Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/7b20bd-fc4e-4cbf-ad1b-24fa10965e85/1/LoJ8h8u_wmGidOnLGwlQJqgMYTY.mft
File: LoJ8h8u_wmGidOnLGwlQJqgMYTY.mft (raw, json)
Hash identifier: dd02PZHU/yQtZP2wbzk+SUsxyq4kp7yClr29bcKwH68=
Subject key identifier: D5:34:DA:7C:86:C3:19:20:C8:76:AC:A0:C7:A3:5F:3D:E7:7F:A2:55
Authority key identifier: 2E:82:7C:87:CB:BF:C2:61:A2:74:E9:CB:1B:09:50:26:A8:0C:61:36
Certificate issuer: /CN=2e827c87cbbfc261a274e9cb1b095026a80c6136
Certificate serial: 019A2365A5DC7423320B0445A9FBE3C277BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LoJ8h8u_wmGidOnLGwlQJqgMYTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/7b20bd-fc4e-4cbf-ad1b-24fa10965e85/1/LoJ8h8u_wmGidOnLGwlQJqgMYTY.mft
Manifest number: 1609
Signing time: Mon 27 Oct 2025 02:00:55 +0000
Manifest this update: Mon 27 Oct 2025 02:00:55 +0000
Manifest next update: Tue 28 Oct 2025 02:00:55 +0000
Files and hashes: 1: LAKkoAndva90SPNLZD7phJpzuqA.roa (hash: OPV3y3ajSvAOqXe2gXH83vJ/FKUxnXcCmYMqv/uyJZU=)
2: LoJ8h8u_wmGidOnLGwlQJqgMYTY.crl (hash: IWmr1qpOKhD8F8CZKhZ39k0i0DsVGh72i3kd9kDYk2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/7b20bd-fc4e-4cbf-ad1b-24fa10965e85/1/LoJ8h8u_wmGidOnLGwlQJqgMYTY.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/7b20bd-fc4e-4cbf-ad1b-24fa10965e85/1/LoJ8h8u_wmGidOnLGwlQJqgMYTY.mft
rsync://rpki.ripe.net/repository/DEFAULT/LoJ8h8u_wmGidOnLGwlQJqgMYTY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 02:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:65:a5:dc:74:23:32:0b:04:45:a9:fb:e3:c2:77:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e827c87cbbfc261a274e9cb1b095026a80c6136
Validity
Not Before: Oct 27 02:00:55 2025 GMT
Not After : Oct 28 02:00:55 2025 GMT
Subject: CN=d534da7c86c31920c876aca0c7a35f3de77fa255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:11:22:9a:0b:ee:52:8c:d8:bf:b2:d9:b9:b4:
e2:7f:e8:ce:8c:c1:47:d7:0a:52:83:ea:f6:ae:f9:
48:3a:49:bd:f7:9d:5a:9d:82:a9:89:25:c3:b4:d6:
94:2c:dd:7f:c0:8e:89:40:1c:f3:99:4f:66:4d:97:
4b:56:00:cd:a5:ef:17:39:eb:cf:cd:db:e7:d6:f0:
3b:12:60:bc:df:1b:25:da:47:9f:09:5d:a0:04:00:
03:6c:8b:7a:59:db:32:f7:86:74:03:a9:54:59:4f:
fb:a0:27:cb:a6:e5:e9:78:98:46:83:a7:48:21:1a:
4f:c5:b6:ea:67:57:c6:d7:33:17:ab:e7:17:64:16:
f9:8d:f7:b4:0f:cc:25:09:86:21:e2:b4:3d:31:9f:
37:35:f1:bc:9e:99:7e:d7:88:d7:e1:ca:b9:a7:84:
db:c8:08:59:b4:d6:cb:36:92:c0:76:6e:78:22:4e:
1a:bc:34:37:ce:aa:5f:da:89:b8:d2:ef:29:2f:36:
b8:6a:31:b2:09:e0:c0:24:b7:c5:57:e4:a5:3a:10:
83:ae:61:ec:c7:e2:49:33:4d:7d:45:7d:8c:98:d5:
6b:ef:bb:1f:79:80:b0:75:74:44:0c:6a:06:fe:9d:
cb:69:47:a5:25:20:11:aa:1b:9d:af:ea:62:3a:45:
8f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:34:DA:7C:86:C3:19:20:C8:76:AC:A0:C7:A3:5F:3D:E7:7F:A2:55
X509v3 Authority Key Identifier:
keyid:2E:82:7C:87:CB:BF:C2:61:A2:74:E9:CB:1B:09:50:26:A8:0C:61:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoJ8h8u_wmGidOnLGwlQJqgMYTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7b20bd-fc4e-4cbf-ad1b-24fa10965e85/1/LoJ8h8u_wmGidOnLGwlQJqgMYTY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7b20bd-fc4e-4cbf-ad1b-24fa10965e85/1/LoJ8h8u_wmGidOnLGwlQJqgMYTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:23:08:16:a9:de:fc:42:58:6d:07:ea:a1:6e:24:8b:84:76:
62:8a:55:10:b8:e4:39:85:28:e0:bd:20:15:f8:0e:89:dd:b2:
95:55:5e:84:61:53:ec:ce:ea:dd:cd:64:f6:1a:ea:95:67:f8:
df:61:b1:b5:d3:1c:4a:1e:ee:7c:bd:fb:ae:42:15:14:d1:1d:
38:62:89:4f:0b:90:a8:07:26:af:28:ee:96:83:8e:b6:c4:12:
4a:80:42:0b:ae:f8:5c:83:12:df:1c:c1:e0:d9:95:76:34:9a:
4f:f7:0a:70:d1:5b:7d:53:13:21:5c:99:26:10:77:71:b1:ef:
45:e8:1f:4b:78:2b:73:a3:46:91:b7:28:56:c8:99:1d:3f:f7:
27:58:53:8b:49:a0:87:ec:1e:f9:cd:34:7d:74:10:51:8d:48:
df:2a:d7:c4:97:30:9e:a6:ac:00:3b:28:d9:5a:b2:97:7a:40:
d5:38:da:21:0e:ad:7b:97:eb:d3:ae:a3:1e:da:00:cd:6a:a1:
0c:a1:af:e2:86:84:f2:72:d6:1f:47:b2:88:50:75:34:c0:0c:
2f:9b:18:f1:48:90:1e:d2:a9:a1:e6:38:23:0d:f6:36:e4:27:
cc:13:7d:69:67:b1:42:b2:2a:5b:75:c9:d9:a0:e8:87:51:7a:
f7:3f:92:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:07:36 2025 by rpki-client