Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/LOre5Y-GT0cutCKwuVSXuFB1oSs.mft
File: LOre5Y-GT0cutCKwuVSXuFB1oSs.mft (raw, json)
Hash identifier: 3Z0Oz16SjaBP+bu8OOBPa3WmYlva6Pbw9hNiq2jk/gY=
Subject key identifier: 1C:3F:F8:9B:C9:E8:85:DC:8D:42:2D:F8:8B:D6:1F:D2:FC:18:47:B2
Authority key identifier: 2C:EA:DE:E5:8F:86:4F:47:2E:B4:22:B0:B9:54:97:B8:50:75:A1:2B
Certificate issuer: /CN=2ceadee58f864f472eb422b0b95497b85075a12b
Certificate serial: 019A4E4F8D94C9D7C74D22CC94BAC20914B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LOre5Y-GT0cutCKwuVSXuFB1oSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/LOre5Y-GT0cutCKwuVSXuFB1oSs.mft
Manifest number: 155B
Signing time: Tue 04 Nov 2025 10:00:27 +0000
Manifest this update: Tue 04 Nov 2025 10:00:27 +0000
Manifest next update: Wed 05 Nov 2025 10:00:27 +0000
Files and hashes: 1: FBdl7VOodLJhSXYfDoAofAIRhnA.roa (hash: I3zrIjexf9/s3BfDjPpCzKMEPfl4E3s1P3fqPquhjIg=)
2: LOre5Y-GT0cutCKwuVSXuFB1oSs.crl (hash: XZGxezjNwhvEw8Nk9SuoVaQqqYWOVfOEtWc6W1mUL7Y=)
3: ZBji9OX_VotOWmsBmNsHM021d9w.roa (hash: VbyaXchd5eBQYGJ65pdgdekBYkxDCu5DrAnwaoKvIrc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/LOre5Y-GT0cutCKwuVSXuFB1oSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/LOre5Y-GT0cutCKwuVSXuFB1oSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/LOre5Y-GT0cutCKwuVSXuFB1oSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:8d:94:c9:d7:c7:4d:22:cc:94:ba:c2:09:14:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ceadee58f864f472eb422b0b95497b85075a12b
Validity
Not Before: Nov 4 10:00:27 2025 GMT
Not After : Nov 5 10:00:27 2025 GMT
Subject: CN=1c3ff89bc9e885dc8d422df88bd61fd2fc1847b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:37:1a:a9:92:c9:23:f0:40:90:57:91:21:97:
3c:56:75:b3:70:98:5b:fe:3c:18:af:fb:bc:b6:d8:
0a:df:48:1b:97:5d:85:49:cb:03:f3:19:51:05:63:
6d:5f:06:ca:7d:a5:14:84:d1:8b:9f:e5:3d:30:72:
57:81:57:e9:71:df:6d:b3:96:1b:97:33:5e:dd:f8:
43:9d:9a:0f:c1:c9:c9:7f:53:74:9a:f5:0e:91:ab:
cd:ff:93:b2:5c:04:6d:d4:9b:89:71:64:eb:1e:0b:
49:f0:66:25:95:b3:a2:5f:f7:c2:c5:d2:0f:6b:d0:
53:00:f7:65:5d:e3:28:09:92:e5:53:f7:8d:94:14:
e9:f7:02:15:ef:eb:65:dd:15:3d:3a:17:09:06:d7:
5d:89:1d:3b:63:9a:1e:f0:f4:1e:e6:18:c1:37:08:
72:19:86:ca:d7:3c:3d:0e:1b:a9:ec:4d:f1:cb:37:
37:f8:7c:52:c1:9f:4f:10:d5:21:ca:a3:a7:b9:76:
79:55:27:fb:04:e1:da:6f:8e:1b:86:65:68:a1:3c:
af:32:20:a8:43:e5:0c:81:4d:80:a9:8d:5b:bc:36:
55:fc:6a:7a:d3:62:e0:ee:a9:64:6c:1e:a8:cb:13:
ef:56:c1:a5:2a:16:1b:2e:94:5b:95:74:51:65:26:
15:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:3F:F8:9B:C9:E8:85:DC:8D:42:2D:F8:8B:D6:1F:D2:FC:18:47:B2
X509v3 Authority Key Identifier:
keyid:2C:EA:DE:E5:8F:86:4F:47:2E:B4:22:B0:B9:54:97:B8:50:75:A1:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LOre5Y-GT0cutCKwuVSXuFB1oSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/LOre5Y-GT0cutCKwuVSXuFB1oSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/LOre5Y-GT0cutCKwuVSXuFB1oSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:02:c3:ee:c0:f2:20:15:2d:3b:d1:2c:90:70:1d:82:c6:2a:
c5:68:b0:9a:6d:d7:ab:6d:ea:d2:43:dc:e8:2a:6b:bf:f7:14:
2e:5a:9a:3c:a3:0f:43:59:f2:19:84:f0:01:b9:ac:0b:c7:b0:
68:a3:21:57:6d:21:ba:57:bc:2f:5d:48:5b:a3:84:4c:2c:2e:
3b:01:16:63:17:2b:05:17:02:9e:bb:e8:03:1d:3c:e5:5b:25:
f7:9a:3e:9f:18:49:ba:67:d9:3c:37:31:c6:07:a9:62:48:00:
c9:64:51:4b:54:2b:b9:fe:e0:e2:5a:d0:fb:e3:6a:4a:cb:8c:
a6:bc:6c:ce:7b:ec:78:97:f5:13:80:eb:02:8a:1f:cf:19:a5:
cc:5d:3b:94:d8:09:3e:6d:74:19:7a:22:4a:b7:b7:90:a1:5b:
da:5c:ad:fc:f6:b4:d4:b7:78:43:a5:2f:62:0b:e5:95:73:7b:
e3:ee:e6:4f:fb:cc:25:9a:ed:79:39:27:1b:83:84:5f:e4:61:
4d:42:bf:a6:d7:77:bb:fb:35:64:a6:d0:c6:13:15:c7:ee:c1:
c9:79:5b:45:b8:01:78:25:6a:ae:3e:89:f7:e2:7e:60:bf:82:
18:9e:93:94:18:ff:ab:52:22:7f:ab:a1:0f:f1:4b:74:e3:cb:
b5:e2:58:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 13:35:48 2025 by rpki-client