Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft
File: Loskx2rYemwf7f-vCNmxe0UkmZE.mft (raw, json)
Hash identifier: vuZzhd/vcoOGN0qjYiD8OwdZxpnHSCmlX3XHqLcwEQM=
Subject key identifier: B9:0F:F1:6C:30:4C:60:15:06:53:49:E0:93:EB:1D:C3:02:10:C3:40
Authority key identifier: 2E:8B:24:C7:6A:D8:7A:6C:1F:ED:FF:AF:08:D9:B1:7B:45:24:99:91
Certificate issuer: /CN=2e8b24c76ad87a6c1fedffaf08d9b17b45249991
Certificate serial: 019A1E75907A844AAA56C2297478C6039C6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Loskx2rYemwf7f-vCNmxe0UkmZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft
Manifest number: 1708
Signing time: Sun 26 Oct 2025 03:00:12 +0000
Manifest this update: Sun 26 Oct 2025 03:00:12 +0000
Manifest next update: Mon 27 Oct 2025 03:00:12 +0000
Files and hashes: 1: Loskx2rYemwf7f-vCNmxe0UkmZE.crl (hash: PBQix0vQHe2K6liGvcCF7qcecuOiSp5vjjsJNGDUAIk=)
2: U7x9NHrOtVwpLBD4RJMdKYPQ-Mo.roa (hash: COXA0MHjLmP0wp5vDjDiQUXIbxhZE0gntg3Uospeavg=)
3: bN5Qh_cCN7x_bSMtAB6WrYmfSfs.roa (hash: 7lDp1JKm9y6PoutQIOmO5gmvBeVNCcDTxuFQlDqZd6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Loskx2rYemwf7f-vCNmxe0UkmZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 19:59:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1e:75:90:7a:84:4a:aa:56:c2:29:74:78:c6:03:9c:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e8b24c76ad87a6c1fedffaf08d9b17b45249991
Validity
Not Before: Oct 26 03:00:12 2025 GMT
Not After : Oct 27 03:00:12 2025 GMT
Subject: CN=b90ff16c304c6015065349e093eb1dc30210c340
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a0:47:7b:61:4b:74:8a:3a:53:f6:f9:08:80:
9f:8d:d0:72:3f:fc:d5:69:ec:29:ab:f6:51:46:3b:
40:a8:f6:47:0e:67:dd:e7:b8:30:ba:f1:2b:c1:00:
64:59:59:80:88:67:41:46:22:28:0e:d1:2a:d9:d2:
95:59:dd:24:7a:b8:1b:40:2c:72:56:1f:e6:46:ca:
ee:7b:90:c7:80:4c:1d:2d:73:8a:11:80:a9:7f:dd:
94:b9:df:7b:e0:f4:14:ac:26:f7:e6:08:ab:be:7c:
29:dd:24:7e:61:bd:6c:4b:a0:e1:1c:c5:fc:fa:20:
2c:7c:2d:93:8f:a9:ce:62:45:f3:00:4d:05:e0:b3:
06:2a:a5:46:f6:eb:78:59:46:1a:82:52:d1:e9:10:
54:f9:4c:7e:da:0e:10:2d:4a:a0:23:6b:a7:75:fd:
07:26:23:8a:56:2d:8a:2d:da:e8:b4:39:13:84:73:
eb:84:64:43:ce:5b:4e:a0:a9:dc:f3:9c:f0:64:ff:
8f:23:86:11:17:de:ab:c1:e6:c6:4a:3f:66:97:78:
44:86:5a:d0:50:a5:27:0f:9f:5e:2b:e4:11:14:cd:
62:7f:ad:45:8e:2e:f7:96:77:15:b9:da:4c:ba:ca:
cc:18:88:10:41:60:8d:4f:e5:97:d0:93:f3:85:a7:
cb:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:0F:F1:6C:30:4C:60:15:06:53:49:E0:93:EB:1D:C3:02:10:C3:40
X509v3 Authority Key Identifier:
keyid:2E:8B:24:C7:6A:D8:7A:6C:1F:ED:FF:AF:08:D9:B1:7B:45:24:99:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Loskx2rYemwf7f-vCNmxe0UkmZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:32:1f:5a:df:4f:66:0b:ac:91:24:16:0f:e5:20:fe:d8:3b:
36:23:ca:1f:c2:11:da:c3:9b:22:d1:81:f0:b3:52:63:5f:99:
6d:0b:9f:4e:c8:c4:44:a8:1f:11:48:d5:fd:6a:61:04:b0:53:
51:a0:a3:d0:d3:34:6c:92:b1:23:54:e3:40:9c:24:35:7f:e0:
9f:4f:98:6a:5f:dd:57:cb:85:76:8b:58:3f:5b:7c:05:e5:25:
56:48:7e:62:00:e2:2b:22:8f:15:30:40:90:6d:7f:cb:3c:f6:
ed:62:7a:75:b0:f7:ed:05:55:99:68:ee:cf:4e:3d:0a:4a:2a:
90:2d:6d:f3:38:f1:64:72:8d:8b:7f:43:fb:f5:3d:dc:c5:e5:
ee:dc:58:57:32:31:a3:ff:aa:74:0b:51:8b:57:25:cb:61:22:
b2:fc:4c:ea:8b:3a:22:7e:95:d0:23:f1:4a:14:9e:59:dd:f9:
4c:30:cb:d4:e7:ea:06:5d:57:5c:8a:57:9d:36:e5:40:63:b5:
98:36:95:3d:0c:b8:4c:a9:97:fa:21:5a:2c:e9:6c:d6:72:4d:
eb:9d:a6:87:aa:bf:af:e3:bd:85:3b:8e:14:12:75:27:b1:8f:
fa:27:f7:30:5e:36:83:65:31:1c:81:cb:7d:59:3a:1c:b9:50:
90:e5:6a:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 04:35:18 2025 by rpki-client