Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/dddf3d-e887-4273-bb7b-681fa0d99821/1/lo-QT-7x95FiuCGaikg7hY9UC_o.mft
File: lo-QT-7x95FiuCGaikg7hY9UC_o.mft (raw, json)
Hash identifier: q6SVYzMIlyBuLfbZlNbyWrpQSo6pNJr9zKSUl+hM4mM=
Subject key identifier: BF:F2:17:B0:33:62:15:0F:5E:F5:CE:8E:F2:BE:A5:55:D3:6C:6F:14
Authority key identifier: 96:8F:90:4F:EE:F1:F7:91:62:B8:21:9A:8A:48:3B:85:8F:54:0B:FA
Certificate issuer: /CN=968f904feef1f79162b8219a8a483b858f540bfa
Certificate serial: 0199FBEAFA8E2BC92B35598E7371705DC872
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lo-QT-7x95FiuCGaikg7hY9UC_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/dddf3d-e887-4273-bb7b-681fa0d99821/1/lo-QT-7x95FiuCGaikg7hY9UC_o.mft
Manifest number: 16DE
Signing time: Sun 19 Oct 2025 10:01:44 +0000
Manifest this update: Sun 19 Oct 2025 10:01:44 +0000
Manifest next update: Mon 20 Oct 2025 10:01:44 +0000
Files and hashes: 1: lo-QT-7x95FiuCGaikg7hY9UC_o.crl (hash: 6ZbZE/xvtXqkj3RxUCm33lnHAFYxzwFLTFx4gR1ApLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/dddf3d-e887-4273-bb7b-681fa0d99821/1/lo-QT-7x95FiuCGaikg7hY9UC_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/dddf3d-e887-4273-bb7b-681fa0d99821/1/lo-QT-7x95FiuCGaikg7hY9UC_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/lo-QT-7x95FiuCGaikg7hY9UC_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:fa:8e:2b:c9:2b:35:59:8e:73:71:70:5d:c8:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=968f904feef1f79162b8219a8a483b858f540bfa
Validity
Not Before: Oct 19 10:01:44 2025 GMT
Not After : Oct 20 10:01:44 2025 GMT
Subject: CN=bff217b03362150f5ef5ce8ef2bea555d36c6f14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:29:15:b3:ff:93:95:4f:ce:13:6a:94:b8:3a:
13:e5:00:34:9a:f9:63:9b:be:4d:33:40:b0:57:a7:
5d:be:80:55:4c:5b:47:e8:2d:a8:57:4f:42:16:4f:
52:7c:86:9f:21:9b:83:2d:01:f7:0c:e1:33:29:b6:
a6:41:a4:e6:16:c7:63:71:e1:e6:8f:b4:f3:16:62:
24:fc:b4:16:bb:15:d5:d3:47:5b:c8:d0:26:fc:b1:
2e:90:42:77:8d:0b:6b:c2:de:33:7f:09:89:42:2c:
26:45:23:ae:dd:0d:e7:79:f4:1a:df:57:80:a4:ee:
b5:02:a3:d9:7e:a9:98:6a:b8:d5:f9:d6:42:af:1a:
9b:eb:82:5b:7f:c0:4b:53:d0:b2:c8:7a:43:23:9e:
27:8c:56:d3:4b:ae:5e:a8:1b:96:09:5f:ec:64:20:
71:9c:f2:15:cd:ca:f4:17:2d:aa:ca:a1:9b:3f:3f:
12:1a:51:3a:c0:fd:33:7a:4c:39:d7:d7:02:59:17:
b3:8d:4d:31:21:eb:f1:f6:be:e4:a9:ea:64:e6:8c:
60:3b:1c:c8:20:85:aa:01:85:bd:8d:5e:b3:3a:c1:
cc:cd:9a:bc:ca:a1:46:48:0d:4c:3f:e3:ba:dd:46:
30:0a:38:38:79:e0:ef:cb:de:48:7f:07:3b:2f:82:
c2:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:F2:17:B0:33:62:15:0F:5E:F5:CE:8E:F2:BE:A5:55:D3:6C:6F:14
X509v3 Authority Key Identifier:
keyid:96:8F:90:4F:EE:F1:F7:91:62:B8:21:9A:8A:48:3B:85:8F:54:0B:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lo-QT-7x95FiuCGaikg7hY9UC_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/dddf3d-e887-4273-bb7b-681fa0d99821/1/lo-QT-7x95FiuCGaikg7hY9UC_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/dddf3d-e887-4273-bb7b-681fa0d99821/1/lo-QT-7x95FiuCGaikg7hY9UC_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:b9:71:88:f6:08:ba:e1:db:94:74:36:97:fb:64:a1:f7:97:
2f:a0:d8:9e:ea:25:4c:72:8c:2d:bc:38:52:fe:09:bc:0c:c4:
57:2f:c6:21:f8:e2:c2:dc:1b:9a:94:93:34:d9:b8:49:7c:48:
9d:5f:58:25:c4:bf:d1:eb:6d:8b:b1:82:70:ce:79:c1:b4:c0:
6f:c8:ac:db:41:c7:d7:1e:6b:6a:2b:db:0c:e6:28:ef:8a:04:
79:75:60:31:e3:5a:24:e2:de:fc:93:7d:51:0e:2d:6b:c4:fe:
6b:60:fe:da:b1:db:18:85:0f:38:eb:1a:04:49:a4:0b:31:f2:
51:67:db:88:d2:65:d0:0e:dd:f3:ea:52:5f:a5:ce:ea:03:ec:
1d:20:96:99:8e:1b:55:4a:9f:ea:6e:98:3d:27:3f:d1:0f:46:
7b:33:d3:b2:eb:cc:56:e1:56:d0:d9:9c:8c:bf:58:94:bf:3c:
7f:e7:2f:43:5f:fd:a2:8b:91:e2:60:f2:92:32:b6:85:44:f6:
b8:21:66:8d:13:5e:3b:24:4b:63:b4:40:f0:15:f4:9a:4a:d3:
a1:d8:2a:90:8f:74:fc:c9:4b:dc:f4:d5:cd:87:f8:fa:9f:2e:
ca:49:35:fc:92:fe:73:d6:6a:c4:92:03:5c:33:12:ac:9d:00:
d2:58:04:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:31:18 2025 by rpki-client