Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/LOcbH07qAVkkYSX8WumtUaRHks4.mft
File: LOcbH07qAVkkYSX8WumtUaRHks4.mft (raw, json)
Hash identifier: InUGyG1D2EzxbiV1fgYedk+mIkQeYejyehwrsbj0K6w=
Subject key identifier: AE:CB:4C:61:77:29:69:37:BD:7E:BF:34:96:BA:0B:17:49:22:EE:51
Authority key identifier: 2C:E7:1B:1F:4E:EA:01:59:24:61:25:FC:5A:E9:AD:51:A4:47:92:CE
Certificate issuer: /CN=2ce71b1f4eea0159246125fc5ae9ad51a44792ce
Certificate serial: 019855DF06A6E159F352130C0249E51C8AC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LOcbH07qAVkkYSX8WumtUaRHks4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/LOcbH07qAVkkYSX8WumtUaRHks4.mft
Manifest number: 1608
Signing time: Tue 29 Jul 2025 11:08:56 +0000
Manifest this update: Tue 29 Jul 2025 11:08:56 +0000
Manifest next update: Wed 30 Jul 2025 11:08:56 +0000
Files and hashes: 1: BugMD0rfZTTzRv9e3Yc9s1C5qM8.roa (hash: jE01pMhWyEqiVohSbXJF+yf78b2Sf6VXp+Appd2gHuI=)
2: LOcbH07qAVkkYSX8WumtUaRHks4.crl (hash: HW2ahfZy4KEvcAFijuI3+SxWz0Ybf9HLGCOk/XEVjMk=)
3: _1rHHFIhvvb4H2GGBv9RDV7OFzo.roa (hash: ODNNLSo5C2C5zLz79VjHYIX9sjOveSMDElEuw+M5H2w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/LOcbH07qAVkkYSX8WumtUaRHks4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/LOcbH07qAVkkYSX8WumtUaRHks4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LOcbH07qAVkkYSX8WumtUaRHks4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 11:08:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:55:df:06:a6:e1:59:f3:52:13:0c:02:49:e5:1c:8a:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ce71b1f4eea0159246125fc5ae9ad51a44792ce
Validity
Not Before: Jul 29 11:08:56 2025 GMT
Not After : Jul 30 11:08:56 2025 GMT
Subject: CN=aecb4c6177296937bd7ebf3496ba0b174922ee51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:f3:7c:a7:26:50:79:80:cc:4b:10:8a:f8:c7:
d0:f0:5e:fc:37:8d:3a:9a:4d:87:07:d2:44:71:29:
2a:78:aa:7d:4a:70:aa:91:33:18:a3:db:db:71:cf:
18:ed:cc:cb:75:0e:de:2d:5c:51:67:ac:77:ab:2f:
d3:06:db:17:07:7c:d1:9c:c7:6f:e2:80:98:6d:fa:
f1:f6:c6:42:93:ee:ea:16:3d:52:42:a9:8c:65:4b:
59:97:c2:d4:96:14:e2:0e:ea:ec:05:f7:f9:8d:89:
e8:24:fa:bb:a5:32:03:ca:56:a0:c1:cd:98:0f:3c:
1a:f9:4a:87:eb:fc:46:2b:59:e9:14:cd:9d:21:0b:
d5:5c:e5:87:d2:ce:20:ba:e2:21:3e:a4:7e:89:e6:
1f:a0:d9:f0:eb:c9:cb:cc:65:f4:9a:62:15:a9:7b:
29:d6:94:aa:37:d6:10:8f:d4:24:ae:07:2a:1e:45:
49:ff:9b:08:8e:cb:26:26:57:14:de:58:6e:fe:13:
fd:3f:50:c5:f5:2b:7b:5c:3c:ad:5e:e2:99:12:2f:
36:ad:ec:57:79:53:d7:02:f2:e6:9c:13:ff:d2:2b:
e8:14:23:21:d8:51:7c:49:6f:45:72:fb:bb:54:73:
88:ba:b8:48:79:fa:7c:d2:99:b0:a4:75:34:ec:db:
75:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:CB:4C:61:77:29:69:37:BD:7E:BF:34:96:BA:0B:17:49:22:EE:51
X509v3 Authority Key Identifier:
keyid:2C:E7:1B:1F:4E:EA:01:59:24:61:25:FC:5A:E9:AD:51:A4:47:92:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LOcbH07qAVkkYSX8WumtUaRHks4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/LOcbH07qAVkkYSX8WumtUaRHks4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/LOcbH07qAVkkYSX8WumtUaRHks4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:1f:63:73:7c:b8:73:43:c7:88:c1:1b:61:3c:e7:a1:26:cd:
ac:87:72:b2:81:ae:83:82:fc:aa:5c:46:7e:05:a2:0b:80:70:
ad:98:50:48:1c:72:06:cb:76:b7:12:7b:c8:39:f2:2c:0f:55:
19:d2:74:cd:99:d0:85:e0:a3:04:a6:10:b9:57:ae:ae:d6:70:
42:f7:94:8f:8a:31:65:9e:60:d2:b6:3d:3b:53:6b:30:43:89:
a0:2e:2e:bb:d5:da:0f:ce:13:92:02:e2:42:88:eb:18:3f:03:
80:4d:f7:da:bb:03:3e:f8:3d:4c:73:f4:25:60:3d:d6:d8:db:
fb:a2:87:74:51:d7:e6:9e:bf:5f:8b:8d:39:aa:45:ee:6e:18:
27:bf:63:8c:f7:d7:44:3c:70:6c:6a:53:20:97:5c:e7:fc:1d:
d1:ac:fe:ea:10:03:58:26:19:a0:cc:6f:83:fe:b3:a0:e9:88:
64:a4:21:e5:b2:32:a3:69:8b:6e:4e:75:8d:b6:e8:9e:5e:0b:
fb:05:b9:1f:de:8f:54:b2:81:18:97:01:42:ea:83:1f:7e:3c:
33:00:d9:f8:1d:42:e8:58:74:e3:e5:11:82:1b:9c:21:ac:46:
9d:3a:71:cb:1d:2f:76:6a:03:16:6e:7b:fc:25:76:a8:6b:1b:
93:d3:7a:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 16:18:27 2025 by rpki-client