
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/d520db-bdf8-4f27-8dff-8c130e6841db/1/LOKZUFiz3prtI6Yff7e1t7GTmEo.mft
File: LOKZUFiz3prtI6Yff7e1t7GTmEo.mft (raw, json)
Hash identifier: PWMHyBHsD1zpERTPDEKmVPzg6ayQYSQHio9R+gw9HjM=
Subject key identifier: 15:2B:E1:C7:6D:89:F1:FE:12:14:1B:CC:0D:DE:55:96:BE:5B:3D:49
Authority key identifier: 2C:E2:99:50:58:B3:DE:9A:ED:23:A6:1F:7F:B7:B5:B7:B1:93:98:4A
Certificate issuer: /CN=2ce2995058b3de9aed23a61f7fb7b5b7b193984a
Certificate serial: 0198805497449F97E584B7EF09A6BC746033
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LOKZUFiz3prtI6Yff7e1t7GTmEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/d520db-bdf8-4f27-8dff-8c130e6841db/1/LOKZUFiz3prtI6Yff7e1t7GTmEo.mft
Manifest number: 0D14
Signing time: Wed 06 Aug 2025 17:01:23 +0000
Manifest this update: Wed 06 Aug 2025 17:01:23 +0000
Manifest next update: Thu 07 Aug 2025 17:01:23 +0000
Files and hashes: 1: 7x1Ss4505QNa0fMVELtO8LmLJeM.roa (hash: 9SZiDlSiFrfDTptEJc86ZTB/oJuky1dBcaDe8vDIhaU=)
2: LOKZUFiz3prtI6Yff7e1t7GTmEo.crl (hash: /MpvWiZuEREMQgSUKeo7rncnoRWubepRnGgO/q0B9Us=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/d520db-bdf8-4f27-8dff-8c130e6841db/1/LOKZUFiz3prtI6Yff7e1t7GTmEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/d520db-bdf8-4f27-8dff-8c130e6841db/1/LOKZUFiz3prtI6Yff7e1t7GTmEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/LOKZUFiz3prtI6Yff7e1t7GTmEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 17:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:54:97:44:9f:97:e5:84:b7:ef:09:a6:bc:74:60:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ce2995058b3de9aed23a61f7fb7b5b7b193984a
Validity
Not Before: Aug 6 17:01:23 2025 GMT
Not After : Aug 7 17:01:23 2025 GMT
Subject: CN=152be1c76d89f1fe12141bcc0dde5596be5b3d49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4c:12:7b:f1:78:4b:68:07:dd:3f:2b:e7:b0:
36:85:03:0b:1f:2f:5d:ff:4b:04:3a:42:80:d2:b4:
6b:b1:e9:f4:c4:03:f9:cc:90:fa:5f:bc:9f:d6:f2:
e0:8b:02:de:ff:91:6b:5a:5a:8a:80:fd:aa:cb:10:
62:74:e9:49:5e:31:c3:1f:b1:2c:4c:ba:bf:13:8b:
e9:8a:2e:39:a5:90:a8:f9:bb:62:82:7b:fc:12:33:
d3:34:71:f0:26:ee:b9:33:7e:b4:bc:e5:56:1e:83:
76:f7:2b:34:3d:dd:56:77:56:3d:07:59:30:62:38:
7b:59:10:06:3b:75:83:e2:79:0e:92:52:f2:06:81:
03:f7:cd:02:ec:10:02:f2:9c:ed:0a:6c:11:83:b8:
34:f4:e1:f4:b6:6e:e5:19:b9:80:27:4d:68:1e:2b:
f6:c4:ee:b5:cc:bc:f9:13:3f:4c:f9:a6:e9:48:83:
26:10:9c:d6:ec:6d:db:3f:4c:21:64:5b:22:52:ab:
72:c4:d7:54:4c:34:11:a4:1a:43:66:d6:e0:c1:f5:
1a:d2:a9:be:7c:2e:fd:9a:ae:f4:83:53:8f:52:56:
49:76:dc:15:75:4b:dd:92:c0:c8:c9:8d:bb:8e:33:
39:fa:e9:16:61:e4:39:2d:27:f0:8a:ef:48:e9:1e:
cf:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:2B:E1:C7:6D:89:F1:FE:12:14:1B:CC:0D:DE:55:96:BE:5B:3D:49
X509v3 Authority Key Identifier:
keyid:2C:E2:99:50:58:B3:DE:9A:ED:23:A6:1F:7F:B7:B5:B7:B1:93:98:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LOKZUFiz3prtI6Yff7e1t7GTmEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/d520db-bdf8-4f27-8dff-8c130e6841db/1/LOKZUFiz3prtI6Yff7e1t7GTmEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/d520db-bdf8-4f27-8dff-8c130e6841db/1/LOKZUFiz3prtI6Yff7e1t7GTmEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:2a:09:14:c1:39:42:cc:b1:9f:04:51:a0:c3:73:0d:8e:21:
02:e4:15:c6:03:54:99:32:93:1e:1f:4a:ca:59:0c:a8:fa:32:
c3:e5:bc:c9:09:1e:67:75:a7:01:77:c5:2b:91:dd:8a:c8:cb:
84:15:49:50:b9:48:ce:d8:b6:c4:08:e4:d8:1d:08:b7:2b:72:
2f:f1:07:a2:9a:68:07:af:0e:91:aa:0e:61:2e:ad:14:32:c9:
85:aa:72:53:a6:e5:23:0c:aa:aa:1d:20:8b:ec:99:aa:74:79:
96:d1:3b:dc:0d:2a:20:26:76:10:08:2f:f0:7d:e1:4a:33:84:
18:af:af:1e:df:db:a2:95:e8:6e:fa:66:15:f2:1f:23:3d:6e:
f8:f7:af:0b:9e:79:99:3b:71:a8:00:f0:19:c7:e5:62:dc:b7:
a8:5c:cc:dc:35:28:11:22:eb:d6:b8:99:53:79:8e:1c:bd:0b:
53:27:22:20:b7:43:2e:f4:7c:99:ac:94:c5:1a:90:ee:7d:d5:
a5:e0:55:c7:5b:b1:5b:ef:b9:26:88:40:98:3a:13:c4:ac:32:
d6:96:98:64:ca:61:78:41:ce:8a:aa:ee:0e:6f:18:b0:da:3f:
73:56:a1:0b:a9:2c:8e:64:a6:9a:76:45:08:e3:46:b5:2a:3c:
99:30:99:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:22:07 2025 by rpki-client