Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/LoOL9dPe_8At-hhOTw6FEVNeUX0.mft
File: LoOL9dPe_8At-hhOTw6FEVNeUX0.mft (raw, json)
Hash identifier: AtzcxppPO/EKLJsw/U057Ej2FkWoSUkR7Wdv68nnBjc=
Subject key identifier: 9E:F5:7E:56:19:A2:73:36:64:62:67:90:42:F4:C9:5D:6C:18:0C:53
Authority key identifier: 2E:83:8B:F5:D3:DE:FF:C0:2D:FA:18:4E:4F:0E:85:11:53:5E:51:7D
Certificate issuer: /CN=2e838bf5d3deffc02dfa184e4f0e8511535e517d
Certificate serial: 019A4E86CA553A2355294CD80526AEAD5252
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LoOL9dPe_8At-hhOTw6FEVNeUX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/LoOL9dPe_8At-hhOTw6FEVNeUX0.mft
Manifest number: 06F2
Signing time: Tue 04 Nov 2025 11:00:47 +0000
Manifest this update: Tue 04 Nov 2025 11:00:47 +0000
Manifest next update: Wed 05 Nov 2025 11:00:47 +0000
Files and hashes: 1: LoOL9dPe_8At-hhOTw6FEVNeUX0.crl (hash: +n/IP8THE6IAxD4+G5RNFc0cJDeRkKuDbFCMSlS3yVY=)
2: S8Gv615Ih2EECVB1a2b3J3u_PZw.roa (hash: QLn7xaZ0/yy3B92jWZmiyfhzxbYSpkw1Q0HqcssnojQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/LoOL9dPe_8At-hhOTw6FEVNeUX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/LoOL9dPe_8At-hhOTw6FEVNeUX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/LoOL9dPe_8At-hhOTw6FEVNeUX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 11:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:ca:55:3a:23:55:29:4c:d8:05:26:ae:ad:52:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e838bf5d3deffc02dfa184e4f0e8511535e517d
Validity
Not Before: Nov 4 11:00:47 2025 GMT
Not After : Nov 5 11:00:47 2025 GMT
Subject: CN=9ef57e5619a273366462679042f4c95d6c180c53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:61:84:37:80:65:c6:15:33:dd:8a:c7:6c:f8:
d3:3a:04:0e:79:98:9a:a2:d6:36:91:cb:e1:43:55:
de:00:b9:dd:ef:63:6a:19:4c:6b:40:26:58:8d:af:
e0:cc:e4:f4:45:9d:45:7f:1e:92:60:43:69:20:2c:
6e:ca:1a:9e:29:00:f7:96:da:70:a5:b7:20:b4:73:
9c:c0:c8:91:72:c1:eb:ae:ee:20:76:05:93:56:49:
c6:b0:b7:05:77:10:4e:52:5e:26:6a:19:6b:37:89:
ec:1c:0c:9f:2c:9a:43:27:a0:8b:77:08:f7:72:9e:
d0:d6:fb:e4:2c:fc:df:7c:5d:72:fc:40:3f:6e:c4:
0b:60:52:e9:ba:b2:04:85:28:25:ae:c1:41:69:40:
79:5a:98:e4:ac:f3:81:b1:42:c3:7a:65:64:30:01:
2a:3b:3d:5e:46:7f:4c:bd:4b:04:88:43:6b:4f:8a:
73:75:5d:e4:c3:5d:ca:6b:55:0e:ef:a6:83:6f:2a:
08:a1:6a:b6:5c:58:2e:6a:84:7e:e3:04:e6:91:c2:
a6:19:49:b2:6d:59:c2:08:69:7e:f2:22:1d:b6:65:
9d:47:e1:e2:b1:22:36:63:be:8b:c4:f5:a6:c6:9e:
68:b4:36:ee:51:6a:8f:fa:d1:60:cf:c0:c3:98:9e:
9d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:F5:7E:56:19:A2:73:36:64:62:67:90:42:F4:C9:5D:6C:18:0C:53
X509v3 Authority Key Identifier:
keyid:2E:83:8B:F5:D3:DE:FF:C0:2D:FA:18:4E:4F:0E:85:11:53:5E:51:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoOL9dPe_8At-hhOTw6FEVNeUX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/LoOL9dPe_8At-hhOTw6FEVNeUX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/LoOL9dPe_8At-hhOTw6FEVNeUX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:7c:c7:d1:73:33:3f:29:16:d9:52:07:2d:57:a2:8e:9e:23:
b6:2f:98:55:74:03:40:58:2a:ef:07:08:ad:58:00:8a:11:aa:
06:59:16:75:d4:d9:b1:a3:05:e9:7c:0c:0e:0b:10:00:24:57:
eb:bf:9f:92:7b:36:80:24:e8:63:eb:51:f3:2f:75:60:28:08:
72:44:22:c3:fe:25:b8:f6:a4:e2:74:e4:f4:9a:57:7a:06:c6:
5a:22:39:52:2c:03:a1:ce:cd:84:af:10:38:94:e6:c9:f3:c1:
4f:58:d7:56:ab:de:d6:cc:bb:5d:15:89:bc:2d:08:1c:cf:a9:
25:2b:46:b6:73:ec:45:0b:18:b4:76:9e:e9:f1:1e:eb:aa:d0:
b2:82:30:26:09:c0:22:3d:99:15:49:fb:37:31:ac:ba:c7:c2:
d0:ae:6c:ac:e3:83:81:ec:dc:52:25:f5:f6:bb:18:66:83:05:
74:6b:0c:0e:8c:7f:59:04:83:35:d6:2d:26:71:0c:fa:02:cb:
15:04:7c:43:31:2e:80:39:48:2e:8c:d9:c5:b1:e8:4f:c7:bf:
8b:77:3c:6a:68:03:eb:93:b6:03:be:18:d0:08:a1:56:a6:e2:
4a:3b:a7:5b:d8:d0:97:92:ef:08:46:f6:c3:82:b1:0c:5d:d4:
a3:19:f8:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:34:30 2025 by rpki-client