Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/LoXNafYRaXriRpasdl1Wt13406E.mft
File: LoXNafYRaXriRpasdl1Wt13406E.mft (raw, json)
Hash identifier: ThPcrnprsJA+jYxxLpB450PIP65pny2IBM4pKav6sV8=
Subject key identifier: 00:12:79:7F:C7:59:43:D3:C3:2E:3C:32:7A:EA:E6:F4:5E:C2:05:4F
Authority key identifier: 2E:85:CD:69:F6:11:69:7A:E2:46:96:AC:76:5D:56:B7:5D:F8:D3:A1
Certificate issuer: /CN=2e85cd69f611697ae24696ac765d56b75df8d3a1
Certificate serial: 0199FD34631A52573A5EABBB82A15CF9E409
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LoXNafYRaXriRpasdl1Wt13406E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/LoXNafYRaXriRpasdl1Wt13406E.mft
Manifest number: 05F8
Signing time: Sun 19 Oct 2025 16:01:32 +0000
Manifest this update: Sun 19 Oct 2025 16:01:32 +0000
Manifest next update: Mon 20 Oct 2025 16:01:32 +0000
Files and hashes: 1: LoXNafYRaXriRpasdl1Wt13406E.crl (hash: p7h9CxGBMRTTZKSqqO+T2GMaSvLuqPslep4WX2Ptt9g=)
2: V4UHEu5lFuhdZwHH6lxxX4Rsnp4.roa (hash: QxXsgkZ9Y9z5B4JIZIQ9pTgrtbYM89E088MqJxxgyOE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/LoXNafYRaXriRpasdl1Wt13406E.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/LoXNafYRaXriRpasdl1Wt13406E.mft
rsync://rpki.ripe.net/repository/DEFAULT/LoXNafYRaXriRpasdl1Wt13406E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:63:1a:52:57:3a:5e:ab:bb:82:a1:5c:f9:e4:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e85cd69f611697ae24696ac765d56b75df8d3a1
Validity
Not Before: Oct 19 16:01:32 2025 GMT
Not After : Oct 20 16:01:32 2025 GMT
Subject: CN=0012797fc75943d3c32e3c327aeae6f45ec2054f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c1:34:4c:06:45:a4:eb:0d:3f:33:b8:c3:86:
83:ba:7f:bf:60:19:2d:6c:4f:d8:49:f6:fd:5f:6f:
97:e4:27:ad:23:a2:91:d0:9d:20:a5:7b:c7:1a:0c:
a4:67:82:05:d1:3d:02:3d:da:68:3b:2a:f7:46:75:
77:38:11:59:57:c6:07:e2:dd:a7:81:8c:19:53:01:
02:ac:65:e9:26:c7:6a:08:0c:98:e0:42:69:04:8e:
40:97:a3:23:7f:36:38:3e:5c:20:5e:d9:9c:80:68:
75:28:bb:f0:11:63:84:60:35:fe:df:9a:85:c0:d2:
11:32:d2:f5:f5:6d:c6:f8:4a:3a:87:81:96:21:c7:
cd:61:5f:5b:35:e5:c6:6f:ce:bc:ed:90:6b:e5:51:
74:f5:05:af:86:e7:6e:32:10:2b:b9:16:6c:be:bd:
6a:d9:d4:74:a1:e3:ea:27:74:0e:d6:bc:0e:d1:4e:
d7:42:67:0f:6a:51:92:46:13:b4:08:ee:63:3f:66:
e1:d9:ae:35:86:f6:07:87:bb:b2:77:25:f4:85:a1:
24:e2:36:bc:53:c4:c3:b4:2d:84:a0:13:12:06:37:
fd:d4:60:38:6c:78:eb:65:c5:dd:99:ac:1e:e7:10:
34:14:a1:0c:be:f7:5b:20:db:59:41:92:a3:e3:bd:
e9:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:12:79:7F:C7:59:43:D3:C3:2E:3C:32:7A:EA:E6:F4:5E:C2:05:4F
X509v3 Authority Key Identifier:
keyid:2E:85:CD:69:F6:11:69:7A:E2:46:96:AC:76:5D:56:B7:5D:F8:D3:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoXNafYRaXriRpasdl1Wt13406E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/LoXNafYRaXriRpasdl1Wt13406E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/LoXNafYRaXriRpasdl1Wt13406E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:0a:88:5b:d3:7c:a4:07:c5:55:c1:5f:ea:9f:af:59:08:3b:
90:d0:74:fd:1b:78:43:5b:29:43:3c:bf:5a:f5:cf:06:8a:ca:
8a:2e:2c:ac:a2:0b:58:f5:45:93:b5:e1:63:e1:7b:4d:79:80:
bb:17:eb:a0:f7:01:89:b9:14:10:47:4a:15:b7:60:f1:03:16:
a6:61:8e:01:36:4b:31:e9:d7:ef:54:d9:00:cb:3e:fc:df:31:
a9:4c:67:0e:ea:f4:c1:90:b7:b1:18:73:51:cd:17:04:68:6e:
4c:3b:ba:94:e5:c9:39:dd:b1:dc:96:00:31:9e:95:61:40:08:
c9:ea:1e:7b:9a:1e:da:04:64:c7:17:ce:77:ae:4f:db:42:31:
d9:6f:6b:85:1d:02:e2:22:2d:71:7e:8a:d3:74:ad:c8:8d:08:
c4:2b:62:c4:eb:4d:5a:4b:e1:a5:41:94:a3:0d:63:7a:64:b1:
55:39:49:bc:ed:c8:79:52:bf:a0:92:5e:9f:62:24:a5:39:27:
e2:23:ac:13:ee:be:33:7b:d6:3f:0d:e2:ee:1c:91:66:c9:03:
53:b2:39:9d:d1:25:c4:ba:ff:4a:9c:d5:ff:84:07:34:c6:1a:
63:b7:d9:3c:f0:c1:75:3f:06:c7:a3:f7:18:cc:17:99:1e:f9:
48:2e:7b:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:50:00 2025 by rpki-client