Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/e67b1b-4b6f-4535-9311-4b9187d91c66/1/LosErWkLczj3wP51zzs6eFabquU.mft
File: LosErWkLczj3wP51zzs6eFabquU.mft (raw, json)
Hash identifier: CnId+RiDqD+vCamPafngan33KKuEt69p0ZFVfY34elM=
Subject key identifier: 3C:6A:89:3A:4B:3E:A7:1F:B3:FA:C6:9D:62:BE:4B:05:DB:A2:D1:0F
Authority key identifier: 2E:8B:04:AD:69:0B:73:38:F7:C0:FE:75:CF:3B:3A:78:56:9B:AA:E5
Certificate issuer: /CN=2e8b04ad690b7338f7c0fe75cf3b3a78569baae5
Certificate serial: 019767733E358AC1574751503A655D7D0CC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LosErWkLczj3wP51zzs6eFabquU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/e67b1b-4b6f-4535-9311-4b9187d91c66/1/LosErWkLczj3wP51zzs6eFabquU.mft
Manifest number: 101A
Signing time: Fri 13 Jun 2025 04:01:35 +0000
Manifest this update: Fri 13 Jun 2025 04:01:35 +0000
Manifest next update: Sat 14 Jun 2025 04:01:35 +0000
Files and hashes: 1: LosErWkLczj3wP51zzs6eFabquU.crl (hash: EzMRLxnkX0QMG9yjuVnxD0Ml6l2JnTAELDOSdSqg5MU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/e67b1b-4b6f-4535-9311-4b9187d91c66/1/LosErWkLczj3wP51zzs6eFabquU.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/e67b1b-4b6f-4535-9311-4b9187d91c66/1/LosErWkLczj3wP51zzs6eFabquU.mft
rsync://rpki.ripe.net/repository/DEFAULT/LosErWkLczj3wP51zzs6eFabquU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 04:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:67:73:3e:35:8a:c1:57:47:51:50:3a:65:5d:7d:0c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e8b04ad690b7338f7c0fe75cf3b3a78569baae5
Validity
Not Before: Jun 13 04:01:35 2025 GMT
Not After : Jun 14 04:01:35 2025 GMT
Subject: CN=3c6a893a4b3ea71fb3fac69d62be4b05dba2d10f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:32:9f:93:e4:4e:57:ab:76:7c:39:a5:b3:d4:
88:a1:fa:df:7d:ec:06:4b:ab:32:47:56:f8:e0:e5:
49:d3:f9:50:5b:ad:c1:6d:10:24:13:77:34:89:a6:
70:84:5f:d7:b2:33:f5:32:49:54:8b:65:73:6e:01:
cd:db:b5:fb:fd:09:8b:2f:20:ca:db:0c:df:0e:26:
14:5e:05:4b:d6:74:59:98:37:e7:d4:09:68:ef:25:
66:19:26:92:f3:1a:ec:a0:79:c8:5d:20:5c:7e:0e:
0a:8c:e7:82:dc:22:c3:f2:fa:f0:7c:ad:69:91:19:
0e:09:c0:69:ed:4b:d8:c8:40:4d:44:55:77:46:b4:
4d:54:ce:ad:9f:10:5e:80:be:79:15:46:6a:1b:69:
3c:d9:62:80:2b:87:c9:eb:a9:1f:f6:5b:38:73:10:
da:57:c6:bb:52:16:16:40:90:f3:f4:ea:75:64:e7:
1a:7a:ac:bc:ef:0f:8c:8b:07:b2:25:2d:b7:ea:29:
f7:09:e1:65:26:10:6a:fa:d8:7e:46:31:6d:c0:de:
62:ce:c2:79:12:7a:49:8f:37:47:ea:8d:c6:95:04:
08:17:87:b1:ff:15:62:b0:83:6d:0e:de:e7:e5:66:
04:f4:63:8e:81:7a:7e:8a:1e:3e:e9:a4:30:2f:bf:
c4:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:6A:89:3A:4B:3E:A7:1F:B3:FA:C6:9D:62:BE:4B:05:DB:A2:D1:0F
X509v3 Authority Key Identifier:
keyid:2E:8B:04:AD:69:0B:73:38:F7:C0:FE:75:CF:3B:3A:78:56:9B:AA:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LosErWkLczj3wP51zzs6eFabquU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e67b1b-4b6f-4535-9311-4b9187d91c66/1/LosErWkLczj3wP51zzs6eFabquU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e67b1b-4b6f-4535-9311-4b9187d91c66/1/LosErWkLczj3wP51zzs6eFabquU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:38:67:28:c3:2d:73:e1:c4:31:f2:7a:1e:dc:61:ab:fb:c9:
e7:43:ad:2f:a8:a9:a1:5c:8b:76:18:bd:22:b6:d9:bb:86:31:
10:4e:37:a8:d7:a7:df:0d:93:b4:58:ae:76:c3:6a:86:01:b9:
55:de:cd:aa:51:1c:b6:34:26:a9:f1:35:89:e1:4d:b1:ea:29:
07:76:9a:07:3e:0b:ea:12:a9:fd:d8:c4:f9:95:3d:58:32:87:
2f:b2:05:a1:15:61:aa:8d:d5:37:36:b4:17:e7:51:a0:0c:5a:
6f:6a:84:35:64:51:7d:c7:3d:1e:b4:a6:88:88:59:65:3c:43:
51:7a:e1:47:47:45:8f:56:2e:7c:8c:f0:d4:45:34:17:3e:19:
fd:c9:50:72:a9:72:8a:c0:b3:cb:92:da:ea:ef:76:af:72:31:
bd:cf:2d:4b:d6:21:cd:5f:ed:6c:30:01:29:bf:c7:71:8f:73:
5a:60:2b:b6:e8:dd:a6:d3:7e:cc:4f:f5:7e:b2:01:83:25:bc:
95:a1:fd:d3:11:56:0e:df:73:35:1d:84:8b:b4:0b:8c:86:a1:
75:97:46:b0:f1:e8:74:59:77:28:f9:f2:ec:98:3f:e8:f4:68:
20:c6:6d:cb:4b:41:ce:b5:d1:50:45:5e:47:af:c7:64:f4:af:
65:f8:e6:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdncz41isFXR1FQOmVdfQzAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlOGIwNGFkNjkwYjczMzhmN2MwZmU3NWNmM2IzYTc4NTY5
YmFhZTUwHhcNMjUwNjEzMDQwMTM1WhcNMjUwNjE0MDQwMTM1WjAzMTEwLwYDVQQD
EygzYzZhODkzYTRiM2VhNzFmYjNmYWM2OWQ2MmJlNGIwNWRiYTJkMTBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6zKfk+ROV6t2fDmls9SIofrffewG
S6syR1b44OVJ0/lQW63BbRAkE3c0iaZwhF/XsjP1MklUi2VzbgHN27X7/QmLLyDK
2wzfDiYUXgVL1nRZmDfn1Alo7yVmGSaS8xrsoHnIXSBcfg4KjOeC3CLD8vrwfK1p
kRkOCcBp7UvYyEBNRFV3RrRNVM6tnxBegL55FUZqG2k82WKAK4fJ66kf9ls4cxDa
V8a7UhYWQJDz9Op1ZOcaeqy87w+MiweyJS236in3CeFlJhBq+th+RjFtwN5izsJ5
EnpJjzdH6o3GlQQIF4ex/xVisINtDt7n5WYE9GOOgXp+ih4+6aQwL7/EAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDxqiTpLPqcfs/rGnWK+SwXbotEPMB8GA1UdIwQY
MBaAFC6LBK1pC3M498D+dc87OnhWm6rlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTG9zRXJXa0xjemozd1A1MXp6czZlRmFicXVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9lNjdiMWItNGI2Zi00NTM1LTkzMTEt
NGI5MTg3ZDkxYzY2LzEvTG9zRXJXa0xjemozd1A1MXp6czZlRmFicXVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni9lNjdiMWItNGI2Zi00NTM1LTkzMTEtNGI5MTg3ZDkxYzY2
LzEvTG9zRXJXa0xjemozd1A1MXp6czZlRmFicXVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADDhnKMMt
c+HEMfJ6Htxhq/vJ50OtL6ipoVyLdhi9IrbZu4YxEE43qNen3w2TtFiudsNqhgG5
Vd7NqlEctjQmqfE1ieFNseopB3aaBz4L6hKp/djE+ZU9WDKHL7IFoRVhqo3VNza0
F+dRoAxab2qENWRRfcc9HrSmiIhZZTxDUXrhR0dFj1YufIzw1EU0Fz4Z/clQcqly
isCzy5La6u92r3Ixvc8tS9YhzV/tbDABKb/HcY9zWmArtujdptN+zE/1frIBgyW8
laH90xFWDt9zNR2Ei7QLjIahdZdGsPHodFl3KPny7Jg/6PRoIMZty0tBzrXRUEVe
R6/HZPSvZfjm0A==
-----END CERTIFICATE-----
Generated at Fri Jun 13 14:36:05 2025 by rpki-client