Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/LOre5Y-GT0cutCKwuVSXuFB1oSs.mft
File: LOre5Y-GT0cutCKwuVSXuFB1oSs.mft (raw, json)
Hash identifier: q0rRXINmLngBqzmbHBaFAf11PnQWp0lklx6rxv5JK+0=
Subject key identifier: 9A:3A:41:D0:06:97:3A:5E:22:18:84:1A:7D:26:2F:26:AA:18:FD:45
Authority key identifier: 2C:EA:DE:E5:8F:86:4F:47:2E:B4:22:B0:B9:54:97:B8:50:75:A1:2B
Certificate issuer: /CN=2ceadee58f864f472eb422b0b95497b85075a12b
Certificate serial: 019749D5F9292EE9DFB075466968346D2811
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LOre5Y-GT0cutCKwuVSXuFB1oSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/LOre5Y-GT0cutCKwuVSXuFB1oSs.mft
Manifest number: 13CB
Signing time: Sat 07 Jun 2025 10:00:49 +0000
Manifest this update: Sat 07 Jun 2025 10:00:49 +0000
Manifest next update: Sun 08 Jun 2025 10:00:49 +0000
Files and hashes: 1: FBdl7VOodLJhSXYfDoAofAIRhnA.roa (hash: I3zrIjexf9/s3BfDjPpCzKMEPfl4E3s1P3fqPquhjIg=)
2: LOre5Y-GT0cutCKwuVSXuFB1oSs.crl (hash: kCVsaSmS4CMNOWWBYgA52wQmt7aLhayTe2fi5mxJlLM=)
3: ZBji9OX_VotOWmsBmNsHM021d9w.roa (hash: VbyaXchd5eBQYGJ65pdgdekBYkxDCu5DrAnwaoKvIrc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/LOre5Y-GT0cutCKwuVSXuFB1oSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/LOre5Y-GT0cutCKwuVSXuFB1oSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/LOre5Y-GT0cutCKwuVSXuFB1oSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:f9:29:2e:e9:df:b0:75:46:69:68:34:6d:28:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ceadee58f864f472eb422b0b95497b85075a12b
Validity
Not Before: Jun 7 10:00:49 2025 GMT
Not After : Jun 8 10:00:49 2025 GMT
Subject: CN=9a3a41d006973a5e2218841a7d262f26aa18fd45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9f:55:3e:c3:91:91:32:71:06:98:45:8c:08:
0f:48:cf:0c:dc:d7:65:fb:7d:ae:ef:e8:77:38:3a:
f6:db:13:63:df:4e:c0:c3:a0:e4:5e:68:22:bc:f2:
30:f4:63:68:33:7e:e2:52:82:b4:9a:38:47:88:8f:
c3:d5:a2:c7:66:b5:a9:b5:66:cd:a9:74:4d:62:e5:
06:fc:b6:fa:9f:61:87:3a:d0:cd:7a:72:4a:27:6f:
1b:17:9f:91:8f:52:44:2f:b4:0b:db:0f:0d:a2:26:
dd:52:5f:b2:84:b8:e4:8a:f5:26:29:d0:d6:ed:93:
a4:2b:66:8e:de:a0:45:5c:3d:9a:f3:52:4b:2e:be:
24:28:33:c4:d3:e5:af:ac:d4:0a:d5:45:9e:bc:b5:
28:49:9f:10:f5:e1:b6:f5:a4:f3:c0:a1:11:7b:46:
b2:1b:4c:6e:4b:c3:f1:a0:8b:07:35:1e:46:94:e1:
bc:67:17:8f:0a:1d:e2:a4:1e:a4:07:72:f4:cf:8a:
a6:11:ef:e5:c6:11:d1:ce:03:1d:65:a9:61:e8:ac:
34:87:5a:d5:1e:80:7c:c5:14:7f:d2:21:5f:d0:78:
38:dc:5e:a2:20:53:7e:25:17:8a:d0:99:3a:2c:34:
f8:2f:30:00:6f:de:c0:ed:f1:d8:de:99:3a:78:7a:
a5:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:3A:41:D0:06:97:3A:5E:22:18:84:1A:7D:26:2F:26:AA:18:FD:45
X509v3 Authority Key Identifier:
keyid:2C:EA:DE:E5:8F:86:4F:47:2E:B4:22:B0:B9:54:97:B8:50:75:A1:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LOre5Y-GT0cutCKwuVSXuFB1oSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/LOre5Y-GT0cutCKwuVSXuFB1oSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/LOre5Y-GT0cutCKwuVSXuFB1oSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:e6:92:71:4a:d7:ab:8b:19:14:37:83:b6:db:4e:d6:fc:5f:
cf:ff:5c:f5:70:c0:6f:46:ef:9e:1a:eb:d4:f9:0c:c5:64:e7:
df:f2:c8:23:27:00:0c:cb:d3:e5:60:ae:f6:d1:ff:27:b8:a1:
2e:01:04:b5:46:a1:ba:15:f2:dc:d4:b8:b1:a0:89:2f:e8:1e:
8d:7c:11:9b:17:aa:6b:9c:aa:8b:f0:71:90:87:f0:98:da:62:
a5:7f:c9:9a:36:66:ae:c9:5b:a8:37:31:67:07:29:e2:4c:66:
b2:a9:3a:ec:4c:c4:7c:f2:9d:96:9f:72:46:1e:e3:cd:0f:88:
53:82:24:6c:c4:dd:76:36:b7:fc:c6:8d:62:a5:c3:ab:04:f7:
0e:1b:34:f4:c6:de:6e:7a:0f:21:05:6e:09:dd:f7:b6:47:ae:
81:bc:73:b2:b2:23:fa:57:53:1b:d0:7d:b3:3e:c6:10:f0:b1:
db:3f:9d:b4:10:0a:08:f3:0d:c0:15:a0:b1:8e:7a:55:71:30:
52:94:2f:a5:7c:8d:75:a9:b5:c8:b5:55:44:e8:1c:be:bd:33:
75:64:f1:ac:a6:95:10:66:df:e1:c6:8b:f9:39:33:79:15:05:
06:eb:dc:7f:f6:a0:57:a2:83:87:76:a3:af:f8:c4:81:c6:39:
e9:91:b8:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 19:17:11 2025 by rpki-client