Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/LoOL9dPe_8At-hhOTw6FEVNeUX0.mft
File: LoOL9dPe_8At-hhOTw6FEVNeUX0.mft (raw, json)
Hash identifier: p5Sb2Zayh+fjtEPBQeWgCPWegLjQ9uzdm3H+XsBNnGE=
Subject key identifier: 58:D6:88:B9:16:8C:D1:EA:E0:E5:3B:F8:B0:1C:E5:1B:55:05:FE:69
Authority key identifier: 2E:83:8B:F5:D3:DE:FF:C0:2D:FA:18:4E:4F:0E:85:11:53:5E:51:7D
Certificate issuer: /CN=2e838bf5d3deffc02dfa184e4f0e8511535e517d
Certificate serial: 0199FF5969949DD9AD4FFB0F24A1375DE109
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LoOL9dPe_8At-hhOTw6FEVNeUX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/LoOL9dPe_8At-hhOTw6FEVNeUX0.mft
Manifest number: 06C9
Signing time: Mon 20 Oct 2025 02:01:13 +0000
Manifest this update: Mon 20 Oct 2025 02:01:13 +0000
Manifest next update: Tue 21 Oct 2025 02:01:13 +0000
Files and hashes: 1: LoOL9dPe_8At-hhOTw6FEVNeUX0.crl (hash: sJRSiGb4nwu4KYSL5T5wnRkLa7E/1WM43CF8Ht91tdQ=)
2: S8Gv615Ih2EECVB1a2b3J3u_PZw.roa (hash: QLn7xaZ0/yy3B92jWZmiyfhzxbYSpkw1Q0HqcssnojQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/LoOL9dPe_8At-hhOTw6FEVNeUX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/LoOL9dPe_8At-hhOTw6FEVNeUX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/LoOL9dPe_8At-hhOTw6FEVNeUX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 02:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:69:94:9d:d9:ad:4f:fb:0f:24:a1:37:5d:e1:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e838bf5d3deffc02dfa184e4f0e8511535e517d
Validity
Not Before: Oct 20 02:01:13 2025 GMT
Not After : Oct 21 02:01:13 2025 GMT
Subject: CN=58d688b9168cd1eae0e53bf8b01ce51b5505fe69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:41:6b:5e:cf:72:29:3e:05:d5:85:04:21:92:
7f:30:fd:81:49:bb:69:1a:81:02:58:01:a4:31:a4:
14:69:f7:81:c5:7a:66:61:12:0d:af:b3:ad:88:19:
7e:c0:70:1c:1f:c1:f2:c2:6f:14:5d:be:f2:5b:33:
12:1e:bb:51:c6:6b:f7:ad:0b:a4:40:05:d0:ee:c3:
eb:5e:a1:9f:31:c7:1c:91:5a:1f:a9:34:4c:13:d3:
3b:5b:31:b2:fc:bc:54:a6:48:8b:47:8e:b4:3a:7f:
28:e7:88:db:79:40:8f:d3:eb:3a:ab:54:5e:cb:e9:
ee:4b:f1:db:bb:91:9c:8b:9a:91:d2:98:a1:8f:9c:
e9:c8:0f:d6:fd:11:b5:92:70:a4:1e:82:32:8f:26:
0d:dc:57:c2:5c:73:36:a4:7e:15:27:9c:8f:8e:3d:
5e:27:cd:f9:56:ba:c6:b4:0c:e8:4f:69:ce:1a:41:
8a:79:a9:f7:b4:9f:91:9e:ad:be:a8:9c:f4:5a:8f:
e1:11:8b:95:87:1a:ca:30:34:54:27:f9:4b:fe:5e:
1f:f1:3d:31:70:3a:bf:e8:b9:df:49:b1:21:5f:50:
27:9f:6a:c9:d8:8e:02:35:00:ea:0a:2a:40:68:5a:
8c:dd:ef:ec:49:af:84:9b:38:f1:0d:a2:b0:99:dd:
3d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:D6:88:B9:16:8C:D1:EA:E0:E5:3B:F8:B0:1C:E5:1B:55:05:FE:69
X509v3 Authority Key Identifier:
keyid:2E:83:8B:F5:D3:DE:FF:C0:2D:FA:18:4E:4F:0E:85:11:53:5E:51:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoOL9dPe_8At-hhOTw6FEVNeUX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/LoOL9dPe_8At-hhOTw6FEVNeUX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/LoOL9dPe_8At-hhOTw6FEVNeUX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:3d:fa:6d:84:64:ed:a9:61:42:d6:56:21:f4:60:69:71:af:
16:8b:61:87:54:49:a6:74:ff:a0:08:48:a8:f3:92:ea:50:4f:
88:e7:cc:22:a4:70:6e:a1:71:00:12:07:45:8c:95:ac:4c:dd:
d8:f6:f3:08:e8:eb:d8:7c:10:5f:44:cf:f4:71:78:6e:ce:47:
28:8c:74:ef:d4:21:a3:86:25:fd:31:c7:e7:ee:26:a2:3e:33:
af:fa:f0:5c:fa:90:5e:d7:37:57:e4:03:b4:dd:bd:b0:44:ba:
a7:bb:4a:6f:e6:9f:01:8a:ad:8d:03:5c:09:7b:95:ed:c2:e7:
8d:29:95:2f:2e:06:c6:6a:11:e5:8e:d4:9e:44:2d:67:0a:b7:
d9:7c:7a:5d:f4:e1:17:9a:5b:fc:d9:fe:2b:bc:30:18:ff:99:
0f:12:10:3e:3e:fd:cf:c8:8d:a1:6e:98:09:1b:5b:20:2e:51:
7a:f0:68:d3:98:32:04:89:e1:07:10:18:b9:70:31:4b:09:f9:
3d:15:36:12:52:fd:de:5c:24:6a:62:04:f7:a1:96:b1:61:0e:
a6:2d:f8:e8:c7:f6:15:65:51:ff:56:59:b4:cd:7e:3e:54:28:
54:15:f5:96:d3:2c:d3:12:29:75:ca:7c:c7:ca:73:dd:94:f1:
80:c4:3f:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:08:04 2025 by rpki-client