
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/5e1871-2af1-47d3-b262-08f433daea15/1/LO4pmOhvp0iOa2T47bwDLOFdG8w.mft
File: LO4pmOhvp0iOa2T47bwDLOFdG8w.mft (raw, json)
Hash identifier: 3tJEummhboEqMoCUwHNils+vF3j2yNHir3kQvZVhX6w=
Subject key identifier: 6D:E1:50:07:4F:B2:2F:DC:3D:A1:9C:C3:E6:99:E0:7F:CD:D9:10:54
Authority key identifier: 2C:EE:29:98:E8:6F:A7:48:8E:6B:64:F8:ED:BC:03:2C:E1:5D:1B:CC
Certificate issuer: /CN=2cee2998e86fa7488e6b64f8edbc032ce15d1bcc
Certificate serial: 0199FD343FD9C2F7629DE1F3D150162ED5D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LO4pmOhvp0iOa2T47bwDLOFdG8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/5e1871-2af1-47d3-b262-08f433daea15/1/LO4pmOhvp0iOa2T47bwDLOFdG8w.mft
Manifest number: 0E66
Signing time: Sun 19 Oct 2025 16:01:23 +0000
Manifest this update: Sun 19 Oct 2025 16:01:23 +0000
Manifest next update: Mon 20 Oct 2025 16:01:23 +0000
Files and hashes: 1: LO4pmOhvp0iOa2T47bwDLOFdG8w.crl (hash: 8qRU0nEnvDLIob4tvbwzltaYTIrj5OwxRKoPhHfEN7s=)
2: YXxh1XSQz2hJg4wU0JwpLVfgRPc.roa (hash: fKQqPt+1938ZgXlhZdhE3xLSu/gu+cSj1bUfoNu6uac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/5e1871-2af1-47d3-b262-08f433daea15/1/LO4pmOhvp0iOa2T47bwDLOFdG8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/5e1871-2af1-47d3-b262-08f433daea15/1/LO4pmOhvp0iOa2T47bwDLOFdG8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/LO4pmOhvp0iOa2T47bwDLOFdG8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:3f:d9:c2:f7:62:9d:e1:f3:d1:50:16:2e:d5:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cee2998e86fa7488e6b64f8edbc032ce15d1bcc
Validity
Not Before: Oct 19 16:01:23 2025 GMT
Not After : Oct 20 16:01:23 2025 GMT
Subject: CN=6de150074fb22fdc3da19cc3e699e07fcdd91054
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:8b:3e:bb:2d:04:21:58:d3:36:87:5e:f1:af:
02:9b:64:2d:94:1e:fc:ce:10:6a:ff:a7:ba:05:97:
e5:46:f1:84:cc:4b:d7:d1:37:f2:93:3b:dd:2f:fd:
34:c1:41:a8:8f:b5:ff:08:72:24:ea:ba:ea:ed:04:
c5:86:29:2e:0a:8f:1d:ce:a7:c3:b9:a9:65:f3:a1:
e3:fc:0a:84:b8:0b:c0:79:b7:f4:6c:74:61:20:94:
f2:c7:0a:69:29:00:8c:e1:e1:2a:1f:fe:fd:6c:ac:
5e:a1:e3:57:37:46:a0:42:cd:3d:32:f7:66:70:76:
4e:54:59:3b:32:df:2b:41:15:f1:b0:cc:9a:63:fd:
bc:89:45:03:27:94:3e:af:49:fb:ec:65:6e:27:86:
2d:31:19:85:86:49:68:bc:06:c1:45:78:ad:8f:fe:
e3:91:0e:4a:03:cf:25:94:e8:ff:73:90:fd:43:12:
5a:0a:7a:2c:bf:2a:4e:1e:ce:2d:a7:f9:42:79:50:
b9:5d:92:cb:3b:bc:d5:40:11:b1:ad:f9:fa:fe:45:
ad:0e:f6:d3:45:7d:37:55:11:22:72:db:32:f8:1e:
b3:84:fd:e7:b6:bf:90:ff:8a:be:98:a2:f6:06:bf:
05:6b:92:b5:07:24:02:11:f1:b2:21:2b:bc:64:25:
af:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:E1:50:07:4F:B2:2F:DC:3D:A1:9C:C3:E6:99:E0:7F:CD:D9:10:54
X509v3 Authority Key Identifier:
keyid:2C:EE:29:98:E8:6F:A7:48:8E:6B:64:F8:ED:BC:03:2C:E1:5D:1B:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LO4pmOhvp0iOa2T47bwDLOFdG8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5e1871-2af1-47d3-b262-08f433daea15/1/LO4pmOhvp0iOa2T47bwDLOFdG8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5e1871-2af1-47d3-b262-08f433daea15/1/LO4pmOhvp0iOa2T47bwDLOFdG8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:d4:6d:30:c6:0b:dc:44:a0:cd:60:12:3a:ac:45:60:79:67:
ba:55:5c:3a:31:04:9a:71:b8:bb:29:04:0f:f7:2e:d6:8b:27:
50:38:5a:a8:93:84:ff:14:e6:d3:4a:ea:d3:95:b5:26:85:0b:
53:fa:c8:08:d3:81:e2:be:8c:f0:81:c4:ff:e2:65:98:69:bf:
80:e7:7b:4d:e0:60:c1:17:b8:99:9d:95:37:4f:fe:0f:b1:db:
21:25:44:f6:59:cf:f6:d3:63:8d:6b:14:a1:4c:f3:ee:1e:3a:
9c:33:7b:21:a2:65:cc:13:98:98:9a:80:07:d1:d3:9d:79:10:
fe:b8:b5:97:51:38:5a:0a:bd:24:35:52:c0:a1:88:ea:e5:16:
09:c2:bd:71:2f:59:2f:a2:ea:00:70:02:cc:00:38:6d:6e:36:
23:ed:12:2f:08:22:35:e0:25:00:4b:a8:43:e9:ec:71:55:a6:
5a:7a:80:10:19:7e:fe:cd:cb:ca:17:52:31:16:fd:8d:7e:9c:
4b:aa:c6:c0:a2:e1:c0:c6:f3:8b:25:6e:9f:63:9a:77:cb:9f:
98:dc:ee:85:5a:73:e8:d6:8b:20:89:7b:7d:7c:62:d4:36:ad:
07:16:e9:df:8b:d3:11:d7:0c:e7:e8:49:69:c8:35:cf:ae:2c:
4d:ca:a7:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:06:40 2025 by rpki-client