Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/8b1089-aa37-4236-bb1e-4f3ee8365d8f/1/lOxdPU2xSEp34sh2PXSgvXxDTak.mft
File: lOxdPU2xSEp34sh2PXSgvXxDTak.mft (raw, json)
Hash identifier: AN7O4tSIF8iE7LZAAdrSxrst47d8Efy39SiN4cmR7y0=
Subject key identifier: 88:B2:80:D6:5C:20:A0:68:7B:D9:2F:7B:D1:D5:4A:C0:CA:11:1A:51
Authority key identifier: 94:EC:5D:3D:4D:B1:48:4A:77:E2:C8:76:3D:74:A0:BD:7C:43:4D:A9
Certificate issuer: /CN=94ec5d3d4db1484a77e2c8763d74a0bd7c434da9
Certificate serial: 019A5074E02F68B50F689554B908F4E68A64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lOxdPU2xSEp34sh2PXSgvXxDTak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/8b1089-aa37-4236-bb1e-4f3ee8365d8f/1/lOxdPU2xSEp34sh2PXSgvXxDTak.mft
Manifest number: 0E02
Signing time: Tue 04 Nov 2025 20:00:28 +0000
Manifest this update: Tue 04 Nov 2025 20:00:28 +0000
Manifest next update: Wed 05 Nov 2025 20:00:28 +0000
Files and hashes: 1: 50o06An3k3A8kOiunWV55W1-Ajg.roa (hash: AcFz8bkfqTGlKpcv2q2Ys5Hm4t2OZ+46UtANIMDmoyM=)
2: lOxdPU2xSEp34sh2PXSgvXxDTak.crl (hash: rktF6sr2G1S9FWTVCPNr0Ao9hRjN0ovBD9wEQXWFjUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/8b1089-aa37-4236-bb1e-4f3ee8365d8f/1/lOxdPU2xSEp34sh2PXSgvXxDTak.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/8b1089-aa37-4236-bb1e-4f3ee8365d8f/1/lOxdPU2xSEp34sh2PXSgvXxDTak.mft
rsync://rpki.ripe.net/repository/DEFAULT/lOxdPU2xSEp34sh2PXSgvXxDTak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:74:e0:2f:68:b5:0f:68:95:54:b9:08:f4:e6:8a:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94ec5d3d4db1484a77e2c8763d74a0bd7c434da9
Validity
Not Before: Nov 4 20:00:28 2025 GMT
Not After : Nov 5 20:00:28 2025 GMT
Subject: CN=88b280d65c20a0687bd92f7bd1d54ac0ca111a51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:16:be:bd:5d:fa:e7:65:99:72:1c:5c:4e:b7:
3d:08:ab:ca:77:df:d1:73:10:b1:e6:d4:a6:bd:37:
9e:11:a5:89:55:98:3f:73:03:76:42:79:bf:a3:c5:
e2:d2:4e:90:60:4b:b2:9c:7c:53:a6:6c:9c:7a:c3:
71:07:57:39:14:a3:d7:a8:85:89:80:b2:25:af:5b:
87:66:e2:e4:92:f5:f7:b3:1c:a7:eb:72:72:68:26:
84:00:e4:db:84:a2:c4:c8:78:9e:7f:c2:f3:37:01:
9e:be:22:37:69:72:d1:d1:52:01:4d:e7:e6:7e:ab:
d8:03:0e:d3:7b:7f:53:1f:9e:95:91:f1:8b:56:2f:
c7:b1:3c:da:0d:26:5a:76:4c:ad:77:99:b3:0d:15:
6d:c7:62:db:a7:50:c2:18:1a:c9:ea:77:59:3f:51:
67:51:bc:26:57:3d:e2:8b:41:61:a8:b8:60:ee:fe:
62:72:c8:26:ea:e9:20:8f:00:1a:d5:e2:e1:bf:86:
34:35:81:79:b8:56:ba:2e:8f:32:d8:e9:5a:f1:7d:
5b:89:35:bc:8d:aa:a4:a1:fe:d3:ff:b6:99:2f:7b:
75:1e:e1:40:57:e6:6a:47:c3:d2:28:13:75:67:cf:
4b:74:b0:f6:80:e0:05:83:82:5d:6e:e8:7d:75:ef:
36:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:B2:80:D6:5C:20:A0:68:7B:D9:2F:7B:D1:D5:4A:C0:CA:11:1A:51
X509v3 Authority Key Identifier:
keyid:94:EC:5D:3D:4D:B1:48:4A:77:E2:C8:76:3D:74:A0:BD:7C:43:4D:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lOxdPU2xSEp34sh2PXSgvXxDTak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8b1089-aa37-4236-bb1e-4f3ee8365d8f/1/lOxdPU2xSEp34sh2PXSgvXxDTak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8b1089-aa37-4236-bb1e-4f3ee8365d8f/1/lOxdPU2xSEp34sh2PXSgvXxDTak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:9d:86:ad:15:9d:4d:96:7e:72:45:7b:93:2a:cf:bc:ec:14:
0f:03:8c:09:bd:b5:a2:ae:36:e6:65:c1:ad:01:d7:e3:ba:ae:
3d:a4:6d:e1:fb:14:c0:72:fa:50:59:eb:93:70:fc:08:d0:d4:
d0:a2:47:1f:87:5b:79:e9:8f:db:fa:ac:ad:12:3d:5f:66:c0:
f9:ae:37:86:94:c0:62:c5:d9:a8:aa:5f:ae:bd:23:75:f8:a3:
83:c1:82:16:6e:17:7f:45:10:48:e8:a6:84:b9:8f:9c:87:60:
bd:78:50:5d:ce:b0:93:05:6f:17:99:26:d6:c1:d7:43:dd:05:
dc:2c:6a:4f:31:4a:5e:58:05:64:87:cf:06:65:67:49:e6:61:
62:4b:b2:7e:fb:43:b8:44:c2:26:a8:09:12:ee:84:ad:0f:f9:
fc:88:60:e8:2a:31:0f:d2:94:29:52:9a:bd:85:5f:1e:c4:59:
8e:ce:ea:52:77:1a:51:b6:23:63:b0:cf:ae:2c:34:98:d4:18:
c2:4b:a6:db:3f:04:2d:e1:1f:61:1a:77:70:65:c1:82:cd:9c:
9c:26:01:89:40:aa:74:c6:b5:4d:dd:79:b2:85:ea:78:01:dc:
e0:5c:85:cd:e4:03:39:dd:01:00:2a:a2:57:65:ea:60:2a:39:
de:16:40:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:21:55 2025 by rpki-client