Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/d520db-bdf8-4f27-8dff-8c130e6841db/1/LOKZUFiz3prtI6Yff7e1t7GTmEo.mft
File: LOKZUFiz3prtI6Yff7e1t7GTmEo.mft (raw, json)
Hash identifier: sbMyc7Dgl5YpmKRg8ytK+xWWreJ34Fd5woVrVGNGH6M=
Subject key identifier: FE:F4:06:4B:8A:64:52:46:EF:DB:C5:9A:47:C8:52:F9:CB:F9:24:A7
Authority key identifier: 2C:E2:99:50:58:B3:DE:9A:ED:23:A6:1F:7F:B7:B5:B7:B1:93:98:4A
Certificate issuer: /CN=2ce2995058b3de9aed23a61f7fb7b5b7b193984a
Certificate serial: 0197C8DE459E97310A72F048EFB14C39928A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LOKZUFiz3prtI6Yff7e1t7GTmEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/d520db-bdf8-4f27-8dff-8c130e6841db/1/LOKZUFiz3prtI6Yff7e1t7GTmEo.mft
Manifest number: 0CB5
Signing time: Wed 02 Jul 2025 02:01:39 +0000
Manifest this update: Wed 02 Jul 2025 02:01:39 +0000
Manifest next update: Thu 03 Jul 2025 02:01:39 +0000
Files and hashes: 1: 7x1Ss4505QNa0fMVELtO8LmLJeM.roa (hash: 9SZiDlSiFrfDTptEJc86ZTB/oJuky1dBcaDe8vDIhaU=)
2: LOKZUFiz3prtI6Yff7e1t7GTmEo.crl (hash: 2NqD4LdLi3Y3DAP0AQ2jGarZ6Ev0bppmruadAcZdd5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/d520db-bdf8-4f27-8dff-8c130e6841db/1/LOKZUFiz3prtI6Yff7e1t7GTmEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/d520db-bdf8-4f27-8dff-8c130e6841db/1/LOKZUFiz3prtI6Yff7e1t7GTmEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/LOKZUFiz3prtI6Yff7e1t7GTmEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c8:de:45:9e:97:31:0a:72:f0:48:ef:b1:4c:39:92:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ce2995058b3de9aed23a61f7fb7b5b7b193984a
Validity
Not Before: Jul 2 02:01:39 2025 GMT
Not After : Jul 3 02:01:39 2025 GMT
Subject: CN=fef4064b8a645246efdbc59a47c852f9cbf924a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a7:45:c8:02:6d:71:89:6a:3d:bd:eb:63:a1:
12:c6:29:8f:3d:f0:07:76:2f:e9:f0:d4:69:57:69:
84:8a:9b:99:30:f4:39:f1:b7:18:d0:0c:c2:3f:7a:
b1:2f:dc:8f:15:04:2a:59:e3:4e:c0:16:64:f6:49:
98:01:5a:2b:f9:eb:5b:1b:a5:ab:c6:cf:28:a9:18:
3e:fc:35:9d:b1:80:81:6d:4a:4c:d2:f1:56:7c:fc:
53:fd:40:43:95:f6:cd:4f:da:41:bc:9a:1b:a1:d4:
cd:42:ca:d1:a9:94:ce:bc:44:25:04:5f:15:cb:a3:
73:d5:ec:f7:77:29:c6:f3:ed:a3:81:8a:aa:fc:06:
99:5f:be:83:c0:a1:fd:72:b8:cf:fa:36:6e:03:07:
09:39:6f:ff:6a:b8:aa:c6:30:a3:b6:fa:af:ab:35:
d8:23:1d:0d:16:1e:92:03:77:c2:06:90:ed:9c:22:
18:94:8c:54:da:7b:13:f7:62:89:66:da:98:fd:ec:
12:6c:24:39:8d:df:0e:e8:af:6a:7d:08:a2:29:8a:
fe:8e:54:22:e8:4c:90:e4:4e:b8:ba:66:40:c6:aa:
fc:f3:89:b3:8f:21:f6:62:f0:ab:fc:12:99:3e:04:
67:b6:f5:82:22:27:b9:e3:e0:44:1c:c2:94:c7:88:
bc:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:F4:06:4B:8A:64:52:46:EF:DB:C5:9A:47:C8:52:F9:CB:F9:24:A7
X509v3 Authority Key Identifier:
keyid:2C:E2:99:50:58:B3:DE:9A:ED:23:A6:1F:7F:B7:B5:B7:B1:93:98:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LOKZUFiz3prtI6Yff7e1t7GTmEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/d520db-bdf8-4f27-8dff-8c130e6841db/1/LOKZUFiz3prtI6Yff7e1t7GTmEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/d520db-bdf8-4f27-8dff-8c130e6841db/1/LOKZUFiz3prtI6Yff7e1t7GTmEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:1c:db:66:bf:1b:0b:b1:0d:11:4a:09:b9:e8:ea:1b:73:d6:
e0:db:7f:45:e3:59:26:20:30:bb:53:95:5e:f8:c2:08:73:12:
05:eb:c8:89:a9:86:ac:56:7e:6d:3a:c8:ea:b5:a4:3f:17:3d:
84:c4:8e:e7:c4:01:86:93:c0:43:f2:0b:3e:49:b5:66:3b:2a:
7f:62:69:38:69:31:93:d3:1b:79:87:3e:a5:43:50:8c:66:49:
e4:01:bd:ac:77:77:11:f1:27:82:e0:9b:7a:c8:9b:ed:bd:ea:
21:4f:21:5b:67:1d:c5:83:0b:c8:fe:3c:76:d5:03:a4:7f:88:
64:fd:35:89:af:8a:a0:25:d3:fd:0f:af:f3:99:31:c4:d0:6a:
d6:2f:5e:3a:e6:9c:b6:e2:c1:2e:c8:59:dd:ba:79:aa:0f:74:
24:a1:fd:41:3e:b1:0c:fc:5c:01:41:73:c9:2f:14:1d:0b:f5:
b1:19:6a:0f:7b:d2:da:59:0d:26:cc:59:a4:af:4c:b8:2e:07:
38:04:5c:3e:41:53:b5:1e:56:5c:a0:a7:c7:fe:7a:87:65:8e:
cc:25:d8:59:ba:90:b9:33:99:86:59:6e:e7:04:9b:cf:e8:64:
90:1c:07:2d:e4:1b:f5:c7:f7:fa:ac:fd:77:17:47:ec:48:df:
70:2b:54:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 11:20:35 2025 by rpki-client