Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/LoOL9dPe_8At-hhOTw6FEVNeUX0.mft
File: LoOL9dPe_8At-hhOTw6FEVNeUX0.mft (raw, json)
Hash identifier: PL1NqxioQU51ClDcY7B5tKwsPZna56o3ifKvkGvT5FY=
Subject key identifier: 79:B0:C3:34:61:9E:B8:8A:9B:61:38:9C:48:EE:E0:6A:E9:4D:FB:63
Authority key identifier: 2E:83:8B:F5:D3:DE:FF:C0:2D:FA:18:4E:4F:0E:85:11:53:5E:51:7D
Certificate issuer: /CN=2e838bf5d3deffc02dfa184e4f0e8511535e517d
Certificate serial: 01993492444A1774E04AD097546460CB8695
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LoOL9dPe_8At-hhOTw6FEVNeUX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/LoOL9dPe_8At-hhOTw6FEVNeUX0.mft
Manifest number: 0660
Signing time: Wed 10 Sep 2025 17:00:24 +0000
Manifest this update: Wed 10 Sep 2025 17:00:24 +0000
Manifest next update: Thu 11 Sep 2025 17:00:24 +0000
Files and hashes: 1: LoOL9dPe_8At-hhOTw6FEVNeUX0.crl (hash: nIwR9wt/PHLTO5bdRDA48J5XlsdBG+2IoSM0kqXYD6U=)
2: S8Gv615Ih2EECVB1a2b3J3u_PZw.roa (hash: QLn7xaZ0/yy3B92jWZmiyfhzxbYSpkw1Q0HqcssnojQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/LoOL9dPe_8At-hhOTw6FEVNeUX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/LoOL9dPe_8At-hhOTw6FEVNeUX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/LoOL9dPe_8At-hhOTw6FEVNeUX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:34:92:44:4a:17:74:e0:4a:d0:97:54:64:60:cb:86:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e838bf5d3deffc02dfa184e4f0e8511535e517d
Validity
Not Before: Sep 10 17:00:24 2025 GMT
Not After : Sep 11 17:00:24 2025 GMT
Subject: CN=79b0c334619eb88a9b61389c48eee06ae94dfb63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:93:14:ec:60:ab:24:9b:cb:d4:99:80:5b:d5:
2b:5f:35:59:e0:ae:d0:ee:91:36:8e:6e:2c:f1:b1:
cf:99:e4:4e:71:eb:c4:6c:7e:61:db:7f:a4:3b:13:
9c:3b:9f:6e:34:98:0c:3a:01:f1:7c:42:ec:1a:cf:
c6:44:bb:de:aa:0f:64:fe:68:bc:1a:3c:e9:e5:a9:
b4:c9:69:d7:61:6f:66:ff:a6:44:62:9f:9e:c1:28:
f1:98:d6:66:50:e7:bb:0a:66:25:7b:1d:fd:5a:e8:
7f:50:5c:d0:d0:ec:ad:3e:14:26:5c:75:01:0e:1a:
9c:e3:c3:ea:95:32:3f:3d:63:10:29:45:ef:ad:13:
91:33:eb:98:a9:ac:ab:ae:39:6c:75:7f:cb:06:c2:
ff:b9:27:62:2d:f1:cb:e1:d1:11:b8:d5:c3:68:bf:
76:0d:e4:9d:68:77:31:79:02:71:7c:8e:49:21:48:
91:c7:cb:6f:b6:14:3c:f0:1f:94:e2:a3:32:f9:30:
b3:16:9c:96:5d:6a:75:4c:1d:80:92:b3:4d:bc:ed:
17:b7:25:3f:86:b8:92:5f:41:f8:95:2f:d9:b8:c2:
08:ab:14:a4:f8:b2:48:34:be:27:55:79:04:32:d3:
f7:d9:58:f7:4a:1a:de:02:6e:c7:fb:98:83:b6:bb:
1d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:B0:C3:34:61:9E:B8:8A:9B:61:38:9C:48:EE:E0:6A:E9:4D:FB:63
X509v3 Authority Key Identifier:
keyid:2E:83:8B:F5:D3:DE:FF:C0:2D:FA:18:4E:4F:0E:85:11:53:5E:51:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoOL9dPe_8At-hhOTw6FEVNeUX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/LoOL9dPe_8At-hhOTw6FEVNeUX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/LoOL9dPe_8At-hhOTw6FEVNeUX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:2b:47:35:ef:a2:3e:a3:f6:60:f5:f0:57:b4:8d:f4:eb:01:
0c:d2:0f:87:01:f3:c0:fc:5f:57:5c:d9:87:c9:68:5b:ea:de:
73:5b:b4:b2:78:73:1b:33:23:1e:82:8d:65:1c:09:d7:14:4d:
b8:93:02:29:64:0e:73:eb:1a:6b:f1:e9:c5:0c:67:c7:ab:d6:
da:49:63:81:a9:90:e4:a4:64:b7:a7:cb:3f:12:40:6c:7f:73:
49:1c:ce:99:c6:45:2b:ca:1d:e6:28:41:20:c5:77:f6:99:18:
98:60:4e:01:8c:df:df:ad:05:be:bf:43:69:1c:93:ec:9d:ef:
e3:cf:8b:57:b0:2e:89:49:f9:68:0d:6b:e9:e5:38:34:0f:bb:
ea:a4:6b:34:65:f3:bd:5f:77:ad:74:b5:41:03:53:15:09:89:
5f:ce:3d:b4:a6:da:82:07:99:d5:b2:ee:0b:08:47:4d:50:52:
de:42:e2:01:3e:73:c6:e9:a5:a0:09:b9:92:fc:a7:bf:b8:ed:
2f:d0:23:82:a7:e4:76:31:ea:b0:84:10:ac:87:00:d0:ff:97:
86:98:7c:f4:5f:2a:3a:eb:16:ac:80:a7:2e:4d:91:c8:95:d6:
5b:7e:a7:ee:71:15:7d:4d:d2:a1:4c:6c:f3:69:a4:2c:a2:bb:
5e:7d:b1:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk0kkRKF3TgStCXVGRgy4aVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlODM4YmY1ZDNkZWZmYzAyZGZhMTg0ZTRmMGU4NTExNTM1
ZTUxN2QwHhcNMjUwOTEwMTcwMDI0WhcNMjUwOTExMTcwMDI0WjAzMTEwLwYDVQQD
Eyg3OWIwYzMzNDYxOWViODhhOWI2MTM4OWM0OGVlZTA2YWU5NGRmYjYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJMU7GCrJJvL1JmAW9UrXzVZ4K7Q
7pE2jm4s8bHPmeROcevEbH5h23+kOxOcO59uNJgMOgHxfELsGs/GRLveqg9k/mi8
Gjzp5am0yWnXYW9m/6ZEYp+ewSjxmNZmUOe7CmYlex39Wuh/UFzQ0OytPhQmXHUB
Dhqc48PqlTI/PWMQKUXvrRORM+uYqayrrjlsdX/LBsL/uSdiLfHL4dERuNXDaL92
DeSdaHcxeQJxfI5JIUiRx8tvthQ88B+U4qMy+TCzFpyWXWp1TB2AkrNNvO0XtyU/
hriSX0H4lS/ZuMIIqxSk+LJINL4nVXkEMtP32Vj3ShreAm7H+5iDtrsdiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHmwwzRhnriKm2E4nEju4GrpTftjMB8GA1UdIwQY
MBaAFC6Di/XT3v/ALfoYTk8OhRFTXlF9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTG9PTDlkUGVfOEF0LWhoT1R3NkZFVk5lVVgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9jNDQzODktODFiNS00NTVjLTg1YWMt
NGNkODAzMDgxNzFhLzEvTG9PTDlkUGVfOEF0LWhoT1R3NkZFVk5lVVgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC9jNDQzODktODFiNS00NTVjLTg1YWMtNGNkODAzMDgxNzFh
LzEvTG9PTDlkUGVfOEF0LWhoT1R3NkZFVk5lVVgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASitHNe+i
PqP2YPXwV7SN9OsBDNIPhwHzwPxfV1zZh8loW+rec1u0snhzGzMjHoKNZRwJ1xRN
uJMCKWQOc+saa/HpxQxnx6vW2kljgamQ5KRkt6fLPxJAbH9zSRzOmcZFK8od5ihB
IMV39pkYmGBOAYzf360Fvr9DaRyT7J3v48+LV7AuiUn5aA1r6eU4NA+76qRrNGXz
vV93rXS1QQNTFQmJX849tKbaggeZ1bLuCwhHTVBS3kLiAT5zxumloAm5kvynv7jt
L9AjgqfkdjHqsIQQrIcA0P+Xhph89F8qOusWrICnLk2RyJXWW36n7nEVfU3SoUxs
82mkLKK7Xn2xcA==
-----END CERTIFICATE-----
Generated at Thu Sep 11 00:18:09 2025 by rpki-client