Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/8c27aa-b500-4c96-84ec-f8be495252b0/1/LokBk3Q73yTdIsPtbyizAxouyAY.mft
File: LokBk3Q73yTdIsPtbyizAxouyAY.mft (raw, json)
Hash identifier: o7zyfcz86BSg5gxCxuV+w6kAELXE2XYSwYLrwpXSDlw=
Subject key identifier: 0B:B5:9B:7A:7E:59:AB:37:BA:FF:B6:6E:B0:5F:71:F7:BA:E3:5A:7A
Authority key identifier: 2E:89:01:93:74:3B:DF:24:DD:22:C3:ED:6F:28:B3:03:1A:2E:C8:06
Certificate issuer: /CN=2e890193743bdf24dd22c3ed6f28b3031a2ec806
Certificate serial: 0196A98B9372A1531D2CAA2C79A12218C866
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LokBk3Q73yTdIsPtbyizAxouyAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/8c27aa-b500-4c96-84ec-f8be495252b0/1/LokBk3Q73yTdIsPtbyizAxouyAY.mft
Manifest number: 10B7
Signing time: Wed 07 May 2025 07:00:18 +0000
Manifest this update: Wed 07 May 2025 07:00:18 +0000
Manifest next update: Thu 08 May 2025 07:00:18 +0000
Files and hashes: 1: 6EZjDJryRoANWPhlSHpMG7n7IU8.roa (hash: 9isLxzfXlIyOPcXFup6Ou1baZV3mC8KRz9wBcZ1Igfs=)
2: LokBk3Q73yTdIsPtbyizAxouyAY.crl (hash: xV/xR3opaXP/KIXYrKfgRg/BCoGr8gTgrcmqL/CAAnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/8c27aa-b500-4c96-84ec-f8be495252b0/1/LokBk3Q73yTdIsPtbyizAxouyAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/8c27aa-b500-4c96-84ec-f8be495252b0/1/LokBk3Q73yTdIsPtbyizAxouyAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/LokBk3Q73yTdIsPtbyizAxouyAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 07:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a9:8b:93:72:a1:53:1d:2c:aa:2c:79:a1:22:18:c8:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e890193743bdf24dd22c3ed6f28b3031a2ec806
Validity
Not Before: May 7 07:00:18 2025 GMT
Not After : May 8 07:00:18 2025 GMT
Subject: CN=0bb59b7a7e59ab37baffb66eb05f71f7bae35a7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9b:73:18:f6:56:aa:1e:bc:05:0c:25:f3:b8:
8e:6f:e5:2f:07:72:80:ec:b4:cf:81:15:29:75:67:
23:33:6c:0c:54:c3:34:17:99:ca:dc:80:87:1d:1b:
8d:45:d5:25:60:cc:01:c7:5b:f8:06:97:49:09:48:
99:a2:75:fe:0c:47:26:5c:76:fe:ef:be:2b:2b:94:
c1:c3:cd:71:92:b9:3a:34:00:26:b2:2e:6c:27:96:
7b:28:0e:90:4b:93:e7:44:43:00:51:76:8f:a3:44:
e4:8d:b8:48:23:86:eb:e2:dc:a9:7f:7c:b8:78:3f:
03:7c:08:08:79:14:5b:93:06:21:91:1f:d7:41:31:
00:e1:6e:32:55:27:0e:30:52:18:45:e2:ef:f4:bc:
fa:27:67:f7:f9:bc:0c:17:f1:b5:4f:2d:0c:81:50:
44:1b:38:96:1d:5e:50:3f:da:04:3c:cc:eb:b1:0e:
5c:e5:de:0c:83:44:f5:62:34:54:9a:58:57:75:69:
4d:0e:c5:b2:cc:2b:ce:6c:bf:a5:7b:68:0c:ea:65:
a6:42:3f:8d:18:c0:29:fb:26:81:9c:74:6e:4d:d0:
56:c7:c3:16:42:1f:8d:9e:69:c7:39:b4:41:b2:0c:
38:e5:c4:3e:fe:a6:6a:fe:83:ba:22:b9:9f:58:5d:
0d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:B5:9B:7A:7E:59:AB:37:BA:FF:B6:6E:B0:5F:71:F7:BA:E3:5A:7A
X509v3 Authority Key Identifier:
keyid:2E:89:01:93:74:3B:DF:24:DD:22:C3:ED:6F:28:B3:03:1A:2E:C8:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LokBk3Q73yTdIsPtbyizAxouyAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/8c27aa-b500-4c96-84ec-f8be495252b0/1/LokBk3Q73yTdIsPtbyizAxouyAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/8c27aa-b500-4c96-84ec-f8be495252b0/1/LokBk3Q73yTdIsPtbyizAxouyAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e9:15:2e:42:53:75:42:0f:fb:88:b4:b6:f5:06:13:b5:14:d9:
f6:94:7f:ab:49:b3:d3:87:11:c8:4a:72:9e:2e:da:88:7a:e7:
a4:e1:ed:34:4b:a5:0c:6c:e6:83:0d:88:cc:57:b0:c4:79:13:
7a:1e:f4:47:29:26:8b:7d:f7:33:19:5a:d2:13:46:8d:24:25:
a3:6b:1e:13:11:44:a3:2b:eb:43:5a:3b:51:a0:f0:7c:f0:8c:
a9:1e:9d:2a:dc:59:d1:39:d9:51:28:16:ea:0a:ec:b2:1f:7a:
12:7c:3a:c5:39:16:ac:7f:4d:24:e3:5c:f0:53:c6:32:da:c2:
36:e0:c3:3f:c8:ed:a1:89:b1:f8:c2:00:a0:40:4b:27:65:e3:
4d:19:f9:f1:df:e6:f2:af:de:a1:6c:b7:c5:d3:68:76:76:24:
0d:58:d1:ab:dc:d7:8f:13:b7:c6:d3:31:7b:8a:0f:14:8b:b5:
54:48:fb:aa:34:cc:03:38:52:f7:e1:d7:5e:fb:0a:53:bf:54:
38:21:6d:60:cd:f6:ae:8d:8e:b6:ba:4a:40:48:53:e1:dc:17:
e4:f7:4d:5f:9f:37:63:83:ce:1b:28:bc:22:92:0c:1f:70:d6:
86:2e:3c:97:2f:c4:90:d0:c3:6a:03:92:4b:fc:d7:80:56:08:
fb:f5:6f:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 11:44:56 2025 by rpki-client