Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft
File: Loskx2rYemwf7f-vCNmxe0UkmZE.mft (raw, json)
Hash identifier: 9zZZG1DuJmGZK4WqVm/thDtNCRcry14JlUNss3ih5wk=
Subject key identifier: B6:37:D9:3A:2A:C9:4E:92:86:FE:E6:0D:99:B0:98:68:79:89:B1:C9
Authority key identifier: 2E:8B:24:C7:6A:D8:7A:6C:1F:ED:FF:AF:08:D9:B1:7B:45:24:99:91
Certificate issuer: /CN=2e8b24c76ad87a6c1fedffaf08d9b17b45249991
Certificate serial: 01964A4668CEF3369A9D19810B091228E26F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Loskx2rYemwf7f-vCNmxe0UkmZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft
Manifest number: 1507
Signing time: Fri 18 Apr 2025 19:00:50 +0000
Manifest this update: Fri 18 Apr 2025 19:00:50 +0000
Manifest next update: Sat 19 Apr 2025 19:00:50 +0000
Files and hashes: 1: Loskx2rYemwf7f-vCNmxe0UkmZE.crl (hash: F3h4QRMcTgAIK+bg8efP8bC5juwnveqnlJ69r9YjoJE=)
2: U7x9NHrOtVwpLBD4RJMdKYPQ-Mo.roa (hash: COXA0MHjLmP0wp5vDjDiQUXIbxhZE0gntg3Uospeavg=)
3: qBk8yEy6XQzjJQM_m4xKxUxOGWY.roa (hash: MrQEI7rx7w7zwtpbP6zhx6P3UqAEniYO/sUrOOmnWv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Loskx2rYemwf7f-vCNmxe0UkmZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:46:68:ce:f3:36:9a:9d:19:81:0b:09:12:28:e2:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e8b24c76ad87a6c1fedffaf08d9b17b45249991
Validity
Not Before: Apr 18 19:00:50 2025 GMT
Not After : Apr 19 19:00:50 2025 GMT
Subject: CN=b637d93a2ac94e9286fee60d99b098687989b1c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:b0:7c:b0:4c:d8:44:bb:7e:f3:38:cd:5e:85:
a2:98:e6:61:10:28:39:c7:a9:8e:67:48:ed:19:9c:
92:af:94:ce:c6:d8:d4:a1:5e:7e:85:37:f9:28:97:
1a:f4:4b:2c:ab:3e:91:cf:6c:ec:30:28:2b:e1:5b:
df:0a:6b:cc:28:61:ab:dd:c0:f7:0c:f4:5c:ba:5e:
b5:80:60:da:37:d9:7a:14:f2:cf:77:8c:45:58:1a:
2d:c8:ff:77:95:8b:b4:7b:1c:88:da:59:04:fb:68:
99:bf:8d:c1:0c:e9:2d:d1:83:b3:3c:a6:4d:f8:02:
96:1c:fa:ac:a4:19:16:b6:6b:3e:0e:b5:e6:c9:7d:
bd:ff:43:87:a0:f6:d0:fd:92:1d:48:47:cf:36:0f:
91:f9:43:a7:86:45:ac:7c:6f:29:8b:ed:c6:81:90:
d4:54:03:fb:05:44:4a:1d:a0:6a:1e:45:a1:a5:59:
75:13:c2:11:eb:65:a8:dc:8f:91:5d:bc:76:9b:4d:
ab:66:d4:9f:d4:be:a7:51:47:62:03:8a:9d:14:b4:
5d:d5:9e:b3:ee:56:14:4f:1f:a1:6c:b1:c5:f3:85:
11:ea:be:88:99:8c:6a:da:d6:86:9d:ba:70:46:69:
2a:d2:a1:ce:27:7f:75:67:1b:53:0b:ce:e7:2e:ca:
52:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:37:D9:3A:2A:C9:4E:92:86:FE:E6:0D:99:B0:98:68:79:89:B1:C9
X509v3 Authority Key Identifier:
keyid:2E:8B:24:C7:6A:D8:7A:6C:1F:ED:FF:AF:08:D9:B1:7B:45:24:99:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Loskx2rYemwf7f-vCNmxe0UkmZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:f8:46:cc:6f:86:e3:c3:37:88:56:43:90:f3:d2:bb:83:fb:
e8:52:01:ad:01:eb:e5:ef:2d:c9:89:ec:c2:08:a2:7c:9c:fa:
59:dd:41:0d:0d:3b:e7:9d:e1:76:9d:f5:04:be:bf:61:75:c1:
9e:53:ea:ee:86:6d:7c:17:ba:04:c4:9d:39:ab:8d:62:6c:95:
7b:c1:b6:0e:e8:36:91:25:ac:ed:4c:af:f5:76:88:4a:3e:4f:
6d:9b:db:38:24:cf:b4:2c:b3:88:10:66:75:6b:f6:bd:d2:e5:
90:fe:8a:b0:55:db:56:9f:cf:c6:41:44:eb:c2:be:a7:49:34:
c1:8c:14:ae:04:45:6e:46:75:66:6b:27:43:87:d6:17:00:b3:
63:28:e0:ab:eb:d3:ef:04:66:bc:1f:14:c2:ec:fe:86:b8:36:
74:90:e3:4b:12:20:81:e7:4b:35:4c:f4:98:5a:32:93:37:d7:
9a:03:3d:8b:f2:16:0c:66:00:bd:29:98:dc:02:c4:92:af:20:
af:66:41:f2:d2:1a:96:6e:b6:89:62:47:54:21:6b:bd:79:c0:
f0:0a:aa:f7:be:df:ce:57:49:b9:b5:31:93:ef:73:5e:82:56:
8a:e5:20:00:e8:4b:96:15:15:80:7f:27:c3:b1:68:3f:9b:40:
da:53:34:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 05:51:16 2025 by rpki-client