Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/7c97cf-195c-4fc1-95a3-637fa14656de/1/looX4WGWu3qGcY5rK9agfje0DGU.mft
File: looX4WGWu3qGcY5rK9agfje0DGU.mft (raw, json)
Hash identifier: aJKVm0nflJdWtjcYXQasz/FtbBG8DOvDHhL3EdtcEz4=
Subject key identifier: 9B:6E:65:03:FF:D8:92:A0:70:0A:6F:D4:DD:87:F6:46:B0:E8:CC:7D
Authority key identifier: 96:8A:17:E1:61:96:BB:7A:86:71:8E:6B:2B:D6:A0:7E:37:B4:0C:65
Certificate issuer: /CN=968a17e16196bb7a86718e6b2bd6a07e37b40c65
Certificate serial: 0196C12629FB96E88DA6A5F3609FEA4C19D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/looX4WGWu3qGcY5rK9agfje0DGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/7c97cf-195c-4fc1-95a3-637fa14656de/1/looX4WGWu3qGcY5rK9agfje0DGU.mft
Manifest number: 1534
Signing time: Sun 11 May 2025 21:00:25 +0000
Manifest this update: Sun 11 May 2025 21:00:25 +0000
Manifest next update: Mon 12 May 2025 21:00:25 +0000
Files and hashes: 1: DujQDMx3DXEUwl_S25-DE-FhKlg.roa (hash: kc2HgT2zi7ovcfO8xiQnJUXKfZ/NJb+y4s0qXknod8A=)
2: looX4WGWu3qGcY5rK9agfje0DGU.crl (hash: CPkWiH33zsBnmAD5nXexgVQwtERNdlgXmHJ7vL1J5YY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/7c97cf-195c-4fc1-95a3-637fa14656de/1/looX4WGWu3qGcY5rK9agfje0DGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/7c97cf-195c-4fc1-95a3-637fa14656de/1/looX4WGWu3qGcY5rK9agfje0DGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/looX4WGWu3qGcY5rK9agfje0DGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 21:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:26:29:fb:96:e8:8d:a6:a5:f3:60:9f:ea:4c:19:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=968a17e16196bb7a86718e6b2bd6a07e37b40c65
Validity
Not Before: May 11 21:00:25 2025 GMT
Not After : May 12 21:00:25 2025 GMT
Subject: CN=9b6e6503ffd892a0700a6fd4dd87f646b0e8cc7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:11:29:f0:43:89:21:a1:8c:9a:a1:84:31:0c:
46:1b:30:b2:94:8a:85:c9:9d:b1:44:0a:b5:c0:9d:
cd:bd:e9:be:5a:38:49:6f:8a:b9:f5:58:4d:59:94:
ad:4d:8d:53:f7:a5:78:59:30:dd:d6:f6:77:09:49:
47:02:78:e6:38:de:fa:cf:ff:b9:e0:f7:1a:8a:6e:
03:0e:bb:12:35:78:38:08:57:cd:e1:93:d9:b9:a3:
28:e2:ca:5e:05:12:b5:1e:ca:10:20:fc:79:66:19:
b0:bb:b6:b7:92:aa:70:e5:74:90:34:ac:60:c3:69:
30:0e:f7:62:1a:ab:3a:ad:3c:88:89:f4:eb:9e:6b:
49:4b:9a:4f:8b:15:dc:42:57:bb:a8:20:14:80:28:
51:b4:5f:43:95:e4:0a:7f:c6:1d:73:4c:cf:0c:0c:
13:03:6c:1f:7b:42:8d:85:a4:d7:5e:6b:f8:c5:40:
fc:5e:b2:ce:97:65:5a:77:70:33:f4:21:f5:21:c5:
a0:8d:5d:fe:f5:1c:2e:e3:e7:ea:96:78:77:6c:22:
5c:e5:6e:a6:e2:3a:23:da:18:7f:68:6a:b1:06:b8:
82:18:55:a4:1e:5c:6e:38:6e:db:d4:34:5c:b4:5b:
7f:ea:0e:24:27:69:81:27:3f:5d:e0:26:2a:15:72:
de:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:6E:65:03:FF:D8:92:A0:70:0A:6F:D4:DD:87:F6:46:B0:E8:CC:7D
X509v3 Authority Key Identifier:
keyid:96:8A:17:E1:61:96:BB:7A:86:71:8E:6B:2B:D6:A0:7E:37:B4:0C:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/looX4WGWu3qGcY5rK9agfje0DGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/7c97cf-195c-4fc1-95a3-637fa14656de/1/looX4WGWu3qGcY5rK9agfje0DGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/7c97cf-195c-4fc1-95a3-637fa14656de/1/looX4WGWu3qGcY5rK9agfje0DGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:fb:19:cc:8e:bd:6a:e8:4c:a2:68:f0:76:f3:29:0b:62:e1:
80:a9:d5:4e:2c:b6:6a:a2:66:86:38:77:fa:01:e7:94:7e:00:
c1:29:37:7a:2e:33:d5:fd:ab:f0:f5:b6:93:37:87:1f:9c:0e:
80:f4:7f:78:6d:e8:e5:45:30:44:dc:0a:48:2b:e6:61:69:f1:
e7:56:73:c5:d2:c1:df:95:5b:97:14:85:1d:5e:0d:8a:ec:f9:
49:43:4f:93:11:1f:46:34:79:a5:1b:05:14:a7:72:ca:55:f9:
c1:74:c2:4f:f2:0e:7a:36:4c:e0:8c:21:d2:39:3c:bc:75:cd:
cf:f1:21:c2:a3:22:a2:cc:dd:ce:4e:37:b7:5a:37:8c:14:6a:
d1:46:b9:26:57:4a:29:0c:1c:95:dc:53:37:c2:ef:d9:2d:1f:
10:26:f2:60:be:21:b0:78:a9:df:af:04:26:c5:51:d8:57:75:
d0:bf:bd:f6:89:43:8b:c0:68:e4:44:09:34:2a:8a:e8:7b:7a:
b3:6e:27:c1:df:6e:16:6a:b4:92:cc:bb:cb:b8:8d:16:62:8e:
44:0b:53:80:f1:0e:bf:ad:a6:01:82:4b:3c:2a:66:fb:ab:31:
0d:9b:5c:99:e6:d8:fe:bc:7c:41:48:2b:f2:d1:9a:47:3d:2f:
04:11:b1:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 03:54:37 2025 by rpki-client