Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft
File: Loskx2rYemwf7f-vCNmxe0UkmZE.mft (raw, json)
Hash identifier: 6cJujx4WSiFCxkmptuCUFT6tpVLd6aAKtNEww1Owf+M=
Subject key identifier: A9:81:51:FE:78:7E:A5:5B:4D:EF:07:44:D4:EE:FA:A4:48:EA:C0:CC
Authority key identifier: 2E:8B:24:C7:6A:D8:7A:6C:1F:ED:FF:AF:08:D9:B1:7B:45:24:99:91
Certificate issuer: /CN=2e8b24c76ad87a6c1fedffaf08d9b17b45249991
Certificate serial: 019A4EBD43786252E7BB349328B7869B9042
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Loskx2rYemwf7f-vCNmxe0UkmZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft
Manifest number: 1721
Signing time: Tue 04 Nov 2025 12:00:17 +0000
Manifest this update: Tue 04 Nov 2025 12:00:17 +0000
Manifest next update: Wed 05 Nov 2025 12:00:17 +0000
Files and hashes: 1: Loskx2rYemwf7f-vCNmxe0UkmZE.crl (hash: uWX8kh/G3Lbnp3XxQbneKm7zliYHWbhHR0bdU6hOC08=)
2: U7x9NHrOtVwpLBD4RJMdKYPQ-Mo.roa (hash: COXA0MHjLmP0wp5vDjDiQUXIbxhZE0gntg3Uospeavg=)
3: bN5Qh_cCN7x_bSMtAB6WrYmfSfs.roa (hash: 7lDp1JKm9y6PoutQIOmO5gmvBeVNCcDTxuFQlDqZd6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Loskx2rYemwf7f-vCNmxe0UkmZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:bd:43:78:62:52:e7:bb:34:93:28:b7:86:9b:90:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e8b24c76ad87a6c1fedffaf08d9b17b45249991
Validity
Not Before: Nov 4 12:00:17 2025 GMT
Not After : Nov 5 12:00:17 2025 GMT
Subject: CN=a98151fe787ea55b4def0744d4eefaa448eac0cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3c:2f:9e:cc:8a:b3:87:2c:a0:0a:ac:6b:ff:
05:3d:90:9c:5c:5f:a8:fa:a2:78:14:e3:5b:e0:c8:
36:a2:6f:5b:27:96:79:ec:e4:cf:85:a6:7d:95:a0:
fe:f2:cf:53:9a:9d:02:78:08:e9:8c:3c:e7:e1:a6:
7e:c9:2e:a7:d6:a6:ae:2d:7b:02:12:df:d4:48:0d:
06:8e:66:4c:3f:ef:87:b2:37:60:0a:20:40:1b:67:
4d:5f:bd:e9:13:ce:22:e1:ba:12:7e:60:b8:59:31:
c1:9d:66:f1:a8:a0:74:7c:35:25:b4:27:7e:b8:3d:
7f:9d:89:75:6a:3a:18:c0:db:d3:b7:73:2d:51:8c:
bb:0f:da:28:a8:a0:04:7f:34:50:3f:b0:4b:cf:73:
ee:09:d3:80:79:98:10:d5:bc:7d:24:28:09:fb:04:
b3:6f:0b:5d:af:be:23:fc:6b:0c:0e:7a:59:92:b4:
5d:2d:24:ea:bd:80:b7:f4:7f:21:20:7a:eb:41:1e:
ab:cb:fc:ff:1e:d3:4e:38:4f:df:7a:3b:f2:63:48:
8d:3b:44:86:a7:54:53:73:d7:d3:d5:59:fc:31:19:
55:69:8f:64:5a:6d:c7:72:c4:a6:86:b4:3d:95:b1:
cb:7a:13:c2:ca:a8:44:ee:ba:9f:9f:33:54:f8:f9:
02:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:81:51:FE:78:7E:A5:5B:4D:EF:07:44:D4:EE:FA:A4:48:EA:C0:CC
X509v3 Authority Key Identifier:
keyid:2E:8B:24:C7:6A:D8:7A:6C:1F:ED:FF:AF:08:D9:B1:7B:45:24:99:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Loskx2rYemwf7f-vCNmxe0UkmZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:fb:a1:0d:b1:56:67:b3:e3:6f:d9:9a:67:78:6e:a7:97:f3:
1a:40:cf:4b:ce:a4:d3:50:95:91:ca:3f:5a:e6:29:b3:a4:df:
74:d9:28:fb:04:38:a6:d5:f6:ae:96:d1:91:fe:ec:98:ae:2e:
af:77:dd:93:a9:5a:48:dc:11:e0:fa:1d:53:94:81:3a:b0:65:
2c:d9:81:37:87:3f:92:2e:6a:5f:d0:5d:0e:69:50:7d:1b:c1:
c3:6a:48:b8:69:98:30:4a:c7:06:e8:0a:cd:29:e0:17:82:ff:
36:50:7d:6e:1d:f3:81:12:6a:80:2f:57:9a:13:81:1b:3b:44:
15:8a:c4:3a:f9:cf:5b:3a:35:48:ed:d4:05:40:7f:9e:69:bc:
3a:c5:83:43:ec:e9:8b:23:fd:dc:aa:53:91:cf:dc:78:f8:3f:
4b:f9:07:85:9c:d7:1c:e0:09:12:4c:f9:d9:82:24:17:da:69:
c2:26:1b:d7:43:e5:d8:0e:bc:55:c7:65:19:00:77:34:ea:44:
04:58:41:58:07:49:88:43:55:a9:0b:a3:83:47:19:c6:de:04:
a7:52:04:e8:ec:ef:c9:02:1c:01:b5:8f:d4:61:16:d9:9d:9e:
ac:c9:b8:66:d7:05:14:eb:80:55:42:ce:5d:74:89:51:46:06:
ca:52:6b:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:49:58 2025 by rpki-client