Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft
File: Loskx2rYemwf7f-vCNmxe0UkmZE.mft (raw, json)
Hash identifier: E+TmTy9y0eF1iF5H1G1Tp3KrHjyIQJSI2fUMOyCDvtc=
Subject key identifier: 0D:2C:FF:C5:56:B7:CD:FF:DF:E4:AB:3D:D2:E7:76:99:0B:51:7B:C9
Authority key identifier: 2E:8B:24:C7:6A:D8:7A:6C:1F:ED:FF:AF:08:D9:B1:7B:45:24:99:91
Certificate issuer: /CN=2e8b24c76ad87a6c1fedffaf08d9b17b45249991
Certificate serial: 01992AEA57AABF6EBF6AEE3C8AEE4ADEBAD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Loskx2rYemwf7f-vCNmxe0UkmZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft
Manifest number: 1689
Signing time: Mon 08 Sep 2025 20:00:24 +0000
Manifest this update: Mon 08 Sep 2025 20:00:24 +0000
Manifest next update: Tue 09 Sep 2025 20:00:24 +0000
Files and hashes: 1: EUXa9q5xtqzn4TSNfTmHnokkF1o.roa (hash: ADBuDOAgvTiWwaaapmGOXdArliGnR/m+Z6wK3OiJpWM=)
2: Loskx2rYemwf7f-vCNmxe0UkmZE.crl (hash: FNWiiKI1gMUYJNG1C+HHDBpwyZTSF5d5fuGdvSbdiwk=)
3: U7x9NHrOtVwpLBD4RJMdKYPQ-Mo.roa (hash: COXA0MHjLmP0wp5vDjDiQUXIbxhZE0gntg3Uospeavg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Loskx2rYemwf7f-vCNmxe0UkmZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2a:ea:57:aa:bf:6e:bf:6a:ee:3c:8a:ee:4a:de:ba:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e8b24c76ad87a6c1fedffaf08d9b17b45249991
Validity
Not Before: Sep 8 20:00:24 2025 GMT
Not After : Sep 9 20:00:24 2025 GMT
Subject: CN=0d2cffc556b7cdffdfe4ab3dd2e776990b517bc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a5:d5:7f:b0:63:1e:60:fa:45:d5:02:e5:d8:
d8:0c:22:0f:8d:9a:82:57:50:42:49:dd:4e:cf:ae:
1c:05:44:cf:8c:36:2b:e6:fa:1d:63:ce:81:5b:20:
b9:64:87:04:2b:60:0a:1c:0c:0b:ee:9e:ac:f9:d6:
84:ae:c1:5c:dd:4c:f1:89:1f:f3:ad:3d:0a:c2:12:
ac:e9:b4:ea:3d:a0:d4:41:30:8b:c3:64:5d:f9:56:
1d:11:2e:81:7c:38:40:df:b1:c7:a9:52:71:52:f9:
b6:47:61:fd:66:cc:29:0b:8c:18:eb:cd:e4:06:b5:
eb:7c:8a:c7:78:46:a6:16:98:3c:1b:b6:4d:85:fe:
5e:ea:88:5b:c2:50:ed:8c:30:5a:02:ac:e3:8c:a2:
32:20:96:1b:01:27:47:a9:a3:bb:34:e4:04:c0:9d:
76:b5:ba:0b:ad:29:ed:0d:ea:4a:0b:b6:2f:cc:70:
5c:1c:2b:7a:1a:f6:36:0c:6f:f2:51:e3:94:6c:19:
27:67:59:c6:b5:bf:ef:73:c6:50:4a:2b:9f:87:7b:
ef:03:c8:1b:b3:6f:8a:97:8a:1a:ea:73:f6:9c:0d:
0a:e2:78:5d:3b:b4:01:78:66:2c:41:20:91:2c:9e:
11:b4:98:1b:f2:d5:bf:ae:90:60:06:c4:7e:78:f4:
7f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:2C:FF:C5:56:B7:CD:FF:DF:E4:AB:3D:D2:E7:76:99:0B:51:7B:C9
X509v3 Authority Key Identifier:
keyid:2E:8B:24:C7:6A:D8:7A:6C:1F:ED:FF:AF:08:D9:B1:7B:45:24:99:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Loskx2rYemwf7f-vCNmxe0UkmZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:56:da:83:d0:1a:7d:f6:96:5a:e9:0e:ab:9a:fb:90:89:72:
a2:e8:89:83:cb:15:ce:a0:6b:2c:d2:1b:1b:d5:cd:4f:dd:a0:
4e:30:31:5a:3a:46:05:1b:eb:8f:aa:71:3b:a8:0b:b0:a7:f4:
e2:19:ba:be:81:06:22:cd:d5:fc:8d:d5:b8:14:76:9b:a8:b1:
13:48:d4:93:3c:38:09:55:b9:43:ee:8a:d3:52:07:f6:26:92:
20:aa:55:bf:df:a9:16:0d:d0:07:a4:34:7a:db:bd:6b:6b:97:
0e:54:f0:45:19:f1:59:ed:e7:b8:f6:a0:22:1b:68:9b:9d:92:
b1:d1:f5:de:61:31:89:a1:ad:f5:b4:23:db:dd:ee:2a:ce:30:
5c:eb:b7:fd:09:00:ba:79:0d:d4:77:fa:a4:fb:25:73:f7:1a:
6c:a6:bd:d4:e0:26:a4:40:c9:d3:07:aa:e0:75:02:81:66:1d:
26:8c:0e:94:5e:d7:a5:92:ea:df:2b:fe:99:d0:b3:b5:3c:96:
ca:cd:00:92:40:d7:26:9f:00:75:57:79:ad:d6:a6:7b:dd:23:
b8:b7:9b:81:0d:6b:f1:3a:c2:46:d8:16:80:12:1d:54:08:a8:
04:57:cc:2c:d4:01:fd:44:b4:6a:8b:e6:9d:9e:b4:cc:f0:45:
ef:9d:dd:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 04:09:14 2025 by rpki-client