Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/7c97cf-195c-4fc1-95a3-637fa14656de/1/looX4WGWu3qGcY5rK9agfje0DGU.mft
File: looX4WGWu3qGcY5rK9agfje0DGU.mft (raw, json)
Hash identifier: saCMww+sY8Opd/KGdy6tchf2cyZ1I27dvp091QGYme4=
Subject key identifier: CE:90:0D:D9:58:B7:3E:3E:9D:BD:EA:28:5A:58:2C:9E:5C:6C:C5:20
Authority key identifier: 96:8A:17:E1:61:96:BB:7A:86:71:8E:6B:2B:D6:A0:7E:37:B4:0C:65
Certificate issuer: /CN=968a17e16196bb7a86718e6b2bd6a07e37b40c65
Certificate serial: 0199FBEB124F39FC1A677FC08AF2983560CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/looX4WGWu3qGcY5rK9agfje0DGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/7c97cf-195c-4fc1-95a3-637fa14656de/1/looX4WGWu3qGcY5rK9agfje0DGU.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 10:01:50 +0000
Manifest this update: Sun 19 Oct 2025 10:01:50 +0000
Manifest next update: Mon 20 Oct 2025 10:01:50 +0000
Files and hashes: 1: DujQDMx3DXEUwl_S25-DE-FhKlg.roa (hash: kc2HgT2zi7ovcfO8xiQnJUXKfZ/NJb+y4s0qXknod8A=)
2: looX4WGWu3qGcY5rK9agfje0DGU.crl (hash: HaEZqzOaAQK0wPt+WhzBwkuexjoumCRz1fSnfCnKsRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/7c97cf-195c-4fc1-95a3-637fa14656de/1/looX4WGWu3qGcY5rK9agfje0DGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/7c97cf-195c-4fc1-95a3-637fa14656de/1/looX4WGWu3qGcY5rK9agfje0DGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/looX4WGWu3qGcY5rK9agfje0DGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:12:4f:39:fc:1a:67:7f:c0:8a:f2:98:35:60:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=968a17e16196bb7a86718e6b2bd6a07e37b40c65
Validity
Not Before: Oct 19 10:01:50 2025 GMT
Not After : Oct 20 10:01:50 2025 GMT
Subject: CN=ce900dd958b73e3e9dbdea285a582c9e5c6cc520
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9e:02:96:72:9e:4a:d6:f1:87:34:d3:d3:db:
5a:5d:a2:70:bc:3f:66:6b:18:9e:0f:9b:41:3a:72:
5c:5f:73:8b:72:c4:77:3c:8f:02:e3:7c:07:45:34:
27:1a:2f:26:54:4f:bd:3a:c0:14:26:4a:0c:48:9e:
60:62:55:ad:7e:8a:7e:83:44:f4:5f:90:54:b9:0d:
21:1f:46:10:4b:b3:86:d5:72:89:03:c2:3c:07:22:
62:a5:81:3a:5a:3c:4d:05:87:c8:53:e9:2a:f2:50:
46:05:96:ed:5c:ac:11:d2:fe:b5:f7:b1:7f:61:a2:
7f:0e:07:58:50:a8:3f:f3:f4:12:22:51:60:3a:f7:
d3:be:08:36:f3:4f:3d:82:d9:30:4d:59:76:06:b8:
bc:56:7a:d5:f6:11:a7:3f:11:5a:c1:4b:7a:60:f2:
00:a2:99:c0:0e:32:ae:c2:16:ad:77:5c:e4:02:ed:
88:2b:2a:c3:7a:b2:42:16:d2:0e:ca:5a:7f:c6:90:
90:b1:c2:ca:04:16:13:c1:07:3f:e2:26:7d:43:b3:
42:16:85:c7:e3:d7:95:73:50:b8:71:b9:af:ce:31:
12:8c:b4:60:1e:69:6e:66:a2:e2:20:39:4f:81:8c:
72:12:2e:67:9b:d8:18:a3:aa:fd:1a:7e:7d:fb:a0:
38:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:90:0D:D9:58:B7:3E:3E:9D:BD:EA:28:5A:58:2C:9E:5C:6C:C5:20
X509v3 Authority Key Identifier:
keyid:96:8A:17:E1:61:96:BB:7A:86:71:8E:6B:2B:D6:A0:7E:37:B4:0C:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/looX4WGWu3qGcY5rK9agfje0DGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/7c97cf-195c-4fc1-95a3-637fa14656de/1/looX4WGWu3qGcY5rK9agfje0DGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/7c97cf-195c-4fc1-95a3-637fa14656de/1/looX4WGWu3qGcY5rK9agfje0DGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:f0:e4:e4:f6:11:66:cd:2c:c1:4a:f3:08:78:54:21:8a:cb:
97:f9:c6:b6:fb:a7:19:90:c2:48:c6:40:3f:10:3a:bd:9a:46:
11:18:82:30:24:a3:65:67:b7:d9:1e:6a:6f:7d:d9:09:36:4f:
0f:15:ac:fb:64:13:41:19:76:26:00:3c:82:5c:5c:e7:e0:2e:
4b:99:61:ad:2c:9a:76:79:fd:8e:e7:7d:61:f1:a5:4e:95:db:
79:db:86:c8:4b:8b:2f:7b:4a:58:ab:99:ba:58:5f:33:d4:87:
0e:84:a1:23:cc:1f:7f:a9:c9:3e:6f:71:d0:ab:99:cc:57:46:
90:e6:3d:69:c7:e0:e6:be:02:99:5c:19:55:30:70:fa:bb:54:
1a:0b:6f:ce:7a:15:14:63:87:49:4d:5c:80:47:89:ba:8b:46:
7f:a8:7d:be:da:a6:e0:29:e4:5d:5e:2b:78:9e:94:61:d4:9c:
8d:da:7f:e5:a1:4f:30:31:de:81:bc:90:ee:3e:94:0e:b2:34:
1a:1c:c0:15:63:d9:08:0e:b3:7b:7b:9a:6a:f8:3a:b3:e8:34:
25:13:14:ad:a5:d5:1e:4a:e4:86:8d:a4:f9:10:e0:ca:49:3c:
58:72:c9:31:ed:54:d3:cf:7f:49:14:f4:72:3a:f0:2e:37:92:
2e:0b:27:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76xJPOfwaZ3/AivKYNWDKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2OGExN2UxNjE5NmJiN2E4NjcxOGU2YjJiZDZhMDdlMzdi
NDBjNjUwHhcNMjUxMDE5MTAwMTUwWhcNMjUxMDIwMTAwMTUwWjAzMTEwLwYDVQQD
EyhjZTkwMGRkOTU4YjczZTNlOWRiZGVhMjg1YTU4MmM5ZTVjNmNjNTIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu54ClnKeStbxhzTT09taXaJwvD9m
axieD5tBOnJcX3OLcsR3PI8C43wHRTQnGi8mVE+9OsAUJkoMSJ5gYlWtfop+g0T0
X5BUuQ0hH0YQS7OG1XKJA8I8ByJipYE6WjxNBYfIU+kq8lBGBZbtXKwR0v6197F/
YaJ/DgdYUKg/8/QSIlFgOvfTvgg28089gtkwTVl2Bri8VnrV9hGnPxFawUt6YPIA
opnADjKuwhatd1zkAu2IKyrDerJCFtIOylp/xpCQscLKBBYTwQc/4iZ9Q7NCFoXH
49eVc1C4cbmvzjESjLRgHmluZqLiIDlPgYxyEi5nm9gYo6r9Gn59+6A4cwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM6QDdlYtz4+nb3qKFpYLJ5cbMUgMB8GA1UdIwQY
MBaAFJaKF+Fhlrt6hnGOayvWoH43tAxlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbG9vWDRXR1d1M3FHY1k1cks5YWdmamUwREdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS83Yzk3Y2YtMTk1Yy00ZmMxLTk1YTMt
NjM3ZmExNDY1NmRlLzEvbG9vWDRXR1d1M3FHY1k1cks5YWdmamUwREdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS83Yzk3Y2YtMTk1Yy00ZmMxLTk1YTMtNjM3ZmExNDY1NmRl
LzEvbG9vWDRXR1d1M3FHY1k1cks5YWdmamUwREdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlPDk5PYR
Zs0swUrzCHhUIYrLl/nGtvunGZDCSMZAPxA6vZpGERiCMCSjZWe32R5qb33ZCTZP
DxWs+2QTQRl2JgA8glxc5+AuS5lhrSyadnn9jud9YfGlTpXbeduGyEuLL3tKWKuZ
ulhfM9SHDoShI8wff6nJPm9x0KuZzFdGkOY9acfg5r4CmVwZVTBw+rtUGgtvznoV
FGOHSU1cgEeJuotGf6h9vtqm4CnkXV4reJ6UYdScjdp/5aFPMDHegbyQ7j6UDrI0
GhzAFWPZCA6ze3uaavg6s+g0JRMUraXVHkrkho2k+RDgykk8WHLJMe1U089/SRT0
cjrwLjeSLgsnQA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:44 2025 by rpki-client