Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/8c27aa-b500-4c96-84ec-f8be495252b0/1/LokBk3Q73yTdIsPtbyizAxouyAY.mft
File: LokBk3Q73yTdIsPtbyizAxouyAY.mft (raw, json)
Hash identifier: pKfYx8GysNmoStGbbEQspmuiQJ0cUu0PdHzN0SzqofQ=
Subject key identifier: 3C:3F:5F:BC:70:70:50:0A:34:6E:90:C0:97:65:7E:94:DB:92:3B:B3
Authority key identifier: 2E:89:01:93:74:3B:DF:24:DD:22:C3:ED:6F:28:B3:03:1A:2E:C8:06
Certificate issuer: /CN=2e890193743bdf24dd22c3ed6f28b3031a2ec806
Certificate serial: 0197B7EAA14A4A5D371DEDB7C4B9AAE10C8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LokBk3Q73yTdIsPtbyizAxouyAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/8c27aa-b500-4c96-84ec-f8be495252b0/1/LokBk3Q73yTdIsPtbyizAxouyAY.mft
Manifest number: 1143
Signing time: Sat 28 Jun 2025 19:01:36 +0000
Manifest this update: Sat 28 Jun 2025 19:01:36 +0000
Manifest next update: Sun 29 Jun 2025 19:01:36 +0000
Files and hashes: 1: 6EZjDJryRoANWPhlSHpMG7n7IU8.roa (hash: 9isLxzfXlIyOPcXFup6Ou1baZV3mC8KRz9wBcZ1Igfs=)
2: LokBk3Q73yTdIsPtbyizAxouyAY.crl (hash: barrLgASOeKOu2bqANx8+fLbqVK7PcgcXTIprfJExp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/8c27aa-b500-4c96-84ec-f8be495252b0/1/LokBk3Q73yTdIsPtbyizAxouyAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/8c27aa-b500-4c96-84ec-f8be495252b0/1/LokBk3Q73yTdIsPtbyizAxouyAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/LokBk3Q73yTdIsPtbyizAxouyAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:a1:4a:4a:5d:37:1d:ed:b7:c4:b9:aa:e1:0c:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e890193743bdf24dd22c3ed6f28b3031a2ec806
Validity
Not Before: Jun 28 19:01:36 2025 GMT
Not After : Jun 29 19:01:36 2025 GMT
Subject: CN=3c3f5fbc7070500a346e90c097657e94db923bb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c5:fd:6d:fa:54:1f:56:17:ce:dc:27:2f:0e:
ef:b5:b1:13:6c:0a:80:80:f8:39:46:b7:4d:c0:59:
e0:26:80:1c:ed:54:c2:d9:cf:3f:24:8f:02:8a:20:
38:2a:09:15:96:bd:15:8f:83:c3:95:a7:08:fc:77:
c1:fd:fc:87:41:8a:73:37:56:86:9c:a8:5f:0c:23:
27:41:6a:33:e1:5e:b5:6e:07:4f:11:d7:0a:30:84:
c3:3b:1a:fc:9c:e3:22:ca:0b:8b:a1:c3:19:a3:f4:
08:5c:38:81:9a:7f:31:74:f0:2a:3a:2c:ac:25:1a:
7b:49:b0:33:ce:05:88:af:8a:36:8c:71:1a:4f:6f:
c0:3f:3a:59:52:63:07:ca:8b:eb:fb:17:95:0c:dd:
5f:e6:4e:51:eb:1c:0f:de:7c:8a:12:b2:4a:a5:c3:
31:cc:7d:fb:cc:88:8d:28:96:a6:38:39:a8:a0:77:
1b:39:38:58:8f:5f:9e:b7:34:49:1e:0d:f6:4c:a4:
fa:56:86:5c:7c:2a:de:8f:7a:4c:cf:90:cf:8e:82:
3a:19:62:64:7b:52:9a:f7:35:52:88:e8:18:f0:a8:
04:d5:d7:db:a2:07:da:2a:b7:52:b4:66:dc:4d:55:
15:77:8a:83:7c:24:5a:17:bf:ab:1e:be:9f:e3:da:
8f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:3F:5F:BC:70:70:50:0A:34:6E:90:C0:97:65:7E:94:DB:92:3B:B3
X509v3 Authority Key Identifier:
keyid:2E:89:01:93:74:3B:DF:24:DD:22:C3:ED:6F:28:B3:03:1A:2E:C8:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LokBk3Q73yTdIsPtbyizAxouyAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/8c27aa-b500-4c96-84ec-f8be495252b0/1/LokBk3Q73yTdIsPtbyizAxouyAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/8c27aa-b500-4c96-84ec-f8be495252b0/1/LokBk3Q73yTdIsPtbyizAxouyAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:ab:ad:43:33:d1:bf:a4:b8:a5:d1:dd:4a:a9:6c:54:fc:57:
e7:b9:36:15:f9:e4:b2:f4:07:d7:9e:4a:9d:54:e1:11:70:ca:
bf:08:7e:38:52:d6:6e:c7:05:7d:61:b6:31:cc:4e:81:d6:65:
6b:19:30:06:c8:9a:39:3a:b0:b9:5a:a0:77:31:48:b0:fc:04:
0a:34:0c:bf:09:65:7d:a2:58:b5:49:57:27:66:8d:bf:bf:6c:
1c:2a:21:84:96:a2:c1:b8:20:c7:b6:81:91:bc:7d:82:8a:14:
20:41:0f:e4:1f:91:f4:35:2e:36:b9:c9:45:62:6b:73:69:40:
92:5d:f4:08:e0:8d:2c:87:9f:a1:97:d9:b0:db:00:97:0e:bd:
49:8f:9f:b1:77:54:91:7c:b0:df:38:dd:3d:49:95:eb:8e:29:
5c:05:fb:cb:a8:d4:fc:9c:c7:9d:75:22:80:ca:6e:d7:0a:55:
d8:e7:31:b4:39:a3:3d:bf:d9:79:e6:c1:8e:ae:62:2a:14:8b:
a4:21:8b:41:17:7f:ff:b7:3e:06:08:27:10:73:45:d1:d7:44:
db:c1:5b:41:a3:cb:de:61:2b:21:5b:e9:1f:a9:0f:55:b1:0e:
29:27:24:e3:8e:03:9a:2f:e3:cd:a2:83:72:2d:15:a1:b6:57:
cb:1a:0b:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:39:44 2025 by rpki-client