Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/7b20bd-fc4e-4cbf-ad1b-24fa10965e85/1/LoJ8h8u_wmGidOnLGwlQJqgMYTY.mft
File: LoJ8h8u_wmGidOnLGwlQJqgMYTY.mft (raw, json)
Hash identifier: OnN+ktDs4IFqWy627ISyuyDkeZKAi1LODh6FNkdMxhU=
Subject key identifier: BA:64:2E:31:A6:8E:4F:DE:CC:84:C7:63:FD:77:C2:0B:77:FA:3E:71
Authority key identifier: 2E:82:7C:87:CB:BF:C2:61:A2:74:E9:CB:1B:09:50:26:A8:0C:61:36
Certificate issuer: /CN=2e827c87cbbfc261a274e9cb1b095026a80c6136
Certificate serial: 019933EE2E6192A5BA2FA44CF665614563D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LoJ8h8u_wmGidOnLGwlQJqgMYTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/7b20bd-fc4e-4cbf-ad1b-24fa10965e85/1/LoJ8h8u_wmGidOnLGwlQJqgMYTY.mft
Manifest number: 158D
Signing time: Wed 10 Sep 2025 14:01:11 +0000
Manifest this update: Wed 10 Sep 2025 14:01:11 +0000
Manifest next update: Thu 11 Sep 2025 14:01:11 +0000
Files and hashes: 1: LAKkoAndva90SPNLZD7phJpzuqA.roa (hash: OPV3y3ajSvAOqXe2gXH83vJ/FKUxnXcCmYMqv/uyJZU=)
2: LoJ8h8u_wmGidOnLGwlQJqgMYTY.crl (hash: FquplAMZm692RO4+cZe+oKGN1FhiUDOrUljND14QVgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/7b20bd-fc4e-4cbf-ad1b-24fa10965e85/1/LoJ8h8u_wmGidOnLGwlQJqgMYTY.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/7b20bd-fc4e-4cbf-ad1b-24fa10965e85/1/LoJ8h8u_wmGidOnLGwlQJqgMYTY.mft
rsync://rpki.ripe.net/repository/DEFAULT/LoJ8h8u_wmGidOnLGwlQJqgMYTY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 14:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:ee:2e:61:92:a5:ba:2f:a4:4c:f6:65:61:45:63:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e827c87cbbfc261a274e9cb1b095026a80c6136
Validity
Not Before: Sep 10 14:01:11 2025 GMT
Not After : Sep 11 14:01:11 2025 GMT
Subject: CN=ba642e31a68e4fdecc84c763fd77c20b77fa3e71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f5:7b:29:c7:cb:35:d3:8e:d2:af:f3:59:4a:
5a:56:3d:5b:c2:f3:46:ac:1b:ae:d5:47:ae:f9:6f:
6c:6c:6d:3c:a3:b3:40:86:fe:7b:ff:1d:19:9e:28:
a5:c5:21:c8:ad:8a:e5:92:2b:1b:15:b1:18:63:5e:
0d:da:9f:c4:4c:06:e3:eb:7d:5e:76:36:73:c6:89:
0c:7c:34:2f:be:97:1d:f9:58:39:ca:5c:48:7b:2e:
e0:f7:47:7a:ab:e4:e1:44:53:39:70:d2:5f:d5:a8:
9d:22:e0:49:96:65:dd:59:57:c4:80:6f:d6:38:e4:
b3:71:e9:cf:df:40:21:2b:21:39:39:3e:4a:f1:86:
c1:d9:35:c4:64:e1:ed:d0:96:c9:b4:93:56:5f:de:
a8:1a:db:14:17:05:10:82:78:6c:b4:bf:8c:73:e2:
73:bd:cc:a8:11:d4:d8:6e:13:f3:2c:30:64:5c:46:
64:71:a9:51:a2:cd:4f:10:51:6d:41:21:5a:3b:27:
82:1d:2c:2f:5e:65:c7:78:f3:ee:62:a4:89:b5:90:
a5:c4:17:a4:28:e7:d8:9d:a1:f1:3a:6c:75:c1:7b:
97:e7:31:75:b2:69:6e:79:c0:a2:21:77:18:ad:9a:
3c:e1:33:09:d2:6a:59:05:cf:75:29:62:23:5d:f2:
78:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:64:2E:31:A6:8E:4F:DE:CC:84:C7:63:FD:77:C2:0B:77:FA:3E:71
X509v3 Authority Key Identifier:
keyid:2E:82:7C:87:CB:BF:C2:61:A2:74:E9:CB:1B:09:50:26:A8:0C:61:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoJ8h8u_wmGidOnLGwlQJqgMYTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7b20bd-fc4e-4cbf-ad1b-24fa10965e85/1/LoJ8h8u_wmGidOnLGwlQJqgMYTY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7b20bd-fc4e-4cbf-ad1b-24fa10965e85/1/LoJ8h8u_wmGidOnLGwlQJqgMYTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:25:07:7f:17:71:a5:0a:39:bd:b7:28:0d:ce:64:a6:ff:f9:
28:6b:3f:a3:68:56:e1:c0:30:9f:10:a4:ba:4d:67:af:af:65:
7c:7c:7d:26:bd:48:8c:54:5d:89:d4:42:9e:c8:ff:2a:a2:e4:
72:8a:f3:cd:f4:fd:93:ba:e9:23:38:77:40:c6:7a:ac:30:42:
37:8f:f7:0c:5e:4c:c3:fa:0c:f0:61:21:36:39:8a:62:c0:75:
3a:bf:ec:81:15:b9:a4:99:d5:b1:dc:40:9a:61:c2:8e:0f:3b:
3f:53:3e:03:bb:5e:d6:2a:a3:57:43:60:d5:14:57:c0:b7:7a:
bc:c2:96:24:ac:03:b1:32:8e:6b:62:76:4d:b5:b0:07:39:58:
78:db:42:b6:9e:ec:da:a3:6e:04:6d:df:65:6e:16:9f:4d:e9:
ad:1c:d1:5f:89:fe:88:95:34:69:ce:1d:cc:f1:78:77:96:9d:
37:e0:cb:19:95:0e:0e:e8:ec:aa:99:37:9d:6c:c7:e7:f0:6c:
17:4f:eb:96:55:d9:35:da:3c:59:51:c4:e7:64:14:9a:3e:9f:
65:c1:ee:bf:4a:2b:2c:ad:b5:de:74:19:9f:24:64:3d:d6:b7:
9c:1e:b2:59:4b:79:a6:00:4d:4d:3d:66:a9:ee:f0:91:6a:c5:
ad:e4:fc:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 22:57:02 2025 by rpki-client