Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/7c97cf-195c-4fc1-95a3-637fa14656de/1/looX4WGWu3qGcY5rK9agfje0DGU.mft
File: looX4WGWu3qGcY5rK9agfje0DGU.mft (raw, json)
Hash identifier: 039pArcgWeFoZDHoutGwSs1Orf7VwRGPICUC2KzypzU=
Subject key identifier: 66:63:14:62:AF:F4:C9:C4:54:AA:E2:89:B8:7D:41:88:8B:96:16:C6
Authority key identifier: 96:8A:17:E1:61:96:BB:7A:86:71:8E:6B:2B:D6:A0:7E:37:B4:0C:65
Certificate issuer: /CN=968a17e16196bb7a86718e6b2bd6a07e37b40c65
Certificate serial: 0197C6145CD5F31FFDAA9F22E3535C5CB672
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/looX4WGWu3qGcY5rK9agfje0DGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/7c97cf-195c-4fc1-95a3-637fa14656de/1/looX4WGWu3qGcY5rK9agfje0DGU.mft
Manifest number: 15BB
Signing time: Tue 01 Jul 2025 13:01:52 +0000
Manifest this update: Tue 01 Jul 2025 13:01:52 +0000
Manifest next update: Wed 02 Jul 2025 13:01:52 +0000
Files and hashes: 1: DujQDMx3DXEUwl_S25-DE-FhKlg.roa (hash: kc2HgT2zi7ovcfO8xiQnJUXKfZ/NJb+y4s0qXknod8A=)
2: looX4WGWu3qGcY5rK9agfje0DGU.crl (hash: GCTTKA516wxoIm2TS4Hg3DSzIwcMd6+fQv8X5+uJhEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/7c97cf-195c-4fc1-95a3-637fa14656de/1/looX4WGWu3qGcY5rK9agfje0DGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/7c97cf-195c-4fc1-95a3-637fa14656de/1/looX4WGWu3qGcY5rK9agfje0DGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/looX4WGWu3qGcY5rK9agfje0DGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 13:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:14:5c:d5:f3:1f:fd:aa:9f:22:e3:53:5c:5c:b6:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=968a17e16196bb7a86718e6b2bd6a07e37b40c65
Validity
Not Before: Jul 1 13:01:52 2025 GMT
Not After : Jul 2 13:01:52 2025 GMT
Subject: CN=66631462aff4c9c454aae289b87d41888b9616c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6c:16:8e:db:b3:1c:83:65:c8:ab:30:e8:6d:
94:d1:06:15:b8:83:e2:e2:ce:71:df:87:15:fe:31:
62:bc:da:0b:de:d9:1f:37:06:b3:a2:e4:f7:29:74:
9a:69:dd:27:29:57:b2:98:75:87:80:cc:59:46:57:
5d:b8:92:b1:96:e9:7d:f5:f6:8d:98:40:29:91:7c:
36:f3:3b:a0:74:7d:a2:f8:ad:cc:77:d6:1f:71:20:
8a:95:6e:7d:89:f2:37:ae:1f:32:da:67:ce:e0:44:
bc:f8:be:95:7d:ce:5f:23:d6:56:70:8b:98:a4:96:
73:a1:db:0e:90:24:bc:68:06:2c:d0:ee:89:09:4f:
ca:7d:e7:0a:8e:76:f3:da:3a:a9:dc:37:5f:1c:31:
02:84:50:ce:74:90:ac:15:fa:66:8c:ef:31:e9:01:
31:ce:55:3c:55:31:14:2d:74:e4:c5:e6:82:36:31:
df:82:97:c1:ab:b3:eb:6a:f7:54:e2:26:56:f6:42:
e1:dd:bc:ee:69:29:4e:49:4b:4c:d3:12:d1:47:ee:
fe:b2:ef:c5:27:d5:c9:59:c9:6b:21:2b:21:0c:a8:
3c:47:37:08:d3:71:59:b9:c3:d5:03:60:ed:79:0e:
c7:0d:17:c9:f3:21:22:0f:18:3b:05:91:ec:e3:74:
0d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:63:14:62:AF:F4:C9:C4:54:AA:E2:89:B8:7D:41:88:8B:96:16:C6
X509v3 Authority Key Identifier:
keyid:96:8A:17:E1:61:96:BB:7A:86:71:8E:6B:2B:D6:A0:7E:37:B4:0C:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/looX4WGWu3qGcY5rK9agfje0DGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/7c97cf-195c-4fc1-95a3-637fa14656de/1/looX4WGWu3qGcY5rK9agfje0DGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/7c97cf-195c-4fc1-95a3-637fa14656de/1/looX4WGWu3qGcY5rK9agfje0DGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:61:07:e1:d2:b9:30:0e:8f:00:3f:3c:65:ff:39:ba:77:df:
47:17:90:9e:14:7b:87:4c:e3:a9:82:c2:4b:02:ff:25:49:2b:
e6:3a:9d:75:0a:fa:b6:7b:89:13:59:9d:b7:df:c1:27:97:b3:
af:06:df:85:83:66:de:77:31:f4:54:d2:6d:26:92:a9:d3:fc:
1d:6a:5d:0a:ef:65:61:c2:3d:c0:f8:d4:6e:e1:91:45:cd:6f:
a7:fc:2e:a8:43:68:62:96:d5:32:33:75:00:a3:6d:84:75:46:
82:4f:7b:5f:a2:a5:2b:45:d2:e7:c2:21:76:bf:f8:32:c9:01:
de:e8:9b:04:9d:ea:fb:b3:4b:7b:54:df:24:80:a0:21:d9:dc:
16:e4:a3:85:b0:52:88:a8:20:02:49:d6:e2:7a:b5:f8:7c:e0:
11:69:93:cd:ce:22:f3:c4:57:ff:60:e1:66:a3:45:c7:a2:cc:
0c:5b:85:63:43:d7:28:03:26:c8:2f:13:0c:5a:ed:f2:d7:a2:
8d:ee:b6:a0:ce:71:33:66:49:1f:e7:3e:3e:71:d6:30:bc:11:
6c:7e:5e:21:12:1b:2d:95:38:2f:66:ec:2a:9c:25:bc:65:40:
83:b5:e2:0e:15:05:a1:7e:31:7e:e8:e4:21:59:e6:10:fc:af:
3f:e0:ea:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 20:50:01 2025 by rpki-client