Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/d520db-bdf8-4f27-8dff-8c130e6841db/1/LOKZUFiz3prtI6Yff7e1t7GTmEo.mft
File: LOKZUFiz3prtI6Yff7e1t7GTmEo.mft (raw, json)
Hash identifier: GLV/dP/gJx4xsXTzBJQZzFJzzl8ZrjnIUHpUu8muza8=
Subject key identifier: 75:AE:37:C6:9D:D7:18:55:C5:48:08:99:7C:ED:48:FB:26:EA:99:40
Authority key identifier: 2C:E2:99:50:58:B3:DE:9A:ED:23:A6:1F:7F:B7:B5:B7:B1:93:98:4A
Certificate issuer: /CN=2ce2995058b3de9aed23a61f7fb7b5b7b193984a
Certificate serial: 019676E7B93DEB353B489B8B9816623A7755
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LOKZUFiz3prtI6Yff7e1t7GTmEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/d520db-bdf8-4f27-8dff-8c130e6841db/1/LOKZUFiz3prtI6Yff7e1t7GTmEo.mft
Manifest number: 0C06
Signing time: Sun 27 Apr 2025 11:00:19 +0000
Manifest this update: Sun 27 Apr 2025 11:00:19 +0000
Manifest next update: Mon 28 Apr 2025 11:00:19 +0000
Files and hashes: 1: 7x1Ss4505QNa0fMVELtO8LmLJeM.roa (hash: 9SZiDlSiFrfDTptEJc86ZTB/oJuky1dBcaDe8vDIhaU=)
2: LOKZUFiz3prtI6Yff7e1t7GTmEo.crl (hash: tJIZ/N3CkhSAZj8GY+IsxPB+td7nzm+OZWIBP/qbNO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/d520db-bdf8-4f27-8dff-8c130e6841db/1/LOKZUFiz3prtI6Yff7e1t7GTmEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/d520db-bdf8-4f27-8dff-8c130e6841db/1/LOKZUFiz3prtI6Yff7e1t7GTmEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/LOKZUFiz3prtI6Yff7e1t7GTmEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:e7:b9:3d:eb:35:3b:48:9b:8b:98:16:62:3a:77:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ce2995058b3de9aed23a61f7fb7b5b7b193984a
Validity
Not Before: Apr 27 11:00:19 2025 GMT
Not After : Apr 28 11:00:19 2025 GMT
Subject: CN=75ae37c69dd71855c54808997ced48fb26ea9940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:63:37:fc:a7:04:e0:3a:34:d9:0b:45:88:cd:
9f:d2:82:d0:b6:f3:43:60:d7:a3:64:9f:ab:10:25:
64:df:c8:f1:6d:af:fc:08:a4:f7:7e:00:83:2f:31:
ee:47:c9:0b:f4:e5:5c:d5:62:7b:d7:3a:29:f1:6a:
3a:d6:6c:f4:51:47:a8:40:cf:10:44:a9:b4:52:4d:
96:59:33:26:35:10:b2:a1:bb:93:d7:94:0c:1a:82:
ad:2b:61:7c:34:59:17:e3:38:f1:c2:64:fc:2a:2a:
fa:65:da:eb:2b:98:35:ed:41:9f:1f:03:a7:7c:b2:
11:60:49:2d:b1:f1:aa:a9:8d:9a:1d:12:de:4d:2c:
84:94:4d:66:ec:c7:0f:1f:4b:b9:7b:90:a1:f8:06:
79:19:18:f2:66:f1:60:5e:ef:c5:ec:7f:cd:d9:8f:
b8:94:fe:9a:9e:c6:7b:00:c3:cf:a5:d1:d3:16:32:
f2:c4:c5:25:11:58:62:1a:de:c8:af:ad:d3:91:e7:
a3:41:9b:9e:6b:75:1b:fb:8c:6a:46:4f:af:de:32:
bf:17:6e:f6:84:e5:12:6a:06:ef:fa:29:94:4f:22:
68:21:03:0b:5e:2f:40:bd:83:6e:58:75:1a:c6:09:
62:ef:be:2d:07:56:47:3f:ac:a8:31:d3:14:fe:3e:
4c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:AE:37:C6:9D:D7:18:55:C5:48:08:99:7C:ED:48:FB:26:EA:99:40
X509v3 Authority Key Identifier:
keyid:2C:E2:99:50:58:B3:DE:9A:ED:23:A6:1F:7F:B7:B5:B7:B1:93:98:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LOKZUFiz3prtI6Yff7e1t7GTmEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/d520db-bdf8-4f27-8dff-8c130e6841db/1/LOKZUFiz3prtI6Yff7e1t7GTmEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/d520db-bdf8-4f27-8dff-8c130e6841db/1/LOKZUFiz3prtI6Yff7e1t7GTmEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:f6:01:7b:c2:5d:3d:99:3a:58:13:8e:59:03:06:20:49:df:
3e:d6:cf:0f:8b:f5:02:7c:95:1a:66:68:98:bb:4a:9c:61:db:
00:68:d4:98:49:21:2d:a8:9e:a3:31:a8:94:92:36:d9:f2:3c:
37:58:d5:bf:c4:e1:e0:5e:5f:1b:31:ba:86:01:f7:c7:50:13:
a0:f8:99:5f:7c:99:61:1c:d9:85:6f:bc:13:12:a2:0d:cb:9a:
87:68:0c:1a:c9:2d:13:78:c7:bd:da:4e:65:19:64:a7:c9:24:
61:35:d6:80:3e:b0:8f:12:a5:14:67:e6:2c:41:de:a5:ba:36:
45:30:5a:51:38:47:0c:88:0a:f2:cc:32:85:32:f2:c0:f7:93:
2e:84:ff:4a:ca:ed:a1:e4:8d:3f:ce:5d:c9:ff:d2:9a:5d:37:
18:bc:86:c2:fb:04:0d:5a:7d:e1:d7:47:80:a4:de:ab:a3:d5:
44:95:ba:19:62:5b:1c:87:e1:8b:a0:62:f1:0b:66:f1:11:c8:
49:13:f7:5c:c9:bb:80:07:6c:8f:2d:bf:79:ce:4f:ba:8a:c8:
2c:cf:38:9b:e4:fe:81:99:06:1f:d5:43:6e:46:ab:7b:2a:df:
07:3f:8b:ea:b4:7a:7e:d5:b4:1c:89:1e:82:98:89:04:e6:77:
8f:cd:1c:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:00:17 2025 by rpki-client