Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.mft
File: LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.mft (raw, json)
Hash identifier: jAB8OJAZGZ3EUfqiDYvkudZqT8GxVwf0S03Yj9kLBh8=
Subject key identifier: AA:29:70:D5:55:FA:40:07:F8:E9:58:33:E0:97:F3:6B:60:C1:5A:47
Authority key identifier: 2E:87:28:26:FC:E0:2B:D9:48:5E:F2:76:64:1D:2B:58:4F:59:9B:37
Certificate issuer: /CN=2e872826fce02bd9485ef276641d2b584f599b37
Certificate serial: 0197B58DAA9454EFA34126E52BC6E8AB33E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.mft
Manifest number: 0208
Signing time: Sat 28 Jun 2025 08:00:49 +0000
Manifest this update: Sat 28 Jun 2025 08:00:49 +0000
Manifest next update: Sun 29 Jun 2025 08:00:49 +0000
Files and hashes: 1: LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.crl (hash: Grkv7tq8fuACcsTgaJXK2F2loe8C7xBfcVsyhX9ec4A=)
2: Mzj29HFabYUUzd0b2x71rCWYxpc.roa (hash: CtBd18sCBkrUSbVpakXbp+UYL2hKAze7NhB+GbMH/4U=)
3: Sdx0s8uspLK2JEfxE0Zqq-P7qdc.roa (hash: SB/yO/98dSqVsNjGD6z9bUudXfStWVjKdpjSXqLPG2I=)
4: VOPfsPLo2qD6WzGvi49ZWNyWRCQ.roa (hash: U4NKV1QaU6X7/z8jYu2ZN8ojJKZniu0yv+LX0DQZ7Lw=)
5: sXkk9RexS8Df6sg2xdkc7cVwBT0.roa (hash: EPX6TU1BjJqVBea1HkWMPFI7ngY4YBybKK+v3369Nok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.mft
rsync://rpki.ripe.net/repository/DEFAULT/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:8d:aa:94:54:ef:a3:41:26:e5:2b:c6:e8:ab:33:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e872826fce02bd9485ef276641d2b584f599b37
Validity
Not Before: Jun 28 08:00:49 2025 GMT
Not After : Jun 29 08:00:49 2025 GMT
Subject: CN=aa2970d555fa4007f8e95833e097f36b60c15a47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9a:f7:d8:51:66:5e:83:d2:4d:50:c3:fa:7c:
10:b0:6e:16:64:12:86:db:7c:c8:ff:05:74:00:a3:
13:fd:81:be:d2:4f:5f:93:f9:d0:77:a2:b6:6e:a8:
e3:5e:df:93:3b:fc:47:cb:cb:11:f1:0d:ae:73:1c:
0c:72:ca:09:c0:3c:f1:86:6b:9f:82:eb:e1:20:e9:
45:b2:6c:73:d4:b0:76:f7:a9:f7:4f:96:d9:22:57:
11:f6:62:29:46:ea:4b:c8:62:5c:50:7c:7c:6d:17:
97:5a:ff:06:52:64:43:92:84:3a:c6:dc:7f:be:5c:
1e:97:3f:53:19:09:7c:ef:e0:92:83:74:4f:eb:a0:
bf:51:a1:d4:e9:9b:a1:5e:75:aa:10:64:13:89:84:
18:e3:9a:8b:b3:bf:d1:34:90:fb:81:4e:b2:2e:99:
ef:04:fd:87:8e:e9:82:6a:c1:12:da:32:21:8e:06:
f8:6c:98:fc:ea:0c:52:48:72:2f:6a:b2:e7:16:0b:
0d:87:00:28:0c:7a:2e:a8:53:7c:5e:a2:67:62:25:
24:81:d6:c4:de:6b:9f:4d:e8:32:cd:47:79:f9:1b:
70:c6:23:0e:e6:6a:56:3e:9b:9a:38:85:17:e7:20:
76:f9:8b:ee:8e:62:92:36:25:86:ec:74:e1:ff:55:
2b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:29:70:D5:55:FA:40:07:F8:E9:58:33:E0:97:F3:6B:60:C1:5A:47
X509v3 Authority Key Identifier:
keyid:2E:87:28:26:FC:E0:2B:D9:48:5E:F2:76:64:1D:2B:58:4F:59:9B:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:62:2a:49:9c:5e:ed:04:99:42:27:a9:27:4b:a0:99:93:70:
3d:75:d4:9d:3b:9d:f4:dc:df:25:f5:fc:06:d3:13:9a:a5:e4:
20:38:53:6f:14:2c:9d:6c:5e:c9:a3:c0:c3:78:d9:c7:95:0d:
df:c2:a0:f8:38:f0:67:4e:1c:18:5c:a1:63:59:57:ec:81:19:
07:d1:4b:3c:cb:62:1a:61:46:cc:c8:90:d7:da:fc:2f:f1:50:
5a:7e:36:9d:6b:f1:e7:8d:84:4a:18:42:40:6b:a2:7d:7b:6a:
46:5e:89:90:39:e3:2a:6a:f2:d7:37:a0:c2:ce:4f:d5:1b:6f:
3d:23:76:a1:d9:05:24:d6:32:6d:6a:f0:9a:24:71:c8:9c:50:
f7:aa:22:06:ca:98:cf:8c:f3:8e:e5:8b:e6:33:8e:72:c2:9e:
ba:59:7f:fb:89:7d:d4:d3:4d:1b:fb:76:1e:e5:10:60:ef:b8:
05:52:ad:3f:1a:11:17:7a:fb:d4:40:0a:d4:7f:34:20:ed:29:
ba:2f:57:00:77:f3:d0:cf:62:47:33:bc:d0:dd:68:52:9f:eb:
4a:49:ba:a4:25:26:bd:cf:2b:6f:8e:6f:7e:d4:86:6b:7c:76:
65:43:d5:4b:b2:ee:96:fb:b8:8a:ca:45:44:8c:39:c5:de:aa:
e8:54:4c:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:57:29 2025 by rpki-client