Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/8b1089-aa37-4236-bb1e-4f3ee8365d8f/1/lOxdPU2xSEp34sh2PXSgvXxDTak.mft
File: lOxdPU2xSEp34sh2PXSgvXxDTak.mft (raw, json)
Hash identifier: axqlEYUYb4bCEws+4LY1cm5bb9PBNQAUKrK1rGkPATw=
Subject key identifier: BD:04:2D:91:8F:69:EB:CA:7F:12:B3:64:01:62:CE:DD:39:F2:7D:08
Authority key identifier: 94:EC:5D:3D:4D:B1:48:4A:77:E2:C8:76:3D:74:A0:BD:7C:43:4D:A9
Certificate issuer: /CN=94ec5d3d4db1484a77e2c8763d74a0bd7c434da9
Certificate serial: 0199FD6ADE4E4371E1B970CE413A11FE834B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lOxdPU2xSEp34sh2PXSgvXxDTak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/8b1089-aa37-4236-bb1e-4f3ee8365d8f/1/lOxdPU2xSEp34sh2PXSgvXxDTak.mft
Manifest number: 0DD7
Signing time: Sun 19 Oct 2025 17:01:03 +0000
Manifest this update: Sun 19 Oct 2025 17:01:03 +0000
Manifest next update: Mon 20 Oct 2025 17:01:03 +0000
Files and hashes: 1: 50o06An3k3A8kOiunWV55W1-Ajg.roa (hash: AcFz8bkfqTGlKpcv2q2Ys5Hm4t2OZ+46UtANIMDmoyM=)
2: lOxdPU2xSEp34sh2PXSgvXxDTak.crl (hash: 29Zxbnmr2YWI4PgGDkiLFIMw0qRvWnCsidN2aCk5+WA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/8b1089-aa37-4236-bb1e-4f3ee8365d8f/1/lOxdPU2xSEp34sh2PXSgvXxDTak.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/8b1089-aa37-4236-bb1e-4f3ee8365d8f/1/lOxdPU2xSEp34sh2PXSgvXxDTak.mft
rsync://rpki.ripe.net/repository/DEFAULT/lOxdPU2xSEp34sh2PXSgvXxDTak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6a:de:4e:43:71:e1:b9:70:ce:41:3a:11:fe:83:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94ec5d3d4db1484a77e2c8763d74a0bd7c434da9
Validity
Not Before: Oct 19 17:01:03 2025 GMT
Not After : Oct 20 17:01:03 2025 GMT
Subject: CN=bd042d918f69ebca7f12b3640162cedd39f27d08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:45:ce:8e:7b:53:37:dc:df:d7:35:68:9f:28:
c3:cb:62:8a:f7:6b:c2:18:06:a9:7d:c2:93:df:2b:
03:b5:02:18:0d:96:1d:b1:d1:da:b8:18:a4:c3:5a:
11:a4:48:00:c4:e2:6b:56:54:2e:fd:35:71:5d:33:
34:2b:de:df:9e:7d:35:28:87:22:5f:76:c0:72:64:
cb:d0:9b:a1:64:27:b6:ca:b0:e0:a0:a8:58:87:e3:
61:1e:1a:6b:88:ad:77:c9:c7:95:73:7d:c2:3c:bb:
17:28:36:bb:6f:71:f7:9a:92:37:c0:81:81:58:04:
36:cc:2a:30:75:08:25:26:de:21:4b:4a:bd:39:0d:
fe:cd:42:1f:a1:91:e6:33:18:51:a9:6e:c8:bf:2c:
99:ea:e7:11:cc:16:2f:0f:49:05:75:60:aa:85:fb:
e5:35:c5:64:c6:25:3e:5d:cb:dd:e0:a8:de:17:4f:
6c:eb:5f:74:76:49:fc:6c:67:2d:e6:88:e7:49:22:
f9:28:6a:44:73:84:c6:58:4d:b3:2e:56:fb:9f:8b:
f0:ed:4b:d8:80:57:d8:50:ba:8c:9b:2b:8d:5d:59:
a6:95:f4:25:fb:29:07:3c:f8:e0:3e:99:57:d7:a4:
8c:f6:09:c9:ce:6e:19:07:12:ce:38:39:0e:f8:ed:
ed:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:04:2D:91:8F:69:EB:CA:7F:12:B3:64:01:62:CE:DD:39:F2:7D:08
X509v3 Authority Key Identifier:
keyid:94:EC:5D:3D:4D:B1:48:4A:77:E2:C8:76:3D:74:A0:BD:7C:43:4D:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lOxdPU2xSEp34sh2PXSgvXxDTak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8b1089-aa37-4236-bb1e-4f3ee8365d8f/1/lOxdPU2xSEp34sh2PXSgvXxDTak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8b1089-aa37-4236-bb1e-4f3ee8365d8f/1/lOxdPU2xSEp34sh2PXSgvXxDTak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:e9:c7:5c:20:ab:cf:15:4f:ae:98:0f:1c:4d:c8:31:71:09:
f6:4a:b4:ff:ab:9f:13:86:b2:5f:ab:88:7d:0d:f8:2a:6a:ce:
c6:39:a6:dc:f3:fa:70:56:f4:9a:2f:49:f3:f9:2b:ec:95:8f:
88:7c:8d:a4:4c:5f:27:d9:78:76:e4:88:ad:da:d4:72:28:85:
f0:e5:6e:50:b5:21:a8:b7:b9:e4:88:e4:54:3a:e7:d4:47:96:
51:01:7b:ff:ad:50:ad:3e:ed:61:eb:e4:ec:3a:8d:de:06:a3:
a0:7d:1d:d0:7c:cb:70:ff:0a:fa:a2:e3:5b:c9:89:19:6a:89:
d0:00:b4:a4:b4:f0:4b:08:e8:65:f8:4b:0a:82:9a:82:92:9e:
ee:51:cc:97:98:68:fb:1a:a0:76:05:f7:a9:05:93:57:2b:35:
d6:1d:88:23:a2:f7:04:7b:62:02:c3:43:30:92:b4:4c:bb:15:
f3:28:da:bd:c0:99:7b:fe:40:3c:a5:97:66:5a:e9:7f:e0:58:
9f:0d:6d:03:b3:23:08:80:97:b2:44:94:fb:ce:e9:09:ec:41:
6c:be:54:68:11:10:e2:5b:cc:29:df:b0:43:67:58:ef:86:9b:
31:03:e5:ec:61:c0:e6:55:50:18:62:89:92:f1:8c:31:ee:74:
82:61:4d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:03:08 2025 by rpki-client