Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/LOre5Y-GT0cutCKwuVSXuFB1oSs.mft
File: LOre5Y-GT0cutCKwuVSXuFB1oSs.mft (raw, json)
Hash identifier: Nj0aYJEBr7+KIZCkS88efFuBwpXudbpoVYq/LBTT+mw=
Subject key identifier: 7F:FA:B8:FA:9A:BD:36:C3:33:FF:05:BB:73:8C:2D:AE:1C:EA:FD:EC
Authority key identifier: 2C:EA:DE:E5:8F:86:4F:47:2E:B4:22:B0:B9:54:97:B8:50:75:A1:2B
Certificate issuer: /CN=2ceadee58f864f472eb422b0b95497b85075a12b
Certificate serial: 019846D25D8F840C7A7F9183A59C06A0D88B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LOre5Y-GT0cutCKwuVSXuFB1oSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/LOre5Y-GT0cutCKwuVSXuFB1oSs.mft
Manifest number: 144E
Signing time: Sat 26 Jul 2025 13:00:48 +0000
Manifest this update: Sat 26 Jul 2025 13:00:48 +0000
Manifest next update: Sun 27 Jul 2025 13:00:48 +0000
Files and hashes: 1: FBdl7VOodLJhSXYfDoAofAIRhnA.roa (hash: I3zrIjexf9/s3BfDjPpCzKMEPfl4E3s1P3fqPquhjIg=)
2: LOre5Y-GT0cutCKwuVSXuFB1oSs.crl (hash: Bufu19wWHyB+MsODnMW3Ik5UxuHh/iMWLCKQo8qAABw=)
3: ZBji9OX_VotOWmsBmNsHM021d9w.roa (hash: VbyaXchd5eBQYGJ65pdgdekBYkxDCu5DrAnwaoKvIrc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/LOre5Y-GT0cutCKwuVSXuFB1oSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/LOre5Y-GT0cutCKwuVSXuFB1oSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/LOre5Y-GT0cutCKwuVSXuFB1oSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:d2:5d:8f:84:0c:7a:7f:91:83:a5:9c:06:a0:d8:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ceadee58f864f472eb422b0b95497b85075a12b
Validity
Not Before: Jul 26 13:00:48 2025 GMT
Not After : Jul 27 13:00:48 2025 GMT
Subject: CN=7ffab8fa9abd36c333ff05bb738c2dae1ceafdec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d9:de:98:29:08:7c:8c:96:5d:85:e8:28:53:
61:ea:e4:ad:c4:be:22:9e:fa:e9:d3:60:8b:bd:49:
ff:a2:91:10:dc:1a:c5:bf:c3:0c:e9:9f:a5:4c:f3:
7c:7d:91:49:07:e8:9c:40:db:da:d5:56:4c:3f:2a:
d5:c6:bb:f2:67:40:bd:f6:2f:6c:0b:13:bf:4e:70:
c4:bd:43:b5:54:6a:2d:d8:dc:b0:fa:bb:e6:8e:60:
a5:66:92:37:54:43:0a:0e:bb:05:ad:f6:02:ae:1e:
2a:11:8c:18:a7:09:03:b1:68:94:0f:da:24:08:4b:
5d:5d:a9:fa:16:b5:2f:8c:68:6e:f9:5b:71:1c:2d:
48:c6:f5:f4:5f:cb:d0:d8:e9:07:a7:fc:a2:2e:fd:
ad:22:65:89:1f:cb:2a:b1:b8:f0:e6:87:c8:33:2d:
11:78:9c:0c:d1:44:d0:7b:2a:68:18:94:21:20:1c:
3a:43:68:1d:bb:3c:d7:e6:ab:f8:95:bc:1e:09:1e:
20:a3:ce:15:11:6c:10:67:7f:fe:2e:91:03:82:0f:
cd:02:7a:5b:28:d4:97:aa:85:e9:81:24:e7:99:8a:
c1:01:a4:a8:2a:7d:31:6c:17:24:74:c2:2a:dd:8a:
6c:13:21:f9:32:3b:b9:f6:9c:1d:12:6e:7b:30:a2:
de:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:FA:B8:FA:9A:BD:36:C3:33:FF:05:BB:73:8C:2D:AE:1C:EA:FD:EC
X509v3 Authority Key Identifier:
keyid:2C:EA:DE:E5:8F:86:4F:47:2E:B4:22:B0:B9:54:97:B8:50:75:A1:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LOre5Y-GT0cutCKwuVSXuFB1oSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/LOre5Y-GT0cutCKwuVSXuFB1oSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/LOre5Y-GT0cutCKwuVSXuFB1oSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:e4:c1:c6:77:dc:86:3b:db:ef:eb:0d:1c:97:5a:ca:fc:27:
83:b4:60:02:a4:02:88:33:49:3c:fe:87:6b:25:45:06:72:ad:
d4:76:bc:f2:fe:b8:71:fd:11:5d:06:91:b5:4e:a0:2f:34:95:
9f:9c:3b:0c:6a:fd:28:1e:ec:22:50:63:3c:70:32:02:73:6d:
69:9b:41:54:68:14:d9:50:fb:de:c2:fe:a2:4c:24:ac:05:30:
2e:97:82:d1:1c:2a:80:a9:99:07:f8:a4:aa:9c:59:7c:1a:69:
04:37:ef:83:c3:1d:5d:f0:fe:e3:56:77:df:be:95:72:a0:b9:
57:9e:17:9c:2d:56:92:3c:b2:b4:d2:75:f1:9e:c6:12:30:bc:
08:b9:83:c3:3e:66:da:d5:64:b9:a0:c1:b2:13:58:38:5a:30:
4d:25:77:d3:ed:45:50:53:9e:aa:3c:50:55:8d:40:37:ca:c7:
bb:0f:57:8f:1f:37:ed:4d:b0:d4:8a:fe:73:70:c1:ba:1b:a5:
30:5a:74:0f:ae:53:7f:c4:3f:11:9c:40:fc:f7:fc:cd:fc:8f:
54:14:9b:5c:5e:56:df:6c:85:af:50:0c:19:63:0a:b5:11:12:
0d:2f:24:c3:75:c9:71:1a:7b:d4:a0:3d:5d:e9:b0:d6:c0:c2:
37:95:93:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:29:14 2025 by rpki-client