Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/8c27aa-b500-4c96-84ec-f8be495252b0/1/LokBk3Q73yTdIsPtbyizAxouyAY.mft
File: LokBk3Q73yTdIsPtbyizAxouyAY.mft (raw, json)
Hash identifier: 6kOEmGAnM/BIrTt5ZsbVRX8uDPJ1cggQ6UD8mQ0bqkQ=
Subject key identifier: 04:FB:EC:5D:8B:32:6E:1B:C8:70:33:DA:BF:6B:A8:DC:38:65:33:74
Authority key identifier: 2E:89:01:93:74:3B:DF:24:DD:22:C3:ED:6F:28:B3:03:1A:2E:C8:06
Certificate issuer: /CN=2e890193743bdf24dd22c3ed6f28b3031a2ec806
Certificate serial: 01965493005C23E94DF652733B47DCA2B699
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LokBk3Q73yTdIsPtbyizAxouyAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/8c27aa-b500-4c96-84ec-f8be495252b0/1/LokBk3Q73yTdIsPtbyizAxouyAY.mft
Manifest number: 108B
Signing time: Sun 20 Apr 2025 19:00:41 +0000
Manifest this update: Sun 20 Apr 2025 19:00:41 +0000
Manifest next update: Mon 21 Apr 2025 19:00:41 +0000
Files and hashes: 1: 6EZjDJryRoANWPhlSHpMG7n7IU8.roa (hash: 9isLxzfXlIyOPcXFup6Ou1baZV3mC8KRz9wBcZ1Igfs=)
2: LokBk3Q73yTdIsPtbyizAxouyAY.crl (hash: +imMK5fXqxE1j9a7KQ8COHQa5U7QvC240NpwTTp1IBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/8c27aa-b500-4c96-84ec-f8be495252b0/1/LokBk3Q73yTdIsPtbyizAxouyAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/8c27aa-b500-4c96-84ec-f8be495252b0/1/LokBk3Q73yTdIsPtbyizAxouyAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/LokBk3Q73yTdIsPtbyizAxouyAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:93:00:5c:23:e9:4d:f6:52:73:3b:47:dc:a2:b6:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e890193743bdf24dd22c3ed6f28b3031a2ec806
Validity
Not Before: Apr 20 19:00:41 2025 GMT
Not After : Apr 21 19:00:41 2025 GMT
Subject: CN=04fbec5d8b326e1bc87033dabf6ba8dc38653374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a3:3a:83:0b:2f:59:a1:18:a8:bf:1c:3a:f7:
6d:b8:9d:d0:a7:8a:89:0e:d6:be:8d:f1:48:1d:d8:
73:f2:a1:88:6f:fc:cb:6c:38:ea:77:14:89:29:24:
08:22:c9:b9:63:18:19:e9:83:f7:b9:6b:c7:fe:2c:
0c:81:b7:a6:14:26:d3:f5:9f:af:3c:ce:5c:44:47:
eb:17:8f:dc:80:60:12:d1:db:15:f9:6c:06:43:d8:
07:b7:99:c5:2d:42:d1:ba:0c:54:02:a1:74:64:06:
d6:87:4e:3e:b9:f4:94:fb:fa:a8:35:64:9c:94:72:
d7:5d:d3:df:32:e9:fb:b9:18:7c:3d:17:7a:fb:ac:
2e:f5:01:e0:13:62:59:2b:06:97:56:11:ce:d6:3c:
b5:43:fa:c0:c8:4a:9b:dc:89:cf:a2:2f:60:32:f3:
71:25:fe:40:eb:76:1d:81:39:43:f6:96:82:2c:b7:
eb:be:c1:2c:b7:9e:f5:9c:56:e0:d5:71:22:50:52:
48:e8:f6:d9:fa:85:ce:09:53:47:58:5f:54:6d:dd:
45:98:3b:86:72:14:d9:b0:6d:d9:33:a8:ae:20:fd:
d3:a2:cf:f9:b2:b8:58:51:fd:34:4e:52:00:e7:91:
ff:cb:3d:89:ef:1c:e7:29:df:03:be:2f:b1:21:a9:
4b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:FB:EC:5D:8B:32:6E:1B:C8:70:33:DA:BF:6B:A8:DC:38:65:33:74
X509v3 Authority Key Identifier:
keyid:2E:89:01:93:74:3B:DF:24:DD:22:C3:ED:6F:28:B3:03:1A:2E:C8:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LokBk3Q73yTdIsPtbyizAxouyAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/8c27aa-b500-4c96-84ec-f8be495252b0/1/LokBk3Q73yTdIsPtbyizAxouyAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/8c27aa-b500-4c96-84ec-f8be495252b0/1/LokBk3Q73yTdIsPtbyizAxouyAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ec:7a:80:c0:9f:5f:16:46:84:1f:2d:52:8d:f6:7d:0d:8c:b3:
0c:4e:ca:75:8b:5c:5b:ad:d9:ae:c9:8a:92:12:79:41:0e:9b:
b8:a7:ad:68:08:50:28:fa:1b:8d:56:ec:dc:36:26:78:1f:78:
86:ef:42:6c:73:f1:24:e8:42:46:7f:86:d7:f7:77:68:e2:88:
43:5e:16:ab:d1:7c:f5:b9:47:be:a3:5f:43:db:61:81:71:6d:
ad:5b:84:06:cc:be:88:cf:4e:8a:ef:13:db:3b:0f:4b:6c:63:
6e:88:36:35:87:13:16:85:35:fc:70:6a:38:a6:5e:2c:76:8b:
ea:50:40:61:c3:ff:b4:f0:ee:88:e3:b9:24:94:fc:c7:c5:6d:
9d:40:87:69:28:5b:b2:7e:24:1d:31:3a:d3:ec:bf:66:fb:d1:
dc:ed:76:4f:7f:dd:47:2b:83:87:ab:4b:6f:7b:f7:c2:7d:a2:
7d:ce:30:d6:ac:53:ef:ef:d9:34:f9:59:b2:87:01:0a:86:6b:
17:3e:da:a5:8c:ff:c0:fb:04:ed:4a:ba:cb:f2:97:1e:65:c1:
22:98:ee:7f:aa:01:cb:dc:20:14:e0:2c:dc:69:f6:0f:22:66:
bd:41:d4:6a:33:9d:0f:5b:c5:3e:5f:82:10:42:f1:6d:02:51:
e0:5a:01:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 21:41:28 2025 by rpki-client