Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/LoXNafYRaXriRpasdl1Wt13406E.mft
File: LoXNafYRaXriRpasdl1Wt13406E.mft (raw, json)
Hash identifier: YfcaByGPgn4NDwDaIZlo1i1oW7Aw0P6pkiemwqy+Zr4=
Subject key identifier: BB:CD:35:E5:CB:2E:A4:77:80:26:17:FE:00:2E:C4:CF:5D:B1:FB:54
Authority key identifier: 2E:85:CD:69:F6:11:69:7A:E2:46:96:AC:76:5D:56:B7:5D:F8:D3:A1
Certificate issuer: /CN=2e85cd69f611697ae24696ac765d56b75df8d3a1
Certificate serial: 019879089AB0DE3CD1FC50EE372055E95F81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LoXNafYRaXriRpasdl1Wt13406E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/LoXNafYRaXriRpasdl1Wt13406E.mft
Manifest number: 052F
Signing time: Tue 05 Aug 2025 07:01:03 +0000
Manifest this update: Tue 05 Aug 2025 07:01:03 +0000
Manifest next update: Wed 06 Aug 2025 07:01:03 +0000
Files and hashes: 1: LoXNafYRaXriRpasdl1Wt13406E.crl (hash: 8JTCpiOb9tieQGx098TiOvSnubV9AXTIu7W+ysKrnFQ=)
2: V4UHEu5lFuhdZwHH6lxxX4Rsnp4.roa (hash: QxXsgkZ9Y9z5B4JIZIQ9pTgrtbYM89E088MqJxxgyOE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/LoXNafYRaXriRpasdl1Wt13406E.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/LoXNafYRaXriRpasdl1Wt13406E.mft
rsync://rpki.ripe.net/repository/DEFAULT/LoXNafYRaXriRpasdl1Wt13406E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 07:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:79:08:9a:b0:de:3c:d1:fc:50:ee:37:20:55:e9:5f:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e85cd69f611697ae24696ac765d56b75df8d3a1
Validity
Not Before: Aug 5 07:01:03 2025 GMT
Not After : Aug 6 07:01:03 2025 GMT
Subject: CN=bbcd35e5cb2ea477802617fe002ec4cf5db1fb54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c2:c2:a5:ac:24:e4:bb:3e:c9:d9:b2:32:56:
21:5c:65:a0:b3:09:c7:46:1d:7d:45:4a:9b:21:cb:
d3:5d:a6:78:ee:51:11:cc:a0:07:c2:be:bc:08:8e:
cd:2f:cf:f9:e0:81:0f:c7:0c:fe:98:45:e0:30:65:
d2:60:7f:e2:c0:93:e7:60:af:77:c3:11:71:f2:37:
e2:85:07:e5:a5:3c:d9:11:24:dc:34:86:12:8e:8f:
3f:31:e5:78:dd:b9:ff:52:c3:5e:2c:f1:c5:b5:ff:
16:30:54:87:5c:69:f5:1f:6c:57:84:14:f2:77:84:
57:be:8a:13:80:2a:cb:66:09:c4:21:cf:a6:0b:37:
8e:0a:8b:79:0b:62:16:e0:6a:c4:26:a2:87:1c:12:
d8:01:14:25:bb:2c:d7:d3:21:12:66:47:21:51:d5:
13:fc:58:bb:4e:ba:20:7f:e7:f1:dd:a4:6f:4a:78:
ea:e1:d8:04:a6:3e:1a:41:35:7d:06:4f:f9:60:4b:
9d:db:a7:4e:57:64:32:00:49:9e:4a:b9:03:82:3a:
e7:c1:bf:ef:5c:11:a8:b5:97:73:81:2b:b8:19:27:
65:c1:d4:f1:55:21:d0:87:b8:88:09:d4:a3:82:a0:
59:70:ff:cb:ed:6c:bf:cd:d6:35:21:3d:2f:e9:48:
09:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:CD:35:E5:CB:2E:A4:77:80:26:17:FE:00:2E:C4:CF:5D:B1:FB:54
X509v3 Authority Key Identifier:
keyid:2E:85:CD:69:F6:11:69:7A:E2:46:96:AC:76:5D:56:B7:5D:F8:D3:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoXNafYRaXriRpasdl1Wt13406E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/LoXNafYRaXriRpasdl1Wt13406E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/LoXNafYRaXriRpasdl1Wt13406E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:d0:4a:a2:b3:3f:f2:37:30:de:3d:0a:0d:10:66:90:97:a6:
94:81:7a:21:40:a4:d8:ea:94:1b:80:97:e5:2e:0d:e1:16:0b:
e7:65:5a:06:a4:ce:b5:b8:e0:d7:6f:a4:be:4f:37:27:2d:ab:
1b:f1:cf:c2:c5:ca:51:4c:e2:65:9e:7e:45:d3:5f:33:16:fe:
c5:c3:45:af:9a:f8:53:28:9d:8e:04:99:9d:4d:25:20:14:4c:
da:82:c6:51:9e:f5:c6:fd:34:42:87:cb:ff:27:cd:d7:66:c8:
df:09:1e:83:53:8a:aa:a6:15:05:4f:1a:19:d1:7c:97:84:b4:
a9:dd:fc:37:9b:41:d6:4d:a1:17:0a:ef:0c:a7:d6:a0:f9:6e:
02:91:5f:bc:75:97:cd:b0:a0:1b:c5:34:ac:a6:98:c1:8a:c5:
56:12:b6:52:e8:9d:7b:58:5c:90:4e:28:3d:f3:b3:d0:9d:1d:
e5:b6:3c:76:b8:a8:7b:50:60:f2:48:c5:a9:7b:66:6e:2e:30:
09:43:5a:31:28:d6:d3:48:15:41:b6:c9:43:8e:b7:9b:5d:93:
dc:6f:e7:f3:2e:0e:ce:a3:7b:ee:65:29:23:f2:f9:91:62:2d:
42:81:e5:62:0e:7a:43:8e:17:f9:5c:86:a6:5b:ad:7f:c8:02:
3b:1d:64:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh5CJqw3jzR/FDuNyBV6V+BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlODVjZDY5ZjYxMTY5N2FlMjQ2OTZhYzc2NWQ1NmI3NWRm
OGQzYTEwHhcNMjUwODA1MDcwMTAzWhcNMjUwODA2MDcwMTAzWjAzMTEwLwYDVQQD
EyhiYmNkMzVlNWNiMmVhNDc3ODAyNjE3ZmUwMDJlYzRjZjVkYjFmYjU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsLCpawk5Ls+ydmyMlYhXGWgswnH
Rh19RUqbIcvTXaZ47lERzKAHwr68CI7NL8/54IEPxwz+mEXgMGXSYH/iwJPnYK93
wxFx8jfihQflpTzZESTcNIYSjo8/MeV43bn/UsNeLPHFtf8WMFSHXGn1H2xXhBTy
d4RXvooTgCrLZgnEIc+mCzeOCot5C2IW4GrEJqKHHBLYARQluyzX0yESZkchUdUT
/Fi7Trogf+fx3aRvSnjq4dgEpj4aQTV9Bk/5YEud26dOV2QyAEmeSrkDgjrnwb/v
XBGotZdzgSu4GSdlwdTxVSHQh7iICdSjgqBZcP/L7Wy/zdY1IT0v6UgJEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLvNNeXLLqR3gCYX/gAuxM9dsftUMB8GA1UdIwQY
MBaAFC6FzWn2EWl64kaWrHZdVrdd+NOhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTG9YTmFmWVJhWHJpUnBhc2RsMVd0MTM0MDZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy82NTA0MzYtNTQ5OC00NGRiLWE4OWEt
Y2ZlMzk3ZGZiNWM0LzEvTG9YTmFmWVJhWHJpUnBhc2RsMVd0MTM0MDZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy82NTA0MzYtNTQ5OC00NGRiLWE4OWEtY2ZlMzk3ZGZiNWM0
LzEvTG9YTmFmWVJhWHJpUnBhc2RsMVd0MTM0MDZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAptBKorM/
8jcw3j0KDRBmkJemlIF6IUCk2OqUG4CX5S4N4RYL52VaBqTOtbjg12+kvk83Jy2r
G/HPwsXKUUziZZ5+RdNfMxb+xcNFr5r4UyidjgSZnU0lIBRM2oLGUZ71xv00QofL
/yfN12bI3wkeg1OKqqYVBU8aGdF8l4S0qd38N5tB1k2hFwrvDKfWoPluApFfvHWX
zbCgG8U0rKaYwYrFVhK2Uuide1hckE4oPfOz0J0d5bY8drioe1Bg8kjFqXtmbi4w
CUNaMSjW00gVQbbJQ463m12T3G/n8y4OzqN77mUpI/L5kWItQoHlYg56Q44X+VyG
plutf8gCOx1k/Q==
-----END CERTIFICATE-----
Generated at Tue Aug 5 16:41:21 2025 by rpki-client