Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/d520db-bdf8-4f27-8dff-8c130e6841db/1/LOKZUFiz3prtI6Yff7e1t7GTmEo.mft
File: LOKZUFiz3prtI6Yff7e1t7GTmEo.mft (raw, json)
Hash identifier: AL8YGk45yFRsoWtuMxyGQ9XHz+0IjPzwzlmnqlVBjpk=
Subject key identifier: 2C:E4:35:C1:ED:B5:1B:5F:B2:EC:F2:11:54:5F:8F:4B:BD:D8:A5:F7
Authority key identifier: 2C:E2:99:50:58:B3:DE:9A:ED:23:A6:1F:7F:B7:B5:B7:B1:93:98:4A
Certificate issuer: /CN=2ce2995058b3de9aed23a61f7fb7b5b7b193984a
Certificate serial: 0196D588C69C7D0E68A5B58F73387FD9E435
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LOKZUFiz3prtI6Yff7e1t7GTmEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/d520db-bdf8-4f27-8dff-8c130e6841db/1/LOKZUFiz3prtI6Yff7e1t7GTmEo.mft
Manifest number: 0C37
Signing time: Thu 15 May 2025 20:00:32 +0000
Manifest this update: Thu 15 May 2025 20:00:32 +0000
Manifest next update: Fri 16 May 2025 20:00:32 +0000
Files and hashes: 1: 7x1Ss4505QNa0fMVELtO8LmLJeM.roa (hash: 9SZiDlSiFrfDTptEJc86ZTB/oJuky1dBcaDe8vDIhaU=)
2: LOKZUFiz3prtI6Yff7e1t7GTmEo.crl (hash: UYvCeS/Rtsutu4YFkr1RmizFo0TGczUIV27zhgiqHxY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/d520db-bdf8-4f27-8dff-8c130e6841db/1/LOKZUFiz3prtI6Yff7e1t7GTmEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/d520db-bdf8-4f27-8dff-8c130e6841db/1/LOKZUFiz3prtI6Yff7e1t7GTmEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/LOKZUFiz3prtI6Yff7e1t7GTmEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 14:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d5:88:c6:9c:7d:0e:68:a5:b5:8f:73:38:7f:d9:e4:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ce2995058b3de9aed23a61f7fb7b5b7b193984a
Validity
Not Before: May 15 20:00:32 2025 GMT
Not After : May 16 20:00:32 2025 GMT
Subject: CN=2ce435c1edb51b5fb2ecf211545f8f4bbdd8a5f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ca:5e:d5:84:50:3f:55:3b:38:4b:2c:20:57:
c3:83:86:d8:3a:ce:8f:c1:2c:46:eb:aa:7b:58:a0:
a5:bb:7b:b8:b2:f7:c1:f7:04:7a:ad:c2:f1:89:eb:
f7:78:23:3f:5e:c8:c8:68:c0:60:9e:a8:e7:c6:b8:
0e:33:3e:89:46:47:a5:31:fa:f9:ed:79:66:f2:1f:
95:7a:92:bf:a3:3e:30:7a:f6:78:51:ce:ca:71:7c:
aa:e0:4c:d6:5b:30:d3:35:1f:6f:32:3a:c7:f0:ed:
1b:87:21:dd:01:b4:f7:58:f0:06:55:b8:6a:19:95:
d3:68:a0:bc:32:41:40:bc:0d:35:3a:41:f3:24:7b:
b4:dd:08:55:05:48:90:23:d9:3f:6d:66:a8:a9:f2:
a0:42:5c:1c:04:4a:a2:d6:5c:f8:5e:2d:8b:fa:fb:
a5:9c:35:b8:f2:e3:6f:b7:e2:e5:89:d4:a8:d7:46:
3b:a5:1d:6e:42:cb:29:b0:f3:68:8f:b4:e6:ba:d7:
15:b9:3a:1b:49:da:77:95:aa:31:b1:ac:7d:ad:53:
ca:13:b1:76:d2:c1:dd:91:5a:f2:24:fb:ee:a4:70:
a5:5d:40:cf:93:08:8e:42:92:77:df:5c:74:42:37:
33:33:c7:4a:13:40:a1:a8:57:40:52:0f:f5:88:e6:
93:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:E4:35:C1:ED:B5:1B:5F:B2:EC:F2:11:54:5F:8F:4B:BD:D8:A5:F7
X509v3 Authority Key Identifier:
keyid:2C:E2:99:50:58:B3:DE:9A:ED:23:A6:1F:7F:B7:B5:B7:B1:93:98:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LOKZUFiz3prtI6Yff7e1t7GTmEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/d520db-bdf8-4f27-8dff-8c130e6841db/1/LOKZUFiz3prtI6Yff7e1t7GTmEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/d520db-bdf8-4f27-8dff-8c130e6841db/1/LOKZUFiz3prtI6Yff7e1t7GTmEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:0c:68:bf:b3:41:d9:cf:41:48:e5:15:d8:91:d6:8c:70:74:
80:69:ce:61:33:4c:6f:9c:b2:da:65:9b:9f:4c:69:a4:1f:24:
79:c0:70:f6:ef:2a:0b:03:e7:b2:25:ad:f2:04:62:f3:48:71:
70:52:0e:0f:e8:3e:fa:4d:b5:a8:41:eb:03:ab:5e:1c:9c:95:
43:7c:95:4f:8f:85:02:97:12:ff:bb:ea:18:6b:af:2b:75:85:
a5:a0:da:33:93:19:50:c9:38:ea:dc:59:f8:e7:47:9f:91:29:
ae:aa:f4:85:35:56:f5:34:04:5d:41:67:d0:c9:df:f9:b4:c5:
10:01:68:10:d5:f6:c3:f3:d3:62:27:be:b3:32:03:02:03:4a:
0e:9a:59:40:20:d7:b3:3b:3d:7b:40:2e:2b:2f:41:86:27:08:
db:b4:b2:5e:ff:69:c6:e0:04:56:6a:42:11:35:d9:c6:e5:36:
8d:7a:8d:d2:a9:7e:55:11:d5:0e:d6:c2:71:13:1a:7e:2b:4b:
9e:fa:89:6a:10:11:8a:09:6b:e6:0f:2b:7b:e8:88:fb:83:e6:
07:14:6d:0c:81:39:45:18:ba:50:4f:f1:5b:ee:a8:21:0b:8b:
0f:41:c2:e8:b6:51:38:40:38:1a:8d:0f:1c:c3:90:62:95:03:
d2:1a:dc:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 23:45:58 2025 by rpki-client