Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/p-LOMQlICu57P9KEbsj4ZGiFzbo.mft
File: p-LOMQlICu57P9KEbsj4ZGiFzbo.mft (raw, json)
Hash identifier: l8psH1f4ag5ZKfSyIiX3BMAPdMwEVh3q+ZNnPcSM7WQ=
Subject key identifier: FF:38:40:16:BF:95:1A:28:57:57:3F:D2:DD:4A:DE:0E:32:F6:B0:A4
Authority key identifier: A7:E2:CE:31:09:48:0A:EE:7B:3F:D2:84:6E:C8:F8:64:68:85:CD:BA
Certificate issuer: /CN=a7e2ce3109480aee7b3fd2846ec8f8646885cdba
Certificate serial: 019951FAF9B8B5C2A8CF7A779A3878BD06CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p-LOMQlICu57P9KEbsj4ZGiFzbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/p-LOMQlICu57P9KEbsj4ZGiFzbo.mft
Manifest number: 169D
Signing time: Tue 16 Sep 2025 10:03:46 +0000
Manifest this update: Tue 16 Sep 2025 10:03:46 +0000
Manifest next update: Wed 17 Sep 2025 10:03:46 +0000
Files and hashes: 1: 26Ql46wwxTj7VjacCW6urnh7gz4.roa (hash: 6pqobnvwdQtNKJHj/tFh8rbFEN8SHTGBGJP56mhCWI4=)
2: 6NUzhdPLOTimUoPxeMPLM0W-THw.roa (hash: c/vX6BdXl9BfZEsyAn4O1uep2mCiqK8iQj3UiTI5j9s=)
3: 9UQ3bjYFxbuQ6WDKQ2z12cmzNp4.roa (hash: utvXFHGbNyh5QD6WYroUVLQ+dfrlJs+U1O2AiYH3XWs=)
4: LLcjVKn9VpDoaDhdqIR6mgFTZtI.roa (hash: DoEtx/xv7eVuPlv74sp5O1oZZhlzZhNTbGR1DN0rf7U=)
5: UjFHvunES4zB1buoYQwOJAvtic4.roa (hash: 8JRnvC2WvvUD8xqaEPafciSNs/2Jt6gLe7JRKtz6ghA=)
6: d89-qB2QBcTVzoJ5lziZ1XEpvhw.roa (hash: EUMPFkB+dCQSnV1N7RK25hIL5dm4q/R7TQ9vyaSumYE=)
7: p-LOMQlICu57P9KEbsj4ZGiFzbo.crl (hash: G6x8/W/GdGUO7a+5mNTXE0fV+RnbEesuX36Kk25SAMw=)
8: zaZapovTGaF9alzwHwbdxdednYo.roa (hash: HZ5qODN4P+SD3nJrNEx9yaYaCo/O8Qs+NfZMPkwo3JI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/p-LOMQlICu57P9KEbsj4ZGiFzbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/p-LOMQlICu57P9KEbsj4ZGiFzbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/p-LOMQlICu57P9KEbsj4ZGiFzbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Sep 2025 07:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:51:fa:f9:b8:b5:c2:a8:cf:7a:77:9a:38:78:bd:06:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7e2ce3109480aee7b3fd2846ec8f8646885cdba
Validity
Not Before: Sep 16 10:03:46 2025 GMT
Not After : Sep 17 10:03:46 2025 GMT
Subject: CN=ff384016bf951a2857573fd2dd4ade0e32f6b0a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:3b:b9:58:d4:89:ab:a6:da:18:9f:77:31:9c:
b6:da:a3:2d:18:bf:be:23:88:fe:02:bf:83:e6:61:
64:21:04:5b:3e:d2:29:c6:a3:57:b8:db:23:9e:81:
a1:31:7c:8e:ef:25:08:72:e7:aa:a0:f4:57:1f:ab:
4a:8a:2d:c0:8a:bc:df:6f:a8:0e:0e:a5:2a:14:6d:
7a:a6:bd:c8:6f:f1:44:0e:2d:fc:12:f5:1b:95:36:
a2:0c:cb:8f:ac:78:e7:cb:78:9e:53:82:51:02:7e:
d5:9d:a9:e0:22:55:80:82:f2:1c:64:35:b1:e1:d0:
07:61:c1:d3:90:70:28:29:28:a3:f0:bb:5e:fe:1b:
07:15:ad:43:1a:b7:17:39:52:d3:43:c3:28:91:4a:
f2:9d:f2:f9:0d:92:a2:6c:00:54:d9:52:7a:c2:48:
42:ae:d2:06:e2:28:bd:f3:76:56:a9:bc:9d:3d:d3:
e7:14:ec:8e:d9:a5:fc:89:76:37:62:ff:28:a6:43:
9d:a9:63:a9:2e:ea:84:ab:a2:3e:6a:54:73:55:a0:
b5:12:c4:ec:58:f6:1f:b2:8c:54:b7:1a:a3:e9:a8:
58:5b:ba:55:24:b3:49:ea:f9:38:c7:64:25:fa:1e:
3b:86:a6:b3:d9:2c:fa:c8:ba:15:7a:c6:a0:49:f4:
9a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:38:40:16:BF:95:1A:28:57:57:3F:D2:DD:4A:DE:0E:32:F6:B0:A4
X509v3 Authority Key Identifier:
keyid:A7:E2:CE:31:09:48:0A:EE:7B:3F:D2:84:6E:C8:F8:64:68:85:CD:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-LOMQlICu57P9KEbsj4ZGiFzbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/p-LOMQlICu57P9KEbsj4ZGiFzbo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/p-LOMQlICu57P9KEbsj4ZGiFzbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:32:1d:b8:67:eb:9b:a6:2f:01:cf:6e:81:03:c8:c3:63:b1:
e7:73:42:6a:36:36:fd:50:d8:ca:2a:30:67:7d:da:ea:0c:7c:
77:b9:76:ac:99:27:1b:3c:b3:c2:37:31:2e:59:80:c5:e7:2f:
0a:03:e8:f1:11:6b:59:8d:d9:71:e1:57:75:e5:11:5c:27:25:
1a:8c:9f:a0:5e:98:c1:1b:67:60:61:5f:ca:75:bd:df:a1:a1:
ad:d1:75:22:03:95:1e:31:01:4c:b4:ca:79:78:1a:6f:b9:1b:
69:23:53:6e:2e:aa:73:16:5c:2c:0e:0a:be:76:97:ea:29:e8:
70:39:fa:a0:5b:20:b4:03:67:0d:4f:de:d3:02:2a:1b:2c:8a:
d1:52:df:bb:49:f7:5c:23:e8:78:07:52:57:e9:85:a2:ea:53:
99:0b:a1:93:7d:2c:cd:a6:a4:cb:99:4e:21:96:0d:cf:3d:4b:
c5:3d:4e:33:14:3f:b6:87:b7:7d:3c:68:dd:e3:b7:ea:c6:77:
89:9d:72:05:9c:3d:96:33:e0:de:54:ef:4e:a5:c9:02:6e:c5:
2e:a5:92:4c:5b:50:51:a6:8d:03:e8:58:a4:dd:62:ac:a6:b7:
65:a8:e7:28:53:fc:2f:55:66:96:ab:8b:80:2c:71:7a:87:20:
45:cf:b9:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 12:59:36 2025 by rpki-client