Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/8c27aa-b500-4c96-84ec-f8be495252b0/1/LokBk3Q73yTdIsPtbyizAxouyAY.mft
File: LokBk3Q73yTdIsPtbyizAxouyAY.mft (raw, json)
Hash identifier: k1BNrJtWY8KzR7j5I0qKjZ55ep1WkuUIOAM33FLiyv0=
Subject key identifier: 3A:EA:62:08:9B:95:4A:96:13:F0:73:6F:A7:3A:A5:62:D1:A6:7E:CA
Authority key identifier: 2E:89:01:93:74:3B:DF:24:DD:22:C3:ED:6F:28:B3:03:1A:2E:C8:06
Certificate issuer: /CN=2e890193743bdf24dd22c3ed6f28b3031a2ec806
Certificate serial: 019749D5A0808E78728C8407A4355EF264F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LokBk3Q73yTdIsPtbyizAxouyAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/8c27aa-b500-4c96-84ec-f8be495252b0/1/LokBk3Q73yTdIsPtbyizAxouyAY.mft
Manifest number: 110A
Signing time: Sat 07 Jun 2025 10:00:26 +0000
Manifest this update: Sat 07 Jun 2025 10:00:26 +0000
Manifest next update: Sun 08 Jun 2025 10:00:26 +0000
Files and hashes: 1: 6EZjDJryRoANWPhlSHpMG7n7IU8.roa (hash: 9isLxzfXlIyOPcXFup6Ou1baZV3mC8KRz9wBcZ1Igfs=)
2: LokBk3Q73yTdIsPtbyizAxouyAY.crl (hash: HerKMW6F6EdPf6qUQeS9n+D6gINyzRkrGWiHA+VpVC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/8c27aa-b500-4c96-84ec-f8be495252b0/1/LokBk3Q73yTdIsPtbyizAxouyAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/8c27aa-b500-4c96-84ec-f8be495252b0/1/LokBk3Q73yTdIsPtbyizAxouyAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/LokBk3Q73yTdIsPtbyizAxouyAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:a0:80:8e:78:72:8c:84:07:a4:35:5e:f2:64:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e890193743bdf24dd22c3ed6f28b3031a2ec806
Validity
Not Before: Jun 7 10:00:26 2025 GMT
Not After : Jun 8 10:00:26 2025 GMT
Subject: CN=3aea62089b954a9613f0736fa73aa562d1a67eca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5f:32:0d:f5:21:7d:a0:51:61:81:66:55:76:
0a:4a:ab:74:a6:de:97:77:ef:21:d2:e2:9f:b8:23:
6f:b4:26:30:25:2e:c0:d9:48:95:d7:de:8e:54:be:
a4:bc:a1:78:34:9c:32:b8:f3:7d:fe:2f:f3:71:2a:
8e:3e:e9:e9:0e:67:e2:a5:99:7b:60:9a:a4:39:21:
4c:c1:c7:c0:18:ae:8f:d5:42:c4:b1:6c:b2:ee:4f:
38:2b:f5:e2:a7:39:59:0e:db:6b:be:ea:89:61:09:
40:95:4d:6a:ab:72:c3:37:a8:e6:88:cc:4b:9b:d7:
88:8d:4f:c8:4e:1c:e2:a7:bf:70:b9:7f:b2:6b:b7:
fe:66:cf:c2:7e:23:61:b3:b9:40:fa:57:2b:86:a9:
44:9c:0e:4f:e5:49:7b:79:da:12:25:ff:89:11:ad:
01:e3:a4:f4:1a:7c:c4:9f:2a:66:81:11:c7:01:b9:
2c:9f:a0:61:28:52:42:c9:76:2e:b9:a5:52:69:9b:
7f:ce:bc:df:75:6a:5a:42:d5:dd:ba:ef:99:4e:10:
38:52:e3:2c:b3:8b:0f:b5:47:ee:74:71:c9:e8:90:
98:af:64:ac:a1:d8:f0:5b:5e:01:9b:5e:da:2d:54:
a9:fd:77:4f:d6:60:71:08:e1:da:0a:3b:0a:6a:9b:
24:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:EA:62:08:9B:95:4A:96:13:F0:73:6F:A7:3A:A5:62:D1:A6:7E:CA
X509v3 Authority Key Identifier:
keyid:2E:89:01:93:74:3B:DF:24:DD:22:C3:ED:6F:28:B3:03:1A:2E:C8:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LokBk3Q73yTdIsPtbyizAxouyAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/8c27aa-b500-4c96-84ec-f8be495252b0/1/LokBk3Q73yTdIsPtbyizAxouyAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/8c27aa-b500-4c96-84ec-f8be495252b0/1/LokBk3Q73yTdIsPtbyizAxouyAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:7c:4e:2e:b5:cb:df:76:13:bd:4f:22:9a:85:4c:a3:1e:08:
c2:f4:a1:06:70:cb:bd:ef:08:1f:d2:46:4f:77:c3:86:76:dd:
85:c8:a4:d0:67:55:3e:fa:b1:1e:91:ad:81:21:98:f2:3d:3a:
d8:cb:a4:08:c6:59:07:13:6d:56:fe:d5:7e:c7:e3:76:66:63:
50:cf:cf:c5:d5:2c:85:4c:66:52:6c:51:b6:6a:9e:62:93:d3:
a6:12:4c:a6:6d:c5:be:3c:e0:fb:00:19:a1:1e:cd:e2:74:46:
74:8c:ab:8b:41:31:39:91:4d:e0:c3:a0:53:3b:91:44:93:24:
03:bf:42:74:0b:fd:53:3a:96:00:fc:99:6e:d6:74:41:17:72:
6e:97:b7:be:fc:07:de:d4:65:23:3a:db:24:20:32:1a:01:3c:
42:5f:17:56:80:c5:59:2b:94:b8:23:ab:96:9d:bb:78:84:86:
dc:26:3c:dd:d4:23:9c:44:42:a1:d5:bf:eb:6f:00:01:da:f7:
7e:9f:7f:31:77:b8:5a:83:df:f7:4a:e3:eb:b7:ff:ef:fd:28:
d1:6c:8f:cb:73:5d:11:d5:ee:31:22:72:e0:df:b8:97:0e:a6:
83:c3:07:2d:17:27:60:99:bd:b8:96:85:f6:36:76:a2:05:d9:
31:1e:fe:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJ1aCAjnhyjIQHpDVe8mT0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlODkwMTkzNzQzYmRmMjRkZDIyYzNlZDZmMjhiMzAzMWEy
ZWM4MDYwHhcNMjUwNjA3MTAwMDI2WhcNMjUwNjA4MTAwMDI2WjAzMTEwLwYDVQQD
EygzYWVhNjIwODliOTU0YTk2MTNmMDczNmZhNzNhYTU2MmQxYTY3ZWNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqF8yDfUhfaBRYYFmVXYKSqt0pt6X
d+8h0uKfuCNvtCYwJS7A2UiV196OVL6kvKF4NJwyuPN9/i/zcSqOPunpDmfipZl7
YJqkOSFMwcfAGK6P1ULEsWyy7k84K/XipzlZDttrvuqJYQlAlU1qq3LDN6jmiMxL
m9eIjU/IThzip79wuX+ya7f+Zs/CfiNhs7lA+lcrhqlEnA5P5Ul7edoSJf+JEa0B
46T0GnzEnypmgRHHAbksn6BhKFJCyXYuuaVSaZt/zrzfdWpaQtXduu+ZThA4UuMs
s4sPtUfudHHJ6JCYr2SsodjwW14Bm17aLVSp/XdP1mBxCOHaCjsKapskgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDrqYgiblUqWE/Bzb6c6pWLRpn7KMB8GA1UdIwQY
MBaAFC6JAZN0O98k3SLD7W8oswMaLsgGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTG9rQmszUTczeVRkSXNQdGJ5aXpBeG91eUFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy84YzI3YWEtYjUwMC00Yzk2LTg0ZWMt
ZjhiZTQ5NTI1MmIwLzEvTG9rQmszUTczeVRkSXNQdGJ5aXpBeG91eUFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy84YzI3YWEtYjUwMC00Yzk2LTg0ZWMtZjhiZTQ5NTI1MmIw
LzEvTG9rQmszUTczeVRkSXNQdGJ5aXpBeG91eUFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJXxOLrXL
33YTvU8imoVMox4IwvShBnDLve8IH9JGT3fDhnbdhcik0GdVPvqxHpGtgSGY8j06
2MukCMZZBxNtVv7VfsfjdmZjUM/PxdUshUxmUmxRtmqeYpPTphJMpm3Fvjzg+wAZ
oR7N4nRGdIyri0ExOZFN4MOgUzuRRJMkA79CdAv9UzqWAPyZbtZ0QRdybpe3vvwH
3tRlIzrbJCAyGgE8Ql8XVoDFWSuUuCOrlp27eISG3CY83dQjnERCodW/628AAdr3
fp9/MXe4WoPf90rj67f/7/0o0WyPy3NdEdXuMSJy4N+4lw6mg8MHLRcnYJm9uJaF
9jZ2ogXZMR7+YQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 11:52:56 2025 by rpki-client