5a:59:12:29:
30:0a:62:e2:b6:69:dd:68:02:dd:17:b2:52:8b:91:
d4:74:3f:c4:d7:92:d1:96:bd:2e:75:df:48:f2:7c:
21:c0:9e:5e:16:39:3e:70:38:4a:e2:30:f5:f9:a2:
3b:86:c1:eb:98:37:84:df:dd:6d:57:c3:ae:77:20:
53:32:78:a2:e6:2c:e5:ff:71:90:bd:4a:32:96:40:
50:55:e8:5a:57:4f:90:40:e3:c2:c9:9d:c0:e9:60:
15:c5:f7:19:1b:74:fd:52:c4:4e:6d:05:53:6c:89:
72:ca:27:7d:f6:c2:28:27:26:ff:04:2d:76:69:ce:
3c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:CA:41:D9:22:7B:EC:0C:AF:42:41:E5:3C:7F:F2:A4:8F:21:A6:03
X509v3 Authority Key Identifier:
keyid:2C:EA:DE:E5:8F:86:4F:47:2E:B4:22:B0:B9:54:97:B8:50:75:A1:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LOre5Y-GT0cutCKwuVSXuFB1oSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/LOre5Y-GT0cutCKwuVSXuFB1oSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/LOre5Y-GT0cutCKwuVSXuFB1oSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:40:7e:61:34:b7:4f:15:6b:45:2a:b3:0a:ec:7b:96:16:f5:
d2:0a:51:b8:b2:f6:ec:43:85:50:0d:85:57:75:ae:fd:6b:32:
bd:70:6b:19:59:88:12:3c:2f:d5:4e:27:9c:43:a1:32:fe:d4:
fa:bc:09:61:0a:02:12:0a:c3:5f:6b:9d:84:b7:dc:49:fb:59:
46:87:8d:c6:99:a4:59:08:71:86:a1:ad:80:8f:38:a0:7c:4b:
8f:cb:f2:e1:29:8f:5c:a9:9a:bd:7e:c0:f8:34:6d:38:7c:08:
c1:29:ce:af:3e:ec:8c:81:66:80:d5:23:e8:3a:5d:96:15:b3:
83:56:75:71:62:9f:e3:4d:2e:a1:dc:ce:70:4b:a8:17:59:fa:
c4:60:30:53:02:b1:fb:4a:76:4d:82:57:32:6f:da:53:0f:1b:
d7:fa:84:d1:b9:d9:33:a5:9e:8a:e2:2b:86:83:04:8f:b1:53:
8e:2b:1a:51:60:ba:10:ba:1a:47:2f:91:d5:43:b7:d2:96:2d:
4e:09:e6:78:3d:68:2d:46:15:24:7d:eb:4d:73:59:bb:dc:90:
db:19:29:04:c8:3c:6a:a8:cd:0e:e2:88:06:72:b4:09:99:91:
ac:96:55:28:b8:b1:60:e0:72:44:fe:43:47:56:29:e1:ca:dc:
93:23:a6:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 15:01:03 2025 by rpki-client