Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/7c97cf-195c-4fc1-95a3-637fa14656de/1/looX4WGWu3qGcY5rK9agfje0DGU.mft
File: looX4WGWu3qGcY5rK9agfje0DGU.mft (raw, json)
Hash identifier: N5I5HvugBBKij0ZcXzIm17h5c1RcUMxTHKeXT8oYDH0=
Subject key identifier: F5:68:7C:B1:B0:CC:6A:03:1F:7F:36:55:EB:A2:E7:E7:D9:4F:A2:C5
Authority key identifier: 96:8A:17:E1:61:96:BB:7A:86:71:8E:6B:2B:D6:A0:7E:37:B4:0C:65
Certificate issuer: /CN=968a17e16196bb7a86718e6b2bd6a07e37b40c65
Certificate serial: 01963BE5ADD48883CE1F999D4724D8920D9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/looX4WGWu3qGcY5rK9agfje0DGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/7c97cf-195c-4fc1-95a3-637fa14656de/1/looX4WGWu3qGcY5rK9agfje0DGU.mft
Manifest number: 14EF
Signing time: Wed 16 Apr 2025 00:00:29 +0000
Manifest this update: Wed 16 Apr 2025 00:00:29 +0000
Manifest next update: Thu 17 Apr 2025 00:00:29 +0000
Files and hashes: 1: DujQDMx3DXEUwl_S25-DE-FhKlg.roa (hash: kc2HgT2zi7ovcfO8xiQnJUXKfZ/NJb+y4s0qXknod8A=)
2: looX4WGWu3qGcY5rK9agfje0DGU.crl (hash: mfTLDq/PqMjrvxRQ3zmnetRRPJ2x3D6wMZ/PlNUMSrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/7c97cf-195c-4fc1-95a3-637fa14656de/1/looX4WGWu3qGcY5rK9agfje0DGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/7c97cf-195c-4fc1-95a3-637fa14656de/1/looX4WGWu3qGcY5rK9agfje0DGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/looX4WGWu3qGcY5rK9agfje0DGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3b:e5:ad:d4:88:83:ce:1f:99:9d:47:24:d8:92:0d:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=968a17e16196bb7a86718e6b2bd6a07e37b40c65
Validity
Not Before: Apr 16 00:00:29 2025 GMT
Not After : Apr 17 00:00:29 2025 GMT
Subject: CN=f5687cb1b0cc6a031f7f3655eba2e7e7d94fa2c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:34:9c:5a:69:46:6b:54:03:f7:55:81:ac:f8:
02:40:ce:3e:36:c2:33:e2:87:19:3c:2c:08:fd:78:
80:15:16:69:f8:86:a8:35:18:72:34:4e:b1:ac:3f:
fa:b4:1a:49:ec:cb:c9:4d:47:9c:06:58:ce:9c:82:
16:92:f3:0d:49:e8:42:e7:e3:58:15:87:91:e1:db:
eb:5d:94:6e:38:ab:0f:12:8a:64:c2:d7:41:23:4f:
8d:8d:9a:bf:3f:5a:1e:11:18:7d:97:24:5c:80:9d:
f9:20:1e:85:c3:47:8d:35:30:68:d5:53:d4:b1:2d:
a7:c4:ec:0d:cd:71:9b:d4:3a:94:b1:a5:16:b3:40:
17:85:3a:27:59:5b:3e:5e:0e:cd:39:1d:cc:af:dd:
84:e4:4c:67:80:84:f7:8e:3f:a2:09:be:80:cf:c4:
9f:0a:32:4d:7c:c1:7a:03:1c:fe:68:23:38:f9:12:
ad:e7:fa:9b:b6:de:17:d2:66:a5:bf:af:d5:8b:f8:
f5:0c:9a:30:0d:c3:61:e1:aa:c8:eb:b9:c6:a5:99:
fa:92:e4:22:14:a3:e1:0f:77:aa:c2:3b:85:9c:48:
63:9f:f3:63:04:5b:f8:27:21:6a:97:34:ea:58:3c:
c3:06:19:42:07:a0:0e:ad:58:ce:3d:85:7d:8b:84:
b9:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:68:7C:B1:B0:CC:6A:03:1F:7F:36:55:EB:A2:E7:E7:D9:4F:A2:C5
X509v3 Authority Key Identifier:
keyid:96:8A:17:E1:61:96:BB:7A:86:71:8E:6B:2B:D6:A0:7E:37:B4:0C:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/looX4WGWu3qGcY5rK9agfje0DGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/7c97cf-195c-4fc1-95a3-637fa14656de/1/looX4WGWu3qGcY5rK9agfje0DGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/7c97cf-195c-4fc1-95a3-637fa14656de/1/looX4WGWu3qGcY5rK9agfje0DGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:ac:b0:d4:26:f2:84:6c:f4:6c:21:5c:d2:e8:16:4e:85:b7:
7f:11:f4:3f:00:19:ad:3f:10:2c:f9:cc:28:d5:6d:e8:f5:d1:
72:0b:52:6a:66:9f:a6:2e:c7:0e:b0:74:5a:4e:a7:6a:92:ca:
28:75:cf:02:2e:d5:ab:59:74:5c:84:31:00:9b:31:de:de:72:
f8:9d:16:b8:3e:29:66:7a:d4:50:5d:d7:74:ee:6b:d2:66:fa:
41:fc:c3:bf:c8:53:8d:9b:27:23:5a:fd:08:e3:f4:d9:9b:91:
59:a4:bc:e1:99:ec:12:34:e7:87:ef:d2:03:7a:b8:0d:7a:45:
c0:8d:79:b3:97:3c:9d:3d:e0:f2:06:9c:32:55:70:61:31:2a:
b9:e9:f3:39:6e:d4:1d:e5:76:d3:48:8b:86:5f:11:c1:f0:36:
2b:e7:f8:e3:28:4d:db:46:7a:f6:b8:d8:76:ba:a2:1e:e9:d3:
c3:00:23:45:ba:1e:55:ef:52:4c:c8:f2:0b:26:83:48:47:03:
ba:4c:29:5a:22:de:94:0a:d3:85:c5:e1:2a:b7:26:94:39:a5:
46:29:5a:c3:fc:84:26:da:0c:6b:d7:c3:a9:b4:2a:be:e6:d3:
8a:d0:01:bf:17:2a:de:dd:35:2e:4e:dc:18:e1:d2:e3:62:f5:
fb:e8:10:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 05:01:59 2025 by rpki-client