Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/7c97cf-195c-4fc1-95a3-637fa14656de/1/looX4WGWu3qGcY5rK9agfje0DGU.mft
File: looX4WGWu3qGcY5rK9agfje0DGU.mft (raw, json)
Hash identifier: 9Y7ylx3F2CLxHqa0kaOXpMcrzIZbOMiMJB28HecABKo=
Subject key identifier: 6E:10:C9:29:0A:C5:1C:5C:03:26:1E:E6:85:CD:4D:81:06:25:5C:87
Authority key identifier: 96:8A:17:E1:61:96:BB:7A:86:71:8E:6B:2B:D6:A0:7E:37:B4:0C:65
Certificate issuer: /CN=968a17e16196bb7a86718e6b2bd6a07e37b40c65
Certificate serial: 019A54BF90E0EDEC80EF7F03701A1043F014
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/looX4WGWu3qGcY5rK9agfje0DGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/7c97cf-195c-4fc1-95a3-637fa14656de/1/looX4WGWu3qGcY5rK9agfje0DGU.mft
Manifest number: 170E
Signing time: Wed 05 Nov 2025 16:00:31 +0000
Manifest this update: Wed 05 Nov 2025 16:00:31 +0000
Manifest next update: Thu 06 Nov 2025 16:00:31 +0000
Files and hashes: 1: DujQDMx3DXEUwl_S25-DE-FhKlg.roa (hash: kc2HgT2zi7ovcfO8xiQnJUXKfZ/NJb+y4s0qXknod8A=)
2: looX4WGWu3qGcY5rK9agfje0DGU.crl (hash: xrPAbu73lYSVM7xxnZvqhawdSBdlksr9s+P5h2OkyTE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/7c97cf-195c-4fc1-95a3-637fa14656de/1/looX4WGWu3qGcY5rK9agfje0DGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/7c97cf-195c-4fc1-95a3-637fa14656de/1/looX4WGWu3qGcY5rK9agfje0DGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/looX4WGWu3qGcY5rK9agfje0DGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 16:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:bf:90:e0:ed:ec:80:ef:7f:03:70:1a:10:43:f0:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=968a17e16196bb7a86718e6b2bd6a07e37b40c65
Validity
Not Before: Nov 5 16:00:31 2025 GMT
Not After : Nov 6 16:00:31 2025 GMT
Subject: CN=6e10c9290ac51c5c03261ee685cd4d8106255c87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:77:31:e6:2d:d4:b1:5d:7f:07:6b:f6:21:d6:
09:85:5e:53:8d:4b:63:9f:a9:b9:04:0e:a3:ae:69:
34:4e:38:1f:8d:2f:5d:d5:3c:a4:32:c6:dc:c3:54:
16:ea:10:14:22:f5:55:6e:53:0d:fd:ec:70:9e:72:
fe:e2:6c:be:a4:a1:07:b8:6e:fe:71:c1:06:d9:7a:
58:0c:d2:35:89:46:bc:5a:ad:c9:cd:97:10:21:9d:
dc:ad:c1:0e:34:31:8e:fc:d7:a4:65:5e:ce:f8:b1:
cb:33:4b:6e:75:d1:4d:29:d5:b3:87:9c:0c:08:dd:
7e:00:0d:c0:4a:2b:68:f8:64:a3:67:c9:4d:4a:5e:
ac:07:d9:b8:05:2f:29:d3:98:d0:4f:d1:9c:0c:97:
cd:18:7b:ae:52:49:b5:0e:ff:88:33:f2:a7:05:00:
9f:41:de:64:85:ab:7a:75:64:6e:27:96:f3:a4:0a:
a0:60:d9:f0:fd:2b:9e:28:57:c6:0e:35:68:b5:fe:
b2:20:3d:b6:2e:ef:6a:70:ea:60:44:1d:67:23:0f:
d6:43:27:63:0e:ab:12:f1:c6:ef:d6:64:2c:1f:63:
c5:50:87:b7:b5:a2:7c:9d:55:76:a9:1b:1f:3d:2d:
21:66:75:7f:73:e5:68:9a:53:c4:18:3c:68:b4:87:
6c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:10:C9:29:0A:C5:1C:5C:03:26:1E:E6:85:CD:4D:81:06:25:5C:87
X509v3 Authority Key Identifier:
keyid:96:8A:17:E1:61:96:BB:7A:86:71:8E:6B:2B:D6:A0:7E:37:B4:0C:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/looX4WGWu3qGcY5rK9agfje0DGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/7c97cf-195c-4fc1-95a3-637fa14656de/1/looX4WGWu3qGcY5rK9agfje0DGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/7c97cf-195c-4fc1-95a3-637fa14656de/1/looX4WGWu3qGcY5rK9agfje0DGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:b0:62:b0:5d:2d:4e:f9:6c:e2:e2:93:b9:ed:33:dd:48:1b:
6e:67:6a:90:19:78:fa:92:4c:01:56:06:bf:9e:30:bd:a9:6e:
77:28:f3:f3:98:bb:07:54:31:5f:fc:a0:1d:1e:f0:a5:6b:ee:
de:b5:81:ad:af:42:59:de:ab:22:c5:44:50:71:53:32:2a:bd:
de:64:d7:d6:fb:ca:97:64:e6:22:cb:ff:83:18:21:1b:f7:8e:
49:6b:19:1d:a1:31:ba:4b:b0:87:54:66:bd:ce:b1:72:08:d9:
ba:43:ed:da:bc:3d:a1:58:f2:23:d7:aa:11:47:5f:08:93:20:
c8:e9:b9:00:49:08:8b:72:9c:2b:2b:df:e1:7f:fc:17:39:98:
b5:3b:4e:e4:8c:57:5c:23:c0:34:25:7b:95:84:ab:31:6a:f9:
da:ca:23:55:f8:95:3e:3e:fc:5f:ff:c4:a4:e7:58:6a:21:24:
2f:5c:bf:11:66:3a:e9:5a:d9:d5:d8:ce:e5:0b:85:94:e0:0c:
67:ca:0d:61:d1:5f:a5:78:a1:bf:e3:d8:35:12:55:a3:fc:98:
8c:7b:a7:ac:4c:a5:6c:1e:aa:41:45:3b:45:9c:4e:db:e4:6b:
b7:1b:8c:49:9b:90:ca:85:22:5a:41:50:4f:af:f0:8d:d7:cb:
39:69:6d:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 01:19:57 2025 by rpki-client