Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/e67b1b-4b6f-4535-9311-4b9187d91c66/1/LosErWkLczj3wP51zzs6eFabquU.mft
File: LosErWkLczj3wP51zzs6eFabquU.mft (raw, json)
Hash identifier: EWHMKTLVtD4fuBwX2Escv/NmCy8YUZgEECBJjm7JiI4=
Subject key identifier: 27:3C:EA:F3:54:A8:5F:6F:4D:8C:44:24:08:0A:12:F0:8E:5E:E4:45
Authority key identifier: 2E:8B:04:AD:69:0B:73:38:F7:C0:FE:75:CF:3B:3A:78:56:9B:AA:E5
Certificate issuer: /CN=2e8b04ad690b7338f7c0fe75cf3b3a78569baae5
Certificate serial: 019759ED8C258CB45E0D5B671A0F6F5DE962
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LosErWkLczj3wP51zzs6eFabquU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/e67b1b-4b6f-4535-9311-4b9187d91c66/1/LosErWkLczj3wP51zzs6eFabquU.mft
Manifest number: 1013
Signing time: Tue 10 Jun 2025 13:00:29 +0000
Manifest this update: Tue 10 Jun 2025 13:00:29 +0000
Manifest next update: Wed 11 Jun 2025 13:00:29 +0000
Files and hashes: 1: LosErWkLczj3wP51zzs6eFabquU.crl (hash: jndQuCFn2NNtZANtDu9DqLAObhugQCW5ZIdhvKqqUvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/e67b1b-4b6f-4535-9311-4b9187d91c66/1/LosErWkLczj3wP51zzs6eFabquU.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/e67b1b-4b6f-4535-9311-4b9187d91c66/1/LosErWkLczj3wP51zzs6eFabquU.mft
rsync://rpki.ripe.net/repository/DEFAULT/LosErWkLczj3wP51zzs6eFabquU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 13:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:ed:8c:25:8c:b4:5e:0d:5b:67:1a:0f:6f:5d:e9:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e8b04ad690b7338f7c0fe75cf3b3a78569baae5
Validity
Not Before: Jun 10 13:00:29 2025 GMT
Not After : Jun 11 13:00:29 2025 GMT
Subject: CN=273ceaf354a85f6f4d8c4424080a12f08e5ee445
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:02:35:bd:78:34:5e:d9:e7:0a:41:66:c8:85:
88:74:99:6a:12:98:22:00:7c:ac:38:a6:2b:09:97:
1a:77:3c:6c:fc:96:a9:aa:64:21:21:db:42:90:a6:
bc:33:2e:13:b3:45:1a:50:c9:9d:d1:bb:f7:40:00:
2b:c0:09:1c:fa:dd:fa:af:0f:d2:a1:2e:43:b6:dc:
f8:15:71:4e:bf:07:5f:68:2f:0d:61:60:da:f8:a7:
94:b0:8c:92:e9:b5:6e:b4:0a:6a:af:9c:82:31:0f:
a4:65:af:dc:6f:dc:ee:a5:7b:57:a9:0a:89:64:3f:
9b:0d:62:56:e2:9b:5b:d5:2e:b7:41:c3:40:ee:af:
44:7c:cc:cb:fa:32:d8:c9:1a:2a:61:72:99:87:7e:
d1:4b:bc:95:f6:af:37:40:94:6f:71:2d:24:cc:1f:
0e:4f:f7:fb:2f:61:13:6b:4b:ec:e1:b4:2f:98:12:
c6:45:ca:26:38:22:a0:1f:b4:a3:4c:9f:e4:aa:b0:
2e:8e:03:a8:32:81:da:cd:af:0b:dd:53:0a:97:83:
b9:f4:54:f2:53:9b:db:78:79:a6:93:f0:d9:70:3f:
43:a0:4a:4c:63:34:98:ad:1b:84:62:c6:9f:14:2b:
f5:84:0b:a9:40:a5:1b:78:d1:b3:20:bd:3c:1b:3b:
ac:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:3C:EA:F3:54:A8:5F:6F:4D:8C:44:24:08:0A:12:F0:8E:5E:E4:45
X509v3 Authority Key Identifier:
keyid:2E:8B:04:AD:69:0B:73:38:F7:C0:FE:75:CF:3B:3A:78:56:9B:AA:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LosErWkLczj3wP51zzs6eFabquU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e67b1b-4b6f-4535-9311-4b9187d91c66/1/LosErWkLczj3wP51zzs6eFabquU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e67b1b-4b6f-4535-9311-4b9187d91c66/1/LosErWkLczj3wP51zzs6eFabquU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:f0:9c:a0:e0:28:6a:c4:a8:c5:6d:47:df:85:13:a0:5e:40:
e6:bc:b5:bc:8d:e5:7c:8e:94:b2:41:a9:ec:75:26:9c:72:3a:
da:71:35:46:f2:f9:a1:0d:b0:c0:fe:de:28:99:37:3c:0e:d2:
0e:a3:44:a5:6e:3e:47:4f:10:b9:64:be:8a:dc:26:f1:4c:d1:
12:96:04:bb:18:33:19:95:08:14:22:33:3c:b3:b0:57:3f:16:
f0:bc:4c:cb:0c:ed:ca:35:6f:be:fd:b2:79:a6:05:1f:f8:b7:
32:83:76:2d:da:b9:f6:da:23:81:90:e6:cf:64:dc:9d:74:7b:
80:3e:ff:68:40:e3:eb:c6:de:9b:1e:ef:b4:8f:ae:4a:5d:e3:
b4:c2:20:33:1b:68:e0:93:a3:c0:22:ed:79:50:8b:6d:a2:71:
b9:2d:45:0b:97:b2:f9:64:77:1f:f0:9b:53:d3:7e:9b:ae:2e:
88:a5:af:5a:03:d5:fc:77:c3:16:d9:74:34:f0:aa:4b:e7:3d:
16:8d:96:09:8a:9b:f4:cf:73:76:e1:1d:b0:8e:f7:4c:28:5d:
b5:4c:89:e0:f6:39:f7:ed:55:f5:d5:53:b5:c8:df:73:97:b3:
c7:d7:ec:d3:f4:41:de:04:2a:87:b5:5e:44:8d:fd:5b:d5:87:
21:2e:d0:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 21:06:55 2025 by rpki-client