Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/LoXNafYRaXriRpasdl1Wt13406E.mft
File: LoXNafYRaXriRpasdl1Wt13406E.mft (raw, json)
Hash identifier: DLegeKnRNgemRQCS7yd3wLle20tqZbEvuV3uGwRxjT8=
Subject key identifier: FD:31:42:A6:FB:24:7B:56:C6:3D:3E:E9:B1:67:9E:79:49:A8:60:E4
Authority key identifier: 2E:85:CD:69:F6:11:69:7A:E2:46:96:AC:76:5D:56:B7:5D:F8:D3:A1
Certificate issuer: /CN=2e85cd69f611697ae24696ac765d56b75df8d3a1
Certificate serial: 0198D5BC07246C0219F5D191A2C6B7F87C1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LoXNafYRaXriRpasdl1Wt13406E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/LoXNafYRaXriRpasdl1Wt13406E.mft
Manifest number: 055F
Signing time: Sat 23 Aug 2025 07:02:06 +0000
Manifest this update: Sat 23 Aug 2025 07:02:06 +0000
Manifest next update: Sun 24 Aug 2025 07:02:06 +0000
Files and hashes: 1: LoXNafYRaXriRpasdl1Wt13406E.crl (hash: EFrmo6xlCEvitKhf8rBz0l8idnR8SkziqUANh5HYmQ0=)
2: V4UHEu5lFuhdZwHH6lxxX4Rsnp4.roa (hash: QxXsgkZ9Y9z5B4JIZIQ9pTgrtbYM89E088MqJxxgyOE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/LoXNafYRaXriRpasdl1Wt13406E.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/LoXNafYRaXriRpasdl1Wt13406E.mft
rsync://rpki.ripe.net/repository/DEFAULT/LoXNafYRaXriRpasdl1Wt13406E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:07:24:6c:02:19:f5:d1:91:a2:c6:b7:f8:7c:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e85cd69f611697ae24696ac765d56b75df8d3a1
Validity
Not Before: Aug 23 07:02:06 2025 GMT
Not After : Aug 24 07:02:06 2025 GMT
Subject: CN=fd3142a6fb247b56c63d3ee9b1679e7949a860e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7e:42:22:29:ae:a4:69:11:17:79:e6:be:de:
8c:ef:d0:db:a9:46:50:23:1a:c2:cb:23:79:ae:7d:
04:c9:c1:2b:3f:16:da:bb:d6:bb:f0:5e:f0:fb:df:
98:c9:ea:f3:fd:c3:c7:c0:17:05:97:a9:dc:11:fb:
9b:2d:48:23:b7:c6:3d:d2:fe:10:01:2d:48:3a:90:
50:09:d3:09:3f:e5:4b:94:7f:fc:be:e2:b0:78:69:
79:32:58:a3:b0:4b:53:0b:5d:2b:bc:6a:02:bd:bb:
a2:07:14:8d:b6:90:a8:c7:e4:4e:c1:d9:71:57:0b:
ae:33:19:5f:59:97:8d:f8:4c:58:6a:76:53:09:40:
f7:2b:1d:0f:14:93:a1:ad:0f:94:e2:f8:ce:d8:bc:
a9:b6:4a:53:bc:ed:9b:99:2e:b1:a3:32:ef:74:58:
51:a0:94:27:ce:7a:63:fa:da:e5:e1:06:26:50:2a:
75:b6:f8:d0:22:fb:74:db:c9:60:fa:71:b8:a9:f9:
34:12:ad:bb:06:61:f6:3a:3a:9f:eb:d7:7d:8b:fe:
17:9d:16:ed:c8:8d:89:ac:9e:e1:30:83:eb:63:a0:
4f:d7:a0:84:03:6c:04:70:9c:6c:dd:f8:7e:53:ee:
9f:45:12:51:f9:ef:b2:36:15:08:87:42:44:d7:ac:
77:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:31:42:A6:FB:24:7B:56:C6:3D:3E:E9:B1:67:9E:79:49:A8:60:E4
X509v3 Authority Key Identifier:
keyid:2E:85:CD:69:F6:11:69:7A:E2:46:96:AC:76:5D:56:B7:5D:F8:D3:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoXNafYRaXriRpasdl1Wt13406E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/LoXNafYRaXriRpasdl1Wt13406E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/LoXNafYRaXriRpasdl1Wt13406E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:58:fa:32:c2:e6:c1:a0:98:c7:27:5e:ee:e3:d2:2c:df:74:
93:6e:d8:11:bd:12:d8:b5:42:79:ce:e0:aa:13:2d:c1:5d:c9:
57:03:cf:91:18:f3:4c:70:00:cc:a5:02:91:52:eb:a6:ba:e0:
84:5d:17:38:4c:79:9d:07:68:51:3d:34:91:79:b7:58:ba:8c:
f2:9e:81:c2:99:98:81:40:b2:9b:2b:2e:21:f5:e8:5b:03:0b:
e0:29:32:91:b2:ad:33:57:5a:03:90:1a:10:f3:63:f2:0b:79:
9f:77:81:a8:aa:c7:ae:98:43:9a:ca:9e:ea:7d:1d:ba:4b:89:
d5:69:01:63:b4:cf:19:20:13:a0:3a:40:0c:a7:2c:66:34:ed:
d5:53:1d:11:8e:dd:7f:e2:11:84:70:2f:69:b6:65:06:89:8a:
52:96:78:83:03:52:be:99:0f:ac:4f:b0:c2:c4:d9:da:76:16:
17:33:d1:1c:53:35:55:09:69:27:30:2d:db:6f:1b:cd:96:b4:
10:82:79:1e:f2:6a:8c:61:f4:21:db:35:2e:01:dc:d3:32:aa:
73:29:a8:91:bf:09:c1:ed:9a:eb:8e:1f:35:69:07:9e:a5:8f:
f0:1e:ee:7d:24:8b:cc:1b:eb:08:78:43:ed:cd:62:5b:0a:0a:
38:72:56:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:20:01 2025 by rpki-client