Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/LOcbH07qAVkkYSX8WumtUaRHks4.mft
File: LOcbH07qAVkkYSX8WumtUaRHks4.mft (raw, json)
Hash identifier: ogsYd4YPV/Wx67ezQYYzc4W0Xkjv6P00QzCU99B4bqg=
Subject key identifier: A6:99:BA:7C:F9:A4:63:2C:1C:BE:65:AB:D8:62:E8:15:B8:23:84:37
Authority key identifier: 2C:E7:1B:1F:4E:EA:01:59:24:61:25:FC:5A:E9:AD:51:A4:47:92:CE
Certificate issuer: /CN=2ce71b1f4eea0159246125fc5ae9ad51a44792ce
Certificate serial: 0198805456DEDA21F044E184417776F7FB6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LOcbH07qAVkkYSX8WumtUaRHks4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/LOcbH07qAVkkYSX8WumtUaRHks4.mft
Manifest number: 161E
Signing time: Wed 06 Aug 2025 17:01:07 +0000
Manifest this update: Wed 06 Aug 2025 17:01:07 +0000
Manifest next update: Thu 07 Aug 2025 17:01:07 +0000
Files and hashes: 1: BugMD0rfZTTzRv9e3Yc9s1C5qM8.roa (hash: jE01pMhWyEqiVohSbXJF+yf78b2Sf6VXp+Appd2gHuI=)
2: LOcbH07qAVkkYSX8WumtUaRHks4.crl (hash: kMyOjVdaGbLXFZyFDrhdEq78pfdJPIgcSfrfORsDUgU=)
3: _1rHHFIhvvb4H2GGBv9RDV7OFzo.roa (hash: ODNNLSo5C2C5zLz79VjHYIX9sjOveSMDElEuw+M5H2w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/LOcbH07qAVkkYSX8WumtUaRHks4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/LOcbH07qAVkkYSX8WumtUaRHks4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LOcbH07qAVkkYSX8WumtUaRHks4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 14:26:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:54:56:de:da:21:f0:44:e1:84:41:77:76:f7:fb:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ce71b1f4eea0159246125fc5ae9ad51a44792ce
Validity
Not Before: Aug 6 17:01:07 2025 GMT
Not After : Aug 7 17:01:07 2025 GMT
Subject: CN=a699ba7cf9a4632c1cbe65abd862e815b8238437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2b:a6:50:06:03:d9:46:b1:93:05:f3:e0:d3:
66:a8:26:ee:c5:41:53:b6:10:b2:67:45:b6:e9:92:
1b:7d:4e:ae:fd:d4:47:a0:cf:b7:98:61:da:ec:68:
fa:5f:25:f6:76:55:be:38:d9:9b:93:7c:16:13:2b:
48:13:81:b6:88:66:8b:ab:c3:9e:ac:3a:1f:cb:6c:
37:a5:fc:df:84:1d:e9:45:29:42:90:4a:6f:e9:7a:
38:00:2e:0b:2f:81:56:dc:6c:fb:d2:71:e2:00:73:
45:5b:fe:c8:f9:c7:43:d2:66:a3:a9:4e:55:34:20:
97:ec:8b:05:9d:04:30:2b:08:78:0c:a2:52:91:8c:
cc:85:50:48:09:de:4c:fd:cb:6b:82:6e:c5:0f:60:
46:03:bc:95:24:23:d1:aa:7b:0f:e5:34:ec:32:1d:
31:3f:ed:ff:32:23:2b:3c:7d:75:fc:6c:38:38:e7:
31:55:c9:bf:af:d5:01:9d:00:40:77:16:ba:c6:18:
5e:d3:59:63:9b:8e:f6:21:cd:a7:5d:9f:fd:f9:af:
73:03:b6:b5:f7:86:e6:7c:65:8e:36:6f:e5:56:9f:
63:22:d5:85:63:7a:ff:b7:38:83:51:e4:16:2f:82:
9c:a8:1c:ba:60:47:5c:cb:5a:63:2a:f5:e3:b9:22:
0a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:99:BA:7C:F9:A4:63:2C:1C:BE:65:AB:D8:62:E8:15:B8:23:84:37
X509v3 Authority Key Identifier:
keyid:2C:E7:1B:1F:4E:EA:01:59:24:61:25:FC:5A:E9:AD:51:A4:47:92:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LOcbH07qAVkkYSX8WumtUaRHks4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/LOcbH07qAVkkYSX8WumtUaRHks4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/LOcbH07qAVkkYSX8WumtUaRHks4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:ed:3b:b2:2c:9d:3e:ca:8c:63:5f:ff:08:a0:db:85:33:48:
7e:0c:d8:cf:f9:a7:8d:a6:80:4c:cd:eb:90:f3:c7:82:17:e2:
6b:da:4c:6c:b9:f1:c1:c4:24:93:1c:16:84:3c:02:9a:d6:d7:
f7:c3:06:76:e3:88:18:2b:2d:21:9e:d5:14:c5:62:f0:f9:a7:
4e:9e:f7:a4:53:d9:f3:5f:75:7c:15:86:52:92:b4:69:2d:fa:
fe:7c:2f:60:4c:dc:08:79:d1:27:02:25:82:58:19:9a:b9:a4:
ff:6a:d3:2b:00:04:2c:7e:87:a6:67:2f:cc:df:2e:25:f7:8a:
03:1b:80:29:95:01:73:6f:a8:0d:39:77:cd:69:87:1e:82:d2:
d5:39:3c:ce:2f:f4:4a:36:39:13:c4:47:e0:57:85:35:68:3e:
4d:85:02:95:09:3c:92:45:ad:cf:d2:c0:30:ec:c3:e2:d2:e8:
e6:bc:7c:34:d5:20:d5:47:32:90:15:7b:e9:2d:cb:ad:7c:bc:
9a:6f:57:f8:9f:55:88:25:d1:68:79:34:29:7a:e9:1d:5a:3f:
6a:a8:4f:67:cc:f4:45:96:4d:23:b8:7c:ae:5e:38:62:40:58:
01:c2:ca:51:85:96:2c:16:9b:59:c7:9b:db:54:20:e0:5e:c4:
02:b9:f2:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 18:49:05 2025 by rpki-client