Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/LoXNafYRaXriRpasdl1Wt13406E.mft
File: LoXNafYRaXriRpasdl1Wt13406E.mft (raw, json)
Hash identifier: F9994wjh4j5B1RIPcAdUoB4KFY61yFmXdMW6h3LEVds=
Subject key identifier: CF:1A:3E:AF:2E:97:D6:D6:5E:11:E4:78:03:0E:D2:D7:7A:CD:71:3F
Authority key identifier: 2E:85:CD:69:F6:11:69:7A:E2:46:96:AC:76:5D:56:B7:5D:F8:D3:A1
Certificate issuer: /CN=2e85cd69f611697ae24696ac765d56b75df8d3a1
Certificate serial: 019A21E46C3B64939EB3372B707BB6FE75F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LoXNafYRaXriRpasdl1Wt13406E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/LoXNafYRaXriRpasdl1Wt13406E.mft
Manifest number: 060B
Signing time: Sun 26 Oct 2025 19:00:09 +0000
Manifest this update: Sun 26 Oct 2025 19:00:09 +0000
Manifest next update: Mon 27 Oct 2025 19:00:09 +0000
Files and hashes: 1: LoXNafYRaXriRpasdl1Wt13406E.crl (hash: V4WtcK6QEvD5L6HOEL7AWDJoiKcp+fKsDAoI8AMFquU=)
2: V4UHEu5lFuhdZwHH6lxxX4Rsnp4.roa (hash: QxXsgkZ9Y9z5B4JIZIQ9pTgrtbYM89E088MqJxxgyOE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/LoXNafYRaXriRpasdl1Wt13406E.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/LoXNafYRaXriRpasdl1Wt13406E.mft
rsync://rpki.ripe.net/repository/DEFAULT/LoXNafYRaXriRpasdl1Wt13406E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:e4:6c:3b:64:93:9e:b3:37:2b:70:7b:b6:fe:75:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e85cd69f611697ae24696ac765d56b75df8d3a1
Validity
Not Before: Oct 26 19:00:09 2025 GMT
Not After : Oct 27 19:00:09 2025 GMT
Subject: CN=cf1a3eaf2e97d6d65e11e478030ed2d77acd713f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:4c:5e:84:ee:06:01:65:b3:2a:16:e5:5d:18:
3d:b0:fa:d4:8b:1d:0c:55:56:6b:7d:17:b4:ec:25:
5c:d0:e4:b1:89:a1:d0:30:1e:32:5b:e8:f1:5a:2d:
c4:27:6d:14:fa:a2:f0:65:be:e5:91:93:e4:45:c0:
94:e2:83:73:94:63:e2:ac:4b:08:6d:79:b5:98:d3:
9a:49:4c:60:e7:48:da:85:9c:03:24:82:f8:38:ac:
6d:7e:b5:22:b3:2a:19:3f:48:17:09:01:87:08:e6:
91:01:7c:68:ed:5b:f6:17:1a:af:29:52:54:9f:d1:
79:5a:dc:bb:b2:0d:a8:64:62:dc:86:69:48:c3:08:
cd:b4:d9:d4:4e:7d:f8:80:fe:1e:9f:63:e8:49:6d:
aa:30:7c:c7:9a:f0:bb:28:2f:c0:39:7b:e3:35:77:
db:8b:ee:77:8c:4e:0d:ab:29:f0:9d:f9:f6:3f:2f:
c9:47:3a:1d:b4:4f:6d:82:60:21:7f:83:69:a0:e5:
e6:99:d4:ca:d8:3f:c2:cd:f6:74:61:66:19:05:ab:
4a:de:dd:51:03:56:bc:a3:40:8d:9b:c0:12:4d:6d:
7b:f9:db:ba:ab:57:f0:b5:af:5b:61:0e:7b:28:3f:
fc:77:78:61:03:57:18:f6:db:09:36:01:f1:42:4d:
d7:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:1A:3E:AF:2E:97:D6:D6:5E:11:E4:78:03:0E:D2:D7:7A:CD:71:3F
X509v3 Authority Key Identifier:
keyid:2E:85:CD:69:F6:11:69:7A:E2:46:96:AC:76:5D:56:B7:5D:F8:D3:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoXNafYRaXriRpasdl1Wt13406E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/LoXNafYRaXriRpasdl1Wt13406E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/LoXNafYRaXriRpasdl1Wt13406E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
db:0c:28:1f:e1:6c:62:86:86:a3:e0:27:54:28:81:58:1c:3e:
f4:58:78:28:0b:f6:24:78:7c:46:2c:36:36:96:b5:53:c6:d4:
a5:01:c3:5f:82:66:c9:1a:48:31:9f:c0:69:41:43:1f:5c:ed:
53:80:a7:43:79:59:af:cb:59:0a:85:71:51:96:80:e3:46:ad:
a1:76:c3:ad:b1:95:2f:12:67:c4:e2:1c:3f:71:2f:6f:a9:f4:
8e:b1:9b:05:1a:31:23:98:6c:90:f8:49:b2:f8:d3:99:17:d4:
a9:c7:92:7a:b7:1a:0c:77:a3:fd:34:30:87:a6:24:c0:07:87:
09:4a:62:e3:5b:13:a4:92:bf:02:25:a7:11:d2:dc:89:b4:a8:
35:11:08:30:52:81:2b:90:d9:8a:7f:90:06:9c:e5:98:e9:de:
72:a6:e9:48:b8:e1:28:d5:18:17:37:bc:8c:a9:18:ab:09:74:
7c:2d:f3:c7:c7:3c:d5:df:b5:7d:ea:de:a9:d8:51:23:ec:1d:
a5:43:09:e9:f6:29:41:55:d0:04:d3:4e:7d:0b:7a:ff:9e:fc:
1f:16:35:77:1c:5e:0b:b7:47:7a:45:33:58:cd:71:d0:19:c6:
9e:79:a8:25:93:37:97:52:a9:b3:0c:13:34:8d:8c:2c:a1:2a:
4d:a5:84:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 01:46:40 2025 by rpki-client