Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/p-LOMQlICu57P9KEbsj4ZGiFzbo.mft
File: p-LOMQlICu57P9KEbsj4ZGiFzbo.mft (raw, json)
Hash identifier: ufVGgDliebihuEz/12rhBlvp12TsyCEURZTN1w7DeL0=
Subject key identifier: B2:F2:38:F5:5F:27:AF:DA:58:15:B9:17:03:D1:69:35:D6:E9:F3:21
Authority key identifier: A7:E2:CE:31:09:48:0A:EE:7B:3F:D2:84:6E:C8:F8:64:68:85:CD:BA
Certificate issuer: /CN=a7e2ce3109480aee7b3fd2846ec8f8646885cdba
Certificate serial: 019A71B91CD9600670E20189C79F653BF032
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p-LOMQlICu57P9KEbsj4ZGiFzbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/p-LOMQlICu57P9KEbsj4ZGiFzbo.mft
Manifest number: 1732
Signing time: Tue 11 Nov 2025 07:02:28 +0000
Manifest this update: Tue 11 Nov 2025 07:02:28 +0000
Manifest next update: Wed 12 Nov 2025 07:02:28 +0000
Files and hashes: 1: 26Ql46wwxTj7VjacCW6urnh7gz4.roa (hash: 6pqobnvwdQtNKJHj/tFh8rbFEN8SHTGBGJP56mhCWI4=)
2: 6NUzhdPLOTimUoPxeMPLM0W-THw.roa (hash: c/vX6BdXl9BfZEsyAn4O1uep2mCiqK8iQj3UiTI5j9s=)
3: 9UQ3bjYFxbuQ6WDKQ2z12cmzNp4.roa (hash: utvXFHGbNyh5QD6WYroUVLQ+dfrlJs+U1O2AiYH3XWs=)
4: LLcjVKn9VpDoaDhdqIR6mgFTZtI.roa (hash: DoEtx/xv7eVuPlv74sp5O1oZZhlzZhNTbGR1DN0rf7U=)
5: UjFHvunES4zB1buoYQwOJAvtic4.roa (hash: 8JRnvC2WvvUD8xqaEPafciSNs/2Jt6gLe7JRKtz6ghA=)
6: d89-qB2QBcTVzoJ5lziZ1XEpvhw.roa (hash: EUMPFkB+dCQSnV1N7RK25hIL5dm4q/R7TQ9vyaSumYE=)
7: p-LOMQlICu57P9KEbsj4ZGiFzbo.crl (hash: kSm1ouXJMc+iGF8nZL5w3aeMwnG0rm53yKsWn4WZVKA=)
8: zaZapovTGaF9alzwHwbdxdednYo.roa (hash: HZ5qODN4P+SD3nJrNEx9yaYaCo/O8Qs+NfZMPkwo3JI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/p-LOMQlICu57P9KEbsj4ZGiFzbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/p-LOMQlICu57P9KEbsj4ZGiFzbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/p-LOMQlICu57P9KEbsj4ZGiFzbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:1c:d9:60:06:70:e2:01:89:c7:9f:65:3b:f0:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7e2ce3109480aee7b3fd2846ec8f8646885cdba
Validity
Not Before: Nov 11 07:02:28 2025 GMT
Not After : Nov 12 07:02:28 2025 GMT
Subject: CN=b2f238f55f27afda5815b91703d16935d6e9f321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:15:46:bd:a4:eb:07:16:d2:22:57:4c:9f:01:
a1:67:f7:47:29:7a:30:15:1e:ce:56:31:fe:06:43:
d6:01:af:85:42:5d:43:b2:8e:12:fa:c3:2b:07:57:
94:b7:bb:c1:d6:c3:91:2f:46:14:32:f6:8d:f1:a6:
98:4e:74:f7:ac:d1:ff:ad:d6:d3:ac:01:10:2f:f4:
12:6c:8b:d4:96:1f:a7:ce:a1:87:5f:21:d0:cd:27:
99:49:f5:6e:d5:ae:68:00:c7:a5:19:ed:16:21:86:
06:a6:16:e1:8f:9d:de:12:2e:24:a2:55:01:7e:f2:
13:a2:a1:eb:3d:8b:18:96:b4:ea:ba:af:56:99:99:
09:7b:2f:67:6d:a7:b7:be:59:9f:1f:e8:f2:0a:af:
a8:42:56:47:8d:c5:1c:af:af:d2:18:f6:41:66:95:
83:f1:92:f9:eb:48:8d:d4:7d:f6:f1:dd:18:2d:79:
8b:44:96:56:ba:31:52:72:ea:66:f8:f9:5a:c1:fb:
cd:be:e4:79:80:40:80:a3:4f:c0:2c:c1:42:e4:3f:
da:5d:09:c1:7c:f5:5b:90:78:14:09:7e:d8:71:0e:
da:d2:91:c7:00:a0:fc:ae:74:1a:97:47:b9:81:58:
58:31:d0:5b:18:a9:62:e0:05:eb:14:4f:fb:38:d1:
5d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:F2:38:F5:5F:27:AF:DA:58:15:B9:17:03:D1:69:35:D6:E9:F3:21
X509v3 Authority Key Identifier:
keyid:A7:E2:CE:31:09:48:0A:EE:7B:3F:D2:84:6E:C8:F8:64:68:85:CD:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-LOMQlICu57P9KEbsj4ZGiFzbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/p-LOMQlICu57P9KEbsj4ZGiFzbo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/p-LOMQlICu57P9KEbsj4ZGiFzbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:cb:70:a9:23:11:02:1d:6a:f0:09:51:b1:4e:1e:68:1d:9c:
a0:20:0b:48:4a:3b:db:7d:11:21:f5:24:57:ba:78:d7:0e:d8:
1a:2b:01:4f:7e:85:34:29:74:84:9c:53:22:a5:31:d4:9f:ea:
0e:64:27:b7:11:d5:5c:0e:6c:0d:fc:17:59:11:96:b6:6a:fd:
e8:71:74:81:62:1b:e2:51:41:ad:82:90:26:7b:c7:eb:a7:68:
a8:e3:a5:5e:18:b9:da:e9:38:68:d2:4a:42:1c:cf:e9:e0:ef:
d1:aa:c4:07:20:ee:43:a8:d6:17:0a:83:54:3f:74:1b:f2:1a:
f8:bd:fd:d1:b1:6d:f9:18:a2:31:86:36:13:42:2a:34:6e:5d:
ef:63:5e:36:51:9f:f6:eb:6c:c7:28:3c:b3:e4:d4:da:bc:2f:
10:ed:05:a4:85:2f:d7:fa:5a:c6:b5:1c:0c:b2:1a:83:21:fa:
ae:48:13:44:c7:de:69:bd:17:00:cd:68:06:7e:82:19:eb:45:
40:d9:a5:ba:0d:2a:98:04:34:dc:75:6e:95:30:a1:86:4a:da:
18:51:80:c6:08:a3:ba:c2:85:44:64:c2:ee:5c:0c:e6:d8:1b:
1c:de:05:a3:38:3c:f6:07:8d:c8:48:4b:1d:58:83:d3:7c:90:
2e:a0:e0:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuRzZYAZw4gGJx59lO/AyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3ZTJjZTMxMDk0ODBhZWU3YjNmZDI4NDZlYzhmODY0Njg4
NWNkYmEwHhcNMjUxMTExMDcwMjI4WhcNMjUxMTEyMDcwMjI4WjAzMTEwLwYDVQQD
EyhiMmYyMzhmNTVmMjdhZmRhNTgxNWI5MTcwM2QxNjkzNWQ2ZTlmMzIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1hVGvaTrBxbSIldMnwGhZ/dHKXow
FR7OVjH+BkPWAa+FQl1Dso4S+sMrB1eUt7vB1sORL0YUMvaN8aaYTnT3rNH/rdbT
rAEQL/QSbIvUlh+nzqGHXyHQzSeZSfVu1a5oAMelGe0WIYYGphbhj53eEi4kolUB
fvIToqHrPYsYlrTquq9WmZkJey9nbae3vlmfH+jyCq+oQlZHjcUcr6/SGPZBZpWD
8ZL560iN1H328d0YLXmLRJZWujFScupm+PlawfvNvuR5gECAo0/ALMFC5D/aXQnB
fPVbkHgUCX7YcQ7a0pHHAKD8rnQal0e5gVhYMdBbGKli4AXrFE/7ONFdnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLLyOPVfJ6/aWBW5FwPRaTXW6fMhMB8GA1UdIwQY
MBaAFKfizjEJSAruez/ShG7I+GRohc26MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcC1MT01RbElDdTU3UDlLRWJzajRaR2lGemJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9iNjFhZGQtMzJmMC00MmY0LWEzMDEt
NzgxOGE4OTQ1NmNiLzEvcC1MT01RbElDdTU3UDlLRWJzajRaR2lGemJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi9iNjFhZGQtMzJmMC00MmY0LWEzMDEtNzgxOGE4OTQ1NmNi
LzEvcC1MT01RbElDdTU3UDlLRWJzajRaR2lGemJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOMtwqSMR
Ah1q8AlRsU4eaB2coCALSEo7230RIfUkV7p41w7YGisBT36FNCl0hJxTIqUx1J/q
DmQntxHVXA5sDfwXWRGWtmr96HF0gWIb4lFBrYKQJnvH66doqOOlXhi52uk4aNJK
QhzP6eDv0arEByDuQ6jWFwqDVD90G/Ia+L390bFt+RiiMYY2E0IqNG5d72NeNlGf
9utsxyg8s+TU2rwvEO0FpIUv1/paxrUcDLIagyH6rkgTRMfeab0XAM1oBn6CGetF
QNmlug0qmAQ03HVulTChhkraGFGAxgijusKFRGTC7lwM5tgbHN4Fozg89geNyEhL
HViD03yQLqDgnQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:15:51 2025 by rpki-client