Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/d520db-bdf8-4f27-8dff-8c130e6841db/1/LOKZUFiz3prtI6Yff7e1t7GTmEo.mft
File: LOKZUFiz3prtI6Yff7e1t7GTmEo.mft (raw, json)
Hash identifier: vx/tQsZsmukEionOJnk5SoEM/HkV1dMMA5szCQ+OQyU=
Subject key identifier: 50:F1:AC:78:93:2B:D2:C3:1F:23:96:B5:EE:C2:CD:C3:7A:BC:31:B2
Authority key identifier: 2C:E2:99:50:58:B3:DE:9A:ED:23:A6:1F:7F:B7:B5:B7:B1:93:98:4A
Certificate issuer: /CN=2ce2995058b3de9aed23a61f7fb7b5b7b193984a
Certificate serial: 019A7294017CBAE18F0DA5F017A14772D66E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LOKZUFiz3prtI6Yff7e1t7GTmEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/d520db-bdf8-4f27-8dff-8c130e6841db/1/LOKZUFiz3prtI6Yff7e1t7GTmEo.mft
Manifest number: 0E16
Signing time: Tue 11 Nov 2025 11:01:33 +0000
Manifest this update: Tue 11 Nov 2025 11:01:33 +0000
Manifest next update: Wed 12 Nov 2025 11:01:33 +0000
Files and hashes: 1: 7x1Ss4505QNa0fMVELtO8LmLJeM.roa (hash: 9SZiDlSiFrfDTptEJc86ZTB/oJuky1dBcaDe8vDIhaU=)
2: LOKZUFiz3prtI6Yff7e1t7GTmEo.crl (hash: p0Y/at3Nw8zLD4XkW6D/kjKf6PIjeiG570Li+bLBfsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/d520db-bdf8-4f27-8dff-8c130e6841db/1/LOKZUFiz3prtI6Yff7e1t7GTmEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/d520db-bdf8-4f27-8dff-8c130e6841db/1/LOKZUFiz3prtI6Yff7e1t7GTmEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/LOKZUFiz3prtI6Yff7e1t7GTmEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:94:01:7c:ba:e1:8f:0d:a5:f0:17:a1:47:72:d6:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ce2995058b3de9aed23a61f7fb7b5b7b193984a
Validity
Not Before: Nov 11 11:01:33 2025 GMT
Not After : Nov 12 11:01:33 2025 GMT
Subject: CN=50f1ac78932bd2c31f2396b5eec2cdc37abc31b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:49:26:bc:7c:ae:09:77:3c:4d:a0:93:61:7f:
f8:1e:e4:9b:df:2b:4f:dd:17:7b:72:54:f7:cf:e4:
72:97:d6:6c:01:bd:43:e3:0d:f8:e0:6f:af:fb:bf:
ba:d1:3f:a9:33:fc:d1:43:a1:52:63:03:2b:db:09:
84:3f:60:b5:14:b4:cf:b1:d4:cc:52:f9:f2:ca:7c:
04:d6:b3:9d:45:69:56:e3:60:93:ec:0d:d0:fc:e9:
77:4c:c3:07:a6:c6:8e:4e:df:79:d3:47:34:5b:f5:
f5:c2:cf:5a:8d:a5:f7:94:0b:16:19:4d:b9:cd:2f:
2a:b9:6b:9b:31:b1:5b:a4:31:2c:41:9f:13:fd:54:
e9:db:54:4d:87:c4:3c:99:95:de:bd:cc:4b:7a:81:
fb:d9:30:bd:74:9e:4f:32:fb:7b:6f:6d:c9:0b:f1:
5c:12:f0:17:3f:64:d5:dd:76:7c:41:07:25:1a:c8:
4f:3f:43:ca:db:8b:80:3b:ef:2a:b2:82:c4:6a:2a:
57:d6:96:6e:be:fd:65:39:a1:d3:8a:64:2b:55:8c:
28:96:22:ec:a1:45:54:3f:3d:56:ea:52:bb:ca:ad:
b0:51:3c:9b:ab:1d:04:b8:8a:b3:6e:67:3f:5d:de:
ad:2f:c6:bf:1e:7e:c1:4c:35:02:a0:5a:8b:b5:9a:
86:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:F1:AC:78:93:2B:D2:C3:1F:23:96:B5:EE:C2:CD:C3:7A:BC:31:B2
X509v3 Authority Key Identifier:
keyid:2C:E2:99:50:58:B3:DE:9A:ED:23:A6:1F:7F:B7:B5:B7:B1:93:98:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LOKZUFiz3prtI6Yff7e1t7GTmEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/d520db-bdf8-4f27-8dff-8c130e6841db/1/LOKZUFiz3prtI6Yff7e1t7GTmEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/d520db-bdf8-4f27-8dff-8c130e6841db/1/LOKZUFiz3prtI6Yff7e1t7GTmEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:2e:a6:e6:2a:46:f2:37:96:9b:0f:5a:db:23:cd:58:41:93:
44:c3:a0:df:87:77:8d:cf:6d:a6:b1:e6:21:5a:95:db:d7:d2:
df:52:28:73:76:09:a6:9e:d5:77:3a:56:63:96:44:08:e6:32:
8e:36:85:8d:75:a3:17:ba:57:f2:f4:bf:5a:f2:43:5c:64:4c:
76:de:01:23:a2:e8:72:0d:88:9e:2e:62:3f:cc:93:a5:a3:60:
ba:74:10:8c:73:26:31:cc:33:a2:bf:cb:80:d2:48:51:53:d8:
31:f9:ad:4f:48:b5:41:23:25:e7:8c:7f:6e:19:58:e9:cc:34:
bd:61:b2:25:a4:84:c2:de:3c:3b:20:ae:93:ad:17:04:de:54:
59:bc:18:43:c5:82:97:3c:74:ba:74:9e:63:ba:e7:1e:76:10:
1c:af:d1:9d:9b:c4:e5:63:39:26:1f:72:8c:71:06:07:4f:80:
e7:c6:58:95:76:a1:64:67:ee:09:1b:86:ee:44:32:c0:37:b9:
9f:10:1c:db:6b:0e:b0:68:e9:24:9b:13:e1:08:ce:2f:a3:cd:
45:fc:03:1b:a3:46:37:21:a4:dc:79:0c:a0:ae:fb:7b:82:ca:
e9:69:06:8a:90:aa:71:90:a5:cc:d9:8a:dd:68:c6:a2:d4:2e:
9e:97:c7:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpylAF8uuGPDaXwF6FHctZuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjZTI5OTUwNThiM2RlOWFlZDIzYTYxZjdmYjdiNWI3YjE5
Mzk4NGEwHhcNMjUxMTExMTEwMTMzWhcNMjUxMTEyMTEwMTMzWjAzMTEwLwYDVQQD
Eyg1MGYxYWM3ODkzMmJkMmMzMWYyMzk2YjVlZWMyY2RjMzdhYmMzMWIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0kmvHyuCXc8TaCTYX/4HuSb3ytP
3Rd7clT3z+Ryl9ZsAb1D4w344G+v+7+60T+pM/zRQ6FSYwMr2wmEP2C1FLTPsdTM
UvnyynwE1rOdRWlW42CT7A3Q/Ol3TMMHpsaOTt9500c0W/X1ws9ajaX3lAsWGU25
zS8quWubMbFbpDEsQZ8T/VTp21RNh8Q8mZXevcxLeoH72TC9dJ5PMvt7b23JC/Fc
EvAXP2TV3XZ8QQclGshPP0PK24uAO+8qsoLEaipX1pZuvv1lOaHTimQrVYwoliLs
oUVUPz1W6lK7yq2wUTybqx0EuIqzbmc/Xd6tL8a/Hn7BTDUCoFqLtZqG5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFDxrHiTK9LDHyOWte7CzcN6vDGyMB8GA1UdIwQY
MBaAFCzimVBYs96a7SOmH3+3tbexk5hKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTE9LWlVGaXozcHJ0STZZZmY3ZTF0N0dUbUVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9kNTIwZGItYmRmOC00ZjI3LThkZmYt
OGMxMzBlNjg0MWRiLzEvTE9LWlVGaXozcHJ0STZZZmY3ZTF0N0dUbUVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy9kNTIwZGItYmRmOC00ZjI3LThkZmYtOGMxMzBlNjg0MWRi
LzEvTE9LWlVGaXozcHJ0STZZZmY3ZTF0N0dUbUVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARC6m5ipG
8jeWmw9a2yPNWEGTRMOg34d3jc9tprHmIVqV29fS31Ioc3YJpp7VdzpWY5ZECOYy
jjaFjXWjF7pX8vS/WvJDXGRMdt4BI6Locg2Ini5iP8yTpaNgunQQjHMmMcwzor/L
gNJIUVPYMfmtT0i1QSMl54x/bhlY6cw0vWGyJaSEwt48OyCuk60XBN5UWbwYQ8WC
lzx0unSeY7rnHnYQHK/RnZvE5WM5Jh9yjHEGB0+A58ZYlXahZGfuCRuG7kQywDe5
nxAc22sOsGjpJJsT4QjOL6PNRfwDG6NGNyGk3HkMoK77e4LK6WkGipCqcZClzNmK
3WjGotQunpfH/g==
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:18:27 2025 by rpki-client