Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/5e1871-2af1-47d3-b262-08f433daea15/1/LO4pmOhvp0iOa2T47bwDLOFdG8w.mft
File: LO4pmOhvp0iOa2T47bwDLOFdG8w.mft (raw, json)
Hash identifier: kkAGN5R/NufiJi+llJtdhuIIwmvvExcS/iDvTqZqj9Y=
Subject key identifier: 5F:36:62:19:00:30:19:75:8D:FA:F8:99:53:89:8D:5D:47:AA:DA:1D
Authority key identifier: 2C:EE:29:98:E8:6F:A7:48:8E:6B:64:F8:ED:BC:03:2C:E1:5D:1B:CC
Certificate issuer: /CN=2cee2998e86fa7488e6b64f8edbc032ce15d1bcc
Certificate serial: 019A7301C09F8283E8D2A93F73C593C941DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LO4pmOhvp0iOa2T47bwDLOFdG8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/5e1871-2af1-47d3-b262-08f433daea15/1/LO4pmOhvp0iOa2T47bwDLOFdG8w.mft
Manifest number: 0EA3
Signing time: Tue 11 Nov 2025 13:01:25 +0000
Manifest this update: Tue 11 Nov 2025 13:01:25 +0000
Manifest next update: Wed 12 Nov 2025 13:01:25 +0000
Files and hashes: 1: LO4pmOhvp0iOa2T47bwDLOFdG8w.crl (hash: SlMiQIg/TIw9kNbzSjZy4cXyvjgY/a4W0oxIBnCGYr0=)
2: YXxh1XSQz2hJg4wU0JwpLVfgRPc.roa (hash: fKQqPt+1938ZgXlhZdhE3xLSu/gu+cSj1bUfoNu6uac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/5e1871-2af1-47d3-b262-08f433daea15/1/LO4pmOhvp0iOa2T47bwDLOFdG8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/5e1871-2af1-47d3-b262-08f433daea15/1/LO4pmOhvp0iOa2T47bwDLOFdG8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/LO4pmOhvp0iOa2T47bwDLOFdG8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:c0:9f:82:83:e8:d2:a9:3f:73:c5:93:c9:41:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cee2998e86fa7488e6b64f8edbc032ce15d1bcc
Validity
Not Before: Nov 11 13:01:25 2025 GMT
Not After : Nov 12 13:01:25 2025 GMT
Subject: CN=5f366219003019758dfaf89953898d5d47aada1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d6:16:b2:e7:a2:9f:59:32:db:cf:f6:e1:7f:
78:8d:3e:d3:be:e8:34:12:20:8d:1a:9f:39:10:e0:
3c:78:7d:eb:01:42:99:5c:fd:8b:9e:77:fb:f0:11:
96:f6:b0:9b:48:ef:03:33:36:60:6b:63:40:86:0a:
f5:1f:20:4e:e4:6b:3a:5d:e3:43:16:8b:32:79:78:
8a:7d:0d:fa:f0:28:e3:65:e5:b6:45:91:22:9a:a4:
be:d7:22:19:b3:db:9d:f8:b6:ae:09:81:c1:6b:f0:
b6:8a:4d:d4:c7:60:cf:2d:8e:64:a7:94:a7:ce:fc:
49:dc:c2:70:4c:ae:e4:85:d7:d8:47:65:d2:25:f5:
c2:45:a2:db:7e:7a:98:f6:74:35:b5:87:f9:4d:7d:
33:14:9b:7d:a3:eb:72:69:0e:5a:ac:df:db:fb:a0:
a3:94:bc:dd:89:e7:a3:d7:f8:ee:88:6b:fa:e9:f0:
97:21:13:4b:17:df:d2:00:76:9c:e3:22:a1:ed:79:
dc:e7:86:6f:9d:35:7f:57:21:96:93:4c:e2:5d:02:
13:74:71:fc:96:ef:02:16:ec:45:72:de:42:46:1a:
17:b1:d0:37:36:71:40:ed:5a:91:44:e3:db:06:d8:
7a:57:01:bb:8e:87:1a:0f:6b:4c:65:3c:f1:72:ef:
9b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:36:62:19:00:30:19:75:8D:FA:F8:99:53:89:8D:5D:47:AA:DA:1D
X509v3 Authority Key Identifier:
keyid:2C:EE:29:98:E8:6F:A7:48:8E:6B:64:F8:ED:BC:03:2C:E1:5D:1B:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LO4pmOhvp0iOa2T47bwDLOFdG8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5e1871-2af1-47d3-b262-08f433daea15/1/LO4pmOhvp0iOa2T47bwDLOFdG8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5e1871-2af1-47d3-b262-08f433daea15/1/LO4pmOhvp0iOa2T47bwDLOFdG8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:aa:17:35:04:e1:f3:8f:a3:8c:de:8b:c3:19:d4:76:d8:94:
4b:7c:9c:ac:f7:3d:3c:43:e5:f5:31:56:e3:1e:31:10:83:4b:
48:1a:24:c9:c4:0f:18:ef:1b:66:6d:8c:1b:ab:b9:45:80:53:
f8:c8:34:31:15:f5:b6:75:97:02:db:b3:2e:02:32:af:80:f5:
21:41:7b:bd:8f:25:e1:a1:40:28:d2:b2:5c:97:13:00:a2:20:
a1:d9:44:b2:66:f4:88:87:02:b7:36:62:93:be:d2:9f:ef:24:
e4:2a:df:ce:45:e4:c8:f7:e2:1e:91:ee:17:1a:1a:ad:ec:bb:
92:c7:9a:8b:b6:a9:d9:de:79:00:5b:be:3c:31:d2:d8:ee:37:
8d:cc:d5:3a:15:ae:75:b8:d9:68:d8:98:48:9f:53:92:ed:68:
d8:13:6c:77:3a:7d:6a:b6:62:5f:61:eb:eb:ce:f0:87:e5:33:
b1:54:08:25:70:51:83:8e:b7:ba:e1:c3:02:0d:89:94:3c:5f:
7a:d8:04:42:4f:e9:5d:fa:c6:f9:7c:f0:2b:b5:2a:89:7a:84:
21:44:f1:dc:ff:99:c9:82:bc:16:95:81:7f:3f:fe:d1:b8:14:
6c:c7:17:b2:51:81:b6:f0:f8:5f:4b:64:ee:96:e6:a6:19:cc:
81:df:9e:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:22:05 2025 by rpki-client