Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/7c97cf-195c-4fc1-95a3-637fa14656de/1/looX4WGWu3qGcY5rK9agfje0DGU.mft
File: looX4WGWu3qGcY5rK9agfje0DGU.mft (raw, json)
Hash identifier: h36UJ1WdAt7N09g9NBvQF9StnRYEUJ5OZaZSshNzAcI=
Subject key identifier: 56:F7:30:34:7C:D5:80:40:AE:DE:D6:A6:1F:90:A1:38:FF:A8:AD:B9
Authority key identifier: 96:8A:17:E1:61:96:BB:7A:86:71:8E:6B:2B:D6:A0:7E:37:B4:0C:65
Certificate issuer: /CN=968a17e16196bb7a86718e6b2bd6a07e37b40c65
Certificate serial: 01974666A1D0EF4535BB70D93D01FC01602B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/looX4WGWu3qGcY5rK9agfje0DGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/7c97cf-195c-4fc1-95a3-637fa14656de/1/looX4WGWu3qGcY5rK9agfje0DGU.mft
Manifest number: 1579
Signing time: Fri 06 Jun 2025 18:00:20 +0000
Manifest this update: Fri 06 Jun 2025 18:00:20 +0000
Manifest next update: Sat 07 Jun 2025 18:00:20 +0000
Files and hashes: 1: DujQDMx3DXEUwl_S25-DE-FhKlg.roa (hash: kc2HgT2zi7ovcfO8xiQnJUXKfZ/NJb+y4s0qXknod8A=)
2: looX4WGWu3qGcY5rK9agfje0DGU.crl (hash: XorPeqajrqi044WzJVBcJxm8nH3D2gsCoyGL+SFbplU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/7c97cf-195c-4fc1-95a3-637fa14656de/1/looX4WGWu3qGcY5rK9agfje0DGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/7c97cf-195c-4fc1-95a3-637fa14656de/1/looX4WGWu3qGcY5rK9agfje0DGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/looX4WGWu3qGcY5rK9agfje0DGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 18:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:66:a1:d0:ef:45:35:bb:70:d9:3d:01:fc:01:60:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=968a17e16196bb7a86718e6b2bd6a07e37b40c65
Validity
Not Before: Jun 6 18:00:20 2025 GMT
Not After : Jun 7 18:00:20 2025 GMT
Subject: CN=56f730347cd58040aeded6a61f90a138ffa8adb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:a4:fc:c0:ab:71:57:7d:5a:03:b8:49:fe:cd:
51:3c:5c:64:c8:e5:05:99:4e:02:f7:1c:d1:c1:29:
d3:61:62:42:7c:e7:df:72:36:b9:69:18:21:72:76:
58:b3:db:c5:8f:39:88:61:67:33:03:9b:a0:69:1d:
fb:95:86:c3:83:34:7f:b3:10:ef:55:83:c8:b3:bc:
e3:80:92:4b:ac:0a:9c:43:5f:5e:e0:1b:aa:dd:05:
2d:92:db:64:dc:ae:52:37:ed:3a:5d:16:06:26:4c:
63:9f:e3:1d:0a:ce:5e:e4:c3:0e:7b:ae:3c:95:df:
67:21:fa:34:41:39:26:b1:95:73:7d:1e:2b:07:45:
05:1f:30:67:7e:1d:fe:5c:ea:32:a4:4e:e8:69:d2:
e8:34:ce:da:2b:2c:ed:25:8d:2b:0a:df:2e:a4:3e:
cd:62:ac:68:fa:38:02:42:02:87:95:a3:3b:99:7b:
3e:98:1b:34:43:b6:eb:9d:a8:40:9e:9a:ae:98:08:
4e:15:c7:2a:14:55:b8:d7:ec:4c:e2:fc:9e:88:92:
ff:10:21:3f:b8:0a:d7:95:d2:93:39:53:50:56:27:
a3:12:ba:65:52:df:b8:38:56:6a:8d:1a:9b:93:7e:
a5:92:77:80:e7:37:c4:9c:a1:30:eb:a4:ed:08:a7:
b4:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:F7:30:34:7C:D5:80:40:AE:DE:D6:A6:1F:90:A1:38:FF:A8:AD:B9
X509v3 Authority Key Identifier:
keyid:96:8A:17:E1:61:96:BB:7A:86:71:8E:6B:2B:D6:A0:7E:37:B4:0C:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/looX4WGWu3qGcY5rK9agfje0DGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/7c97cf-195c-4fc1-95a3-637fa14656de/1/looX4WGWu3qGcY5rK9agfje0DGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/7c97cf-195c-4fc1-95a3-637fa14656de/1/looX4WGWu3qGcY5rK9agfje0DGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:52:f0:8a:53:0c:6b:c4:6a:08:66:cb:a9:62:87:fc:1e:36:
62:ed:63:0b:c2:1d:cb:ae:71:43:9f:ae:7c:fe:31:c0:25:fa:
87:f7:ee:4c:ba:4f:ac:c3:42:d3:0a:4b:ea:48:c9:ac:8e:6b:
7f:54:2d:80:fc:c7:f3:9e:3f:67:45:d5:64:45:90:6c:53:ea:
4f:86:8d:7c:49:94:54:d2:94:0b:4e:f1:b5:54:92:ed:ce:1d:
7c:fb:ad:45:10:14:67:3f:a5:c1:84:d4:99:df:08:09:3b:87:
44:f2:81:b8:ff:e8:7c:2e:4a:bb:87:f8:cd:9e:e6:f3:cb:f2:
fe:3d:92:e7:59:87:ec:22:8e:7b:a6:fb:7f:62:2a:b9:c9:37:
0b:ef:ef:e3:5a:28:3a:c3:d4:db:dc:5b:8b:88:9b:2a:8c:69:
48:4b:c9:83:94:34:11:e0:bd:3d:f6:60:76:bd:b7:8f:55:90:
bd:dc:af:6a:ce:93:92:ef:37:dd:7e:22:6b:65:3b:8b:fd:30:
3d:f3:d8:fb:23:1e:2f:f0:49:4d:dd:70:e4:30:52:a6:3a:4a:
25:e3:14:de:d6:36:f2:e3:bd:2e:5e:15:91:a1:2a:65:3d:76:
e2:db:2c:d7:b3:aa:b8:2a:c6:1e:df:af:74:b8:d8:49:bb:b4:
ff:39:12:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdGZqHQ70U1u3DZPQH8AWArMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2OGExN2UxNjE5NmJiN2E4NjcxOGU2YjJiZDZhMDdlMzdi
NDBjNjUwHhcNMjUwNjA2MTgwMDIwWhcNMjUwNjA3MTgwMDIwWjAzMTEwLwYDVQQD
Eyg1NmY3MzAzNDdjZDU4MDQwYWVkZWQ2YTYxZjkwYTEzOGZmYThhZGI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2qT8wKtxV31aA7hJ/s1RPFxkyOUF
mU4C9xzRwSnTYWJCfOffcja5aRghcnZYs9vFjzmIYWczA5ugaR37lYbDgzR/sxDv
VYPIs7zjgJJLrAqcQ19e4Buq3QUtkttk3K5SN+06XRYGJkxjn+MdCs5e5MMOe648
ld9nIfo0QTkmsZVzfR4rB0UFHzBnfh3+XOoypE7oadLoNM7aKyztJY0rCt8upD7N
Yqxo+jgCQgKHlaM7mXs+mBs0Q7brnahAnpqumAhOFccqFFW41+xM4vyeiJL/ECE/
uArXldKTOVNQViejErplUt+4OFZqjRqbk36lkneA5zfEnKEw66TtCKe0pwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFb3MDR81YBArt7Wph+QoTj/qK25MB8GA1UdIwQY
MBaAFJaKF+Fhlrt6hnGOayvWoH43tAxlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbG9vWDRXR1d1M3FHY1k1cks5YWdmamUwREdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS83Yzk3Y2YtMTk1Yy00ZmMxLTk1YTMt
NjM3ZmExNDY1NmRlLzEvbG9vWDRXR1d1M3FHY1k1cks5YWdmamUwREdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS83Yzk3Y2YtMTk1Yy00ZmMxLTk1YTMtNjM3ZmExNDY1NmRl
LzEvbG9vWDRXR1d1M3FHY1k1cks5YWdmamUwREdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApVLwilMM
a8RqCGbLqWKH/B42Yu1jC8Idy65xQ5+ufP4xwCX6h/fuTLpPrMNC0wpL6kjJrI5r
f1QtgPzH854/Z0XVZEWQbFPqT4aNfEmUVNKUC07xtVSS7c4dfPutRRAUZz+lwYTU
md8ICTuHRPKBuP/ofC5Ku4f4zZ7m88vy/j2S51mH7CKOe6b7f2Iquck3C+/v41oo
OsPU29xbi4ibKoxpSEvJg5Q0EeC9PfZgdr23j1WQvdyvas6Tku833X4ia2U7i/0w
PfPY+yMeL/BJTd1w5DBSpjpKJeMU3tY28uO9Ll4VkaEqZT124tss17OquCrGHt+v
dLjYSbu0/zkSbA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 03:38:02 2025 by rpki-client