Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/8b1089-aa37-4236-bb1e-4f3ee8365d8f/1/lOxdPU2xSEp34sh2PXSgvXxDTak.mft
File: lOxdPU2xSEp34sh2PXSgvXxDTak.mft (raw, json)
Hash identifier: wpOnr1QlC8AQmAgyO3EUBanbEmUfk8PnBR+YbapEOBg=
Subject key identifier: C6:08:AC:5C:C1:0F:12:90:6A:FC:70:35:83:51:C1:8D:67:D3:F1:F3
Authority key identifier: 94:EC:5D:3D:4D:B1:48:4A:77:E2:C8:76:3D:74:A0:BD:7C:43:4D:A9
Certificate issuer: /CN=94ec5d3d4db1484a77e2c8763d74a0bd7c434da9
Certificate serial: 019A714A307EAC8C0015083E4F7936D3CE27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lOxdPU2xSEp34sh2PXSgvXxDTak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/8b1089-aa37-4236-bb1e-4f3ee8365d8f/1/lOxdPU2xSEp34sh2PXSgvXxDTak.mft
Manifest number: 0E13
Signing time: Tue 11 Nov 2025 05:01:18 +0000
Manifest this update: Tue 11 Nov 2025 05:01:18 +0000
Manifest next update: Wed 12 Nov 2025 05:01:18 +0000
Files and hashes: 1: 50o06An3k3A8kOiunWV55W1-Ajg.roa (hash: AcFz8bkfqTGlKpcv2q2Ys5Hm4t2OZ+46UtANIMDmoyM=)
2: lOxdPU2xSEp34sh2PXSgvXxDTak.crl (hash: yTrZTMEiZSSoOK52g1mFRa1Q4DejudD7zkB94eABMxA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/8b1089-aa37-4236-bb1e-4f3ee8365d8f/1/lOxdPU2xSEp34sh2PXSgvXxDTak.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/8b1089-aa37-4236-bb1e-4f3ee8365d8f/1/lOxdPU2xSEp34sh2PXSgvXxDTak.mft
rsync://rpki.ripe.net/repository/DEFAULT/lOxdPU2xSEp34sh2PXSgvXxDTak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:4a:30:7e:ac:8c:00:15:08:3e:4f:79:36:d3:ce:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94ec5d3d4db1484a77e2c8763d74a0bd7c434da9
Validity
Not Before: Nov 11 05:01:18 2025 GMT
Not After : Nov 12 05:01:18 2025 GMT
Subject: CN=c608ac5cc10f12906afc70358351c18d67d3f1f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:13:6d:7d:85:e8:2d:16:6a:82:ab:4f:f8:43:
72:b0:65:67:3a:72:b7:13:06:a3:7b:7a:0f:a9:07:
f3:9f:5b:69:19:af:9f:1b:89:e8:a3:9b:e5:56:76:
57:0c:c2:06:24:15:64:a1:6f:15:85:96:6a:e6:db:
c9:59:35:04:55:4c:bd:0b:f9:2c:9e:82:7f:07:be:
ab:59:89:ed:ad:d1:0a:f1:8d:e0:26:ab:ab:b1:a0:
e0:44:bf:a5:1f:95:06:91:3b:3c:90:94:eb:be:4b:
06:20:9d:b7:05:cd:17:fd:ef:fa:33:19:81:db:9d:
18:42:1e:b9:d1:8e:40:b2:e2:ca:a3:bd:07:df:a9:
62:37:26:94:d7:63:59:2f:ed:ae:3a:3a:c7:7f:a3:
b5:58:d4:22:60:6d:95:bf:81:aa:50:1a:0f:e7:b2:
60:3e:22:ae:41:db:e5:f6:6a:05:8c:94:75:67:bc:
5c:30:c6:f1:4d:a1:e7:21:8a:2e:3f:da:c4:1d:c2:
01:8b:cc:64:67:f0:32:df:37:96:4b:2e:23:1c:a0:
f3:12:de:1d:ae:62:13:0d:6f:65:bf:b5:f3:e9:12:
50:1b:73:a1:85:08:f0:26:cd:20:6c:05:73:0a:82:
ec:77:3c:ed:c4:ca:c1:29:20:40:be:0f:ac:90:5c:
1b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:08:AC:5C:C1:0F:12:90:6A:FC:70:35:83:51:C1:8D:67:D3:F1:F3
X509v3 Authority Key Identifier:
keyid:94:EC:5D:3D:4D:B1:48:4A:77:E2:C8:76:3D:74:A0:BD:7C:43:4D:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lOxdPU2xSEp34sh2PXSgvXxDTak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8b1089-aa37-4236-bb1e-4f3ee8365d8f/1/lOxdPU2xSEp34sh2PXSgvXxDTak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8b1089-aa37-4236-bb1e-4f3ee8365d8f/1/lOxdPU2xSEp34sh2PXSgvXxDTak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:62:02:e0:bd:1c:f4:2c:ef:2a:20:d9:b8:65:29:1c:87:f1:
a0:c6:e2:83:0c:ad:f7:b9:25:a7:61:30:fa:1f:1a:71:28:53:
82:10:1f:58:fd:7b:9b:99:7b:a4:7b:0b:dd:d7:47:18:1d:69:
58:a6:9f:db:c3:6b:a4:a5:9b:41:a0:a6:30:38:fb:66:ec:f9:
25:28:24:e2:b9:28:a5:b2:e5:47:5c:17:f5:e0:d2:01:ec:7b:
d5:3a:98:2f:49:ba:b6:95:eb:22:31:4e:50:ee:1f:36:71:5b:
6d:bf:d0:00:00:5a:d2:b8:09:42:40:22:2b:07:3c:a6:55:a9:
0d:08:95:82:fc:14:e7:7f:fc:7a:d3:06:f4:47:5a:0b:00:47:
df:24:31:2c:39:a9:0c:55:22:8a:0f:77:21:4f:c3:2b:e2:f6:
68:d8:7a:06:1d:38:ec:e0:f5:b2:f9:b0:41:59:aa:64:cb:f8:
d2:cd:14:3e:bb:39:dd:bf:29:24:c8:07:1a:33:22:04:50:05:
a3:91:cd:ea:ab:26:3f:88:7a:0d:81:e2:3c:b6:64:9a:e9:e6:
46:fa:87:92:08:ef:64:53:48:43:7a:d5:98:23:e7:4c:c2:37:
e5:cd:87:e2:5f:cb:24:39:a2:e4:1f:82:c3:f0:00:d6:e5:77:
bc:d5:18:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxSjB+rIwAFQg+T3k2084nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0ZWM1ZDNkNGRiMTQ4NGE3N2UyYzg3NjNkNzRhMGJkN2M0
MzRkYTkwHhcNMjUxMTExMDUwMTE4WhcNMjUxMTEyMDUwMTE4WjAzMTEwLwYDVQQD
EyhjNjA4YWM1Y2MxMGYxMjkwNmFmYzcwMzU4MzUxYzE4ZDY3ZDNmMWYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhNtfYXoLRZqgqtP+ENysGVnOnK3
Ewaje3oPqQfzn1tpGa+fG4noo5vlVnZXDMIGJBVkoW8VhZZq5tvJWTUEVUy9C/ks
noJ/B76rWYntrdEK8Y3gJqursaDgRL+lH5UGkTs8kJTrvksGIJ23Bc0X/e/6MxmB
250YQh650Y5AsuLKo70H36liNyaU12NZL+2uOjrHf6O1WNQiYG2Vv4GqUBoP57Jg
PiKuQdvl9moFjJR1Z7xcMMbxTaHnIYouP9rEHcIBi8xkZ/Ay3zeWSy4jHKDzEt4d
rmITDW9lv7Xz6RJQG3OhhQjwJs0gbAVzCoLsdzztxMrBKSBAvg+skFwbrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMYIrFzBDxKQavxwNYNRwY1n0/HzMB8GA1UdIwQY
MBaAFJTsXT1NsUhKd+LIdj10oL18Q02pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbE94ZFBVMnhTRXAzNHNoMlBYU2d2WHhEVGFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC84YjEwODktYWEzNy00MjM2LWJiMWUt
NGYzZWU4MzY1ZDhmLzEvbE94ZFBVMnhTRXAzNHNoMlBYU2d2WHhEVGFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC84YjEwODktYWEzNy00MjM2LWJiMWUtNGYzZWU4MzY1ZDhm
LzEvbE94ZFBVMnhTRXAzNHNoMlBYU2d2WHhEVGFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN2IC4L0c
9CzvKiDZuGUpHIfxoMbigwyt97klp2Ew+h8acShTghAfWP17m5l7pHsL3ddHGB1p
WKaf28NrpKWbQaCmMDj7Zuz5JSgk4rkopbLlR1wX9eDSAex71TqYL0m6tpXrIjFO
UO4fNnFbbb/QAABa0rgJQkAiKwc8plWpDQiVgvwU53/8etMG9EdaCwBH3yQxLDmp
DFUiig93IU/DK+L2aNh6Bh047OD1svmwQVmqZMv40s0UPrs53b8pJMgHGjMiBFAF
o5HN6qsmP4h6DYHiPLZkmunmRvqHkgjvZFNIQ3rVmCPnTMI35c2H4l/LJDmi5B+C
w/AA1uV3vNUY2g==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:03 2025 by rpki-client