Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/8c27aa-b500-4c96-84ec-f8be495252b0/1/LokBk3Q73yTdIsPtbyizAxouyAY.mft
File: LokBk3Q73yTdIsPtbyizAxouyAY.mft (raw, json)
Hash identifier: Z8wjiYXnsSCbIcsqAIGiZf7QvQwW5XwlB6WoK9fd938=
Subject key identifier: 0B:91:26:01:6D:BE:1B:22:C4:DE:15:B3:E1:49:3C:FB:9D:5F:19:13
Authority key identifier: 2E:89:01:93:74:3B:DF:24:DD:22:C3:ED:6F:28:B3:03:1A:2E:C8:06
Certificate issuer: /CN=2e890193743bdf24dd22c3ed6f28b3031a2ec806
Certificate serial: 0199FD348A7E8470B4D75377BFD23509F502
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LokBk3Q73yTdIsPtbyizAxouyAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/8c27aa-b500-4c96-84ec-f8be495252b0/1/LokBk3Q73yTdIsPtbyizAxouyAY.mft
Manifest number: 1270
Signing time: Sun 19 Oct 2025 16:01:42 +0000
Manifest this update: Sun 19 Oct 2025 16:01:42 +0000
Manifest next update: Mon 20 Oct 2025 16:01:42 +0000
Files and hashes: 1: 6EZjDJryRoANWPhlSHpMG7n7IU8.roa (hash: 9isLxzfXlIyOPcXFup6Ou1baZV3mC8KRz9wBcZ1Igfs=)
2: LokBk3Q73yTdIsPtbyizAxouyAY.crl (hash: y9xIC15RUW1fDEv2KJpI6v9fqKGjppXw58LblK7PkXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/8c27aa-b500-4c96-84ec-f8be495252b0/1/LokBk3Q73yTdIsPtbyizAxouyAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/8c27aa-b500-4c96-84ec-f8be495252b0/1/LokBk3Q73yTdIsPtbyizAxouyAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/LokBk3Q73yTdIsPtbyizAxouyAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:8a:7e:84:70:b4:d7:53:77:bf:d2:35:09:f5:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e890193743bdf24dd22c3ed6f28b3031a2ec806
Validity
Not Before: Oct 19 16:01:42 2025 GMT
Not After : Oct 20 16:01:42 2025 GMT
Subject: CN=0b9126016dbe1b22c4de15b3e1493cfb9d5f1913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:43:b3:23:af:91:b4:82:e6:b4:01:97:95:cc:
55:64:1e:69:fd:27:20:81:03:60:fe:41:01:1b:9d:
e3:2a:77:f9:2c:ab:46:73:16:3a:65:01:1d:af:77:
8e:19:97:f7:a3:24:c8:03:03:d5:a2:6d:b0:84:1d:
6a:8f:de:16:99:54:16:2a:42:d1:26:63:78:d5:94:
d1:e4:c3:ae:c3:c3:3e:fb:bc:95:77:5a:e7:b1:36:
92:67:4f:56:54:f9:55:da:9e:0a:91:7d:c0:fe:a1:
72:f5:7e:48:81:ee:8e:2e:99:61:f4:8c:ce:a6:90:
43:59:a0:d3:a9:9d:26:62:37:8b:8a:b6:86:a2:b3:
45:12:ba:16:c5:d7:36:49:1e:3c:27:77:e7:f9:9a:
88:d6:96:37:35:18:a6:c7:d2:a4:bc:42:dd:2a:da:
d9:fd:86:71:68:04:c2:9b:41:07:fd:6c:37:8c:21:
23:c8:b4:5b:a4:95:98:eb:a3:55:73:11:74:59:b2:
58:4c:4c:21:15:20:11:75:b7:c1:6c:08:c2:a5:35:
d9:74:28:6b:aa:b5:8e:d9:e0:0e:ed:1c:e9:b9:79:
64:31:92:1c:09:79:70:bc:a6:c3:fc:4e:e8:ff:bf:
5d:fe:66:7f:a2:e8:8a:20:84:09:74:71:54:c6:b8:
9d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:91:26:01:6D:BE:1B:22:C4:DE:15:B3:E1:49:3C:FB:9D:5F:19:13
X509v3 Authority Key Identifier:
keyid:2E:89:01:93:74:3B:DF:24:DD:22:C3:ED:6F:28:B3:03:1A:2E:C8:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LokBk3Q73yTdIsPtbyizAxouyAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/8c27aa-b500-4c96-84ec-f8be495252b0/1/LokBk3Q73yTdIsPtbyizAxouyAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/8c27aa-b500-4c96-84ec-f8be495252b0/1/LokBk3Q73yTdIsPtbyizAxouyAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:90:92:4d:fc:64:26:6a:76:c4:b2:15:12:a2:d9:e7:85:67:
73:40:b5:87:93:63:77:67:2c:71:07:bc:ef:b4:b7:bb:73:ee:
ad:27:59:1c:2d:87:a8:95:32:8a:57:7a:ba:4d:e2:f7:49:15:
52:ff:99:2e:44:ee:0f:40:c5:80:36:38:28:a3:85:d8:f2:37:
07:36:c7:29:ea:a3:c1:a7:aa:cb:f6:0c:37:0b:2b:f7:ee:7a:
36:13:3b:c3:c7:06:ee:8f:d0:b8:10:9c:3e:2f:49:eb:2e:5e:
01:aa:34:ec:aa:b6:56:7d:59:33:3e:02:28:26:8e:97:68:1c:
4c:da:21:28:b4:cd:67:9d:21:d9:30:7b:35:20:0e:40:56:a2:
7e:8b:c1:83:fb:3c:d7:5e:ab:d5:63:63:8c:12:bb:ff:70:ce:
75:93:2e:bd:31:ac:68:91:5b:ad:53:f7:40:0d:c6:35:16:53:
4b:86:dd:6d:ce:8f:a5:1c:26:9c:aa:c8:72:a1:d0:18:6e:87:
6c:42:a7:7e:2a:b2:61:48:0e:cc:05:a1:8f:ed:cd:17:70:51:
10:b9:ab:2a:70:79:6d:00:0d:7e:ae:b2:23:bd:7a:20:36:9c:
7c:a2:bc:7d:f6:51:cb:9d:23:d1:eb:d6:de:8b:e5:35:0f:17:
48:50:9e:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:13:36 2025 by rpki-client