Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/33a0f9-1178-4a6d-b964-ff765f8531d5/1/LO_eMLilizIqQx8IKe1P8ztarBg.mft
File: LO_eMLilizIqQx8IKe1P8ztarBg.mft (raw, json)
Hash identifier: PckecNV1eH/6O01PKETg8pu0lLJ7fo1tzS3Rx/m9JbQ=
Subject key identifier: BD:C1:1F:A9:02:7E:6E:93:28:40:29:A9:56:0B:D4:D1:03:24:E4:00
Authority key identifier: 2C:EF:DE:30:B8:A5:8B:32:2A:43:1F:08:29:ED:4F:F3:3B:5A:AC:18
Certificate issuer: /CN=2cefde30b8a58b322a431f0829ed4ff33b5aac18
Certificate serial: 019A2478C637053A1423B6BE42F2CA1344DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LO_eMLilizIqQx8IKe1P8ztarBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/33a0f9-1178-4a6d-b964-ff765f8531d5/1/LO_eMLilizIqQx8IKe1P8ztarBg.mft
Manifest number: 16F8
Signing time: Mon 27 Oct 2025 07:01:26 +0000
Manifest this update: Mon 27 Oct 2025 07:01:26 +0000
Manifest next update: Tue 28 Oct 2025 07:01:26 +0000
Files and hashes: 1: LO_eMLilizIqQx8IKe1P8ztarBg.crl (hash: 5p3rgcwlwPp+Tjm0I0dXveC8BEs2Umt664RkX2JThig=)
2: mQcxBkZ7-mWqzkv2ZtLrNKCsXXw.roa (hash: KchD7ZXPUhVAHhfHUs6iNxTS5Xs7vYjFeQVLeVV+Bu8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/33a0f9-1178-4a6d-b964-ff765f8531d5/1/LO_eMLilizIqQx8IKe1P8ztarBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/33a0f9-1178-4a6d-b964-ff765f8531d5/1/LO_eMLilizIqQx8IKe1P8ztarBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LO_eMLilizIqQx8IKe1P8ztarBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 07:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:78:c6:37:05:3a:14:23:b6:be:42:f2:ca:13:44:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cefde30b8a58b322a431f0829ed4ff33b5aac18
Validity
Not Before: Oct 27 07:01:26 2025 GMT
Not After : Oct 28 07:01:26 2025 GMT
Subject: CN=bdc11fa9027e6e93284029a9560bd4d10324e400
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b0:58:e6:a7:17:5f:38:39:48:0d:5b:93:d7:
1f:07:aa:2c:a9:74:e0:43:dd:fc:0d:e2:82:e5:ed:
8c:7c:21:a0:65:94:ed:7d:5a:46:e9:72:99:25:66:
20:b9:ef:e0:f1:7c:6b:90:c2:b5:6d:91:0d:69:2d:
b2:25:75:37:21:57:49:57:d0:d1:4d:ef:e9:dc:29:
29:1b:03:5e:63:ca:ec:00:82:e2:03:db:db:a5:15:
5f:ac:b0:70:a0:d9:2e:51:f2:41:dd:24:c6:fd:44:
d2:75:dd:6e:fe:a6:d5:3f:e9:62:df:1b:8c:07:c4:
c7:94:81:c9:78:ce:ce:a9:84:e9:ae:52:60:ee:71:
ed:14:7c:0d:f0:f2:e8:9a:95:3c:ac:b0:2b:9d:91:
a0:c6:cb:e3:26:ee:4d:fd:2f:85:c9:f1:e4:52:72:
bc:db:33:95:84:08:09:60:49:8c:28:79:91:ea:e0:
14:32:cd:ca:28:0c:63:eb:84:f4:52:b4:e1:80:f8:
bc:b8:aa:4f:85:a7:e1:5f:e9:a6:ae:5e:e9:4d:90:
de:2d:0b:cf:61:45:ff:3c:04:47:64:53:45:95:15:
c2:dc:73:50:1b:be:bd:5e:2e:23:07:48:8b:9d:9f:
5d:b6:c3:88:99:3a:da:f2:d2:b1:23:aa:4e:11:1c:
b8:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:C1:1F:A9:02:7E:6E:93:28:40:29:A9:56:0B:D4:D1:03:24:E4:00
X509v3 Authority Key Identifier:
keyid:2C:EF:DE:30:B8:A5:8B:32:2A:43:1F:08:29:ED:4F:F3:3B:5A:AC:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LO_eMLilizIqQx8IKe1P8ztarBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/33a0f9-1178-4a6d-b964-ff765f8531d5/1/LO_eMLilizIqQx8IKe1P8ztarBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/33a0f9-1178-4a6d-b964-ff765f8531d5/1/LO_eMLilizIqQx8IKe1P8ztarBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:0b:dd:eb:37:1c:76:2f:e0:30:f0:a5:97:c4:04:b6:79:57:
f7:a7:7d:c5:ef:6e:e9:2d:51:38:d3:21:0f:a8:f4:fb:3a:a4:
9a:c3:9b:4b:20:fb:53:7d:e0:59:df:94:a2:b0:5e:13:69:73:
47:a5:fe:d4:5d:8c:f0:af:c9:2a:3a:67:52:d2:f0:3b:63:49:
36:37:2e:20:dd:a4:63:ac:ba:01:dd:b0:65:47:a0:e7:4c:a1:
70:7a:1c:b2:bf:ab:bc:49:d0:9a:f6:b8:0d:3c:41:97:e1:bc:
ad:8e:e0:12:b6:9a:d3:e0:82:2d:6a:c1:30:c1:55:d0:30:2a:
88:af:2d:f2:04:cd:1e:2d:81:2f:f6:ec:17:de:05:11:12:05:
50:42:90:cc:c7:b4:ce:f9:65:3c:5b:cf:5c:43:89:36:b2:e0:
e0:be:70:a5:fc:79:ee:ce:dd:c6:26:82:f6:f1:90:59:2b:13:
e6:ed:7c:e2:06:1b:91:e1:94:68:11:00:91:3e:36:0e:81:f6:
67:37:1d:d4:b4:e2:3f:92:a5:bc:60:dd:3c:66:a8:76:c8:b5:
35:78:21:8c:8c:a6:0c:03:42:07:aa:59:db:8b:4d:8e:b9:56:
7a:2d:64:73:1a:f8:f0:6d:c4:9d:f2:2f:86:db:ae:da:98:e5:
a8:16:cf:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 15:45:16 2025 by rpki-client