Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/af76e0-6b7d-40ac-9621-643a2fc4473e/1/Lo7asSIV4pvTjB2pteOWvQyWvgk.mft
File: Lo7asSIV4pvTjB2pteOWvQyWvgk.mft (raw, json)
Hash identifier: 9BYIloNTMY/vF6fRWUG1+KJtOa3Qzk9GVZG5cpgDV+o=
Subject key identifier: DE:D4:EE:DB:D9:26:2E:18:48:C8:70:DC:7A:A8:FC:E9:3D:79:2C:01
Authority key identifier: 2E:8E:DA:B1:22:15:E2:9B:D3:8C:1D:A9:B5:E3:96:BD:0C:96:BE:09
Certificate issuer: /CN=2e8edab12215e29bd38c1da9b5e396bd0c96be09
Certificate serial: 0196AEB237F0AD02FCA43A8972CB91215538
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lo7asSIV4pvTjB2pteOWvQyWvgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/af76e0-6b7d-40ac-9621-643a2fc4473e/1/Lo7asSIV4pvTjB2pteOWvQyWvgk.mft
Manifest number: 152D
Signing time: Thu 08 May 2025 07:00:37 +0000
Manifest this update: Thu 08 May 2025 07:00:37 +0000
Manifest next update: Fri 09 May 2025 07:00:37 +0000
Files and hashes: 1: 036tWscrBo3WQktUJkLutI8dnhI.roa (hash: SbRgrcoBWhT2vLik5V86VTcCJ3Ave5F15tRHkOT5qDg=)
2: Lo7asSIV4pvTjB2pteOWvQyWvgk.crl (hash: G95baIWNs9WNk48Dl1jWuPdzT6eoEihszjUEUSTGseo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/af76e0-6b7d-40ac-9621-643a2fc4473e/1/Lo7asSIV4pvTjB2pteOWvQyWvgk.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/af76e0-6b7d-40ac-9621-643a2fc4473e/1/Lo7asSIV4pvTjB2pteOWvQyWvgk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lo7asSIV4pvTjB2pteOWvQyWvgk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ae:b2:37:f0:ad:02:fc:a4:3a:89:72:cb:91:21:55:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e8edab12215e29bd38c1da9b5e396bd0c96be09
Validity
Not Before: May 8 07:00:37 2025 GMT
Not After : May 9 07:00:37 2025 GMT
Subject: CN=ded4eedbd9262e1848c870dc7aa8fce93d792c01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:49:a9:42:6b:35:09:7d:d7:38:6f:91:c9:19:
bf:e2:1d:d6:9a:3a:d5:4a:5a:2a:58:6e:8c:e9:15:
8d:88:48:23:e6:01:37:a3:9c:78:16:61:13:8a:47:
a9:44:f5:a9:18:35:6f:4a:67:67:42:65:7f:f7:2d:
60:9f:7a:a2:9e:09:be:91:ba:25:81:fc:bc:a9:88:
3d:33:85:c1:cf:f6:88:1e:ca:51:7f:b7:db:c2:43:
a2:74:32:51:c2:1a:f2:e9:e4:0c:37:0e:88:1f:9f:
83:83:50:76:0d:a8:52:64:7c:c2:83:81:40:ee:c6:
26:ff:ea:7c:5c:b1:6a:ad:94:f9:74:fd:78:e6:ca:
a8:a4:dd:47:7b:2b:01:88:42:2b:a6:82:53:f1:1f:
20:dd:2b:69:b4:76:4e:6c:22:8b:22:7e:27:9f:de:
56:d5:a5:ce:20:b2:50:84:fe:b3:e5:7c:98:00:34:
54:9c:83:b6:eb:65:b9:cc:87:3e:64:18:d2:88:86:
74:a1:a1:a1:6b:2e:3a:5d:7f:89:32:5b:d3:fe:27:
b3:79:74:c7:30:da:98:ff:03:8a:8d:a7:8c:a0:9d:
e6:dc:59:a2:d0:f4:09:13:bc:f3:ad:5f:f6:b4:a0:
ec:69:de:d0:4d:fb:50:c3:f7:82:06:42:4a:93:98:
68:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:D4:EE:DB:D9:26:2E:18:48:C8:70:DC:7A:A8:FC:E9:3D:79:2C:01
X509v3 Authority Key Identifier:
keyid:2E:8E:DA:B1:22:15:E2:9B:D3:8C:1D:A9:B5:E3:96:BD:0C:96:BE:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lo7asSIV4pvTjB2pteOWvQyWvgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/af76e0-6b7d-40ac-9621-643a2fc4473e/1/Lo7asSIV4pvTjB2pteOWvQyWvgk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/af76e0-6b7d-40ac-9621-643a2fc4473e/1/Lo7asSIV4pvTjB2pteOWvQyWvgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:c7:32:dd:62:df:75:f8:02:a4:d6:f9:a4:88:07:66:5d:b9:
c2:f2:50:1b:f0:79:ee:49:90:27:4d:d9:74:e6:45:b0:99:4e:
f0:a0:10:d2:eb:8a:30:06:dc:7f:01:b4:d4:f3:ff:02:df:a9:
c7:75:30:aa:7b:a1:5b:8c:a9:5c:2a:cc:91:f0:f7:26:61:0d:
53:ea:14:dc:09:b8:a9:2d:f4:0c:bb:17:e7:4b:5b:5a:d4:0f:
be:c5:9c:0e:58:2c:4b:86:03:0d:cd:d8:f9:52:09:53:fc:29:
6a:cb:2a:ba:55:7e:f9:b3:7c:86:0c:86:93:6e:b2:c0:55:1a:
55:cb:25:7e:ef:cb:59:fd:86:b0:98:86:e4:9f:39:2f:7c:08:
92:d1:59:b0:05:32:39:19:c0:e7:25:7c:a5:88:e3:4d:5a:3b:
ee:f6:0a:a1:70:b7:fc:d0:58:20:a1:35:52:55:54:db:1a:5c:
3a:ab:a9:a7:df:40:ea:d8:66:07:e9:30:f1:a5:82:f8:7e:13:
65:a8:75:ae:f8:80:eb:db:42:45:e0:61:55:ed:87:25:ea:44:
61:64:f2:3d:d3:2b:80:ee:e9:d8:b2:62:91:74:1b:cb:eb:97:
bc:69:1b:8b:e5:75:0c:be:8c:88:01:0e:bb:9d:7e:3b:e3:89:
17:e3:55:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 10:21:36 2025 by rpki-client