Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft
File: Loskx2rYemwf7f-vCNmxe0UkmZE.mft (raw, json)
Hash identifier: 2SRN9qUexRyWPQ5Sq655EMJx8+3JYdxBulwiMb1dc3w=
Subject key identifier: 3C:40:19:DE:CD:C9:A5:94:BC:C5:D8:C6:8D:15:83:C1:82:A9:4F:3B
Authority key identifier: 2E:8B:24:C7:6A:D8:7A:6C:1F:ED:FF:AF:08:D9:B1:7B:45:24:99:91
Certificate issuer: /CN=2e8b24c76ad87a6c1fedffaf08d9b17b45249991
Certificate serial: 0199FD6AE83861814BBF72A14515D8A1E8F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Loskx2rYemwf7f-vCNmxe0UkmZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft
Manifest number: 16F6
Signing time: Sun 19 Oct 2025 17:01:05 +0000
Manifest this update: Sun 19 Oct 2025 17:01:05 +0000
Manifest next update: Mon 20 Oct 2025 17:01:05 +0000
Files and hashes: 1: EUXa9q5xtqzn4TSNfTmHnokkF1o.roa (hash: ADBuDOAgvTiWwaaapmGOXdArliGnR/m+Z6wK3OiJpWM=)
2: Loskx2rYemwf7f-vCNmxe0UkmZE.crl (hash: kn8CJ3fQgaR/xQtdMQE3wfVJD+ih2rAJHCbIBkbVMhM=)
3: U7x9NHrOtVwpLBD4RJMdKYPQ-Mo.roa (hash: COXA0MHjLmP0wp5vDjDiQUXIbxhZE0gntg3Uospeavg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Loskx2rYemwf7f-vCNmxe0UkmZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6a:e8:38:61:81:4b:bf:72:a1:45:15:d8:a1:e8:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e8b24c76ad87a6c1fedffaf08d9b17b45249991
Validity
Not Before: Oct 19 17:01:05 2025 GMT
Not After : Oct 20 17:01:05 2025 GMT
Subject: CN=3c4019decdc9a594bcc5d8c68d1583c182a94f3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:55:5b:e2:28:21:07:02:b5:72:2e:f6:06:7b:
eb:ee:7d:4e:f5:93:39:2f:10:d6:33:5b:79:c4:55:
eb:47:18:c1:b1:04:a3:6f:09:9f:6e:4d:93:20:e4:
0d:f8:bb:9b:d8:33:0a:7c:05:e3:30:24:60:7e:a2:
ba:78:73:76:aa:ba:6d:6f:b0:7b:32:d6:bf:98:5c:
fc:12:f6:2a:90:2d:56:6d:e8:8c:04:8d:8e:2b:d7:
ea:cd:16:04:ee:ed:33:20:40:3f:bd:01:29:a5:b0:
da:e4:c5:74:80:21:c6:f4:7c:45:b6:64:28:20:02:
9f:f8:53:1a:1b:81:dc:f1:14:ea:a4:c3:b9:7a:f4:
c6:a2:cf:c7:99:23:d6:c4:a3:71:3b:bb:65:35:01:
25:f0:94:f6:90:17:a7:9d:cc:34:59:d6:4a:eb:5c:
9b:33:71:62:50:17:a5:50:eb:ff:88:0a:d0:dd:76:
6f:51:c3:52:5e:94:dd:f6:82:93:b7:9d:2e:5b:f4:
b6:e9:19:e2:1f:e4:29:7c:e2:99:cd:fe:9c:32:63:
77:1d:3e:13:04:d1:20:80:e5:3c:71:b6:33:fb:b2:
ab:10:17:39:ae:01:ae:78:5b:48:8e:ed:a9:27:c4:
a6:76:56:f7:50:54:e7:73:95:b0:15:31:64:4e:93:
26:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:40:19:DE:CD:C9:A5:94:BC:C5:D8:C6:8D:15:83:C1:82:A9:4F:3B
X509v3 Authority Key Identifier:
keyid:2E:8B:24:C7:6A:D8:7A:6C:1F:ED:FF:AF:08:D9:B1:7B:45:24:99:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Loskx2rYemwf7f-vCNmxe0UkmZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:15:6b:e2:80:b8:52:c9:78:fb:f8:51:91:22:a3:c0:9d:9b:
c7:1f:f7:28:4f:ba:97:6c:a3:f7:42:9f:dc:7c:80:a8:e1:1a:
26:12:e4:06:bf:75:c9:40:b3:10:da:dc:ee:6a:00:5f:a0:4d:
3b:8a:bc:96:cd:0a:ba:74:27:9b:39:25:d2:60:73:1d:b0:65:
6d:a2:6a:5b:18:4a:a2:8d:7f:bd:f7:7a:ad:97:4e:b7:27:45:
39:35:90:d3:1e:02:53:bf:50:9c:42:f5:f7:0c:8f:11:27:82:
9a:79:bb:ce:3b:1b:05:10:1c:f3:ef:4e:be:9c:58:1c:bc:94:
b1:5c:a6:78:9b:8a:e4:0f:d5:c2:44:b7:0d:f0:8b:bf:39:7e:
b0:0b:76:ed:32:4b:cb:e7:fb:3e:73:e5:82:e5:98:24:5f:04:
46:ae:43:fd:68:fd:3e:e8:89:6f:9e:f5:69:bd:e1:22:53:56:
b3:b5:fb:38:44:3f:c5:0d:01:12:18:1d:10:88:47:05:97:b2:
7d:a5:12:84:c8:70:a5:31:60:ea:af:d3:f6:eb:87:b5:14:a1:
0e:2d:71:de:ee:66:ca:f9:69:b8:48:22:20:c0:01:4a:bc:1c:
6b:d2:e6:1f:55:9b:1e:8b:cb:f4:3e:26:ae:35:fe:7b:01:98:
00:d5:c7:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9aug4YYFLv3KhRRXYoejwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlOGIyNGM3NmFkODdhNmMxZmVkZmZhZjA4ZDliMTdiNDUy
NDk5OTEwHhcNMjUxMDE5MTcwMTA1WhcNMjUxMDIwMTcwMTA1WjAzMTEwLwYDVQQD
EygzYzQwMTlkZWNkYzlhNTk0YmNjNWQ4YzY4ZDE1ODNjMTgyYTk0ZjNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVVb4ighBwK1ci72Bnvr7n1O9ZM5
LxDWM1t5xFXrRxjBsQSjbwmfbk2TIOQN+Lub2DMKfAXjMCRgfqK6eHN2qrptb7B7
Mta/mFz8EvYqkC1WbeiMBI2OK9fqzRYE7u0zIEA/vQEppbDa5MV0gCHG9HxFtmQo
IAKf+FMaG4Hc8RTqpMO5evTGos/HmSPWxKNxO7tlNQEl8JT2kBenncw0WdZK61yb
M3FiUBelUOv/iArQ3XZvUcNSXpTd9oKTt50uW/S26RniH+QpfOKZzf6cMmN3HT4T
BNEggOU8cbYz+7KrEBc5rgGueFtIju2pJ8Smdlb3UFTnc5WwFTFkTpMmOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDxAGd7NyaWUvMXYxo0Vg8GCqU87MB8GA1UdIwQY
MBaAFC6LJMdq2HpsH+3/rwjZsXtFJJmRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTG9za3gyclllbXdmN2YtdkNObXhlMFVrbVpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS8wNGQzNDgtNzViOS00OGQyLWJlMTAt
OTExOTBhMDJkYjcwLzEvTG9za3gyclllbXdmN2YtdkNObXhlMFVrbVpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS8wNGQzNDgtNzViOS00OGQyLWJlMTAtOTExOTBhMDJkYjcw
LzEvTG9za3gyclllbXdmN2YtdkNObXhlMFVrbVpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADBVr4oC4
Usl4+/hRkSKjwJ2bxx/3KE+6l2yj90Kf3HyAqOEaJhLkBr91yUCzENrc7moAX6BN
O4q8ls0KunQnmzkl0mBzHbBlbaJqWxhKoo1/vfd6rZdOtydFOTWQ0x4CU79QnEL1
9wyPESeCmnm7zjsbBRAc8+9OvpxYHLyUsVymeJuK5A/VwkS3DfCLvzl+sAt27TJL
y+f7PnPlguWYJF8ERq5D/Wj9PuiJb571ab3hIlNWs7X7OEQ/xQ0BEhgdEIhHBZey
faUShMhwpTFg6q/T9uuHtRShDi1x3u5myvlpuEgiIMABSrwca9LmH1WbHovL9D4m
rjX+ewGYANXHIA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:55:16 2025 by rpki-client