Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/LOcbH07qAVkkYSX8WumtUaRHks4.mft
File: LOcbH07qAVkkYSX8WumtUaRHks4.mft (raw, json)
Hash identifier: VMGYuLfMUvXQ70F6XHzNG9JzxgzIrni2Xnp2wmioOQU=
Subject key identifier: 73:42:4C:91:E1:C4:26:C8:4B:0B:6C:25:75:DF:4E:65:C3:F6:BB:CB
Authority key identifier: 2C:E7:1B:1F:4E:EA:01:59:24:61:25:FC:5A:E9:AD:51:A4:47:92:CE
Certificate issuer: /CN=2ce71b1f4eea0159246125fc5ae9ad51a44792ce
Certificate serial: 019A047ED037EAFC865E31DFEB6F69D7B0F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LOcbH07qAVkkYSX8WumtUaRHks4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/LOcbH07qAVkkYSX8WumtUaRHks4.mft
Manifest number: 16E7
Signing time: Tue 21 Oct 2025 02:00:10 +0000
Manifest this update: Tue 21 Oct 2025 02:00:10 +0000
Manifest next update: Wed 22 Oct 2025 02:00:10 +0000
Files and hashes: 1: BugMD0rfZTTzRv9e3Yc9s1C5qM8.roa (hash: jE01pMhWyEqiVohSbXJF+yf78b2Sf6VXp+Appd2gHuI=)
2: LOcbH07qAVkkYSX8WumtUaRHks4.crl (hash: 4Go+rHHhZtrhM8q3qVEHad7AcjuoZfh60gjDaXe7Ld8=)
3: _1rHHFIhvvb4H2GGBv9RDV7OFzo.roa (hash: ODNNLSo5C2C5zLz79VjHYIX9sjOveSMDElEuw+M5H2w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/LOcbH07qAVkkYSX8WumtUaRHks4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/LOcbH07qAVkkYSX8WumtUaRHks4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LOcbH07qAVkkYSX8WumtUaRHks4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:04:7e:d0:37:ea:fc:86:5e:31:df:eb:6f:69:d7:b0:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ce71b1f4eea0159246125fc5ae9ad51a44792ce
Validity
Not Before: Oct 21 02:00:10 2025 GMT
Not After : Oct 22 02:00:10 2025 GMT
Subject: CN=73424c91e1c426c84b0b6c2575df4e65c3f6bbcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ae:18:d4:49:69:7b:f0:17:38:92:a0:33:31:
11:67:ff:72:76:83:80:6a:3c:31:29:c9:a2:01:de:
44:17:b1:f1:a0:59:02:aa:17:73:7b:ea:68:fd:86:
3c:70:c7:89:76:bd:05:3e:32:85:0a:e6:be:8c:77:
29:10:4e:67:fe:c3:2f:15:8c:94:9e:19:bc:da:c1:
b7:fd:dc:47:a0:c2:c9:21:fb:9f:87:1c:46:d7:ef:
68:a4:f7:0d:2a:d2:2d:eb:b8:de:0a:8c:ea:2e:0e:
e8:25:dd:4f:49:f0:ec:8e:d5:9d:ad:a9:99:9b:cb:
86:f2:62:57:c9:6c:e8:c0:50:c9:2a:ae:ce:d0:3a:
ae:02:d5:66:fe:99:f3:8b:ee:8c:f8:f1:e3:cb:65:
c2:3c:8b:fa:01:31:4c:aa:91:1b:ec:7e:b1:2d:7f:
65:9e:12:30:03:3e:57:0f:b9:7c:58:c3:1b:cc:ff:
57:a8:ef:da:c0:6c:68:e7:e7:e3:dc:22:5b:68:1d:
5b:21:90:20:0a:5f:a9:37:76:08:56:b9:b4:0a:c2:
fe:af:fb:da:4c:b3:0e:b9:25:3c:18:07:3c:b7:70:
96:20:80:b7:c2:7a:74:30:96:08:6a:89:d8:c2:c1:
1a:6e:94:bb:df:4b:4b:ab:28:51:6f:ce:a9:39:c1:
25:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:42:4C:91:E1:C4:26:C8:4B:0B:6C:25:75:DF:4E:65:C3:F6:BB:CB
X509v3 Authority Key Identifier:
keyid:2C:E7:1B:1F:4E:EA:01:59:24:61:25:FC:5A:E9:AD:51:A4:47:92:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LOcbH07qAVkkYSX8WumtUaRHks4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/LOcbH07qAVkkYSX8WumtUaRHks4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/LOcbH07qAVkkYSX8WumtUaRHks4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:82:26:76:20:02:d7:31:b1:04:71:a5:bc:f2:a9:f8:29:07:
38:fc:e7:b6:cf:b4:9f:99:f7:d2:cf:bb:d7:1f:7d:6b:b8:76:
17:d8:8b:08:da:f9:cc:05:c4:2e:36:b4:e2:fb:d9:16:57:d8:
a2:4d:f1:fc:00:2b:eb:d4:13:fd:32:d3:47:43:70:7b:bc:65:
61:74:99:b4:89:6c:8e:10:3e:62:e8:24:a0:fc:29:b6:4d:a4:
a7:9a:01:fe:f2:a2:fa:72:f4:ce:e2:b1:d6:d5:4c:f3:cc:ab:
7b:1b:3d:fb:01:75:01:85:38:ea:dd:74:1d:81:60:49:0a:c0:
b4:57:b5:08:e1:6c:23:fe:d3:24:94:79:6b:3a:48:e9:8f:8b:
dd:41:59:eb:5b:63:63:fb:63:0e:c7:6d:70:2c:78:9a:84:1c:
19:7d:d4:54:7d:e5:70:83:61:d6:a6:67:0e:21:a3:f4:7e:47:
0c:2a:5d:ff:b6:96:c8:d6:4c:1e:19:7c:5f:1a:86:b0:8e:4e:
62:0d:a5:f1:30:ce:6b:8f:cc:1e:89:92:f4:42:87:10:3b:0d:
a4:9c:38:e0:0e:6a:1a:e1:ce:2e:73:7b:a1:c4:c4:04:a4:38:
c6:e8:a3:36:a6:78:b4:f2:ce:ec:22:27:a3:d0:3c:3a:72:07:
e4:df:80:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 09:10:05 2025 by rpki-client