Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/LOcbH07qAVkkYSX8WumtUaRHks4.mft
File: LOcbH07qAVkkYSX8WumtUaRHks4.mft (raw, json)
Hash identifier: EztGaPhdlBcUqsy0JyHEBkKvoNbbDdHVrZ3j5a/qLp0=
Subject key identifier: F8:66:79:81:50:28:AB:5B:63:45:88:FB:65:38:6D:91:5A:36:8C:32
Authority key identifier: 2C:E7:1B:1F:4E:EA:01:59:24:61:25:FC:5A:E9:AD:51:A4:47:92:CE
Certificate issuer: /CN=2ce71b1f4eea0159246125fc5ae9ad51a44792ce
Certificate serial: 019A23653F1F5DD2D1E425025660F89185A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LOcbH07qAVkkYSX8WumtUaRHks4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/LOcbH07qAVkkYSX8WumtUaRHks4.mft
Manifest number: 16F7
Signing time: Mon 27 Oct 2025 02:00:29 +0000
Manifest this update: Mon 27 Oct 2025 02:00:29 +0000
Manifest next update: Tue 28 Oct 2025 02:00:29 +0000
Files and hashes: 1: BugMD0rfZTTzRv9e3Yc9s1C5qM8.roa (hash: jE01pMhWyEqiVohSbXJF+yf78b2Sf6VXp+Appd2gHuI=)
2: LOcbH07qAVkkYSX8WumtUaRHks4.crl (hash: ghNTbs0D6lfidqqUP9RAZL8SN/yv/wx6Np/hXTLDabM=)
3: _1rHHFIhvvb4H2GGBv9RDV7OFzo.roa (hash: ODNNLSo5C2C5zLz79VjHYIX9sjOveSMDElEuw+M5H2w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/LOcbH07qAVkkYSX8WumtUaRHks4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/LOcbH07qAVkkYSX8WumtUaRHks4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LOcbH07qAVkkYSX8WumtUaRHks4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:65:3f:1f:5d:d2:d1:e4:25:02:56:60:f8:91:85:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ce71b1f4eea0159246125fc5ae9ad51a44792ce
Validity
Not Before: Oct 27 02:00:29 2025 GMT
Not After : Oct 28 02:00:29 2025 GMT
Subject: CN=f86679815028ab5b634588fb65386d915a368c32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f6:95:e1:06:0a:8a:77:af:63:26:f9:cd:83:
ea:04:34:c0:6d:12:40:a1:d5:61:b6:c3:f5:4e:e6:
24:23:ac:05:79:a1:ab:47:97:8b:64:13:57:02:51:
4b:04:75:8a:67:90:ae:81:e1:8f:3b:fa:58:86:ab:
85:37:04:31:a3:8c:aa:19:41:7c:ac:8b:4c:94:fe:
e6:9a:f3:2d:9c:40:9b:6b:ac:7b:09:51:61:30:24:
ce:54:63:e8:8f:b2:35:5e:97:d1:10:d0:6f:59:01:
2b:ca:f4:e5:04:03:af:a9:cb:d5:3d:0e:99:c9:08:
12:0f:52:ea:9c:a7:4d:b0:fd:1f:73:e9:3e:12:c9:
26:27:55:15:80:38:6c:2b:c5:a9:60:0a:a0:98:da:
8b:db:45:a6:dd:4e:a8:eb:45:c4:a0:e7:df:00:f2:
37:76:4c:b8:60:68:8c:3f:ba:d0:48:94:6b:de:ed:
de:b1:b8:e0:16:8d:a8:13:47:cc:82:ef:fd:92:e5:
2b:b7:76:10:6d:a3:0f:7f:47:d8:02:06:5d:c9:29:
8d:91:87:64:aa:a6:9d:e8:64:a3:89:b1:dc:cd:c0:
2f:45:5f:98:36:95:33:6a:63:ac:30:ba:32:da:0e:
16:2b:ea:2e:f7:c9:a2:70:9e:d9:f2:4b:77:c4:06:
ec:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:66:79:81:50:28:AB:5B:63:45:88:FB:65:38:6D:91:5A:36:8C:32
X509v3 Authority Key Identifier:
keyid:2C:E7:1B:1F:4E:EA:01:59:24:61:25:FC:5A:E9:AD:51:A4:47:92:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LOcbH07qAVkkYSX8WumtUaRHks4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/LOcbH07qAVkkYSX8WumtUaRHks4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/LOcbH07qAVkkYSX8WumtUaRHks4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:19:ef:a9:c3:08:9b:21:2d:81:e6:3e:49:4b:c3:d3:80:d8:
8e:5b:c3:91:9b:bb:97:31:5b:82:00:d5:2b:ee:ce:0b:e3:9d:
2e:00:b9:df:5a:89:db:de:11:0f:75:0c:ea:05:d2:f1:9f:79:
d8:72:0d:39:ec:60:c7:7f:d7:bc:08:4a:3a:b9:e2:b7:4b:28:
dd:0e:42:e7:41:24:24:4a:6a:ed:c1:86:24:52:f2:93:3e:31:
59:30:09:ab:39:54:d8:71:9e:5e:25:3e:fe:f3:34:f3:b6:98:
27:10:90:99:de:cc:0e:6e:4b:26:a2:98:ac:23:42:d3:19:37:
2f:06:db:ac:89:a8:5e:75:a2:c8:ff:7b:79:a4:ca:7e:84:a6:
da:ea:17:79:54:32:dd:d5:bc:b6:5c:2c:a2:83:12:e6:e2:b9:
de:7c:b7:ec:25:54:c4:6b:39:f8:0e:3e:ab:dc:8e:5b:ee:01:
8f:d6:8a:2b:9f:a8:10:a2:06:33:fe:36:fa:3e:46:9f:cd:eb:
ea:78:da:59:72:c0:f1:00:bd:af:9a:99:ce:6d:30:d5:da:de:
33:2f:e4:78:de:77:8d:02:c0:db:10:34:83:12:14:ae:a1:2d:
2f:04:68:a0:f6:0b:74:c4:e4:c1:96:f1:97:15:16:4f:da:e7:
1f:c3:b0:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:34:32 2025 by rpki-client