Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/LoOL9dPe_8At-hhOTw6FEVNeUX0.mft
File: LoOL9dPe_8At-hhOTw6FEVNeUX0.mft (raw, json)
Hash identifier: TIumAb8RICTofq7qwn2jnoBuM9PazxAfauEkRiS6+Jo=
Subject key identifier: A7:FC:8E:37:17:64:0C:6E:59:80:9C:E5:E1:23:1F:61:E4:5B:BE:E1
Authority key identifier: 2E:83:8B:F5:D3:DE:FF:C0:2D:FA:18:4E:4F:0E:85:11:53:5E:51:7D
Certificate issuer: /CN=2e838bf5d3deffc02dfa184e4f0e8511535e517d
Certificate serial: 019A25F855C13D89B509F50216B567F883F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LoOL9dPe_8At-hhOTw6FEVNeUX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/LoOL9dPe_8At-hhOTw6FEVNeUX0.mft
Manifest number: 06DD
Signing time: Mon 27 Oct 2025 14:00:23 +0000
Manifest this update: Mon 27 Oct 2025 14:00:23 +0000
Manifest next update: Tue 28 Oct 2025 14:00:23 +0000
Files and hashes: 1: LoOL9dPe_8At-hhOTw6FEVNeUX0.crl (hash: 7pqjEZbWQM0C4i/fcXN7KyWOJzS+frBUtiB6FcuGtns=)
2: S8Gv615Ih2EECVB1a2b3J3u_PZw.roa (hash: QLn7xaZ0/yy3B92jWZmiyfhzxbYSpkw1Q0HqcssnojQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/LoOL9dPe_8At-hhOTw6FEVNeUX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/LoOL9dPe_8At-hhOTw6FEVNeUX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/LoOL9dPe_8At-hhOTw6FEVNeUX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 14:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:f8:55:c1:3d:89:b5:09:f5:02:16:b5:67:f8:83:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e838bf5d3deffc02dfa184e4f0e8511535e517d
Validity
Not Before: Oct 27 14:00:23 2025 GMT
Not After : Oct 28 14:00:23 2025 GMT
Subject: CN=a7fc8e3717640c6e59809ce5e1231f61e45bbee1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:60:24:c7:dd:3a:6b:31:57:a9:71:00:6f:6a:
51:bc:00:c7:9b:b3:f9:96:7a:52:5d:a0:2c:66:b0:
3b:13:c3:97:61:06:16:f6:83:7b:7f:56:e3:6a:8c:
3f:f1:7b:9e:91:29:de:c5:ae:98:2c:e2:fe:e2:9a:
05:98:34:5a:ae:cd:aa:37:af:2e:12:ac:a6:50:97:
65:8e:a5:c5:64:4d:8b:ea:9b:52:2a:9b:08:5a:6c:
79:ec:0d:ec:d6:2a:51:45:57:91:88:9a:46:22:3e:
de:94:b3:8f:39:75:13:f8:06:c8:79:8b:09:ca:83:
8a:5a:52:e8:64:ad:2e:32:7d:88:90:e4:c9:4c:f7:
2b:41:71:34:0a:47:8c:17:0c:8c:b4:e9:6e:92:6b:
8e:0e:3f:d8:17:8f:a9:38:7f:d6:79:93:05:9e:3f:
11:35:52:cd:3c:18:6d:63:ac:b5:c7:83:8d:40:0a:
63:b0:4a:ea:91:88:18:49:bc:e3:fa:96:40:f7:64:
3c:72:c3:0a:64:7b:98:82:ea:88:a8:50:53:31:06:
aa:49:80:4c:ca:b9:d2:6c:00:2f:aa:a3:a6:b5:20:
52:57:40:ee:b0:88:7f:4b:4b:8b:a7:05:f0:0d:e2:
67:12:dc:93:6c:6f:60:67:17:0f:51:a5:1b:6f:8c:
37:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:FC:8E:37:17:64:0C:6E:59:80:9C:E5:E1:23:1F:61:E4:5B:BE:E1
X509v3 Authority Key Identifier:
keyid:2E:83:8B:F5:D3:DE:FF:C0:2D:FA:18:4E:4F:0E:85:11:53:5E:51:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoOL9dPe_8At-hhOTw6FEVNeUX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/LoOL9dPe_8At-hhOTw6FEVNeUX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/LoOL9dPe_8At-hhOTw6FEVNeUX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:e4:85:bb:47:57:22:23:40:0f:40:92:a3:55:08:f4:c3:d5:
13:47:39:6a:6f:d2:1c:04:02:ad:67:df:61:cd:3e:52:e1:3e:
14:06:df:7c:87:3d:73:31:c7:11:92:3d:cb:94:30:5a:29:3d:
4b:5c:1f:98:bd:ae:c0:98:24:c4:da:1d:51:e6:2a:bc:de:69:
df:29:84:b2:8f:73:1a:d1:17:2e:a6:e7:06:93:4c:d8:d4:25:
ef:eb:7d:fb:48:71:65:9e:02:ec:15:ba:30:15:8f:e3:68:1f:
85:ae:36:ca:e3:51:ab:c1:a0:4d:71:60:52:92:02:ad:46:88:
e3:5e:e6:40:13:64:e6:c8:1b:6d:d6:01:12:89:ea:f4:05:05:
bd:61:b9:15:f2:ac:5c:f9:82:0d:fa:a5:df:1a:ab:55:06:83:
49:a5:09:e4:b4:f8:7b:7c:5e:77:d3:a2:c6:9d:57:f6:13:fc:
73:36:52:6a:ab:cd:db:6c:e8:68:a8:7a:dc:09:45:42:e2:97:
a3:e0:11:20:1b:8e:3d:0a:ed:73:cd:d7:04:df:93:6f:90:26:
ab:11:1f:fb:8f:bb:a1:37:bf:8c:b3:b3:0f:eb:67:6d:ef:f9:
21:c7:c2:a3:1e:55:61:6f:fc:24:7d:87:17:52:0d:aa:89:47:
b7:8a:6d:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZol+FXBPYm1CfUCFrVn+IPwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlODM4YmY1ZDNkZWZmYzAyZGZhMTg0ZTRmMGU4NTExNTM1
ZTUxN2QwHhcNMjUxMDI3MTQwMDIzWhcNMjUxMDI4MTQwMDIzWjAzMTEwLwYDVQQD
EyhhN2ZjOGUzNzE3NjQwYzZlNTk4MDljZTVlMTIzMWY2MWU0NWJiZWUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWAkx906azFXqXEAb2pRvADHm7P5
lnpSXaAsZrA7E8OXYQYW9oN7f1bjaow/8XuekSnexa6YLOL+4poFmDRars2qN68u
EqymUJdljqXFZE2L6ptSKpsIWmx57A3s1ipRRVeRiJpGIj7elLOPOXUT+AbIeYsJ
yoOKWlLoZK0uMn2IkOTJTPcrQXE0CkeMFwyMtOlukmuODj/YF4+pOH/WeZMFnj8R
NVLNPBhtY6y1x4ONQApjsErqkYgYSbzj+pZA92Q8csMKZHuYguqIqFBTMQaqSYBM
yrnSbAAvqqOmtSBSV0DusIh/S0uLpwXwDeJnEtyTbG9gZxcPUaUbb4w3GQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKf8jjcXZAxuWYCc5eEjH2HkW77hMB8GA1UdIwQY
MBaAFC6Di/XT3v/ALfoYTk8OhRFTXlF9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTG9PTDlkUGVfOEF0LWhoT1R3NkZFVk5lVVgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9jNDQzODktODFiNS00NTVjLTg1YWMt
NGNkODAzMDgxNzFhLzEvTG9PTDlkUGVfOEF0LWhoT1R3NkZFVk5lVVgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC9jNDQzODktODFiNS00NTVjLTg1YWMtNGNkODAzMDgxNzFh
LzEvTG9PTDlkUGVfOEF0LWhoT1R3NkZFVk5lVVgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOeSFu0dX
IiNAD0CSo1UI9MPVE0c5am/SHAQCrWffYc0+UuE+FAbffIc9czHHEZI9y5QwWik9
S1wfmL2uwJgkxNodUeYqvN5p3ymEso9zGtEXLqbnBpNM2NQl7+t9+0hxZZ4C7BW6
MBWP42gfha42yuNRq8GgTXFgUpICrUaI417mQBNk5sgbbdYBEonq9AUFvWG5FfKs
XPmCDfql3xqrVQaDSaUJ5LT4e3xed9Oixp1X9hP8czZSaqvN22zoaKh63AlFQuKX
o+ARIBuOPQrtc83XBN+Tb5AmqxEf+4+7oTe/jLOzD+tnbe/5IcfCox5VYW/8JH2H
F1INqolHt4ptbA==
-----END CERTIFICATE-----
Generated at Mon Oct 27 20:35:25 2025 by rpki-client