Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/e67b1b-4b6f-4535-9311-4b9187d91c66/1/LosErWkLczj3wP51zzs6eFabquU.mft
File: LosErWkLczj3wP51zzs6eFabquU.mft (raw, json)
Hash identifier: AeUk0EpqgPFaBra34NV8WavNKZNca9lZ2Nuxvp2ikGk=
Subject key identifier: 19:5D:0A:96:C8:18:80:61:A5:80:BE:BD:4F:E1:9E:43:84:2D:C1:B6
Authority key identifier: 2E:8B:04:AD:69:0B:73:38:F7:C0:FE:75:CF:3B:3A:78:56:9B:AA:E5
Certificate issuer: /CN=2e8b04ad690b7338f7c0fe75cf3b3a78569baae5
Certificate serial: 0199FBEC242C55304FB77181D1F60E39D8FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LosErWkLczj3wP51zzs6eFabquU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/e67b1b-4b6f-4535-9311-4b9187d91c66/1/LosErWkLczj3wP51zzs6eFabquU.mft
Manifest number: 1170
Signing time: Sun 19 Oct 2025 10:03:00 +0000
Manifest this update: Sun 19 Oct 2025 10:03:00 +0000
Manifest next update: Mon 20 Oct 2025 10:03:00 +0000
Files and hashes: 1: LosErWkLczj3wP51zzs6eFabquU.crl (hash: m0alBJbaNSrT9TCd73JrNVdZJUK6K0xLAaQ3tQS2Ra0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/e67b1b-4b6f-4535-9311-4b9187d91c66/1/LosErWkLczj3wP51zzs6eFabquU.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/e67b1b-4b6f-4535-9311-4b9187d91c66/1/LosErWkLczj3wP51zzs6eFabquU.mft
rsync://rpki.ripe.net/repository/DEFAULT/LosErWkLczj3wP51zzs6eFabquU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:24:2c:55:30:4f:b7:71:81:d1:f6:0e:39:d8:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e8b04ad690b7338f7c0fe75cf3b3a78569baae5
Validity
Not Before: Oct 19 10:03:00 2025 GMT
Not After : Oct 20 10:03:00 2025 GMT
Subject: CN=195d0a96c8188061a580bebd4fe19e43842dc1b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:56:6f:2a:ae:92:77:fe:95:65:56:df:0b:1b:
fe:2a:ab:3d:ac:5b:28:50:cd:db:af:3f:01:d7:05:
70:32:06:71:b3:f5:14:e4:7b:e6:05:1e:62:57:9f:
99:e0:95:88:49:b4:86:0c:89:b0:8c:60:06:6a:7a:
1e:6c:aa:89:ee:47:30:bc:fe:0a:6b:0a:b4:9c:b6:
b8:2d:fe:cd:aa:3a:30:f9:4f:93:6f:cf:10:55:cc:
05:66:55:d4:c2:76:f7:12:df:c1:25:37:e9:fd:72:
0f:cb:d4:d5:df:e9:97:d8:dd:67:5b:05:c6:9d:7a:
55:4e:36:be:84:d1:b3:6b:d5:a2:50:fc:49:d8:da:
18:1a:1d:0a:95:95:3c:a1:a0:79:ca:7a:cf:5b:e5:
48:94:a7:05:60:e3:f2:ca:b2:b5:2a:9b:b9:4e:30:
ce:b2:b6:dd:ba:44:fb:b9:c6:c3:8a:27:52:8d:03:
54:6c:11:5e:10:26:9f:10:33:f8:24:0c:66:d5:49:
04:6d:95:91:db:a9:9f:49:96:69:60:cd:21:ec:17:
24:76:1e:53:8a:4d:e8:ab:dd:ea:de:14:6b:aa:c2:
6c:5f:c4:0d:fc:3c:5f:ed:31:1f:25:6c:e6:3c:20:
72:05:fa:da:b9:05:37:e9:68:dd:ce:19:7d:3d:14:
81:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:5D:0A:96:C8:18:80:61:A5:80:BE:BD:4F:E1:9E:43:84:2D:C1:B6
X509v3 Authority Key Identifier:
keyid:2E:8B:04:AD:69:0B:73:38:F7:C0:FE:75:CF:3B:3A:78:56:9B:AA:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LosErWkLczj3wP51zzs6eFabquU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e67b1b-4b6f-4535-9311-4b9187d91c66/1/LosErWkLczj3wP51zzs6eFabquU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e67b1b-4b6f-4535-9311-4b9187d91c66/1/LosErWkLczj3wP51zzs6eFabquU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:8e:b7:31:74:54:cf:2c:70:a8:a6:65:a1:1c:f5:26:bb:04:
69:b1:af:a7:c7:9b:0d:e3:23:e1:cc:91:29:d8:ad:c5:ca:52:
80:e1:16:90:da:d8:22:77:52:4f:18:2c:69:b9:83:29:66:69:
ca:94:00:ef:fb:fb:42:cf:fb:aa:99:23:ae:33:d0:e5:85:a0:
78:0d:d5:41:08:67:01:f2:d0:60:c6:a5:cb:60:01:a6:c4:b1:
cc:14:22:4f:b6:67:8b:7a:93:5e:81:70:1c:c8:dc:cd:05:45:
1f:af:44:b8:33:e8:fb:b1:b3:e1:f2:01:bd:da:c6:1c:48:b1:
52:e9:ad:b1:54:e1:52:c6:2c:b4:73:54:45:2c:9d:4b:6c:fc:
c8:cd:e4:b1:40:12:1a:0c:3a:ef:3a:85:21:e4:1b:bc:0c:5d:
15:84:5e:33:4a:4f:9b:df:1a:08:7d:18:8a:d6:48:f7:e0:c9:
3e:fd:39:bb:2e:27:de:c3:46:c0:fa:27:9d:a9:fe:f5:6d:ba:
43:ba:3b:37:35:18:cc:54:6d:77:2c:08:6a:4d:fe:d7:6e:42:
60:23:5c:6f:46:ca:4e:de:f9:a9:c4:42:1e:fb:94:47:a5:dd:
98:61:fb:bd:c9:c0:f5:82:89:75:3b:c0:cb:6b:c3:b6:62:74:
c8:3c:6e:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn77CQsVTBPt3GB0fYOOdj8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlOGIwNGFkNjkwYjczMzhmN2MwZmU3NWNmM2IzYTc4NTY5
YmFhZTUwHhcNMjUxMDE5MTAwMzAwWhcNMjUxMDIwMTAwMzAwWjAzMTEwLwYDVQQD
EygxOTVkMGE5NmM4MTg4MDYxYTU4MGJlYmQ0ZmUxOWU0Mzg0MmRjMWI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFZvKq6Sd/6VZVbfCxv+Kqs9rFso
UM3brz8B1wVwMgZxs/UU5HvmBR5iV5+Z4JWISbSGDImwjGAGanoebKqJ7kcwvP4K
awq0nLa4Lf7Nqjow+U+Tb88QVcwFZlXUwnb3Et/BJTfp/XIPy9TV3+mX2N1nWwXG
nXpVTja+hNGza9WiUPxJ2NoYGh0KlZU8oaB5ynrPW+VIlKcFYOPyyrK1Kpu5TjDO
srbdukT7ucbDiidSjQNUbBFeECafEDP4JAxm1UkEbZWR26mfSZZpYM0h7Bckdh5T
ik3oq93q3hRrqsJsX8QN/Dxf7TEfJWzmPCByBfrauQU36Wjdzhl9PRSBfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBldCpbIGIBhpYC+vU/hnkOELcG2MB8GA1UdIwQY
MBaAFC6LBK1pC3M498D+dc87OnhWm6rlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTG9zRXJXa0xjemozd1A1MXp6czZlRmFicXVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9lNjdiMWItNGI2Zi00NTM1LTkzMTEt
NGI5MTg3ZDkxYzY2LzEvTG9zRXJXa0xjemozd1A1MXp6czZlRmFicXVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni9lNjdiMWItNGI2Zi00NTM1LTkzMTEtNGI5MTg3ZDkxYzY2
LzEvTG9zRXJXa0xjemozd1A1MXp6czZlRmFicXVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMI63MXRU
zyxwqKZloRz1JrsEabGvp8ebDeMj4cyRKditxcpSgOEWkNrYIndSTxgsabmDKWZp
ypQA7/v7Qs/7qpkjrjPQ5YWgeA3VQQhnAfLQYMaly2ABpsSxzBQiT7Zni3qTXoFw
HMjczQVFH69EuDPo+7Gz4fIBvdrGHEixUumtsVThUsYstHNURSydS2z8yM3ksUAS
Ggw67zqFIeQbvAxdFYReM0pPm98aCH0YitZI9+DJPv05uy4n3sNGwPonnan+9W26
Q7o7NzUYzFRtdywIak3+125CYCNcb0bKTt75qcRCHvuUR6XdmGH7vcnA9YKJdTvA
y2vDtmJ0yDxuJg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:40:07 2025 by rpki-client