Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/LoXNafYRaXriRpasdl1Wt13406E.mft
File: LoXNafYRaXriRpasdl1Wt13406E.mft (raw, json)
Hash identifier: zrHfmoD4dKTq+DjTD0YeO5L5qkbRDuuxjjvmWxqhjas=
Subject key identifier: B9:22:77:B4:EC:E8:06:E9:3A:45:E1:E8:67:5F:71:5D:65:2C:B4:A6
Authority key identifier: 2E:85:CD:69:F6:11:69:7A:E2:46:96:AC:76:5D:56:B7:5D:F8:D3:A1
Certificate issuer: /CN=2e85cd69f611697ae24696ac765d56b75df8d3a1
Certificate serial: 0197B7EA7FCFFF359075A35ACC3F1AE2A82C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LoXNafYRaXriRpasdl1Wt13406E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/LoXNafYRaXriRpasdl1Wt13406E.mft
Manifest number: 04CB
Signing time: Sat 28 Jun 2025 19:01:27 +0000
Manifest this update: Sat 28 Jun 2025 19:01:27 +0000
Manifest next update: Sun 29 Jun 2025 19:01:27 +0000
Files and hashes: 1: LoXNafYRaXriRpasdl1Wt13406E.crl (hash: v4lZcBbe9NMVlmYsp1EXftaKcDRGWcT+5z4knqAaqUM=)
2: V4UHEu5lFuhdZwHH6lxxX4Rsnp4.roa (hash: QxXsgkZ9Y9z5B4JIZIQ9pTgrtbYM89E088MqJxxgyOE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/LoXNafYRaXriRpasdl1Wt13406E.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/LoXNafYRaXriRpasdl1Wt13406E.mft
rsync://rpki.ripe.net/repository/DEFAULT/LoXNafYRaXriRpasdl1Wt13406E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:7f:cf:ff:35:90:75:a3:5a:cc:3f:1a:e2:a8:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e85cd69f611697ae24696ac765d56b75df8d3a1
Validity
Not Before: Jun 28 19:01:27 2025 GMT
Not After : Jun 29 19:01:27 2025 GMT
Subject: CN=b92277b4ece806e93a45e1e8675f715d652cb4a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:75:16:bd:9a:86:0a:d0:a4:49:92:30:75:7b:
6c:b7:f5:35:d9:19:9e:41:d2:a3:59:4a:d1:03:06:
ec:21:e1:35:86:f6:a3:b6:6d:bb:73:9e:6c:73:32:
e1:1d:fc:b6:48:44:ae:8c:5e:da:bb:d3:aa:1e:cd:
41:93:ea:d0:b8:58:18:91:e3:25:f6:d6:da:d4:be:
9f:30:f3:7f:cc:08:f4:ec:6c:a3:f2:54:d6:9a:18:
ec:60:6c:9c:e3:8e:a8:9d:d7:7d:63:18:14:e8:5d:
01:2e:01:ac:0d:4c:b2:89:c4:4e:b6:26:9b:ec:24:
27:a9:55:64:cc:c5:62:33:1b:ec:21:11:24:68:66:
be:88:5d:85:ab:3c:ba:05:8b:f1:0c:57:76:18:41:
c8:fe:95:91:e7:d2:21:60:e9:75:c9:a9:2f:6c:de:
51:27:22:e8:19:17:c6:30:2c:8b:83:c4:60:6d:85:
c3:e0:fc:23:77:9e:62:d2:b5:99:03:28:72:47:56:
27:b0:6b:a1:eb:25:39:92:89:b2:b2:e6:a6:0c:b4:
64:2f:e3:ed:01:07:91:93:a0:6e:21:f0:57:a8:c2:
31:15:4f:82:7f:22:42:16:a9:28:ba:d3:06:87:ef:
25:80:0f:34:d5:ee:11:61:75:a9:63:c5:36:01:c6:
20:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:22:77:B4:EC:E8:06:E9:3A:45:E1:E8:67:5F:71:5D:65:2C:B4:A6
X509v3 Authority Key Identifier:
keyid:2E:85:CD:69:F6:11:69:7A:E2:46:96:AC:76:5D:56:B7:5D:F8:D3:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoXNafYRaXriRpasdl1Wt13406E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/LoXNafYRaXriRpasdl1Wt13406E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/LoXNafYRaXriRpasdl1Wt13406E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:d5:74:57:45:58:b0:2d:ac:99:99:e6:eb:6b:74:95:76:0e:
bb:b2:83:cd:35:d8:ab:fb:72:b5:4f:8c:06:56:b4:8a:6e:8b:
7a:61:3a:b4:91:41:b8:17:c7:4f:c0:72:bf:9d:8a:09:00:34:
4e:d8:90:b9:a2:6e:38:07:34:28:d6:17:c4:ed:34:09:ca:cf:
06:2e:39:43:51:c8:d2:16:7b:13:8d:e9:1e:d3:fb:b9:99:36:
96:03:a3:5d:8b:05:c2:a9:68:4a:e1:27:c9:48:d1:3e:49:af:
e4:0a:63:d8:51:d5:f6:b2:29:f7:0f:8e:c2:b3:43:6c:a7:8c:
18:c6:b2:e6:a3:16:08:de:ed:52:b4:cf:00:a2:7b:97:98:cf:
b6:5a:24:54:0f:d3:92:1b:49:95:da:d7:92:da:dd:9b:7e:8e:
dd:bc:7c:57:28:d2:b0:35:42:0c:af:d9:61:47:ef:63:14:11:
5b:ba:b3:76:fa:eb:73:88:d5:1d:f1:fa:fc:87:33:12:07:3b:
aa:75:06:05:86:43:5c:df:b5:5e:3b:43:80:be:9b:cc:c5:85:
1b:ba:cd:a3:70:df:40:18:ec:37:be:41:ab:0e:ec:30:aa:b4:
d4:cd:b5:63:16:19:4f:51:3d:a9:58:be:d6:cb:48:38:bc:b7:
0a:48:0c:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe36n/P/zWQdaNazD8a4qgsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlODVjZDY5ZjYxMTY5N2FlMjQ2OTZhYzc2NWQ1NmI3NWRm
OGQzYTEwHhcNMjUwNjI4MTkwMTI3WhcNMjUwNjI5MTkwMTI3WjAzMTEwLwYDVQQD
EyhiOTIyNzdiNGVjZTgwNmU5M2E0NWUxZTg2NzVmNzE1ZDY1MmNiNGE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXUWvZqGCtCkSZIwdXtst/U12Rme
QdKjWUrRAwbsIeE1hvajtm27c55sczLhHfy2SESujF7au9OqHs1Bk+rQuFgYkeMl
9tba1L6fMPN/zAj07Gyj8lTWmhjsYGyc446ondd9YxgU6F0BLgGsDUyyicROtiab
7CQnqVVkzMViMxvsIREkaGa+iF2Fqzy6BYvxDFd2GEHI/pWR59IhYOl1yakvbN5R
JyLoGRfGMCyLg8RgbYXD4Pwjd55i0rWZAyhyR1YnsGuh6yU5komysuamDLRkL+Pt
AQeRk6BuIfBXqMIxFU+CfyJCFqkoutMGh+8lgA801e4RYXWpY8U2AcYgywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLkid7Ts6AbpOkXh6GdfcV1lLLSmMB8GA1UdIwQY
MBaAFC6FzWn2EWl64kaWrHZdVrdd+NOhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTG9YTmFmWVJhWHJpUnBhc2RsMVd0MTM0MDZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy82NTA0MzYtNTQ5OC00NGRiLWE4OWEt
Y2ZlMzk3ZGZiNWM0LzEvTG9YTmFmWVJhWHJpUnBhc2RsMVd0MTM0MDZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy82NTA0MzYtNTQ5OC00NGRiLWE4OWEtY2ZlMzk3ZGZiNWM0
LzEvTG9YTmFmWVJhWHJpUnBhc2RsMVd0MTM0MDZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe9V0V0VY
sC2smZnm62t0lXYOu7KDzTXYq/tytU+MBla0im6LemE6tJFBuBfHT8Byv52KCQA0
TtiQuaJuOAc0KNYXxO00CcrPBi45Q1HI0hZ7E43pHtP7uZk2lgOjXYsFwqloSuEn
yUjRPkmv5Apj2FHV9rIp9w+OwrNDbKeMGMay5qMWCN7tUrTPAKJ7l5jPtlokVA/T
khtJldrXktrdm36O3bx8VyjSsDVCDK/ZYUfvYxQRW7qzdvrrc4jVHfH6/IczEgc7
qnUGBYZDXN+1XjtDgL6bzMWFG7rNo3DfQBjsN75Bqw7sMKq01M21YxYZT1E9qVi+
1stIOLy3CkgM/A==
-----END CERTIFICATE-----
Generated at Sun Jun 29 04:08:08 2025 by rpki-client