Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/LoXNafYRaXriRpasdl1Wt13406E.mft
File: LoXNafYRaXriRpasdl1Wt13406E.mft (raw, json)
Hash identifier: 1126QdxeJ7Rzo+AFAS5QwrUfPwQ1kgDmzo+V8OerDXo=
Subject key identifier: DF:17:B5:4F:D8:42:CE:E8:51:3B:4F:0E:85:D0:D3:24:FF:0E:FA:EE
Authority key identifier: 2E:85:CD:69:F6:11:69:7A:E2:46:96:AC:76:5D:56:B7:5D:F8:D3:A1
Certificate issuer: /CN=2e85cd69f611697ae24696ac765d56b75df8d3a1
Certificate serial: 01992CA25810B59EA6C6FC5C0C33FC20775D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LoXNafYRaXriRpasdl1Wt13406E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/LoXNafYRaXriRpasdl1Wt13406E.mft
Manifest number: 058C
Signing time: Tue 09 Sep 2025 04:01:00 +0000
Manifest this update: Tue 09 Sep 2025 04:01:00 +0000
Manifest next update: Wed 10 Sep 2025 04:01:00 +0000
Files and hashes: 1: LoXNafYRaXriRpasdl1Wt13406E.crl (hash: LZ8MoUNRqXARDVIzh2tiWGEGgxGjC8E1p/ogVKB3sLE=)
2: V4UHEu5lFuhdZwHH6lxxX4Rsnp4.roa (hash: QxXsgkZ9Y9z5B4JIZIQ9pTgrtbYM89E088MqJxxgyOE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/LoXNafYRaXriRpasdl1Wt13406E.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/LoXNafYRaXriRpasdl1Wt13406E.mft
rsync://rpki.ripe.net/repository/DEFAULT/LoXNafYRaXriRpasdl1Wt13406E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 04:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2c:a2:58:10:b5:9e:a6:c6:fc:5c:0c:33:fc:20:77:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e85cd69f611697ae24696ac765d56b75df8d3a1
Validity
Not Before: Sep 9 04:01:00 2025 GMT
Not After : Sep 10 04:01:00 2025 GMT
Subject: CN=df17b54fd842cee8513b4f0e85d0d324ff0efaee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:41:9a:f8:1e:41:28:6a:cf:b4:c8:b0:8a:e6:
f0:40:cf:7b:69:29:a4:fd:da:66:a1:e4:44:83:0c:
2a:11:f4:8d:3b:e7:16:2c:a0:21:38:d8:72:f7:1b:
a3:b1:8d:0f:34:2c:ea:a3:9f:a9:cf:64:ed:c4:2a:
0d:c3:91:ea:bb:32:35:e1:d9:89:06:e4:f6:96:26:
9f:dc:39:9c:e0:76:5f:f0:ea:18:15:c7:76:ce:48:
cb:b3:e4:02:10:1f:94:fa:b2:e4:23:6c:4d:0a:25:
81:51:b3:38:fa:bd:79:41:64:7c:69:6d:a3:a8:8d:
f3:a5:84:92:53:65:1a:c1:24:a4:18:78:5c:48:1f:
87:4a:b2:7b:f8:f2:58:bc:20:2b:7e:32:2b:7a:00:
dc:4d:0e:7a:93:ad:00:43:d6:9c:53:7c:4c:e2:e4:
64:aa:e9:24:ed:6f:94:12:12:74:5c:4e:be:b1:2f:
14:08:3f:ee:8a:a8:fa:66:11:11:38:68:98:50:bc:
c5:e2:90:c2:ff:6e:9b:7f:c7:05:6e:d5:95:81:ac:
96:a4:4b:12:21:38:ac:ea:b0:3c:ed:b7:bc:7c:cc:
fe:8e:ec:a0:92:49:35:af:d3:30:a3:cc:49:c6:79:
ae:a0:89:c2:b3:24:7b:d6:d0:ce:00:37:47:77:c3:
6e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:17:B5:4F:D8:42:CE:E8:51:3B:4F:0E:85:D0:D3:24:FF:0E:FA:EE
X509v3 Authority Key Identifier:
keyid:2E:85:CD:69:F6:11:69:7A:E2:46:96:AC:76:5D:56:B7:5D:F8:D3:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoXNafYRaXriRpasdl1Wt13406E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/LoXNafYRaXriRpasdl1Wt13406E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/LoXNafYRaXriRpasdl1Wt13406E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:00:2f:af:3f:0e:60:0a:d2:0e:cf:15:70:02:fe:c6:84:e5:
c5:d8:3c:92:1a:a9:91:96:f8:f0:78:dc:d3:20:32:cd:9f:b7:
33:f0:0a:a5:18:fb:47:1c:92:84:aa:5e:de:f2:d8:96:22:2e:
2e:65:c7:59:63:f2:53:bc:c7:31:96:56:4b:23:01:e9:54:93:
08:b8:c8:07:4e:f6:6f:15:dc:99:d0:e8:f8:b0:0d:03:e3:30:
b0:62:a7:3b:68:2e:5d:64:1b:f2:42:53:5e:39:62:70:60:4b:
f1:ea:27:2f:76:cf:4d:d8:ec:1d:a8:62:2f:cf:b1:df:39:44:
40:46:ee:a1:aa:47:32:d1:d7:9a:82:e1:1a:7c:d6:04:95:b6:
d8:ef:de:b7:96:22:1e:1c:64:ca:6c:05:01:5e:64:09:74:1b:
2f:30:7f:3e:01:22:41:e0:5d:59:bc:92:e7:ce:d2:5c:39:d5:
25:2e:89:10:4b:c6:5a:f7:5e:98:c8:ee:e8:d3:e5:86:46:c9:
db:a1:5f:62:25:53:4b:8d:ef:ab:5d:65:9b:dc:3c:03:17:4d:
2e:5f:8c:c6:98:2a:20:49:b7:92:3d:13:89:ee:46:06:27:bd:
14:20:e6:3c:87:5a:85:b4:32:e8:d3:42:9c:cd:aa:90:c8:9c:
17:c3:83:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 09:48:05 2025 by rpki-client