Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/LOcbH07qAVkkYSX8WumtUaRHks4.mft
File: LOcbH07qAVkkYSX8WumtUaRHks4.mft (raw, json)
Hash identifier: NN3ZAur5lIKM2OAiZqNoa8ENKGPahWKsOxUWK5tIOmo=
Subject key identifier: C3:CD:30:93:73:FF:97:43:B2:FE:6E:3E:4A:E0:33:B6:74:C1:4B:0F
Authority key identifier: 2C:E7:1B:1F:4E:EA:01:59:24:61:25:FC:5A:E9:AD:51:A4:47:92:CE
Certificate issuer: /CN=2ce71b1f4eea0159246125fc5ae9ad51a44792ce
Certificate serial: 019756ECA9D7474450798C5DCFD38E721EFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LOcbH07qAVkkYSX8WumtUaRHks4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/LOcbH07qAVkkYSX8WumtUaRHks4.mft
Manifest number: 1584
Signing time: Mon 09 Jun 2025 23:00:39 +0000
Manifest this update: Mon 09 Jun 2025 23:00:39 +0000
Manifest next update: Tue 10 Jun 2025 23:00:39 +0000
Files and hashes: 1: BugMD0rfZTTzRv9e3Yc9s1C5qM8.roa (hash: jE01pMhWyEqiVohSbXJF+yf78b2Sf6VXp+Appd2gHuI=)
2: LOcbH07qAVkkYSX8WumtUaRHks4.crl (hash: opJWDwG8hauU2vu+rKgGNd19rZ6didDVhSUsn0nrC74=)
3: _1rHHFIhvvb4H2GGBv9RDV7OFzo.roa (hash: ODNNLSo5C2C5zLz79VjHYIX9sjOveSMDElEuw+M5H2w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/LOcbH07qAVkkYSX8WumtUaRHks4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/LOcbH07qAVkkYSX8WumtUaRHks4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LOcbH07qAVkkYSX8WumtUaRHks4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:56:ec:a9:d7:47:44:50:79:8c:5d:cf:d3:8e:72:1e:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ce71b1f4eea0159246125fc5ae9ad51a44792ce
Validity
Not Before: Jun 9 23:00:39 2025 GMT
Not After : Jun 10 23:00:39 2025 GMT
Subject: CN=c3cd309373ff9743b2fe6e3e4ae033b674c14b0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1f:73:36:dc:04:10:9b:6d:41:ac:f8:d7:45:
38:a5:3d:37:9b:ad:00:c1:06:76:13:80:6e:a9:af:
b3:6f:fe:cc:e7:da:3f:a7:92:a7:49:3c:58:50:a6:
2c:c7:8f:2e:ce:13:84:38:3a:0e:28:cd:56:f1:ad:
58:c1:91:f6:77:18:6d:83:b8:26:c3:16:2c:bf:d1:
3d:f3:74:35:e9:00:0e:48:92:2f:8c:db:fc:b3:4e:
cf:90:d3:88:3e:fc:a7:12:f2:8a:a9:11:4b:9a:61:
9c:c4:ee:95:c5:59:e8:02:8d:95:c1:e7:ae:67:df:
02:6f:bc:cc:87:91:3e:ad:f5:07:0f:60:af:be:3c:
50:db:23:9b:d9:3f:31:a0:94:3b:e6:e1:23:00:ce:
f2:79:de:be:d8:91:c5:62:d4:ce:4b:af:08:21:4a:
04:62:97:30:69:33:60:09:ac:99:97:1e:08:e1:f2:
b1:ad:cb:be:9b:30:bc:3e:82:cd:73:50:a4:74:44:
50:3f:b7:32:fa:42:21:74:c3:f0:d3:d7:5d:d0:18:
a8:c9:d2:91:ff:39:02:d0:db:9e:94:f5:37:ef:b3:
1a:df:ef:fb:2d:29:4b:2e:42:af:f7:4f:84:7e:f0:
2f:ff:aa:e7:50:ec:42:4f:e1:f2:e1:65:1c:64:6e:
3a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:CD:30:93:73:FF:97:43:B2:FE:6E:3E:4A:E0:33:B6:74:C1:4B:0F
X509v3 Authority Key Identifier:
keyid:2C:E7:1B:1F:4E:EA:01:59:24:61:25:FC:5A:E9:AD:51:A4:47:92:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LOcbH07qAVkkYSX8WumtUaRHks4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/LOcbH07qAVkkYSX8WumtUaRHks4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/LOcbH07qAVkkYSX8WumtUaRHks4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:8b:d5:00:db:dc:dc:d2:6c:f9:9f:81:6c:7b:b8:e3:e2:3e:
8c:d1:ea:c2:67:fb:b2:33:45:41:48:17:ec:42:da:4d:27:e3:
95:8b:84:3e:f9:6e:39:06:ba:24:0e:41:1b:82:5a:15:05:7f:
7b:e0:26:81:fd:6a:3c:23:35:26:1c:85:4d:c6:22:e4:5b:1b:
dd:48:24:8f:c5:fa:e3:db:2e:20:ad:45:18:5c:33:64:e9:50:
ff:7c:9f:72:e3:e4:26:c5:60:32:9a:d1:a6:33:04:12:56:3a:
f2:86:94:16:64:36:29:94:3c:3f:c2:d2:75:83:b1:c1:54:16:
e3:3e:c0:e9:8f:d9:a7:7f:c0:bc:50:84:de:0a:aa:8b:16:2f:
62:c8:99:f0:72:bd:72:c3:87:86:3f:88:67:d3:5a:85:a2:9f:
98:6d:b9:90:95:5c:52:f7:d5:b7:82:f5:e2:8f:b5:81:ea:ba:
4e:1e:53:97:67:b5:f4:3c:0e:ab:fa:28:f7:82:a0:6a:83:f4:
59:26:f5:60:a0:ba:d4:8e:67:50:68:72:2b:2b:13:29:2c:57:
cf:98:19:d2:0c:a0:11:80:c4:a2:b6:98:8d:51:5a:fd:5f:7c:
e3:38:ae:f3:2a:a0:e9:30:29:cf:33:d2:57:14:8c:29:12:92:
90:0b:75:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 07:10:52 2025 by rpki-client