Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/LOre5Y-GT0cutCKwuVSXuFB1oSs.mft
File: LOre5Y-GT0cutCKwuVSXuFB1oSs.mft (raw, json)
Hash identifier: FHongzqDduCBSo2P/NBMFbEzOd8rWL9mlzEkJ0OUZfI=
Subject key identifier: 7A:CB:F7:40:86:E2:82:A8:44:FA:C5:5C:75:82:60:E9:4B:D8:93:8B
Authority key identifier: 2C:EA:DE:E5:8F:86:4F:47:2E:B4:22:B0:B9:54:97:B8:50:75:A1:2B
Certificate issuer: /CN=2ceadee58f864f472eb422b0b95497b85075a12b
Certificate serial: 0199FD3402837CAB9EDF9ED9B03F3A5C1BC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LOre5Y-GT0cutCKwuVSXuFB1oSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/LOre5Y-GT0cutCKwuVSXuFB1oSs.mft
Manifest number: 1531
Signing time: Sun 19 Oct 2025 16:01:08 +0000
Manifest this update: Sun 19 Oct 2025 16:01:08 +0000
Manifest next update: Mon 20 Oct 2025 16:01:08 +0000
Files and hashes: 1: FBdl7VOodLJhSXYfDoAofAIRhnA.roa (hash: I3zrIjexf9/s3BfDjPpCzKMEPfl4E3s1P3fqPquhjIg=)
2: LOre5Y-GT0cutCKwuVSXuFB1oSs.crl (hash: Nbqrty2NU0YXbRjh/OyiZgKumh9A+9yVX5RoJS9NzuU=)
3: ZBji9OX_VotOWmsBmNsHM021d9w.roa (hash: VbyaXchd5eBQYGJ65pdgdekBYkxDCu5DrAnwaoKvIrc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/LOre5Y-GT0cutCKwuVSXuFB1oSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/LOre5Y-GT0cutCKwuVSXuFB1oSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/LOre5Y-GT0cutCKwuVSXuFB1oSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:02:83:7c:ab:9e:df:9e:d9:b0:3f:3a:5c:1b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ceadee58f864f472eb422b0b95497b85075a12b
Validity
Not Before: Oct 19 16:01:08 2025 GMT
Not After : Oct 20 16:01:08 2025 GMT
Subject: CN=7acbf74086e282a844fac55c758260e94bd8938b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8d:d5:5c:2b:72:87:41:b6:5b:c3:8a:6c:73:
88:b0:4e:a1:fe:6c:a7:08:69:02:bc:a4:e1:2b:65:
74:74:98:3a:f4:c3:c0:53:e0:75:21:e0:db:58:bc:
92:ea:3c:04:e2:62:a6:d3:ea:4a:e1:f6:77:27:34:
5e:e1:21:e5:ee:50:b4:26:94:1a:46:24:29:35:b4:
f8:d3:7f:20:a7:cf:f0:11:fd:14:f9:c2:1c:26:85:
66:0c:d9:71:12:ff:3e:45:42:97:8e:b7:b5:ad:1e:
1b:b2:00:c8:90:84:80:e2:22:f1:43:bd:6c:a9:ac:
2e:3e:e1:2b:02:bc:fe:b2:fc:9e:97:fc:c2:a2:19:
a8:c5:9e:93:f5:97:90:15:38:61:6c:0f:d3:af:92:
85:04:ee:26:11:bf:c9:da:d9:34:e2:a4:9c:db:26:
41:43:a7:78:e6:c2:12:5d:df:bf:46:9f:03:83:b5:
57:cf:19:b4:43:e0:30:c8:d4:df:93:97:38:b5:de:
99:47:9c:18:2a:0b:b6:68:91:ca:8f:d1:0f:e5:67:
3b:e6:a8:83:d9:95:ce:55:07:46:54:ee:2a:e9:5f:
91:c9:f6:5e:58:f6:3f:1f:a5:da:97:19:63:0c:7f:
6a:0d:7e:24:37:5c:f8:fe:d0:3a:bf:70:86:42:d8:
65:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:CB:F7:40:86:E2:82:A8:44:FA:C5:5C:75:82:60:E9:4B:D8:93:8B
X509v3 Authority Key Identifier:
keyid:2C:EA:DE:E5:8F:86:4F:47:2E:B4:22:B0:B9:54:97:B8:50:75:A1:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LOre5Y-GT0cutCKwuVSXuFB1oSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/LOre5Y-GT0cutCKwuVSXuFB1oSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/LOre5Y-GT0cutCKwuVSXuFB1oSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:97:2d:75:24:40:6e:e1:93:74:a1:ca:c8:40:5b:49:f2:24:
25:88:9b:3e:53:40:cd:5d:ed:b1:e3:27:0c:93:0d:49:e2:8e:
7a:82:fb:e0:4d:69:53:3c:b7:10:e8:7d:73:3c:f2:a3:2a:f1:
a5:b3:03:f9:b6:f7:db:78:6c:fd:9d:dd:57:ce:f6:01:91:42:
67:11:f7:d1:f2:d8:58:8a:06:66:ec:71:1d:0b:3d:e8:83:93:
53:56:53:f9:0e:a3:a8:8b:f0:d0:e7:4f:5a:6a:f4:9d:ac:d5:
28:ed:2e:a4:39:ae:16:8e:d7:c0:5e:94:5b:86:b2:51:50:4f:
ff:d6:4f:43:f9:f3:c8:73:03:b4:6b:24:c8:c5:f3:a3:f3:cd:
a8:1c:4b:5e:61:e2:ce:95:c1:aa:fd:18:6b:c8:6f:91:95:2e:
20:e0:0c:d9:a4:37:1c:45:f2:45:c7:03:b6:e9:a3:46:11:c5:
90:e2:b3:f9:1c:20:62:ff:ee:f6:17:80:b9:b8:4b:22:8b:f0:
af:cc:c2:53:24:3c:a0:c1:0c:d1:43:43:56:ab:83:f2:55:46:
b4:f8:7e:a8:c0:57:23:f1:f6:77:21:e1:11:58:df:e0:af:99:
ac:34:20:6b:eb:b5:85:be:33:d3:fa:ef:07:83:58:f6:bf:41:
91:7d:bc:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:48:55 2025 by rpki-client