Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/LOcbH07qAVkkYSX8WumtUaRHks4.mft
File: LOcbH07qAVkkYSX8WumtUaRHks4.mft (raw, json)
Hash identifier: kQPh2eLG7E2dJzsLIxxUejdoLz6d3wVzQZzFNbD4HLg=
Subject key identifier: 59:94:AB:51:4F:BF:4D:9B:FE:FD:CA:1D:6C:7B:10:30:F5:F0:F4:E5
Authority key identifier: 2C:E7:1B:1F:4E:EA:01:59:24:61:25:FC:5A:E9:AD:51:A4:47:92:CE
Certificate issuer: /CN=2ce71b1f4eea0159246125fc5ae9ad51a44792ce
Certificate serial: 0197665FD8F5A8F62E6E17BF0DCE7EF5F951
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LOcbH07qAVkkYSX8WumtUaRHks4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/LOcbH07qAVkkYSX8WumtUaRHks4.mft
Manifest number: 158C
Signing time: Thu 12 Jun 2025 23:00:46 +0000
Manifest this update: Thu 12 Jun 2025 23:00:46 +0000
Manifest next update: Fri 13 Jun 2025 23:00:46 +0000
Files and hashes: 1: BugMD0rfZTTzRv9e3Yc9s1C5qM8.roa (hash: jE01pMhWyEqiVohSbXJF+yf78b2Sf6VXp+Appd2gHuI=)
2: LOcbH07qAVkkYSX8WumtUaRHks4.crl (hash: 83kIK6A+3Dx9KIe8IrPGN/SV14tMBhjJsV4kEdo087w=)
3: _1rHHFIhvvb4H2GGBv9RDV7OFzo.roa (hash: ODNNLSo5C2C5zLz79VjHYIX9sjOveSMDElEuw+M5H2w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/LOcbH07qAVkkYSX8WumtUaRHks4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/LOcbH07qAVkkYSX8WumtUaRHks4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LOcbH07qAVkkYSX8WumtUaRHks4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:66:5f:d8:f5:a8:f6:2e:6e:17:bf:0d:ce:7e:f5:f9:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ce71b1f4eea0159246125fc5ae9ad51a44792ce
Validity
Not Before: Jun 12 23:00:46 2025 GMT
Not After : Jun 13 23:00:46 2025 GMT
Subject: CN=5994ab514fbf4d9bfefdca1d6c7b1030f5f0f4e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:8a:01:02:aa:09:4f:41:4e:19:6c:57:3e:47:
4a:c0:67:89:2c:f2:78:f4:f1:e2:bb:30:e8:87:48:
26:d6:53:1c:eb:ba:cd:4f:44:7e:38:65:02:80:21:
b0:02:9b:ea:96:d6:5e:47:fb:9c:03:d3:3e:b1:25:
51:a6:ea:ba:1c:dc:d6:87:5b:0b:70:4b:c4:63:81:
03:92:64:e2:85:f2:89:96:a5:d4:81:30:d3:9c:7b:
b8:63:7f:6a:0b:64:9e:82:b2:b6:68:ce:4c:5f:5f:
af:33:83:42:d1:e3:45:53:8f:0e:76:00:26:fe:03:
84:d5:e7:3a:b8:2f:08:cb:fd:dd:12:20:91:ed:0e:
75:44:02:3c:f2:32:6e:b7:a7:9f:18:18:44:64:e2:
8a:fb:2b:e3:88:0a:62:26:cf:74:02:05:3d:d6:0b:
e0:be:de:f5:ae:b2:0e:8b:cd:4c:89:98:da:9f:77:
05:be:19:88:b8:77:72:01:a6:4b:87:43:7d:10:2c:
ca:78:36:0d:2d:d3:1c:f5:47:6f:c8:0d:9f:a4:38:
96:5e:94:e6:b1:34:b2:38:ca:e7:13:da:6b:b4:17:
f4:a4:e8:14:7f:07:7d:e9:43:7d:c5:af:e2:ea:84:
dc:61:3f:ff:9b:06:e3:4f:9a:59:5e:fc:0e:0a:cd:
71:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:94:AB:51:4F:BF:4D:9B:FE:FD:CA:1D:6C:7B:10:30:F5:F0:F4:E5
X509v3 Authority Key Identifier:
keyid:2C:E7:1B:1F:4E:EA:01:59:24:61:25:FC:5A:E9:AD:51:A4:47:92:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LOcbH07qAVkkYSX8WumtUaRHks4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/LOcbH07qAVkkYSX8WumtUaRHks4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/LOcbH07qAVkkYSX8WumtUaRHks4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:dc:3e:3d:22:c9:16:5e:50:9b:31:85:08:9b:3f:84:b1:50:
2c:42:6e:cf:f4:ad:03:f6:0f:43:9d:68:38:66:2e:91:d3:2d:
41:86:f2:64:13:69:1d:0a:ad:2a:da:a0:0a:23:08:46:c9:61:
6c:40:4c:86:5a:3a:e3:ba:67:6e:27:f4:24:fa:1f:f5:3e:62:
57:23:58:88:95:97:52:97:23:b5:2d:c3:6f:7c:69:d4:96:8b:
dd:e4:d1:e8:4d:e0:44:d2:6e:37:92:59:35:9d:ad:eb:4c:1d:
ca:90:73:45:3d:5e:79:53:c3:c3:84:0f:60:47:2a:5b:fc:62:
2f:aa:fd:f0:2f:b4:8a:23:2b:6f:15:59:a3:bb:1f:f2:6f:ae:
48:1d:06:58:d6:53:d0:a3:b7:ba:42:89:75:00:da:b4:83:32:
86:59:82:38:36:42:75:fc:04:2b:50:b7:70:1a:4b:9f:8a:8e:
61:05:5e:07:82:5c:40:40:ce:15:8e:47:10:b4:13:4d:63:2b:
f4:de:8d:39:fb:86:c9:62:26:b6:91:f5:16:21:70:94:5f:5c:
9b:96:76:57:af:a6:20:d0:b7:fd:9e:62:a4:23:2c:c0:2d:13:
34:3b:20:a8:5d:7c:67:e3:26:bb:f0:57:b4:3c:96:c9:2e:9f:
75:09:5c:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 02:59:58 2025 by rpki-client