Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/LoXNafYRaXriRpasdl1Wt13406E.mft
File: LoXNafYRaXriRpasdl1Wt13406E.mft (raw, json)
Hash identifier: gQyfspWJg981hw3WhWYIePoDXZevUgt3qsJRwSiLo9k=
Subject key identifier: D0:B6:77:78:EE:F3:BA:7C:C6:7F:0C:62:82:F9:D7:21:37:D1:6C:DA
Authority key identifier: 2E:85:CD:69:F6:11:69:7A:E2:46:96:AC:76:5D:56:B7:5D:F8:D3:A1
Certificate issuer: /CN=2e85cd69f611697ae24696ac765d56b75df8d3a1
Certificate serial: 01984106D03EE37DF4F47584B5EF135CA80A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LoXNafYRaXriRpasdl1Wt13406E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/LoXNafYRaXriRpasdl1Wt13406E.mft
Manifest number: 0512
Signing time: Fri 25 Jul 2025 10:00:22 +0000
Manifest this update: Fri 25 Jul 2025 10:00:22 +0000
Manifest next update: Sat 26 Jul 2025 10:00:22 +0000
Files and hashes: 1: LoXNafYRaXriRpasdl1Wt13406E.crl (hash: RL1ocxMM3nGyTy8iECyrpML105yHqKiWJLytXXgxuQk=)
2: V4UHEu5lFuhdZwHH6lxxX4Rsnp4.roa (hash: QxXsgkZ9Y9z5B4JIZIQ9pTgrtbYM89E088MqJxxgyOE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/LoXNafYRaXriRpasdl1Wt13406E.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/LoXNafYRaXriRpasdl1Wt13406E.mft
rsync://rpki.ripe.net/repository/DEFAULT/LoXNafYRaXriRpasdl1Wt13406E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:41:06:d0:3e:e3:7d:f4:f4:75:84:b5:ef:13:5c:a8:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e85cd69f611697ae24696ac765d56b75df8d3a1
Validity
Not Before: Jul 25 10:00:22 2025 GMT
Not After : Jul 26 10:00:22 2025 GMT
Subject: CN=d0b67778eef3ba7cc67f0c6282f9d72137d16cda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:8c:51:a9:d7:4f:9f:e6:a4:47:af:ef:52:55:
8d:2c:11:8e:0b:0f:da:2d:63:b7:f5:42:81:46:f0:
0c:48:ed:9b:fe:db:fd:a0:c3:6b:53:e5:ac:aa:d5:
ae:10:e5:fe:a5:89:77:b1:36:2e:da:71:36:ce:0a:
5f:ae:fe:12:f1:38:02:a5:fa:d5:5f:1a:be:28:39:
21:cf:12:a2:ef:a7:fb:f2:3c:34:79:a6:9f:0c:88:
db:14:0c:e4:fe:1b:06:08:df:f3:32:b2:3f:10:d7:
e0:74:ce:3f:e2:4f:ec:bb:af:1c:a7:e6:1d:27:ba:
1e:e3:d4:3d:f2:ca:39:0a:b0:ce:19:a9:dd:d0:26:
59:bf:1c:35:dc:2d:fb:a2:8b:80:8a:0e:b8:fa:87:
77:1d:9c:52:fa:da:34:f8:5a:8b:46:23:1e:44:c7:
26:b7:5c:3c:96:a2:d3:63:35:6d:16:37:c4:8c:94:
90:99:01:58:84:fc:96:cf:72:e0:47:ba:aa:d2:b3:
2c:d9:11:a6:19:ef:15:17:66:24:2b:fd:4f:9f:fe:
a1:4b:8a:f7:a1:08:b1:3b:6b:59:5e:f3:fd:ad:54:
7e:60:66:0e:2c:d4:25:61:dd:1e:46:d3:74:de:5c:
a4:1d:e3:0e:de:f5:cb:c1:b1:47:30:8d:5c:9a:55:
dd:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:B6:77:78:EE:F3:BA:7C:C6:7F:0C:62:82:F9:D7:21:37:D1:6C:DA
X509v3 Authority Key Identifier:
keyid:2E:85:CD:69:F6:11:69:7A:E2:46:96:AC:76:5D:56:B7:5D:F8:D3:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoXNafYRaXriRpasdl1Wt13406E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/LoXNafYRaXriRpasdl1Wt13406E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/LoXNafYRaXriRpasdl1Wt13406E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:04:aa:6d:53:b6:ed:42:34:c4:11:79:4c:57:cb:0a:2e:99:
98:da:0c:8d:65:17:43:98:8a:e7:99:8f:5d:82:eb:61:fc:88:
04:66:08:84:97:68:ee:8e:6c:f0:5d:ba:d4:ae:b5:5b:ba:72:
93:b7:20:11:a0:83:a4:a3:a3:cc:ab:f8:44:3a:40:5c:e0:08:
4f:61:f8:9d:26:d3:c5:c5:3a:8b:b8:b4:d4:6c:00:96:b2:e9:
22:ba:33:a8:98:03:31:2e:cf:9d:1a:22:57:dc:4e:5d:fe:e7:
18:8b:dc:d5:36:20:9f:7e:e5:c5:ac:52:75:f7:17:a0:8a:cb:
43:64:82:87:ca:60:ff:16:46:e1:d8:37:4d:1f:f1:9c:16:62:
96:42:7d:1c:b2:1c:c5:93:67:31:fd:e3:24:ec:fa:8e:00:24:
56:e0:63:83:ee:12:dc:e1:f2:0e:d3:b7:15:a7:cd:c3:23:3d:
18:75:b2:30:e1:61:dd:69:5d:25:e9:c6:9c:ad:ab:39:da:2d:
48:04:f2:ee:93:df:3c:e0:c8:9e:a5:58:a0:65:e3:ac:6b:65:
fb:ca:ec:fa:63:bc:98:5f:e1:0b:f0:87:72:dd:1d:8b:46:39:
d8:42:07:30:42:bd:0a:2c:eb:72:bb:a3:c2:cd:d6:c0:55:29:
ad:d5:fb:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhBBtA+43309HWEte8TXKgKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlODVjZDY5ZjYxMTY5N2FlMjQ2OTZhYzc2NWQ1NmI3NWRm
OGQzYTEwHhcNMjUwNzI1MTAwMDIyWhcNMjUwNzI2MTAwMDIyWjAzMTEwLwYDVQQD
EyhkMGI2Nzc3OGVlZjNiYTdjYzY3ZjBjNjI4MmY5ZDcyMTM3ZDE2Y2RhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzIxRqddPn+akR6/vUlWNLBGOCw/a
LWO39UKBRvAMSO2b/tv9oMNrU+WsqtWuEOX+pYl3sTYu2nE2zgpfrv4S8TgCpfrV
Xxq+KDkhzxKi76f78jw0eaafDIjbFAzk/hsGCN/zMrI/ENfgdM4/4k/su68cp+Yd
J7oe49Q98so5CrDOGand0CZZvxw13C37oouAig64+od3HZxS+to0+FqLRiMeRMcm
t1w8lqLTYzVtFjfEjJSQmQFYhPyWz3LgR7qq0rMs2RGmGe8VF2YkK/1Pn/6hS4r3
oQixO2tZXvP9rVR+YGYOLNQlYd0eRtN03lykHeMO3vXLwbFHMI1cmlXdbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNC2d3ju87p8xn8MYoL51yE30WzaMB8GA1UdIwQY
MBaAFC6FzWn2EWl64kaWrHZdVrdd+NOhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTG9YTmFmWVJhWHJpUnBhc2RsMVd0MTM0MDZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy82NTA0MzYtNTQ5OC00NGRiLWE4OWEt
Y2ZlMzk3ZGZiNWM0LzEvTG9YTmFmWVJhWHJpUnBhc2RsMVd0MTM0MDZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy82NTA0MzYtNTQ5OC00NGRiLWE4OWEtY2ZlMzk3ZGZiNWM0
LzEvTG9YTmFmWVJhWHJpUnBhc2RsMVd0MTM0MDZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwwSqbVO2
7UI0xBF5TFfLCi6ZmNoMjWUXQ5iK55mPXYLrYfyIBGYIhJdo7o5s8F261K61W7py
k7cgEaCDpKOjzKv4RDpAXOAIT2H4nSbTxcU6i7i01GwAlrLpIrozqJgDMS7PnRoi
V9xOXf7nGIvc1TYgn37lxaxSdfcXoIrLQ2SCh8pg/xZG4dg3TR/xnBZilkJ9HLIc
xZNnMf3jJOz6jgAkVuBjg+4S3OHyDtO3FafNwyM9GHWyMOFh3WldJenGnK2rOdot
SATy7pPfPODInqVYoGXjrGtl+8rs+mO8mF/hC/CHct0di0Y52EIHMEK9Cizrcruj
ws3WwFUprdX7Rw==
-----END CERTIFICATE-----
Generated at Fri Jul 25 12:43:02 2025 by rpki-client