Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/LOre5Y-GT0cutCKwuVSXuFB1oSs.mft
File: LOre5Y-GT0cutCKwuVSXuFB1oSs.mft (raw, json)
Hash identifier: qPx2GVsre4smu8KIbNnmBD2cvf4bC++5TWXco5QedI8=
Subject key identifier: 5B:3A:79:D1:79:E0:33:5B:BA:5B:36:D0:39:70:89:97:B3:45:F3:81
Authority key identifier: 2C:EA:DE:E5:8F:86:4F:47:2E:B4:22:B0:B9:54:97:B8:50:75:A1:2B
Certificate issuer: /CN=2ceadee58f864f472eb422b0b95497b85075a12b
Certificate serial: 0198D5BC608D91E019FF853683C6C05145EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LOre5Y-GT0cutCKwuVSXuFB1oSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/LOre5Y-GT0cutCKwuVSXuFB1oSs.mft
Manifest number: 1498
Signing time: Sat 23 Aug 2025 07:02:29 +0000
Manifest this update: Sat 23 Aug 2025 07:02:29 +0000
Manifest next update: Sun 24 Aug 2025 07:02:29 +0000
Files and hashes: 1: FBdl7VOodLJhSXYfDoAofAIRhnA.roa (hash: I3zrIjexf9/s3BfDjPpCzKMEPfl4E3s1P3fqPquhjIg=)
2: LOre5Y-GT0cutCKwuVSXuFB1oSs.crl (hash: 0b5B0XpetjFwlewgCY2OUFw+/AvPYW+Lk0wBIIEGHTA=)
3: ZBji9OX_VotOWmsBmNsHM021d9w.roa (hash: VbyaXchd5eBQYGJ65pdgdekBYkxDCu5DrAnwaoKvIrc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/LOre5Y-GT0cutCKwuVSXuFB1oSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/LOre5Y-GT0cutCKwuVSXuFB1oSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/LOre5Y-GT0cutCKwuVSXuFB1oSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:60:8d:91:e0:19:ff:85:36:83:c6:c0:51:45:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ceadee58f864f472eb422b0b95497b85075a12b
Validity
Not Before: Aug 23 07:02:29 2025 GMT
Not After : Aug 24 07:02:29 2025 GMT
Subject: CN=5b3a79d179e0335bba5b36d039708997b345f381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:df:fd:eb:06:5f:13:31:d9:95:a7:74:22:71:
8a:bf:0f:79:97:6d:8b:0c:8f:45:00:7f:b8:bc:d4:
a4:9f:7d:27:66:ae:50:79:7d:c7:a3:24:22:9b:cf:
27:44:b4:2a:4c:f0:15:80:22:c8:7c:7a:fe:78:c2:
8b:97:08:f5:56:ce:2e:da:3e:59:c9:d1:8e:d3:f8:
04:b8:61:93:96:9c:86:a8:dc:0d:b8:86:00:ae:78:
e7:9c:e0:2c:61:98:ea:32:28:81:9a:4e:9d:a1:93:
25:d2:c9:55:5c:73:0e:07:1c:f9:90:72:1b:10:87:
c5:fc:8f:f8:b7:09:b4:ca:79:cd:f8:db:75:bd:15:
81:7b:63:0c:81:7d:13:1b:02:25:f7:5f:af:c4:e0:
17:c3:51:20:e4:cc:45:99:cf:c3:4e:9c:dd:e3:e0:
02:53:79:b4:22:11:dd:db:6e:33:b6:3d:c7:76:ca:
cf:c5:d4:c8:d6:27:2d:bf:ba:4b:7b:f1:5e:07:69:
14:ce:9b:3e:15:89:c6:d2:68:65:3c:68:1d:8d:c0:
8a:9f:1b:f6:47:98:bd:42:9c:03:10:d6:f2:32:3a:
54:dc:3a:73:50:6e:00:79:3f:80:bf:a2:a9:eb:cc:
ea:2d:5d:d0:6c:e7:78:10:38:dd:9e:9b:6c:fb:5e:
f6:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:3A:79:D1:79:E0:33:5B:BA:5B:36:D0:39:70:89:97:B3:45:F3:81
X509v3 Authority Key Identifier:
keyid:2C:EA:DE:E5:8F:86:4F:47:2E:B4:22:B0:B9:54:97:B8:50:75:A1:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LOre5Y-GT0cutCKwuVSXuFB1oSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/LOre5Y-GT0cutCKwuVSXuFB1oSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/LOre5Y-GT0cutCKwuVSXuFB1oSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:db:74:2f:da:f4:10:79:e9:74:23:f3:e0:3a:29:ab:72:f0:
c2:0c:81:22:32:06:a5:61:e7:ee:87:74:47:3d:f0:94:91:9f:
f7:25:cc:57:07:cb:0e:8a:15:a1:fe:44:cf:e8:79:10:cb:8e:
69:cd:c3:88:8a:48:5f:61:b7:56:18:0c:1a:a4:7b:52:d1:aa:
ba:24:a6:e2:34:0d:cd:f6:67:8e:e4:13:17:96:02:35:7f:22:
64:99:6a:97:c6:43:66:49:f0:c5:8d:f7:8a:b1:8f:c9:8c:d6:
75:05:c2:ba:c4:83:59:71:2d:db:ac:43:36:6a:48:13:d5:59:
3c:dc:db:ee:39:2b:fd:19:f8:ff:16:f9:ce:ed:f8:5b:e5:21:
7e:16:71:78:c6:24:59:d1:82:b4:b3:9f:4b:de:55:55:3e:31:
f4:a7:c7:90:82:1d:ee:b8:04:bc:c5:6b:cb:ce:0a:4b:16:f0:
81:7b:47:35:25:cb:3a:0e:5b:44:ee:e4:e3:a6:38:9c:1c:f4:
d9:66:0f:54:7d:34:02:7a:f2:af:f3:48:27:d1:86:0b:05:84:
7e:ca:2e:ae:81:75:02:8c:67:75:4b:72:02:74:be:5a:2b:54:
87:8a:70:fb:55:e5:6f:12:c1:a2:91:55:21:a2:4f:01:46:c4:
4e:7f:1b:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:18:46 2025 by rpki-client