Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft
File: Loskx2rYemwf7f-vCNmxe0UkmZE.mft (raw, json)
Hash identifier: lRTjKGIfm2k/vJphC8N8n89k7bjmAevlY0sIvKGYE68=
Subject key identifier: E0:BD:A2:BF:32:DA:0B:E1:E2:13:A9:B5:36:D2:74:2F:E6:9B:77:EB
Authority key identifier: 2E:8B:24:C7:6A:D8:7A:6C:1F:ED:FF:AF:08:D9:B1:7B:45:24:99:91
Certificate issuer: /CN=2e8b24c76ad87a6c1fedffaf08d9b17b45249991
Certificate serial: 0197B74559EA2C1745640648BBAD0B6FF12D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Loskx2rYemwf7f-vCNmxe0UkmZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft
Manifest number: 15C4
Signing time: Sat 28 Jun 2025 16:01:04 +0000
Manifest this update: Sat 28 Jun 2025 16:01:04 +0000
Manifest next update: Sun 29 Jun 2025 16:01:04 +0000
Files and hashes: 1: Loskx2rYemwf7f-vCNmxe0UkmZE.crl (hash: igEBuOFtZtu0lOV7Li88JH3v4aTNpjTDS01r2dzyhgI=)
2: U7x9NHrOtVwpLBD4RJMdKYPQ-Mo.roa (hash: COXA0MHjLmP0wp5vDjDiQUXIbxhZE0gntg3Uospeavg=)
3: qBk8yEy6XQzjJQM_m4xKxUxOGWY.roa (hash: MrQEI7rx7w7zwtpbP6zhx6P3UqAEniYO/sUrOOmnWv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Loskx2rYemwf7f-vCNmxe0UkmZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:59:ea:2c:17:45:64:06:48:bb:ad:0b:6f:f1:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e8b24c76ad87a6c1fedffaf08d9b17b45249991
Validity
Not Before: Jun 28 16:01:04 2025 GMT
Not After : Jun 29 16:01:04 2025 GMT
Subject: CN=e0bda2bf32da0be1e213a9b536d2742fe69b77eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:02:a3:78:13:81:43:47:d3:51:07:66:54:82:
3b:c4:5a:19:42:17:7b:38:ca:c1:44:76:12:52:9d:
e4:3c:51:09:ed:72:18:bf:4a:8f:ca:3a:9e:36:d2:
68:f8:10:89:d8:46:38:af:a7:df:2f:04:89:b7:84:
8f:32:0a:be:59:1f:8d:0f:d8:48:ec:72:12:60:b7:
48:fa:18:bc:18:1b:fa:0e:d0:8b:d2:f9:e5:80:7a:
68:bb:d2:f7:c3:7b:97:f8:d5:ae:47:c3:05:42:f5:
ee:c1:39:62:9d:05:ea:bc:56:21:aa:40:75:8b:ba:
03:34:0e:0b:aa:16:59:86:c7:fd:51:55:46:1d:c8:
98:e7:50:cb:a7:d2:72:2c:46:37:b7:97:1d:2a:65:
24:2b:6a:75:db:b6:db:56:22:24:d1:96:aa:dc:3f:
6b:7a:54:c8:bc:82:e2:ee:c1:04:ba:b7:29:f5:08:
52:2c:81:83:c1:f7:cb:8e:11:91:c1:65:bb:9b:42:
bf:81:56:39:f4:b0:24:16:75:e3:4e:ae:a3:90:0a:
9e:a8:ec:34:9c:08:67:ff:da:17:b2:17:c9:97:cd:
e4:c3:76:92:45:cd:73:0f:18:12:af:96:b0:9e:de:
f4:bf:d9:df:2d:80:f1:03:ae:45:22:4c:1b:36:ee:
17:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:BD:A2:BF:32:DA:0B:E1:E2:13:A9:B5:36:D2:74:2F:E6:9B:77:EB
X509v3 Authority Key Identifier:
keyid:2E:8B:24:C7:6A:D8:7A:6C:1F:ED:FF:AF:08:D9:B1:7B:45:24:99:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Loskx2rYemwf7f-vCNmxe0UkmZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:cc:89:93:03:28:e4:a6:3b:5d:cf:b1:bc:07:85:12:74:a7:
98:39:69:ef:25:89:6a:84:d2:2e:c8:d2:79:cd:df:7d:4f:a2:
e4:1d:0a:fa:c8:8c:0e:5c:ef:6b:14:41:52:37:53:f0:1e:f5:
6d:3b:d4:6a:a5:70:9f:f7:89:b5:04:57:2c:70:90:91:fb:3f:
98:6a:41:b8:ae:8e:ec:42:c9:47:02:5c:f4:fd:09:04:43:5a:
08:2e:9e:62:7c:07:5a:75:3e:d3:76:72:0f:cc:9d:29:ae:94:
41:13:11:4b:41:78:21:4a:41:e8:d1:f5:06:c5:ce:38:00:b8:
fb:e7:22:07:89:e0:1b:de:8b:4b:e9:a6:aa:3e:25:9d:34:88:
07:a2:3d:7d:9e:39:c8:4b:26:d9:c5:dc:d7:79:bf:8c:1f:80:
b5:24:c4:4d:68:5d:31:4b:d5:77:e5:09:93:07:93:dd:a7:6b:
a9:bd:69:cc:d4:12:67:c2:a4:e2:d1:24:72:85:17:68:0e:fa:
18:e6:27:f3:bb:0a:d4:ba:d3:3b:14:c9:6e:df:3c:20:87:26:
a3:95:ea:c0:f1:0e:00:66:06:d0:c3:fd:69:1f:02:88:e4:9c:
81:61:ea:b8:52:64:b8:fc:be:79:7f:37:d0:f7:87:1f:ce:f7:
56:6e:90:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3RVnqLBdFZAZIu60Lb/EtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlOGIyNGM3NmFkODdhNmMxZmVkZmZhZjA4ZDliMTdiNDUy
NDk5OTEwHhcNMjUwNjI4MTYwMTA0WhcNMjUwNjI5MTYwMTA0WjAzMTEwLwYDVQQD
EyhlMGJkYTJiZjMyZGEwYmUxZTIxM2E5YjUzNmQyNzQyZmU2OWI3N2ViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiAKjeBOBQ0fTUQdmVII7xFoZQhd7
OMrBRHYSUp3kPFEJ7XIYv0qPyjqeNtJo+BCJ2EY4r6ffLwSJt4SPMgq+WR+ND9hI
7HISYLdI+hi8GBv6DtCL0vnlgHpou9L3w3uX+NWuR8MFQvXuwTlinQXqvFYhqkB1
i7oDNA4LqhZZhsf9UVVGHciY51DLp9JyLEY3t5cdKmUkK2p127bbViIk0Zaq3D9r
elTIvILi7sEEurcp9QhSLIGDwffLjhGRwWW7m0K/gVY59LAkFnXjTq6jkAqeqOw0
nAhn/9oXshfJl83kw3aSRc1zDxgSr5awnt70v9nfLYDxA65FIkwbNu4XswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOC9or8y2gvh4hOptTbSdC/mm3frMB8GA1UdIwQY
MBaAFC6LJMdq2HpsH+3/rwjZsXtFJJmRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTG9za3gyclllbXdmN2YtdkNObXhlMFVrbVpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS8wNGQzNDgtNzViOS00OGQyLWJlMTAt
OTExOTBhMDJkYjcwLzEvTG9za3gyclllbXdmN2YtdkNObXhlMFVrbVpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS8wNGQzNDgtNzViOS00OGQyLWJlMTAtOTExOTBhMDJkYjcw
LzEvTG9za3gyclllbXdmN2YtdkNObXhlMFVrbVpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIsyJkwMo
5KY7Xc+xvAeFEnSnmDlp7yWJaoTSLsjSec3ffU+i5B0K+siMDlzvaxRBUjdT8B71
bTvUaqVwn/eJtQRXLHCQkfs/mGpBuK6O7ELJRwJc9P0JBENaCC6eYnwHWnU+03Zy
D8ydKa6UQRMRS0F4IUpB6NH1BsXOOAC4++ciB4ngG96LS+mmqj4lnTSIB6I9fZ45
yEsm2cXc13m/jB+AtSTETWhdMUvVd+UJkweT3adrqb1pzNQSZ8Kk4tEkcoUXaA76
GOYn87sK1LrTOxTJbt88IIcmo5XqwPEOAGYG0MP9aR8CiOScgWHquFJkuPy+eX83
0PeHH873Vm6QEQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:16:33 2025 by rpki-client