Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/LOre5Y-GT0cutCKwuVSXuFB1oSs.mft
File: LOre5Y-GT0cutCKwuVSXuFB1oSs.mft (raw, json)
Hash identifier: evPF5hk5UjYgenqCOFJ8lVxaanvrDxn2dtPsC6RH5bc=
Subject key identifier: 13:3A:90:2B:92:3F:A1:73:EB:76:D0:C7:A0:6D:16:EF:D0:14:12:5C
Authority key identifier: 2C:EA:DE:E5:8F:86:4F:47:2E:B4:22:B0:B9:54:97:B8:50:75:A1:2B
Certificate issuer: /CN=2ceadee58f864f472eb422b0b95497b85075a12b
Certificate serial: 01958BBBD37C4A474F6010C5B0C9F95E43F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LOre5Y-GT0cutCKwuVSXuFB1oSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/LOre5Y-GT0cutCKwuVSXuFB1oSs.mft
Manifest number: 12E4
Signing time: Wed 12 Mar 2025 19:01:37 +0000
Manifest this update: Wed 12 Mar 2025 19:01:37 +0000
Manifest next update: Thu 13 Mar 2025 19:01:37 +0000
Files and hashes: 1: FBdl7VOodLJhSXYfDoAofAIRhnA.roa (hash: I3zrIjexf9/s3BfDjPpCzKMEPfl4E3s1P3fqPquhjIg=)
2: LOre5Y-GT0cutCKwuVSXuFB1oSs.crl (hash: 7bGydrXoUgV9xI5ZtFWkwOnD0v4vazoCR07dl42X2dM=)
3: ZBji9OX_VotOWmsBmNsHM021d9w.roa (hash: VbyaXchd5eBQYGJ65pdgdekBYkxDCu5DrAnwaoKvIrc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/LOre5Y-GT0cutCKwuVSXuFB1oSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/LOre5Y-GT0cutCKwuVSXuFB1oSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/LOre5Y-GT0cutCKwuVSXuFB1oSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:bb:d3:7c:4a:47:4f:60:10:c5:b0:c9:f9:5e:43:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ceadee58f864f472eb422b0b95497b85075a12b
Validity
Not Before: Mar 12 19:01:37 2025 GMT
Not After : Mar 13 19:01:37 2025 GMT
Subject: CN=133a902b923fa173eb76d0c7a06d16efd014125c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:28:09:1e:32:39:36:77:a4:5c:eb:aa:f6:cf:
3b:ed:46:c7:b7:41:e7:a4:37:0b:64:39:26:da:5a:
77:73:75:2e:ad:e5:ce:5d:31:a0:5d:0c:1f:08:d6:
6d:94:10:88:c2:19:18:fd:24:19:cb:b8:44:75:b7:
e0:4e:39:68:75:0d:ae:43:57:38:fe:21:93:67:8e:
f2:77:7f:03:4f:ba:b8:67:e5:be:88:98:98:98:92:
9c:81:30:e9:4f:f3:59:c1:9a:3b:12:ab:23:49:ff:
91:35:2d:93:f9:f9:dc:c0:71:04:0e:59:bf:05:4b:
1a:32:43:5b:b0:70:cd:cf:e7:c8:ad:a7:88:2e:54:
64:e5:00:ff:c7:ac:c8:6c:ba:ae:dc:b0:45:11:fa:
fa:1c:75:c3:1d:f0:b4:c4:c0:e0:24:65:e9:bc:d8:
ad:5c:71:8e:37:3d:f1:07:37:cb:39:55:d4:46:4c:
69:af:bb:7f:4d:6d:63:18:67:fa:fa:31:dd:2d:9f:
a9:66:54:aa:8c:c2:9d:ab:30:ea:55:82:7d:5e:51:
a5:82:30:d0:4e:1b:3a:d0:3d:ff:fc:7a:26:02:e0:
9a:f0:99:da:3d:f1:1a:39:14:7d:63:05:58:36:88:
86:35:fc:e2:a3:cf:ae:a6:ce:a4:87:e0:b9:ae:e2:
66:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:3A:90:2B:92:3F:A1:73:EB:76:D0:C7:A0:6D:16:EF:D0:14:12:5C
X509v3 Authority Key Identifier:
keyid:2C:EA:DE:E5:8F:86:4F:47:2E:B4:22:B0:B9:54:97:B8:50:75:A1:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LOre5Y-GT0cutCKwuVSXuFB1oSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/LOre5Y-GT0cutCKwuVSXuFB1oSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/LOre5Y-GT0cutCKwuVSXuFB1oSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:fd:e7:20:ee:f8:c5:89:69:e4:63:38:2a:19:ec:de:be:79:
cb:9e:3e:f6:95:92:74:7d:a7:5f:3f:40:68:08:2d:7e:56:e8:
26:69:08:d4:5e:4e:06:9e:e6:19:eb:68:80:71:fd:8e:c8:78:
99:07:b3:05:fe:c7:b3:2f:97:29:14:d8:e2:0d:9f:72:4e:ca:
cb:26:da:2c:0b:50:e9:1b:45:f4:90:32:8d:98:c1:cf:b9:75:
0f:75:ce:78:6e:3c:3f:6a:f9:bd:67:6f:a5:72:d3:45:a5:a4:
5f:1d:18:06:c8:65:14:df:f9:96:64:e6:74:ae:38:05:69:98:
29:49:96:6c:f8:7b:58:7a:cc:b4:5e:54:28:69:91:a5:ea:0a:
b7:87:d6:d1:a1:77:47:a3:bb:e1:d2:bb:6e:77:c2:a3:5e:c2:
89:c9:6e:17:67:aa:b2:16:08:cb:c2:90:b1:1a:98:e1:bd:2a:
e5:28:6e:db:45:77:48:95:69:df:d5:ee:d6:d6:e9:8a:87:60:
3f:22:18:03:f8:e8:e7:22:b9:79:b0:4a:21:c3:0d:3b:b9:3c:
2b:87:17:8f:e0:2c:7c:ff:f6:09:7a:10:8b:e6:ce:aa:8d:b6:
13:8d:38:79:ff:c3:b5:87:10:ac:27:98:66:74:f3:f4:be:4d:
31:1c:45:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWLu9N8SkdPYBDFsMn5XkPzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjZWFkZWU1OGY4NjRmNDcyZWI0MjJiMGI5NTQ5N2I4NTA3
NWExMmIwHhcNMjUwMzEyMTkwMTM3WhcNMjUwMzEzMTkwMTM3WjAzMTEwLwYDVQQD
EygxMzNhOTAyYjkyM2ZhMTczZWI3NmQwYzdhMDZkMTZlZmQwMTQxMjVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCgJHjI5NnekXOuq9s877UbHt0Hn
pDcLZDkm2lp3c3UureXOXTGgXQwfCNZtlBCIwhkY/SQZy7hEdbfgTjlodQ2uQ1c4
/iGTZ47yd38DT7q4Z+W+iJiYmJKcgTDpT/NZwZo7EqsjSf+RNS2T+fncwHEEDlm/
BUsaMkNbsHDNz+fIraeILlRk5QD/x6zIbLqu3LBFEfr6HHXDHfC0xMDgJGXpvNit
XHGONz3xBzfLOVXURkxpr7t/TW1jGGf6+jHdLZ+pZlSqjMKdqzDqVYJ9XlGlgjDQ
Ths60D3//HomAuCa8JnaPfEaORR9YwVYNoiGNfzio8+ups6kh+C5ruJmhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBM6kCuSP6Fz63bQx6BtFu/QFBJcMB8GA1UdIwQY
MBaAFCzq3uWPhk9HLrQisLlUl7hQdaErMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTE9yZTVZLUdUMGN1dENLd3VWU1h1RkIxb1NzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi83YzJlODQtZTZjYy00NzUxLTg4N2It
YmM3YTI0YzJlMjE5LzEvTE9yZTVZLUdUMGN1dENLd3VWU1h1RkIxb1NzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi83YzJlODQtZTZjYy00NzUxLTg4N2ItYmM3YTI0YzJlMjE5
LzEvTE9yZTVZLUdUMGN1dENLd3VWU1h1RkIxb1NzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR/3nIO74
xYlp5GM4Khns3r55y54+9pWSdH2nXz9AaAgtflboJmkI1F5OBp7mGetogHH9jsh4
mQezBf7Hsy+XKRTY4g2fck7KyybaLAtQ6RtF9JAyjZjBz7l1D3XOeG48P2r5vWdv
pXLTRaWkXx0YBshlFN/5lmTmdK44BWmYKUmWbPh7WHrMtF5UKGmRpeoKt4fW0aF3
R6O74dK7bnfCo17CicluF2eqshYIy8KQsRqY4b0q5Shu20V3SJVp39Xu1tbpiodg
PyIYA/jo5yK5ebBKIcMNO7k8K4cXj+AsfP/2CXoQi+bOqo22E404ef/DtYcQrCeY
ZnTz9L5NMRxFGg==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:57:17 2025 by rpki-client