Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/d520db-bdf8-4f27-8dff-8c130e6841db/1/LOKZUFiz3prtI6Yff7e1t7GTmEo.mft
File: LOKZUFiz3prtI6Yff7e1t7GTmEo.mft (raw, json)
Hash identifier: sPtqaZ2oojmou2/8JoMCrX1QC5QsFWdUKzgi/SSdVYw=
Subject key identifier: AD:B6:B0:77:08:30:BA:F1:7B:8E:DD:5F:78:63:1D:1E:4D:CA:5B:E1
Authority key identifier: 2C:E2:99:50:58:B3:DE:9A:ED:23:A6:1F:7F:B7:B5:B7:B1:93:98:4A
Certificate issuer: /CN=2ce2995058b3de9aed23a61f7fb7b5b7b193984a
Certificate serial: 0199FCC6ACA2F726A027E4B729724B92E857
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LOKZUFiz3prtI6Yff7e1t7GTmEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/d520db-bdf8-4f27-8dff-8c130e6841db/1/LOKZUFiz3prtI6Yff7e1t7GTmEo.mft
Manifest number: 0DD9
Signing time: Sun 19 Oct 2025 14:01:42 +0000
Manifest this update: Sun 19 Oct 2025 14:01:42 +0000
Manifest next update: Mon 20 Oct 2025 14:01:42 +0000
Files and hashes: 1: 7x1Ss4505QNa0fMVELtO8LmLJeM.roa (hash: 9SZiDlSiFrfDTptEJc86ZTB/oJuky1dBcaDe8vDIhaU=)
2: LOKZUFiz3prtI6Yff7e1t7GTmEo.crl (hash: 2mBxMGhucExUAFu+M0Tde4F803JpPPN8aCOFI8bNsaE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/d520db-bdf8-4f27-8dff-8c130e6841db/1/LOKZUFiz3prtI6Yff7e1t7GTmEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/d520db-bdf8-4f27-8dff-8c130e6841db/1/LOKZUFiz3prtI6Yff7e1t7GTmEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/LOKZUFiz3prtI6Yff7e1t7GTmEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:ac:a2:f7:26:a0:27:e4:b7:29:72:4b:92:e8:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ce2995058b3de9aed23a61f7fb7b5b7b193984a
Validity
Not Before: Oct 19 14:01:42 2025 GMT
Not After : Oct 20 14:01:42 2025 GMT
Subject: CN=adb6b0770830baf17b8edd5f78631d1e4dca5be1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b7:b9:64:9d:ea:87:f2:f8:66:b2:a9:b6:dd:
f4:70:3a:d6:3e:21:24:75:b0:50:87:a3:7c:39:75:
73:cc:10:d1:ef:17:0b:fd:61:69:a1:3d:83:68:d2:
9e:a5:32:a1:ec:06:09:99:d2:4b:d9:29:83:44:8d:
0f:22:96:bc:d5:c8:93:ec:e0:99:2b:ee:f9:31:6c:
7b:ed:f6:09:f0:2e:d9:fd:65:36:ed:96:58:2f:12:
3a:f7:2b:c8:6e:67:dc:4f:95:c9:c6:55:86:97:12:
8d:3a:0a:54:7c:ff:29:fc:b8:50:26:59:67:6d:1f:
0e:0f:e3:a0:6b:5f:d0:f2:c8:31:e2:1d:79:f0:1f:
bf:7a:cb:ce:5a:10:54:d6:d5:c5:93:68:76:08:2c:
d7:56:68:03:47:97:08:c2:0d:41:eb:dd:6f:a8:76:
ff:e8:2f:96:30:2e:e8:c1:4e:60:01:6b:02:b1:d4:
3c:43:41:e8:b1:ce:9e:c4:1f:f8:33:59:63:2a:54:
64:aa:a7:16:d0:0e:a4:5c:96:5b:58:b9:5a:6b:fb:
fc:42:56:5b:d6:a0:7d:16:8e:a1:70:55:58:80:e1:
2a:91:0b:34:53:15:cf:17:79:f3:92:4d:df:c3:dc:
7e:fa:e8:b9:aa:ac:43:e2:f5:3b:52:75:a6:75:3e:
57:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:B6:B0:77:08:30:BA:F1:7B:8E:DD:5F:78:63:1D:1E:4D:CA:5B:E1
X509v3 Authority Key Identifier:
keyid:2C:E2:99:50:58:B3:DE:9A:ED:23:A6:1F:7F:B7:B5:B7:B1:93:98:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LOKZUFiz3prtI6Yff7e1t7GTmEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/d520db-bdf8-4f27-8dff-8c130e6841db/1/LOKZUFiz3prtI6Yff7e1t7GTmEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/d520db-bdf8-4f27-8dff-8c130e6841db/1/LOKZUFiz3prtI6Yff7e1t7GTmEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:39:b2:92:c8:b1:d0:e5:0f:ba:29:2a:3f:75:24:10:04:eb:
0b:28:50:ad:a6:12:94:75:67:33:3a:6b:2e:66:cf:e1:26:25:
ba:f7:a3:be:ef:51:d9:46:1e:03:59:c9:2d:98:68:77:b5:d9:
b4:ca:0d:83:86:4d:3c:db:7f:c7:9d:99:7c:ed:fe:ba:91:42:
2b:38:27:c6:4d:5a:14:3b:db:f6:18:90:58:58:50:39:23:fd:
a5:71:e4:8c:30:3e:53:f2:d9:38:89:25:fc:07:54:86:d2:6d:
2a:bd:4a:e1:06:42:45:28:e9:ac:68:c1:9d:25:5e:42:fb:54:
3f:8d:56:37:a9:6c:b0:e7:62:02:c0:80:4e:44:c9:c1:59:8e:
ba:3a:ca:03:80:d2:b0:12:e1:91:78:c9:b9:e3:d0:d6:aa:88:
d2:a3:0e:cd:2a:c6:a1:d3:0a:59:94:43:75:c9:7b:15:d9:81:
32:65:17:1c:82:e1:40:b9:05:fd:51:00:78:f2:1b:7a:86:b8:
44:d2:14:f5:f0:23:c6:5e:c3:78:9b:b2:e0:15:ac:45:c7:50:
4f:b8:ff:9e:3a:e6:a9:7a:55:c7:2d:93:5e:96:d3:56:cb:62:
63:cd:01:8e:e4:76:1f:21:8a:5a:70:98:45:86:70:18:a9:98:
7c:68:4f:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:51 2025 by rpki-client