Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/3b58d8-6d94-4302-aa91-7c2bd984d735/1/LofD1fRf7zjBBbk91E3ST1vuYOc.mft
File: LofD1fRf7zjBBbk91E3ST1vuYOc.mft (raw, json)
Hash identifier: KYd10n9AkY0uSsWlJfFISqV+a57+99Dkc7/6YZ9Zflo=
Subject key identifier: 8C:B8:06:D7:0D:FA:09:C4:B4:AE:93:90:AF:C7:19:35:69:9E:F1:1A
Authority key identifier: 2E:87:C3:D5:F4:5F:EF:38:C1:05:B9:3D:D4:4D:D2:4F:5B:EE:60:E7
Certificate issuer: /CN=2e87c3d5f45fef38c105b93dd44dd24f5bee60e7
Certificate serial: 019A71B8C574300437C8BB19C23F1135F3F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LofD1fRf7zjBBbk91E3ST1vuYOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/3b58d8-6d94-4302-aa91-7c2bd984d735/1/LofD1fRf7zjBBbk91E3ST1vuYOc.mft
Manifest number: 0F6F
Signing time: Tue 11 Nov 2025 07:02:05 +0000
Manifest this update: Tue 11 Nov 2025 07:02:05 +0000
Manifest next update: Wed 12 Nov 2025 07:02:05 +0000
Files and hashes: 1: LofD1fRf7zjBBbk91E3ST1vuYOc.crl (hash: 23DJbOtEZKgAtNWOES43hq2SLHIF3mmW7HvsXA13ZTY=)
2: QDqzI6mtk0OSKHPd6aEPhi6zaB8.roa (hash: EsH+qC6DrpZNrpMwjRlDLqXBAg493TRAVaOfxpJfUMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/3b58d8-6d94-4302-aa91-7c2bd984d735/1/LofD1fRf7zjBBbk91E3ST1vuYOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/3b58d8-6d94-4302-aa91-7c2bd984d735/1/LofD1fRf7zjBBbk91E3ST1vuYOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/LofD1fRf7zjBBbk91E3ST1vuYOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:c5:74:30:04:37:c8:bb:19:c2:3f:11:35:f3:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e87c3d5f45fef38c105b93dd44dd24f5bee60e7
Validity
Not Before: Nov 11 07:02:05 2025 GMT
Not After : Nov 12 07:02:05 2025 GMT
Subject: CN=8cb806d70dfa09c4b4ae9390afc71935699ef11a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f6:a0:06:16:a2:84:12:eb:db:10:1f:46:71:
ec:54:5a:bd:8b:43:a1:2c:b8:31:76:0d:3f:75:64:
31:a3:04:14:7f:3c:6f:09:31:4b:7a:55:16:6c:bc:
e0:49:fe:6a:c4:64:e1:b9:96:17:76:ed:dc:68:70:
7f:27:61:3a:97:e0:72:db:6b:09:89:4b:64:b4:58:
50:63:62:86:d6:e5:a6:ed:6c:72:f7:fd:1c:f3:59:
a7:49:d8:08:d6:e4:9f:df:18:cd:a4:fc:82:ac:cf:
d1:84:2e:9e:e8:3d:ba:86:8c:54:dd:dd:13:61:94:
79:7b:29:cf:93:25:17:fb:f7:4d:5a:2a:f1:6b:f1:
26:69:a5:66:8d:a9:06:0b:9e:63:b2:55:63:d2:a1:
19:02:bf:ef:2d:da:5b:29:56:a6:ef:f0:00:ef:3d:
ac:ad:a6:ad:10:40:0d:71:eb:01:f5:a5:ec:d5:30:
3a:27:17:01:1d:a3:db:42:21:67:58:cb:cc:ca:7a:
f6:a4:30:05:b3:1a:5a:f9:f5:73:1f:48:7b:b8:4d:
4e:0b:e2:26:f6:32:0f:0e:65:c6:c1:b3:92:93:ac:
65:a0:67:3f:2e:e9:e9:8a:61:3f:3d:03:d4:1f:27:
49:0e:4b:bb:3e:c8:a7:49:c5:5a:bf:4e:4f:57:57:
8d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:B8:06:D7:0D:FA:09:C4:B4:AE:93:90:AF:C7:19:35:69:9E:F1:1A
X509v3 Authority Key Identifier:
keyid:2E:87:C3:D5:F4:5F:EF:38:C1:05:B9:3D:D4:4D:D2:4F:5B:EE:60:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LofD1fRf7zjBBbk91E3ST1vuYOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3b58d8-6d94-4302-aa91-7c2bd984d735/1/LofD1fRf7zjBBbk91E3ST1vuYOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3b58d8-6d94-4302-aa91-7c2bd984d735/1/LofD1fRf7zjBBbk91E3ST1vuYOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e1:a4:8f:cf:bc:1e:e0:d4:e1:7f:38:a5:6d:24:cf:86:eb:1c:
a4:58:58:b8:77:90:75:89:e6:96:9e:14:2d:71:82:47:d6:7d:
c0:9c:5e:6d:68:d9:6b:d5:0a:0b:64:34:54:41:0f:f4:c2:06:
81:40:02:3e:d8:94:6c:f5:3e:af:0b:d6:94:44:f7:39:c4:40:
7d:cf:fa:a4:a7:95:63:ab:92:4e:36:b1:44:5a:b0:22:88:f6:
7f:1e:42:be:13:00:78:ea:f6:8a:35:3b:78:fe:52:41:ec:9c:
6c:46:a4:8b:29:6d:fa:6c:94:1f:ae:ec:1c:8a:d8:da:00:68:
d1:4c:ba:9c:cb:a3:db:96:60:3a:35:a7:d9:fc:85:66:a7:61:
a2:83:09:6b:fb:20:85:8b:60:1f:05:19:ae:17:bf:84:cc:d4:
84:50:c0:97:3f:c5:6b:c0:62:4c:7a:06:37:c4:e0:f9:42:26:
61:ac:5f:e0:a1:32:c5:db:aa:b9:31:d4:1c:d4:8e:06:1c:e3:
5e:b5:9f:10:62:8c:f1:1a:5f:2a:b7:20:7a:2e:e3:9c:db:1d:
ce:09:87:bf:2e:45:31:11:12:70:11:33:f9:51:9f:e3:8e:5d:
c2:4b:9e:44:2c:45:c3:de:e7:07:bb:c7:b8:36:3d:36:5e:39:
9c:e8:d2:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuMV0MAQ3yLsZwj8RNfP0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlODdjM2Q1ZjQ1ZmVmMzhjMTA1YjkzZGQ0NGRkMjRmNWJl
ZTYwZTcwHhcNMjUxMTExMDcwMjA1WhcNMjUxMTEyMDcwMjA1WjAzMTEwLwYDVQQD
Eyg4Y2I4MDZkNzBkZmEwOWM0YjRhZTkzOTBhZmM3MTkzNTY5OWVmMTFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPagBhaihBLr2xAfRnHsVFq9i0Oh
LLgxdg0/dWQxowQUfzxvCTFLelUWbLzgSf5qxGThuZYXdu3caHB/J2E6l+By22sJ
iUtktFhQY2KG1uWm7Wxy9/0c81mnSdgI1uSf3xjNpPyCrM/RhC6e6D26hoxU3d0T
YZR5eynPkyUX+/dNWirxa/EmaaVmjakGC55jslVj0qEZAr/vLdpbKVam7/AA7z2s
raatEEANcesB9aXs1TA6JxcBHaPbQiFnWMvMynr2pDAFsxpa+fVzH0h7uE1OC+Im
9jIPDmXGwbOSk6xloGc/LunpimE/PQPUHydJDku7PsinScVav05PV1eNGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIy4BtcN+gnEtK6TkK/HGTVpnvEaMB8GA1UdIwQY
MBaAFC6Hw9X0X+84wQW5PdRN0k9b7mDnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTG9mRDFmUmY3empCQmJrOTFFM1NUMXZ1WU9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8zYjU4ZDgtNmQ5NC00MzAyLWFhOTEt
N2MyYmQ5ODRkNzM1LzEvTG9mRDFmUmY3empCQmJrOTFFM1NUMXZ1WU9jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi8zYjU4ZDgtNmQ5NC00MzAyLWFhOTEtN2MyYmQ5ODRkNzM1
LzEvTG9mRDFmUmY3empCQmJrOTFFM1NUMXZ1WU9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA4aSPz7we
4NThfzilbSTPhuscpFhYuHeQdYnmlp4ULXGCR9Z9wJxebWjZa9UKC2Q0VEEP9MIG
gUACPtiUbPU+rwvWlET3OcRAfc/6pKeVY6uSTjaxRFqwIoj2fx5CvhMAeOr2ijU7
eP5SQeycbEakiylt+myUH67sHIrY2gBo0Uy6nMuj25ZgOjWn2fyFZqdhooMJa/sg
hYtgHwUZrhe/hMzUhFDAlz/Fa8BiTHoGN8Tg+UImYaxf4KEyxduquTHUHNSOBhzj
XrWfEGKM8RpfKrcgei7jnNsdzgmHvy5FMREScBEz+VGf445dwkueRCxFw97nB7vH
uDY9Nl45nOjSZw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:24 2025 by rpki-client