Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/8c27aa-b500-4c96-84ec-f8be495252b0/1/LokBk3Q73yTdIsPtbyizAxouyAY.mft
File: LokBk3Q73yTdIsPtbyizAxouyAY.mft (raw, json)
Hash identifier: qcG1qo2cKUY42OlwTRDDDvTdrbXObrVd1g0+UEd5SnI=
Subject key identifier: C5:49:4A:B5:7A:9F:70:E0:D2:1D:7E:E9:36:A9:FF:A4:D7:90:6F:FD
Authority key identifier: 2E:89:01:93:74:3B:DF:24:DD:22:C3:ED:6F:28:B3:03:1A:2E:C8:06
Certificate issuer: /CN=2e890193743bdf24dd22c3ed6f28b3031a2ec806
Certificate serial: 0198D5BB947A6657CC3A23B9D3C1D8ED85E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LokBk3Q73yTdIsPtbyizAxouyAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/8c27aa-b500-4c96-84ec-f8be495252b0/1/LokBk3Q73yTdIsPtbyizAxouyAY.mft
Manifest number: 11D7
Signing time: Sat 23 Aug 2025 07:01:36 +0000
Manifest this update: Sat 23 Aug 2025 07:01:36 +0000
Manifest next update: Sun 24 Aug 2025 07:01:36 +0000
Files and hashes: 1: 6EZjDJryRoANWPhlSHpMG7n7IU8.roa (hash: 9isLxzfXlIyOPcXFup6Ou1baZV3mC8KRz9wBcZ1Igfs=)
2: LokBk3Q73yTdIsPtbyizAxouyAY.crl (hash: WMczLNzp052HYunh/LKAvGlN2QM/WanlmDAUtSZRUQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/8c27aa-b500-4c96-84ec-f8be495252b0/1/LokBk3Q73yTdIsPtbyizAxouyAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/8c27aa-b500-4c96-84ec-f8be495252b0/1/LokBk3Q73yTdIsPtbyizAxouyAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/LokBk3Q73yTdIsPtbyizAxouyAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:94:7a:66:57:cc:3a:23:b9:d3:c1:d8:ed:85:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e890193743bdf24dd22c3ed6f28b3031a2ec806
Validity
Not Before: Aug 23 07:01:36 2025 GMT
Not After : Aug 24 07:01:36 2025 GMT
Subject: CN=c5494ab57a9f70e0d21d7ee936a9ffa4d7906ffd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d3:34:aa:3d:16:6a:69:d9:4f:de:aa:e0:e0:
40:6a:20:f7:66:ec:a8:17:5c:8b:7a:5f:b9:65:a1:
14:ad:93:ba:f7:41:19:21:21:a3:b6:ea:d9:36:d7:
ef:82:03:48:89:24:a7:82:31:ce:1e:85:e9:a4:fe:
1d:04:7c:b3:20:0d:fc:48:73:e5:5c:d4:df:c4:a4:
e3:ec:c7:6f:a9:2c:f2:aa:db:5a:ab:52:27:ac:0b:
3c:93:8d:c8:07:7a:73:2f:a3:2d:b6:7b:9d:9d:1d:
f3:09:17:df:16:d1:25:0a:86:10:55:1a:f2:51:b0:
20:df:b8:9f:9e:2b:45:fa:69:83:48:63:71:b9:b5:
93:57:8d:19:c0:ca:b9:89:71:f9:f7:47:fc:20:9d:
f7:4d:57:95:62:d0:df:f6:44:cd:f2:91:66:6a:7d:
5e:c8:ef:92:6d:81:8f:e3:3d:44:68:00:08:9e:06:
00:41:a7:a0:8c:a5:4b:01:81:56:a2:e3:38:1a:3b:
85:3a:ab:e6:8f:3d:e2:f3:cd:66:ab:aa:1c:6c:28:
61:ce:0a:09:e6:f8:40:92:82:06:ba:12:27:5c:9c:
96:52:f3:4e:c0:39:dc:61:aa:5a:4e:52:ea:7a:83:
2e:e8:62:4c:82:bd:14:d5:a4:f6:63:7c:b4:2f:98:
c4:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:49:4A:B5:7A:9F:70:E0:D2:1D:7E:E9:36:A9:FF:A4:D7:90:6F:FD
X509v3 Authority Key Identifier:
keyid:2E:89:01:93:74:3B:DF:24:DD:22:C3:ED:6F:28:B3:03:1A:2E:C8:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LokBk3Q73yTdIsPtbyizAxouyAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/8c27aa-b500-4c96-84ec-f8be495252b0/1/LokBk3Q73yTdIsPtbyizAxouyAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/8c27aa-b500-4c96-84ec-f8be495252b0/1/LokBk3Q73yTdIsPtbyizAxouyAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ef:c9:a4:ae:93:54:c9:f2:10:93:15:4d:1a:78:b9:3b:bd:6e:
fe:6b:31:0b:23:b7:68:1e:46:5a:1d:be:fe:3c:7b:c3:08:b5:
bd:19:d3:24:d1:ba:b4:c3:06:40:45:08:2d:79:66:ad:2e:80:
db:24:ff:19:4a:d0:7e:4b:5b:fd:c3:b6:88:ae:26:ed:61:43:
b7:63:03:86:b4:29:66:12:cf:ff:e0:a8:4f:ab:56:1d:2e:b5:
ca:5f:59:d4:27:95:c5:18:09:15:85:c4:b4:d5:a6:9b:df:1b:
16:81:3f:7a:ce:08:ca:9b:ce:70:45:af:74:43:5a:c6:52:4a:
07:b1:90:db:33:02:9f:b9:c5:9c:ac:6a:e0:23:8b:f8:36:57:
17:02:46:84:f7:59:4b:d1:27:17:d9:eb:7a:69:04:c2:88:6a:
04:8d:31:9b:49:23:52:b3:3c:a3:67:18:71:b4:f3:01:55:9d:
6d:0b:f4:73:ac:db:16:37:f2:f7:a7:21:a2:1a:1b:cb:46:c7:
3e:7c:cd:7d:09:05:72:bd:6a:ba:8e:db:52:1d:81:c4:d5:5b:
8c:a7:39:36:95:06:94:64:cd:82:2c:a9:5e:b1:f7:03:4c:05:
8f:c0:8f:1d:38:7e:66:f2:db:a4:c7:e0:23:bb:d2:c1:2b:be:
a8:cf:ab:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:56:35 2025 by rpki-client