Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft
File: Loskx2rYemwf7f-vCNmxe0UkmZE.mft (raw, json)
Hash identifier: K2uJbciCAzsue8sUzJ9tFITmeu9PsfcxxDkF2L3a2ck=
Subject key identifier: 5F:BA:EC:9B:BA:21:13:9B:8C:C4:4A:99:89:B4:A0:D6:1C:BE:75:91
Authority key identifier: 2E:8B:24:C7:6A:D8:7A:6C:1F:ED:FF:AF:08:D9:B1:7B:45:24:99:91
Certificate issuer: /CN=2e8b24c76ad87a6c1fedffaf08d9b17b45249991
Certificate serial: 01983E73608DE7DB16BD78F264EBF5933B83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Loskx2rYemwf7f-vCNmxe0UkmZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft
Manifest number: 160A
Signing time: Thu 24 Jul 2025 22:00:05 +0000
Manifest this update: Thu 24 Jul 2025 22:00:05 +0000
Manifest next update: Fri 25 Jul 2025 22:00:05 +0000
Files and hashes: 1: Loskx2rYemwf7f-vCNmxe0UkmZE.crl (hash: RwN5jeyMKDfHmgOlpZHCRgNp20UyTA9IF7gasyOczrQ=)
2: U7x9NHrOtVwpLBD4RJMdKYPQ-Mo.roa (hash: COXA0MHjLmP0wp5vDjDiQUXIbxhZE0gntg3Uospeavg=)
3: qBk8yEy6XQzjJQM_m4xKxUxOGWY.roa (hash: MrQEI7rx7w7zwtpbP6zhx6P3UqAEniYO/sUrOOmnWv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Loskx2rYemwf7f-vCNmxe0UkmZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 14:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3e:73:60:8d:e7:db:16:bd:78:f2:64:eb:f5:93:3b:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e8b24c76ad87a6c1fedffaf08d9b17b45249991
Validity
Not Before: Jul 24 22:00:05 2025 GMT
Not After : Jul 25 22:00:05 2025 GMT
Subject: CN=5fbaec9bba21139b8cc44a9989b4a0d61cbe7591
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:0d:94:05:b2:d5:58:36:70:10:d6:87:f7:db:
1e:21:c0:8f:af:64:35:43:2d:81:a4:99:92:9c:c0:
e7:19:9c:cc:76:63:7c:d4:45:12:43:c1:08:88:4b:
a0:12:34:c9:15:29:55:fc:ee:67:c8:e4:f5:c5:f9:
4f:54:78:66:63:81:5a:c8:cc:d3:73:20:76:9f:b0:
85:41:ba:85:09:2c:c7:ab:6a:12:c7:a7:bf:48:d2:
fd:31:5c:2e:59:26:22:ab:a5:7c:ea:30:e1:4a:23:
a2:ea:95:44:77:92:1b:93:f2:2f:e7:6a:a3:c8:a9:
20:8f:9c:c7:cd:29:94:f9:7f:47:f1:e3:52:5e:d0:
ed:64:00:bb:f7:4e:aa:99:5a:21:03:5d:0e:ed:00:
6b:8c:64:49:fe:19:78:26:b1:12:4d:c0:e6:b7:df:
7e:10:03:ba:04:87:b6:47:cc:19:9b:d8:24:14:03:
1f:ab:78:96:59:0d:43:19:ba:c4:90:c8:eb:03:1a:
f8:3a:50:fc:d4:32:08:07:4a:0b:a5:8f:f3:5a:12:
72:42:ea:46:cf:fe:94:c8:49:95:d5:58:0b:30:b2:
84:8b:c3:5b:89:28:de:a4:6d:e9:a3:c2:6c:8f:ca:
7b:10:f2:58:2f:71:17:ff:0f:58:99:ab:66:65:1e:
82:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:BA:EC:9B:BA:21:13:9B:8C:C4:4A:99:89:B4:A0:D6:1C:BE:75:91
X509v3 Authority Key Identifier:
keyid:2E:8B:24:C7:6A:D8:7A:6C:1F:ED:FF:AF:08:D9:B1:7B:45:24:99:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Loskx2rYemwf7f-vCNmxe0UkmZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:45:be:3f:31:e1:54:5d:97:bf:1d:2e:58:7d:a1:c5:96:4d:
56:37:e3:f4:4e:e1:95:41:e9:de:f3:4f:62:9d:59:9e:e4:df:
0f:3f:27:b6:b5:ae:3b:d7:f5:59:67:e9:48:60:7c:88:5d:38:
c1:20:12:c0:8f:b0:69:29:35:8f:27:a7:72:76:c6:ed:be:ea:
3b:8f:de:52:f0:4c:7e:5e:c4:73:04:75:30:23:0d:53:fb:55:
e3:9d:0b:8e:b8:81:d1:b6:59:a8:5c:e8:87:20:19:8f:ac:9e:
18:01:5f:4f:44:0d:89:7f:c4:32:a4:42:db:db:dc:7f:15:fa:
03:02:6d:8d:9f:4e:a1:3e:34:99:c1:7c:74:03:e1:6f:b8:39:
ca:15:67:38:4f:b1:66:b9:27:ef:7a:39:7a:47:79:7d:38:7d:
00:4d:f2:1b:fd:ac:54:2e:00:7b:0a:d7:a2:62:43:d5:28:40:
88:9f:10:ad:74:b1:57:75:5f:5e:45:e0:df:1b:cf:33:31:f6:
65:5f:ed:72:51:7d:41:2f:0e:86:83:b6:97:ce:0d:b4:aa:90:
95:9a:8a:a5:2c:62:25:f9:65:ca:a4:0e:e7:b2:48:ff:e7:ee:
96:63:28:c1:d1:16:e0:37:1d:3b:c5:a9:c1:be:4d:94:44:d7:
c4:eb:4b:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 23:35:54 2025 by rpki-client