Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft
File: Loskx2rYemwf7f-vCNmxe0UkmZE.mft (raw, json)
Hash identifier: egJNFmmowzOXJ27Z7zeNzFLE9v2cVrTOlhGdK284I4U=
Subject key identifier: 2E:04:F6:1B:39:E9:72:6D:26:37:67:C0:B6:15:BA:47:D3:F3:8F:60
Authority key identifier: 2E:8B:24:C7:6A:D8:7A:6C:1F:ED:FF:AF:08:D9:B1:7B:45:24:99:91
Certificate issuer: /CN=2e8b24c76ad87a6c1fedffaf08d9b17b45249991
Certificate serial: 01974EFBFB042CE1A9B561B983C1EB962478
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Loskx2rYemwf7f-vCNmxe0UkmZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft
Manifest number: 158E
Signing time: Sun 08 Jun 2025 10:00:25 +0000
Manifest this update: Sun 08 Jun 2025 10:00:25 +0000
Manifest next update: Mon 09 Jun 2025 10:00:25 +0000
Files and hashes: 1: Loskx2rYemwf7f-vCNmxe0UkmZE.crl (hash: esiACWC9bipaxc3lFYBIJIaEuHParjF/KIAhsjHxXl8=)
2: U7x9NHrOtVwpLBD4RJMdKYPQ-Mo.roa (hash: COXA0MHjLmP0wp5vDjDiQUXIbxhZE0gntg3Uospeavg=)
3: qBk8yEy6XQzjJQM_m4xKxUxOGWY.roa (hash: MrQEI7rx7w7zwtpbP6zhx6P3UqAEniYO/sUrOOmnWv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Loskx2rYemwf7f-vCNmxe0UkmZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:fb:fb:04:2c:e1:a9:b5:61:b9:83:c1:eb:96:24:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e8b24c76ad87a6c1fedffaf08d9b17b45249991
Validity
Not Before: Jun 8 10:00:25 2025 GMT
Not After : Jun 9 10:00:25 2025 GMT
Subject: CN=2e04f61b39e9726d263767c0b615ba47d3f38f60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b6:fb:63:19:c6:6d:87:a3:22:bc:57:05:bc:
19:a0:f4:87:eb:43:14:70:f9:23:9d:35:68:a2:6d:
46:0a:7b:10:ea:d4:d6:68:64:9a:0a:74:13:55:6a:
82:ea:dc:19:70:39:f3:e3:9b:e4:07:b1:53:a6:f4:
a3:94:8e:a7:f3:eb:3a:45:32:2c:ee:e2:7e:94:7d:
bf:11:30:09:95:34:0a:b5:c7:76:31:79:55:db:23:
7b:01:37:63:21:ea:8f:21:f8:78:f5:eb:87:05:8d:
a5:a3:4d:7a:50:41:81:a5:d3:70:f0:1a:88:4c:f9:
8b:37:ad:f2:03:6a:57:dd:1a:16:e2:a0:8e:98:26:
f9:3a:47:fc:fc:1e:66:a0:43:e6:cb:d6:60:cb:e9:
a2:7c:07:07:4d:1c:19:50:f7:9f:22:31:fc:dd:8f:
00:c2:e5:a3:dc:72:7d:64:68:cb:03:a2:60:2f:2d:
a5:43:7e:6c:4a:27:d2:a0:3b:73:0b:fb:6c:19:71:
b2:ea:84:9d:4b:a3:c3:cf:8e:70:a1:36:b9:55:00:
ff:e1:8f:1f:76:fe:c5:59:0c:58:7b:c7:5a:0c:a6:
c8:41:96:6a:cd:1b:b4:09:14:91:aa:70:b5:e4:60:
d8:f0:00:95:fd:4a:7b:fa:ee:d6:7c:b2:e0:48:01:
2d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:04:F6:1B:39:E9:72:6D:26:37:67:C0:B6:15:BA:47:D3:F3:8F:60
X509v3 Authority Key Identifier:
keyid:2E:8B:24:C7:6A:D8:7A:6C:1F:ED:FF:AF:08:D9:B1:7B:45:24:99:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Loskx2rYemwf7f-vCNmxe0UkmZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:87:b9:f6:2e:c3:19:b2:ea:62:4d:03:5e:e3:3f:97:b4:4e:
32:d9:62:4b:de:e6:5f:6e:c9:fa:e7:09:25:5c:b9:33:c5:06:
72:85:85:d2:d6:32:d0:30:09:a6:e9:3a:7e:ae:42:55:20:f2:
ea:fe:95:af:84:24:bd:14:c7:05:b2:d4:de:3e:97:c2:7c:32:
de:0f:5d:4a:95:10:76:01:f1:35:b0:57:47:5b:ba:ce:18:f7:
37:5d:d6:17:ed:c3:c6:86:58:7b:9a:8a:1a:3d:7a:d5:09:e4:
2d:03:bf:b5:9b:33:7a:08:54:c0:8b:1e:e0:a3:25:7a:2c:05:
49:d5:40:86:ac:9e:02:86:6a:d7:d8:db:c2:88:0b:89:65:ae:
bf:fc:9c:ed:f8:44:54:4d:c8:5d:d8:bc:f0:e3:b1:af:bf:1c:
07:90:12:b2:54:be:96:d0:2f:10:5f:7c:05:f7:ea:26:49:b6:
d8:cd:eb:09:dd:62:91:91:ea:e1:43:fa:1e:aa:93:58:49:f9:
8d:80:4a:7b:92:f6:f0:ed:49:75:25:72:8f:70:e5:cb:ed:b1:
a5:12:84:5d:9c:d8:fb:fc:23:c7:e0:e0:84:85:99:7c:c4:de:
b2:6a:22:5a:3b:07:ed:d1:f7:bf:b2:00:5b:c2:21:67:83:4c:
c5:42:57:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:33:40 2025 by rpki-client