Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/d520db-bdf8-4f27-8dff-8c130e6841db/1/LOKZUFiz3prtI6Yff7e1t7GTmEo.mft
File: LOKZUFiz3prtI6Yff7e1t7GTmEo.mft (raw, json)
Hash identifier: 1Fn/+d8PTqoGFr+46rMutY1//0VopRMuaOmzYzscIsQ=
Subject key identifier: 38:C8:E8:F5:81:1D:A2:F6:41:F8:75:3A:8F:25:20:BD:34:9E:1F:64
Authority key identifier: 2C:E2:99:50:58:B3:DE:9A:ED:23:A6:1F:7F:B7:B5:B7:B1:93:98:4A
Certificate issuer: /CN=2ce2995058b3de9aed23a61f7fb7b5b7b193984a
Certificate serial: 019777C136BEED112FD6669312A74F6396A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LOKZUFiz3prtI6Yff7e1t7GTmEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/d520db-bdf8-4f27-8dff-8c130e6841db/1/LOKZUFiz3prtI6Yff7e1t7GTmEo.mft
Manifest number: 0C8B
Signing time: Mon 16 Jun 2025 08:00:40 +0000
Manifest this update: Mon 16 Jun 2025 08:00:40 +0000
Manifest next update: Tue 17 Jun 2025 08:00:40 +0000
Files and hashes: 1: 7x1Ss4505QNa0fMVELtO8LmLJeM.roa (hash: 9SZiDlSiFrfDTptEJc86ZTB/oJuky1dBcaDe8vDIhaU=)
2: LOKZUFiz3prtI6Yff7e1t7GTmEo.crl (hash: exf8s/dPpq5lOunbAxkQ/r+aKVa9uP8tsXrnPISecS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/d520db-bdf8-4f27-8dff-8c130e6841db/1/LOKZUFiz3prtI6Yff7e1t7GTmEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/d520db-bdf8-4f27-8dff-8c130e6841db/1/LOKZUFiz3prtI6Yff7e1t7GTmEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/LOKZUFiz3prtI6Yff7e1t7GTmEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:c1:36:be:ed:11:2f:d6:66:93:12:a7:4f:63:96:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ce2995058b3de9aed23a61f7fb7b5b7b193984a
Validity
Not Before: Jun 16 08:00:40 2025 GMT
Not After : Jun 17 08:00:40 2025 GMT
Subject: CN=38c8e8f5811da2f641f8753a8f2520bd349e1f64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:51:ec:24:96:fe:90:43:05:1a:f6:c5:8e:8a:
cc:94:1e:db:d0:75:f4:17:4a:23:60:51:0d:8a:ca:
1d:66:af:93:ac:ef:de:88:5d:54:c5:df:49:30:4d:
3a:52:a4:02:a6:12:22:ab:19:71:a3:64:e2:5e:4a:
3a:3a:af:a8:24:67:be:cf:4f:b4:1d:61:be:63:dc:
77:f2:43:b9:7a:6b:aa:09:1a:0b:6c:c7:42:62:3b:
80:e9:d4:5e:d4:a3:2b:cf:e8:a0:18:d3:f3:b0:2e:
24:bc:9f:cd:bf:8b:c7:4b:fc:1f:a5:5a:98:22:05:
29:71:0a:47:f7:17:37:26:92:22:3e:9c:fc:f4:fb:
9d:10:12:6a:30:c4:a7:a6:83:34:f0:6c:d2:4b:aa:
33:7b:ad:6e:f1:54:c9:ff:64:5f:7e:54:fd:9e:79:
5f:a8:3b:48:37:c7:ed:f6:b4:ca:df:4b:aa:d9:97:
d8:d0:5a:7c:cd:e9:d2:05:a7:aa:19:88:44:57:ad:
fd:6b:b3:a4:93:ce:5e:1e:9a:98:5a:f7:6e:2b:71:
e8:e8:64:05:1f:af:da:9a:31:ab:7d:00:10:3d:b3:
17:e9:46:07:91:df:b6:d1:9c:fd:2c:bb:ad:40:48:
08:f8:e0:a6:92:1a:3e:6a:4f:7f:8f:f1:fb:e4:25:
36:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:C8:E8:F5:81:1D:A2:F6:41:F8:75:3A:8F:25:20:BD:34:9E:1F:64
X509v3 Authority Key Identifier:
keyid:2C:E2:99:50:58:B3:DE:9A:ED:23:A6:1F:7F:B7:B5:B7:B1:93:98:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LOKZUFiz3prtI6Yff7e1t7GTmEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/d520db-bdf8-4f27-8dff-8c130e6841db/1/LOKZUFiz3prtI6Yff7e1t7GTmEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/d520db-bdf8-4f27-8dff-8c130e6841db/1/LOKZUFiz3prtI6Yff7e1t7GTmEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:af:d8:10:57:df:84:d1:5e:14:b7:c5:6c:67:b2:ff:da:d8:
af:85:15:5d:dd:ee:c3:b3:08:3a:f9:68:df:99:3f:8e:29:98:
27:69:f5:ea:98:75:71:55:a6:d9:19:a0:95:e1:62:8f:59:5b:
ec:a0:3d:c6:0b:09:62:61:cd:6d:0f:9c:5e:63:d7:cc:65:9d:
6d:e0:29:67:f4:0c:dc:2f:35:3e:4e:37:44:f7:5a:9e:b7:a2:
3a:6c:03:4f:1f:d2:f0:2d:21:b1:24:73:d1:90:89:ab:5e:c8:
b4:c1:71:7a:43:10:79:03:a2:90:6e:e7:58:01:5d:02:7c:58:
80:f7:98:bf:25:2c:39:d9:f5:b7:9c:0b:a0:c1:a9:61:5c:90:
22:da:78:54:a2:3f:7f:f6:95:ec:58:f2:a8:c6:cc:86:7c:c1:
31:1a:e3:7d:0a:26:f3:bc:57:88:fd:47:ef:cc:5b:bb:6d:18:
b6:e9:a8:93:f5:5d:15:49:80:bc:b8:45:37:18:d8:d4:40:47:
53:68:ff:bb:6f:34:01:12:2c:f7:cc:f8:45:0e:84:ee:47:82:
7e:bf:01:3e:b0:d1:2d:8a:c9:16:30:2d:0b:c7:04:24:a6:7e:
0d:4b:ac:48:1b:1c:9b:04:e6:55:98:02:2c:ba:71:7c:4e:f6:
8a:98:37:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 13:05:31 2025 by rpki-client