Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/40e5d5-ed41-4dd3-9332-53d96099d7b1/1/loH8jHM3xqHSC4SADfhion5f29c.mft
File: loH8jHM3xqHSC4SADfhion5f29c.mft (raw, json)
Hash identifier: 8QnSpKOqZstfBtVRkq1rGa0l8M9GbWSZ3QhJfUeKCVQ=
Subject key identifier: 58:E8:C8:09:55:57:77:01:06:76:FB:80:B4:8F:2E:09:4C:CA:3A:8A
Authority key identifier: 96:81:FC:8C:73:37:C6:A1:D2:0B:84:80:0D:F8:62:A2:7E:5F:DB:D7
Certificate issuer: /CN=9681fc8c7337c6a1d20b84800df862a27e5fdbd7
Certificate serial: 019A56406C7ED20CD72F5252B30FB49B85BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/loH8jHM3xqHSC4SADfhion5f29c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/40e5d5-ed41-4dd3-9332-53d96099d7b1/1/loH8jHM3xqHSC4SADfhion5f29c.mft
Manifest number: 01B2
Signing time: Wed 05 Nov 2025 23:00:53 +0000
Manifest this update: Wed 05 Nov 2025 23:00:53 +0000
Manifest next update: Thu 06 Nov 2025 23:00:53 +0000
Files and hashes: 1: F7JL5bHYyLaweW8pONIwm4V1Ta8.roa (hash: 9Al0+nQsmlduPmazSDY0bBkTJLPuHl1nJV+djdoKlfw=)
2: aOIjfYULj8ZZW-4gX-UQwdrDQ9U.roa (hash: 0raPVOn63vL6rgNpBZdFkEjdsenkXzmQ/PYsO0nF2sE=)
3: loH8jHM3xqHSC4SADfhion5f29c.crl (hash: TxU7reef1aVHaiKnO6IkdQ6rT5MwWbVXJd/mmZm2ENM=)
4: qxk1xepxwGG51OB8xsnLC_37Uaw.roa (hash: ypZE1fVxTf8ts+4DLxa1x+J1+KV7fqtGzn+ax6Dq94A=)
5: w1BzHYlYCb3EG4ztspZKX_15RAY.roa (hash: ASsa3u4RFIDCrpyjiaJAOUJvMGU5bhKQs1/vB/xTB6w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/40e5d5-ed41-4dd3-9332-53d96099d7b1/1/loH8jHM3xqHSC4SADfhion5f29c.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/40e5d5-ed41-4dd3-9332-53d96099d7b1/1/loH8jHM3xqHSC4SADfhion5f29c.mft
rsync://rpki.ripe.net/repository/DEFAULT/loH8jHM3xqHSC4SADfhion5f29c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 21:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:56:40:6c:7e:d2:0c:d7:2f:52:52:b3:0f:b4:9b:85:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9681fc8c7337c6a1d20b84800df862a27e5fdbd7
Validity
Not Before: Nov 5 23:00:53 2025 GMT
Not After : Nov 6 23:00:53 2025 GMT
Subject: CN=58e8c809555777010676fb80b48f2e094cca3a8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:5c:5c:35:bb:89:9d:34:18:68:c7:53:1a:3e:
c3:6a:56:1e:90:81:66:dc:36:8b:af:bd:8c:58:75:
d2:00:11:97:56:49:ab:39:47:a8:2b:90:04:46:13:
2b:41:f6:1e:e6:29:20:b0:4c:86:2f:53:4e:a6:17:
83:ab:93:1a:af:a9:0d:ba:14:a1:f3:3a:da:6f:09:
84:d3:84:fa:06:62:a3:8f:e2:99:34:fe:f1:8a:e3:
b7:ad:9f:28:20:01:31:75:fc:d0:5f:42:56:96:8f:
b8:e5:0d:44:fd:d5:de:e2:30:eb:fb:95:41:8f:e2:
50:1d:8f:9b:2e:7f:6e:fa:9d:8c:6e:ce:0c:6c:95:
43:4a:46:cb:3e:f1:0e:0d:6b:55:be:7c:32:2c:d1:
45:c0:fb:e9:6e:7a:fc:53:8a:bf:1c:e2:a1:12:c5:
e4:fe:6f:64:de:2e:c7:d3:54:62:47:53:0f:41:89:
af:d7:36:09:65:5b:e4:3f:bc:fc:40:fa:a4:de:28:
76:5c:48:00:9d:fe:d5:1e:51:8e:1a:ac:cd:aa:30:
12:5c:f1:d2:f6:3e:f1:59:3a:5c:d1:13:5c:3f:42:
38:c9:28:f3:34:1c:60:3f:3c:a4:64:2b:d6:53:fd:
97:bd:6a:5e:2b:c2:95:cb:1b:cc:ba:1f:f6:0f:ff:
7a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:E8:C8:09:55:57:77:01:06:76:FB:80:B4:8F:2E:09:4C:CA:3A:8A
X509v3 Authority Key Identifier:
keyid:96:81:FC:8C:73:37:C6:A1:D2:0B:84:80:0D:F8:62:A2:7E:5F:DB:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/loH8jHM3xqHSC4SADfhion5f29c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/40e5d5-ed41-4dd3-9332-53d96099d7b1/1/loH8jHM3xqHSC4SADfhion5f29c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/40e5d5-ed41-4dd3-9332-53d96099d7b1/1/loH8jHM3xqHSC4SADfhion5f29c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:d6:d6:f6:e4:dd:1a:f0:f6:e5:74:59:a3:01:0e:bc:b6:ef:
ca:4a:1e:20:7e:c8:3e:79:30:72:9c:87:12:7c:35:37:d0:01:
6e:55:76:d0:17:75:93:25:fe:63:9a:1d:92:b8:be:f1:ff:e8:
01:59:88:ca:fd:9a:35:7d:f7:25:e2:f8:fa:42:1f:83:bf:c7:
0a:ca:92:a8:55:89:d8:a8:c3:1d:d8:02:cf:28:39:7f:ed:4d:
d1:9a:a1:0a:f4:35:60:6c:3c:b6:55:a6:44:16:50:da:fe:8a:
23:06:5f:e3:ed:e4:07:7a:ad:4e:91:3e:64:5d:86:c6:3a:71:
1c:51:04:c9:73:a0:49:06:43:08:bb:5f:cd:77:fa:ce:2b:56:
42:3e:b0:90:90:fc:17:f9:54:1c:07:d3:86:a8:cd:7f:b6:e4:
eb:1f:b5:ed:79:92:44:e8:e3:99:bf:0e:da:b6:32:78:7c:75:
23:17:44:06:df:09:b8:e5:5a:90:65:47:1b:99:0e:96:4c:e8:
4d:36:41:b1:3f:bd:f6:09:b0:26:48:b6:72:07:e3:44:65:f3:
94:19:c4:7b:54:18:f8:3c:a9:ac:16:6f:29:de:3d:cc:4f:4f:
be:ea:a9:8c:c2:c6:13:88:63:8a:35:fe:a8:43:60:41:6f:6f:
09:e9:f3:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 02:11:54 2025 by rpki-client