Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/3b58d8-6d94-4302-aa91-7c2bd984d735/1/LofD1fRf7zjBBbk91E3ST1vuYOc.mft
File: LofD1fRf7zjBBbk91E3ST1vuYOc.mft (raw, json)
Hash identifier: ZisaHTFzXO4IHrW481cwLiAybYjoGR4zXFUkOQYgYiY=
Subject key identifier: 06:0E:77:FC:DE:51:86:08:6C:E9:A5:44:46:CC:A5:52:92:0A:6D:78
Authority key identifier: 2E:87:C3:D5:F4:5F:EF:38:C1:05:B9:3D:D4:4D:D2:4F:5B:EE:60:E7
Certificate issuer: /CN=2e87c3d5f45fef38c105b93dd44dd24f5bee60e7
Certificate serial: 01974854FB642AC013EE2BD6C7FB73DF07D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LofD1fRf7zjBBbk91E3ST1vuYOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/3b58d8-6d94-4302-aa91-7c2bd984d735/1/LofD1fRf7zjBBbk91E3ST1vuYOc.mft
Manifest number: 0DCC
Signing time: Sat 07 Jun 2025 03:00:18 +0000
Manifest this update: Sat 07 Jun 2025 03:00:18 +0000
Manifest next update: Sun 08 Jun 2025 03:00:18 +0000
Files and hashes: 1: LofD1fRf7zjBBbk91E3ST1vuYOc.crl (hash: 5QA/2oGK8ffBhb3tRVobRl/99Y+GvNgMHnB9cmJzi2Q=)
2: QDqzI6mtk0OSKHPd6aEPhi6zaB8.roa (hash: EsH+qC6DrpZNrpMwjRlDLqXBAg493TRAVaOfxpJfUMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/3b58d8-6d94-4302-aa91-7c2bd984d735/1/LofD1fRf7zjBBbk91E3ST1vuYOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/3b58d8-6d94-4302-aa91-7c2bd984d735/1/LofD1fRf7zjBBbk91E3ST1vuYOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/LofD1fRf7zjBBbk91E3ST1vuYOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:54:fb:64:2a:c0:13:ee:2b:d6:c7:fb:73:df:07:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e87c3d5f45fef38c105b93dd44dd24f5bee60e7
Validity
Not Before: Jun 7 03:00:18 2025 GMT
Not After : Jun 8 03:00:18 2025 GMT
Subject: CN=060e77fcde5186086ce9a54446cca552920a6d78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:4c:0a:78:b1:35:5d:33:0b:de:25:54:d8:17:
ba:79:e2:ad:ce:a4:15:7a:ed:7d:1f:23:82:5c:c9:
21:e9:68:71:ec:c7:31:30:61:6f:02:ee:60:a3:95:
46:86:35:3f:22:5c:88:4b:c0:e8:5a:ff:e9:8d:53:
db:1f:42:28:83:65:29:0a:77:b9:31:72:a7:e7:f6:
7a:5b:cc:0c:3e:5b:17:c5:c8:99:06:b8:1c:db:e3:
52:cd:1c:fa:e8:f5:8b:67:c8:ff:9c:31:d7:a4:01:
6b:02:a6:c9:99:6e:aa:ca:d2:ff:e9:2e:23:2e:d9:
78:f1:69:16:a9:0a:71:e2:81:e7:5c:5c:81:ae:a3:
f1:25:b2:4f:39:80:37:f0:80:3e:bb:11:52:37:4e:
6f:21:c1:c5:6a:4f:c4:6c:c0:a9:ec:d2:b6:d9:84:
35:f5:95:b9:7c:75:b0:f8:83:bd:83:49:d6:c8:da:
c7:90:13:25:7f:d1:fa:21:d1:83:80:85:c4:0f:c0:
36:53:1a:92:67:1a:9a:90:4b:1b:7a:34:5f:61:f4:
8d:d4:69:10:b3:de:95:ed:33:fd:03:7a:f0:13:16:
f4:45:16:e1:37:cf:b7:a1:f1:c6:c7:6d:81:7c:de:
ca:c7:d1:6f:06:a4:53:fc:2f:87:d8:23:a4:8b:82:
e6:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:0E:77:FC:DE:51:86:08:6C:E9:A5:44:46:CC:A5:52:92:0A:6D:78
X509v3 Authority Key Identifier:
keyid:2E:87:C3:D5:F4:5F:EF:38:C1:05:B9:3D:D4:4D:D2:4F:5B:EE:60:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LofD1fRf7zjBBbk91E3ST1vuYOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3b58d8-6d94-4302-aa91-7c2bd984d735/1/LofD1fRf7zjBBbk91E3ST1vuYOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3b58d8-6d94-4302-aa91-7c2bd984d735/1/LofD1fRf7zjBBbk91E3ST1vuYOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:91:6e:8c:41:a8:96:b2:64:75:20:fe:0b:ca:82:29:14:1a:
6e:58:2b:1c:ef:9c:2c:ff:bf:7b:53:24:1f:c6:6a:8d:7f:d9:
9d:23:ca:ef:40:2d:ef:8f:6c:81:09:51:b2:40:33:44:c3:9c:
a7:e2:80:b6:2f:de:b6:e7:17:18:85:92:99:3e:06:ee:3b:a2:
da:02:54:45:2c:43:c1:6f:e7:d3:e5:db:cd:9e:8e:f1:73:f4:
53:b7:da:d6:8b:4d:30:be:37:b2:ff:d6:94:40:2a:d3:d7:fd:
60:a1:c7:e6:97:d3:53:1d:c9:81:75:0e:55:5f:b5:63:70:7f:
88:97:a3:97:9e:dc:5b:72:dd:38:f7:ea:72:01:7b:11:ae:10:
01:90:eb:c0:17:de:ff:ba:32:7d:ed:f5:93:db:18:c5:d0:c6:
15:b7:cc:1a:ff:8a:eb:02:0b:6b:0d:2b:47:8a:f0:9a:0c:98:
c0:40:03:2b:cb:c7:09:fb:80:0f:ff:6d:69:8b:54:84:f7:95:
14:cc:6c:4b:dc:32:59:57:f0:92:1e:5f:d6:5f:eb:63:78:83:
62:2d:53:cb:a1:94:bb:78:81:64:d7:1c:41:30:54:dd:6f:1f:
5a:0f:69:73:dc:20:d5:25:8a:47:00:80:f4:b2:fd:77:59:3a:
c5:05:6d:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:20:51 2025 by rpki-client