Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/LOcbH07qAVkkYSX8WumtUaRHks4.mft
File: LOcbH07qAVkkYSX8WumtUaRHks4.mft (raw, json)
Hash identifier: 9jxReSD3hGv16gIgLgbzi+D9JtOwTzfs2JRuPtuTgRU=
Subject key identifier: 2C:BB:04:5E:18:B6:DF:99:E6:85:4B:1D:CA:10:BF:32:63:75:C6:73
Authority key identifier: 2C:E7:1B:1F:4E:EA:01:59:24:61:25:FC:5A:E9:AD:51:A4:47:92:CE
Certificate issuer: /CN=2ce71b1f4eea0159246125fc5ae9ad51a44792ce
Certificate serial: 019A5D557D25598CAEA806BA232ECC21F184
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LOcbH07qAVkkYSX8WumtUaRHks4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/LOcbH07qAVkkYSX8WumtUaRHks4.mft
Manifest number: 1715
Signing time: Fri 07 Nov 2025 08:01:14 +0000
Manifest this update: Fri 07 Nov 2025 08:01:14 +0000
Manifest next update: Sat 08 Nov 2025 08:01:14 +0000
Files and hashes: 1: BugMD0rfZTTzRv9e3Yc9s1C5qM8.roa (hash: jE01pMhWyEqiVohSbXJF+yf78b2Sf6VXp+Appd2gHuI=)
2: LOcbH07qAVkkYSX8WumtUaRHks4.crl (hash: 6qDS+n6JGV1i22DFOj+hW7tkclAn9p6ihSym/PkMRU8=)
3: _1rHHFIhvvb4H2GGBv9RDV7OFzo.roa (hash: ODNNLSo5C2C5zLz79VjHYIX9sjOveSMDElEuw+M5H2w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/LOcbH07qAVkkYSX8WumtUaRHks4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/LOcbH07qAVkkYSX8WumtUaRHks4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LOcbH07qAVkkYSX8WumtUaRHks4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Nov 2025 08:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:5d:55:7d:25:59:8c:ae:a8:06:ba:23:2e:cc:21:f1:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ce71b1f4eea0159246125fc5ae9ad51a44792ce
Validity
Not Before: Nov 7 08:01:14 2025 GMT
Not After : Nov 8 08:01:14 2025 GMT
Subject: CN=2cbb045e18b6df99e6854b1dca10bf326375c673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:08:91:cf:b1:fc:62:49:9c:3a:db:86:62:f4:
4a:51:be:3f:27:21:e6:83:da:c9:24:72:34:d4:1e:
5e:bf:be:2a:e0:f7:bb:39:7c:f8:6d:d3:7f:c2:f9:
50:5b:31:33:6f:28:10:17:af:cd:d4:ac:02:0f:64:
12:c3:d5:44:75:4b:4e:2d:f8:46:a0:64:d6:ae:4a:
21:d2:14:12:72:eb:96:0e:bc:52:8d:62:6f:af:91:
7c:a7:87:f1:86:3f:8b:a6:01:3b:6b:bd:2b:53:16:
0f:74:6d:9c:cf:9b:1f:43:c6:2a:e6:ad:e9:d3:6b:
e3:14:7b:ba:a1:fe:35:c1:a9:3a:23:e2:8d:2b:14:
fe:d0:d7:ee:bd:a6:1b:3f:57:5e:dc:ad:a6:9c:1d:
3c:dd:98:12:0c:4d:c3:4d:b5:49:28:32:53:2f:55:
dc:6d:3b:23:8e:e2:b3:b9:57:a7:39:da:af:c8:15:
8e:1c:05:b1:f6:80:32:1a:2b:2b:ea:fd:43:39:55:
e0:79:69:0a:00:32:44:f4:5d:4c:4d:8b:84:67:f8:
25:4f:3e:74:ce:99:d8:3b:ba:0a:2d:7a:51:a2:4f:
69:9c:bf:2f:f1:52:86:2a:a9:75:29:03:d3:b9:01:
86:9c:09:30:8b:ab:f7:ef:2d:13:3a:f1:7a:24:08:
7d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:BB:04:5E:18:B6:DF:99:E6:85:4B:1D:CA:10:BF:32:63:75:C6:73
X509v3 Authority Key Identifier:
keyid:2C:E7:1B:1F:4E:EA:01:59:24:61:25:FC:5A:E9:AD:51:A4:47:92:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LOcbH07qAVkkYSX8WumtUaRHks4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/LOcbH07qAVkkYSX8WumtUaRHks4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/LOcbH07qAVkkYSX8WumtUaRHks4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:fe:1b:90:47:80:f8:c6:be:a9:83:15:e5:9b:89:2b:59:1d:
52:46:08:ae:bd:84:b8:34:50:67:5e:6c:ef:e3:15:0f:d4:dc:
30:67:9c:bc:5c:bb:b7:14:86:94:20:2c:d1:04:aa:06:94:9b:
e5:7b:4e:9d:39:16:25:5e:18:40:3d:62:76:9d:ae:a6:6c:3c:
e8:c9:28:ac:3b:87:4c:1a:bd:ca:7f:b5:fc:0a:fe:e7:aa:0b:
8d:5f:73:f3:e8:33:e7:fd:49:4b:91:5c:67:eb:f7:9c:9a:b9:
29:47:13:98:ab:33:aa:f9:5d:7b:fd:b2:d8:64:92:4a:8d:a6:
ac:c7:90:38:8b:ca:fc:f8:aa:31:f3:6c:51:92:e4:74:d9:08:
f7:c4:19:3e:a1:50:91:20:66:d7:a1:fb:38:14:57:d0:07:8e:
f2:d7:0a:e7:a7:42:d4:80:54:e1:bc:d4:28:9d:d5:1d:24:f1:
6a:16:a1:10:c0:e1:42:81:a8:5f:4d:89:cf:33:14:8b:f2:a1:
d9:bc:d1:a1:f3:7c:bf:32:9d:fc:06:4f:51:b7:cb:aa:23:1e:
fa:eb:3d:6f:8d:b9:7c:a2:56:73:d2:4f:88:49:41:8a:b7:88:
8b:8e:3d:ff:92:a0:c3:ee:99:45:9b:c3:99:f5:1a:ec:cb:70:
3e:ea:94:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpdVX0lWYyuqAa6Iy7MIfGEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjZTcxYjFmNGVlYTAxNTkyNDYxMjVmYzVhZTlhZDUxYTQ0
NzkyY2UwHhcNMjUxMTA3MDgwMTE0WhcNMjUxMTA4MDgwMTE0WjAzMTEwLwYDVQQD
EygyY2JiMDQ1ZTE4YjZkZjk5ZTY4NTRiMWRjYTEwYmYzMjYzNzVjNjczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogiRz7H8YkmcOtuGYvRKUb4/JyHm
g9rJJHI01B5ev74q4Pe7OXz4bdN/wvlQWzEzbygQF6/N1KwCD2QSw9VEdUtOLfhG
oGTWrkoh0hQScuuWDrxSjWJvr5F8p4fxhj+LpgE7a70rUxYPdG2cz5sfQ8Yq5q3p
02vjFHu6of41wak6I+KNKxT+0NfuvaYbP1de3K2mnB083ZgSDE3DTbVJKDJTL1Xc
bTsjjuKzuVenOdqvyBWOHAWx9oAyGisr6v1DOVXgeWkKADJE9F1MTYuEZ/glTz50
zpnYO7oKLXpRok9pnL8v8VKGKql1KQPTuQGGnAkwi6v37y0TOvF6JAh90wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCy7BF4Ytt+Z5oVLHcoQvzJjdcZzMB8GA1UdIwQY
MBaAFCznGx9O6gFZJGEl/FrprVGkR5LOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTE9jYkgwN3FBVmtrWVNYOFd1bXRVYVJIa3M0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9mMWQ5NzYtNzI2Yi00Y2I3LTlmYTIt
MDJiMzM1ODJjNzQ3LzEvTE9jYkgwN3FBVmtrWVNYOFd1bXRVYVJIa3M0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9mMWQ5NzYtNzI2Yi00Y2I3LTlmYTItMDJiMzM1ODJjNzQ3
LzEvTE9jYkgwN3FBVmtrWVNYOFd1bXRVYVJIa3M0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqf4bkEeA
+Ma+qYMV5ZuJK1kdUkYIrr2EuDRQZ15s7+MVD9TcMGecvFy7txSGlCAs0QSqBpSb
5XtOnTkWJV4YQD1idp2upmw86MkorDuHTBq9yn+1/Ar+56oLjV9z8+gz5/1JS5Fc
Z+v3nJq5KUcTmKszqvlde/2y2GSSSo2mrMeQOIvK/PiqMfNsUZLkdNkI98QZPqFQ
kSBm16H7OBRX0AeO8tcK56dC1IBU4bzUKJ3VHSTxahahEMDhQoGoX02JzzMUi/Kh
2bzRofN8vzKd/AZPUbfLqiMe+us9b425fKJWc9JPiElBireIi449/5Kgw+6ZRZvD
mfUa7MtwPuqU4w==
-----END CERTIFICATE-----
Generated at Fri Nov 7 12:45:53 2025 by rpki-client