Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/p-LOMQlICu57P9KEbsj4ZGiFzbo.mft
File: p-LOMQlICu57P9KEbsj4ZGiFzbo.mft (raw, json)
Hash identifier: o+bAO9xlVjjBftBUHGUfwE4b9/OCQt+usHCUrKNwIJU=
Subject key identifier: 1E:87:6C:E5:6C:9A:FF:3C:28:5D:AB:14:A0:3E:A4:47:9F:47:AD:24
Authority key identifier: A7:E2:CE:31:09:48:0A:EE:7B:3F:D2:84:6E:C8:F8:64:68:85:CD:BA
Certificate issuer: /CN=a7e2ce3109480aee7b3fd2846ec8f8646885cdba
Certificate serial: 019A4EF482B02BDE62CD28B381E1017274FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p-LOMQlICu57P9KEbsj4ZGiFzbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/p-LOMQlICu57P9KEbsj4ZGiFzbo.mft
Manifest number: 1720
Signing time: Tue 04 Nov 2025 13:00:38 +0000
Manifest this update: Tue 04 Nov 2025 13:00:38 +0000
Manifest next update: Wed 05 Nov 2025 13:00:38 +0000
Files and hashes: 1: 26Ql46wwxTj7VjacCW6urnh7gz4.roa (hash: 6pqobnvwdQtNKJHj/tFh8rbFEN8SHTGBGJP56mhCWI4=)
2: 6NUzhdPLOTimUoPxeMPLM0W-THw.roa (hash: c/vX6BdXl9BfZEsyAn4O1uep2mCiqK8iQj3UiTI5j9s=)
3: 9UQ3bjYFxbuQ6WDKQ2z12cmzNp4.roa (hash: utvXFHGbNyh5QD6WYroUVLQ+dfrlJs+U1O2AiYH3XWs=)
4: LLcjVKn9VpDoaDhdqIR6mgFTZtI.roa (hash: DoEtx/xv7eVuPlv74sp5O1oZZhlzZhNTbGR1DN0rf7U=)
5: UjFHvunES4zB1buoYQwOJAvtic4.roa (hash: 8JRnvC2WvvUD8xqaEPafciSNs/2Jt6gLe7JRKtz6ghA=)
6: d89-qB2QBcTVzoJ5lziZ1XEpvhw.roa (hash: EUMPFkB+dCQSnV1N7RK25hIL5dm4q/R7TQ9vyaSumYE=)
7: p-LOMQlICu57P9KEbsj4ZGiFzbo.crl (hash: HCZ2vrnGaJqz62KhUSihjP7BvRxQxoAiEFnvAy/3bkg=)
8: zaZapovTGaF9alzwHwbdxdednYo.roa (hash: HZ5qODN4P+SD3nJrNEx9yaYaCo/O8Qs+NfZMPkwo3JI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/p-LOMQlICu57P9KEbsj4ZGiFzbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/p-LOMQlICu57P9KEbsj4ZGiFzbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/p-LOMQlICu57P9KEbsj4ZGiFzbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:82:b0:2b:de:62:cd:28:b3:81:e1:01:72:74:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7e2ce3109480aee7b3fd2846ec8f8646885cdba
Validity
Not Before: Nov 4 13:00:38 2025 GMT
Not After : Nov 5 13:00:38 2025 GMT
Subject: CN=1e876ce56c9aff3c285dab14a03ea4479f47ad24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:22:bc:08:00:ee:70:43:23:45:f0:5e:51:ab:
7c:3b:27:6e:fe:e4:20:45:a2:da:95:58:7d:fd:2f:
a0:18:dc:fc:05:c0:4d:1d:96:88:bc:8b:76:ad:bb:
fb:ea:c1:69:0a:e4:19:03:91:e0:3a:5a:30:70:55:
c0:0e:df:d2:c1:10:30:f2:34:78:2f:16:c2:a1:a6:
91:b5:c9:c4:d9:8d:43:e0:ec:44:97:10:71:0c:d2:
70:0f:4a:65:ad:30:42:8f:a2:05:03:5c:97:21:c6:
01:02:f2:53:53:59:07:0a:41:b9:ed:e6:4a:91:9e:
bf:d3:af:7b:e2:41:98:1c:dd:59:6b:fc:9c:92:9d:
29:b4:57:3d:c0:0b:f1:0a:d9:97:f4:ce:82:62:66:
b1:32:85:b0:8a:bc:39:6c:2d:dd:b7:82:e5:da:43:
00:bb:6a:f5:e5:9d:6c:22:f8:33:1d:2d:a6:be:a3:
f9:52:07:3b:b2:fd:f0:f4:01:3f:1a:3c:c9:21:fe:
70:2f:59:f8:30:ca:b6:55:14:b9:82:f8:85:2b:82:
8f:d1:b7:3c:af:78:50:af:f9:df:a3:2c:49:21:6d:
27:63:2f:63:07:e0:0e:94:6c:f0:c8:03:4b:c9:bd:
e9:f4:ab:3a:45:7b:24:47:a3:02:5b:93:2b:ad:93:
be:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:87:6C:E5:6C:9A:FF:3C:28:5D:AB:14:A0:3E:A4:47:9F:47:AD:24
X509v3 Authority Key Identifier:
keyid:A7:E2:CE:31:09:48:0A:EE:7B:3F:D2:84:6E:C8:F8:64:68:85:CD:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-LOMQlICu57P9KEbsj4ZGiFzbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/p-LOMQlICu57P9KEbsj4ZGiFzbo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/p-LOMQlICu57P9KEbsj4ZGiFzbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:51:d0:1c:8b:cf:97:2b:9b:65:d5:e1:ef:e1:cc:87:c3:f6:
7e:e9:40:95:29:b0:45:ec:cc:5d:04:3a:2d:9e:bb:4a:bc:22:
ef:43:4a:17:54:1c:13:ff:1a:91:ff:08:56:1c:4e:bd:47:eb:
88:4f:18:9d:2e:17:23:7d:63:77:03:6a:69:d2:2a:22:2d:17:
ce:02:61:88:55:c5:60:ef:0d:80:f2:85:96:8c:2c:83:34:7e:
9b:00:72:10:d6:6a:fe:f6:ff:0e:69:bf:cc:1f:90:08:eb:47:
45:b0:2f:e2:e3:f8:49:8f:da:79:23:ed:17:a1:b5:d4:f8:47:
0d:d8:80:da:5a:2c:b0:7b:3e:eb:84:29:18:45:8b:6e:cc:91:
41:0b:c7:af:75:7c:3a:20:ac:f6:bb:25:00:4c:b8:35:43:0c:
ca:75:4a:0d:2c:af:bd:47:e7:33:ff:0f:4d:55:bf:5a:41:d3:
0e:2f:b4:4c:32:aa:41:31:51:e3:cf:9c:40:bb:6f:76:46:25:
55:90:6f:e5:2e:c7:61:cb:b0:28:9a:4e:46:02:c3:f0:93:37:
a8:18:0e:32:2d:01:66:4b:06:33:1b:c4:ab:52:50:dd:a2:12:
df:61:83:65:98:34:23:47:57:ef:af:43:c2:66:e6:9d:94:84:
27:f3:26:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:47:38 2025 by rpki-client