Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/dddf3d-e887-4273-bb7b-681fa0d99821/1/lo-QT-7x95FiuCGaikg7hY9UC_o.mft
File: lo-QT-7x95FiuCGaikg7hY9UC_o.mft (raw, json)
Hash identifier: J8TAl4UgjT/y4UxiTt9O9hDWNSUcIdV29j3bJlF8mog=
Subject key identifier: EB:BD:E2:66:65:FA:A9:54:6A:2C:7E:4B:D6:45:EA:3B:66:99:18:74
Authority key identifier: 96:8F:90:4F:EE:F1:F7:91:62:B8:21:9A:8A:48:3B:85:8F:54:0B:FA
Certificate issuer: /CN=968f904feef1f79162b8219a8a483b858f540bfa
Certificate serial: 019A4EF4317A7F6B8E47D20F185224112175
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lo-QT-7x95FiuCGaikg7hY9UC_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/dddf3d-e887-4273-bb7b-681fa0d99821/1/lo-QT-7x95FiuCGaikg7hY9UC_o.mft
Manifest number: 1709
Signing time: Tue 04 Nov 2025 13:00:17 +0000
Manifest this update: Tue 04 Nov 2025 13:00:17 +0000
Manifest next update: Wed 05 Nov 2025 13:00:17 +0000
Files and hashes: 1: lo-QT-7x95FiuCGaikg7hY9UC_o.crl (hash: iBy8Mih2o5+DmkDmEA7W+ZGkeHtaGl2Udk7z2KZyD3o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/dddf3d-e887-4273-bb7b-681fa0d99821/1/lo-QT-7x95FiuCGaikg7hY9UC_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/dddf3d-e887-4273-bb7b-681fa0d99821/1/lo-QT-7x95FiuCGaikg7hY9UC_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/lo-QT-7x95FiuCGaikg7hY9UC_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:31:7a:7f:6b:8e:47:d2:0f:18:52:24:11:21:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=968f904feef1f79162b8219a8a483b858f540bfa
Validity
Not Before: Nov 4 13:00:17 2025 GMT
Not After : Nov 5 13:00:17 2025 GMT
Subject: CN=ebbde26665faa9546a2c7e4bd645ea3b66991874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:57:bd:ba:bd:9f:de:09:02:88:9f:a5:c9:f9:
2e:a4:7d:df:dd:66:e9:21:a2:7c:ea:e5:26:ef:4a:
24:e5:00:59:d9:d9:3f:53:fa:c7:4b:74:bb:d5:b6:
b4:4c:24:7b:3d:0c:07:d2:dd:b7:34:2b:2f:b2:d0:
a7:a4:af:c0:82:38:b4:09:96:d5:b0:a5:c8:2c:5b:
84:be:70:1b:d1:c9:09:cf:d0:c8:d4:c2:b2:24:04:
af:e0:aa:9e:fc:b3:f9:45:c2:da:2b:e2:15:c4:fb:
e7:67:e8:18:60:43:b9:06:8b:2c:de:ef:92:1d:19:
ee:56:28:b0:7b:3f:c7:f4:06:c0:ef:6e:24:41:c1:
5d:af:51:8e:8a:62:db:f0:ef:ac:e4:c1:60:05:d8:
81:98:2a:d3:80:c8:8f:ca:f5:d3:3e:51:1a:18:89:
15:7d:b0:69:86:95:00:f6:c8:a1:4e:25:0e:45:c7:
91:ef:ff:7d:10:f6:42:ba:75:e7:8d:78:00:3a:ac:
ed:aa:2d:d4:83:41:38:bd:8a:f7:50:fd:f5:2b:b3:
d3:7d:fe:4e:0a:03:d4:e2:97:10:e9:78:80:e8:6d:
c7:f7:9c:b2:0a:a2:67:e4:33:06:e9:b9:25:a6:ed:
33:ec:df:a5:1f:59:87:ba:f0:b2:55:a2:43:93:0b:
a7:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:BD:E2:66:65:FA:A9:54:6A:2C:7E:4B:D6:45:EA:3B:66:99:18:74
X509v3 Authority Key Identifier:
keyid:96:8F:90:4F:EE:F1:F7:91:62:B8:21:9A:8A:48:3B:85:8F:54:0B:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lo-QT-7x95FiuCGaikg7hY9UC_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/dddf3d-e887-4273-bb7b-681fa0d99821/1/lo-QT-7x95FiuCGaikg7hY9UC_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/dddf3d-e887-4273-bb7b-681fa0d99821/1/lo-QT-7x95FiuCGaikg7hY9UC_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:46:96:f4:06:86:09:2d:55:ec:e5:98:8a:27:3b:d9:2b:89:
8f:29:a8:01:8f:a9:e0:fd:f0:6e:65:1e:53:7d:29:35:a9:bb:
a8:fc:54:15:bd:97:ec:87:01:ef:ee:0d:7b:58:a8:6a:fa:ea:
98:fd:10:2b:9c:46:7e:f6:9e:aa:fa:3f:4e:d9:97:12:ad:1e:
ba:68:86:86:73:1c:77:63:14:24:69:d7:4a:ae:30:04:cf:83:
53:69:8b:a9:ed:78:39:76:a7:41:99:dc:92:83:05:72:34:3b:
11:fd:cb:e1:39:7a:9e:57:fc:76:dd:70:af:9d:80:54:8d:8e:
97:f4:2e:17:7a:6c:3a:89:4d:b0:45:76:f6:95:e8:25:6d:3f:
a6:51:64:fb:5e:4c:10:6c:b2:a4:d2:da:70:44:bb:0e:bc:30:
d0:2f:1e:84:5d:79:09:14:9f:c0:58:64:17:3b:e3:d2:e0:78:
58:12:cd:0e:93:4b:48:98:b3:26:25:5c:d9:b0:59:25:b9:30:
83:0c:d4:6d:5a:50:87:5b:36:bd:52:c1:2f:68:95:0a:1a:4d:
ad:7d:09:1b:e7:75:9a:27:d6:e6:be:42:f1:b8:6d:da:72:f7:
ee:a3:af:9e:91:54:2d:2a:e1:3d:48:a7:a1:e5:23:46:d0:62:
b1:52:18:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9DF6f2uOR9IPGFIkESF1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2OGY5MDRmZWVmMWY3OTE2MmI4MjE5YThhNDgzYjg1OGY1
NDBiZmEwHhcNMjUxMTA0MTMwMDE3WhcNMjUxMTA1MTMwMDE3WjAzMTEwLwYDVQQD
EyhlYmJkZTI2NjY1ZmFhOTU0NmEyYzdlNGJkNjQ1ZWEzYjY2OTkxODc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Fe9ur2f3gkCiJ+lyfkupH3f3Wbp
IaJ86uUm70ok5QBZ2dk/U/rHS3S71ba0TCR7PQwH0t23NCsvstCnpK/Agji0CZbV
sKXILFuEvnAb0ckJz9DI1MKyJASv4Kqe/LP5RcLaK+IVxPvnZ+gYYEO5Boss3u+S
HRnuViiwez/H9AbA724kQcFdr1GOimLb8O+s5MFgBdiBmCrTgMiPyvXTPlEaGIkV
fbBphpUA9sihTiUORceR7/99EPZCunXnjXgAOqztqi3Ug0E4vYr3UP31K7PTff5O
CgPU4pcQ6XiA6G3H95yyCqJn5DMG6bklpu0z7N+lH1mHuvCyVaJDkwunJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOu94mZl+qlUaix+S9ZF6jtmmRh0MB8GA1UdIwQY
MBaAFJaPkE/u8feRYrghmopIO4WPVAv6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbG8tUVQtN3g5NUZpdUNHYWlrZzdoWTlVQ19vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9kZGRmM2QtZTg4Ny00MjczLWJiN2It
NjgxZmEwZDk5ODIxLzEvbG8tUVQtN3g5NUZpdUNHYWlrZzdoWTlVQ19vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9kZGRmM2QtZTg4Ny00MjczLWJiN2ItNjgxZmEwZDk5ODIx
LzEvbG8tUVQtN3g5NUZpdUNHYWlrZzdoWTlVQ19vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARUaW9AaG
CS1V7OWYiic72SuJjymoAY+p4P3wbmUeU30pNam7qPxUFb2X7IcB7+4Ne1ioavrq
mP0QK5xGfvaeqvo/TtmXEq0eumiGhnMcd2MUJGnXSq4wBM+DU2mLqe14OXanQZnc
koMFcjQ7Ef3L4Tl6nlf8dt1wr52AVI2Ol/QuF3psOolNsEV29pXoJW0/plFk+15M
EGyypNLacES7Drww0C8ehF15CRSfwFhkFzvj0uB4WBLNDpNLSJizJiVc2bBZJbkw
gwzUbVpQh1s2vVLBL2iVChpNrX0JG+d1mifW5r5C8bht2nL37qOvnpFULSrhPUin
oeUjRtBisVIYlA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:44:55 2025 by rpki-client