Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/2c054e-cef0-4af6-980e-8babac8a465a/1/LOlVOpsse8oStoG8CmMF4z-2QMg.mft
File: LOlVOpsse8oStoG8CmMF4z-2QMg.mft (raw, json)
Hash identifier: hNodyRcbChSJmI7m4IUDEeQ2v4gSsSRcspT947Gi3XM=
Subject key identifier: 44:5D:1F:E4:B8:C9:95:27:D0:57:52:F5:C3:5C:47:C5:1B:8D:20:CF
Authority key identifier: 2C:E9:55:3A:9B:2C:7B:CA:12:B6:81:BC:0A:63:05:E3:3F:B6:40:C8
Certificate issuer: /CN=2ce9553a9b2c7bca12b681bc0a6305e33fb640c8
Certificate serial: 019A0110C6AB89E9D5B16155712208B0A116
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LOlVOpsse8oStoG8CmMF4z-2QMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/2c054e-cef0-4af6-980e-8babac8a465a/1/LOlVOpsse8oStoG8CmMF4z-2QMg.mft
Manifest number: 0E60
Signing time: Mon 20 Oct 2025 10:01:07 +0000
Manifest this update: Mon 20 Oct 2025 10:01:07 +0000
Manifest next update: Tue 21 Oct 2025 10:01:07 +0000
Files and hashes: 1: LOlVOpsse8oStoG8CmMF4z-2QMg.crl (hash: DRq9FZV1VjQZrTzNIyMYGfGUQjHBQmMm2CtB31AmI6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/2c054e-cef0-4af6-980e-8babac8a465a/1/LOlVOpsse8oStoG8CmMF4z-2QMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/2c054e-cef0-4af6-980e-8babac8a465a/1/LOlVOpsse8oStoG8CmMF4z-2QMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LOlVOpsse8oStoG8CmMF4z-2QMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:10:c6:ab:89:e9:d5:b1:61:55:71:22:08:b0:a1:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ce9553a9b2c7bca12b681bc0a6305e33fb640c8
Validity
Not Before: Oct 20 10:01:07 2025 GMT
Not After : Oct 21 10:01:07 2025 GMT
Subject: CN=445d1fe4b8c99527d05752f5c35c47c51b8d20cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:f1:80:54:a0:1b:0d:0f:eb:10:e5:04:95:40:
11:b9:3a:48:b6:c3:46:81:d5:89:17:40:c2:74:84:
af:29:76:79:d5:08:9e:2e:7c:99:ea:e5:75:99:d7:
75:f8:95:4c:29:ef:a9:87:57:61:f4:35:de:a4:b5:
2f:cb:dd:c6:7e:53:dd:91:7b:81:4d:29:59:e1:11:
ce:da:64:e6:0b:61:13:a0:04:94:99:43:ad:24:39:
be:75:b7:00:1e:bd:36:e7:03:be:c8:47:63:57:38:
88:45:96:58:53:fe:3a:ed:26:c5:10:e1:d5:98:f8:
a1:59:21:65:5b:ee:5a:3b:1e:68:fb:51:01:74:9e:
fe:c5:83:94:37:15:f6:97:4e:f8:b4:48:5c:a4:91:
c6:5c:b3:76:32:1c:4d:85:f3:4b:df:52:5a:de:85:
40:9d:f6:82:8b:ed:f9:d0:6e:0b:08:b8:e7:39:aa:
92:b1:f8:58:11:21:71:16:5f:24:65:07:3c:36:2d:
4f:37:df:6f:82:2c:4a:76:90:81:3d:4a:cd:05:a2:
c6:d8:50:e3:db:16:dc:87:71:88:1a:36:8e:99:bc:
5b:7b:1b:14:0e:0e:f7:25:ab:b0:1c:fe:e7:95:56:
fe:39:82:4b:a2:a4:01:78:f7:d3:ec:fa:b7:91:b0:
b4:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:5D:1F:E4:B8:C9:95:27:D0:57:52:F5:C3:5C:47:C5:1B:8D:20:CF
X509v3 Authority Key Identifier:
keyid:2C:E9:55:3A:9B:2C:7B:CA:12:B6:81:BC:0A:63:05:E3:3F:B6:40:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LOlVOpsse8oStoG8CmMF4z-2QMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/2c054e-cef0-4af6-980e-8babac8a465a/1/LOlVOpsse8oStoG8CmMF4z-2QMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/2c054e-cef0-4af6-980e-8babac8a465a/1/LOlVOpsse8oStoG8CmMF4z-2QMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:c0:41:76:a9:f9:3f:f8:e3:a6:76:98:08:1f:60:17:1a:a3:
60:17:2c:72:2b:75:5d:da:57:e9:07:34:2c:6e:20:a7:f2:ad:
34:6d:df:31:fd:e5:98:78:1b:f0:5b:17:e7:db:26:d3:1d:08:
ca:32:21:c6:86:fd:1e:92:f4:f6:30:f6:5e:a4:f0:f1:12:79:
28:11:73:f9:8e:4e:59:77:7b:4b:7a:78:13:92:ba:5e:7e:61:
57:64:e7:b6:87:2a:a2:d1:f5:bf:7d:46:a9:7f:b8:7e:e4:db:
db:d3:3a:0e:3c:25:cb:13:a5:20:88:2d:fe:ba:6e:47:08:56:
ed:b7:71:44:fb:17:93:17:34:3c:6e:23:5b:95:be:76:eb:f2:
9b:30:71:bc:53:de:18:63:f5:77:b3:98:0b:08:5c:34:33:55:
cd:cd:bb:3c:7b:ea:21:91:c7:b6:3a:fd:4e:13:7e:01:91:15:
ad:0b:6f:22:a4:a5:7d:32:58:53:fd:0b:1e:4f:fa:03:20:16:
10:28:e1:36:ad:4f:b1:bc:03:ea:e0:e8:1e:b4:70:4f:ec:a6:
39:2a:f6:e3:25:2c:21:9c:5a:7a:81:69:6b:69:92:0a:cc:c8:
73:28:c9:3d:8c:88:85:3e:5c:2a:20:e7:3d:b7:27:95:62:3e:
b0:77:25:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoBEMarienVsWFVcSIIsKEWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjZTk1NTNhOWIyYzdiY2ExMmI2ODFiYzBhNjMwNWUzM2Zi
NjQwYzgwHhcNMjUxMDIwMTAwMTA3WhcNMjUxMDIxMTAwMTA3WjAzMTEwLwYDVQQD
Eyg0NDVkMWZlNGI4Yzk5NTI3ZDA1NzUyZjVjMzVjNDdjNTFiOGQyMGNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8fGAVKAbDQ/rEOUElUARuTpItsNG
gdWJF0DCdISvKXZ51QieLnyZ6uV1mdd1+JVMKe+ph1dh9DXepLUvy93GflPdkXuB
TSlZ4RHO2mTmC2EToASUmUOtJDm+dbcAHr025wO+yEdjVziIRZZYU/467SbFEOHV
mPihWSFlW+5aOx5o+1EBdJ7+xYOUNxX2l074tEhcpJHGXLN2MhxNhfNL31Ja3oVA
nfaCi+350G4LCLjnOaqSsfhYESFxFl8kZQc8Ni1PN99vgixKdpCBPUrNBaLG2FDj
2xbch3GIGjaOmbxbexsUDg73JauwHP7nlVb+OYJLoqQBePfT7Pq3kbC0cQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFERdH+S4yZUn0FdS9cNcR8UbjSDPMB8GA1UdIwQY
MBaAFCzpVTqbLHvKEraBvApjBeM/tkDIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTE9sVk9wc3NlOG9TdG9HOENtTUY0ei0yUU1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi8yYzA1NGUtY2VmMC00YWY2LTk4MGUt
OGJhYmFjOGE0NjVhLzEvTE9sVk9wc3NlOG9TdG9HOENtTUY0ei0yUU1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi8yYzA1NGUtY2VmMC00YWY2LTk4MGUtOGJhYmFjOGE0NjVh
LzEvTE9sVk9wc3NlOG9TdG9HOENtTUY0ei0yUU1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPsBBdqn5
P/jjpnaYCB9gFxqjYBcscit1XdpX6Qc0LG4gp/KtNG3fMf3lmHgb8FsX59sm0x0I
yjIhxob9HpL09jD2XqTw8RJ5KBFz+Y5OWXd7S3p4E5K6Xn5hV2TntocqotH1v31G
qX+4fuTb29M6DjwlyxOlIIgt/rpuRwhW7bdxRPsXkxc0PG4jW5W+duvymzBxvFPe
GGP1d7OYCwhcNDNVzc27PHvqIZHHtjr9ThN+AZEVrQtvIqSlfTJYU/0LHk/6AyAW
ECjhNq1PsbwD6uDoHrRwT+ymOSr24yUsIZxaeoFpa2mSCszIcyjJPYyIhT5cKiDn
PbcnlWI+sHclcg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 14:32:43 2025 by rpki-client