Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/dddf3d-e887-4273-bb7b-681fa0d99821/1/lo-QT-7x95FiuCGaikg7hY9UC_o.mft
File: lo-QT-7x95FiuCGaikg7hY9UC_o.mft (raw, json)
Hash identifier: Y1+9VhmRmSgc7A3CAY3fKERFj+4g8rp3NzTfN7LNFqk=
Subject key identifier: 02:2F:3A:40:4E:93:BE:C2:8D:78:8A:80:97:C6:BA:A7:A8:C9:C6:C9
Authority key identifier: 96:8F:90:4F:EE:F1:F7:91:62:B8:21:9A:8A:48:3B:85:8F:54:0B:FA
Certificate issuer: /CN=968f904feef1f79162b8219a8a483b858f540bfa
Certificate serial: 019A71B78E8227BC415D0AC9859CB47E4C32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lo-QT-7x95FiuCGaikg7hY9UC_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/dddf3d-e887-4273-bb7b-681fa0d99821/1/lo-QT-7x95FiuCGaikg7hY9UC_o.mft
Manifest number: 171B
Signing time: Tue 11 Nov 2025 07:00:46 +0000
Manifest this update: Tue 11 Nov 2025 07:00:46 +0000
Manifest next update: Wed 12 Nov 2025 07:00:46 +0000
Files and hashes: 1: lo-QT-7x95FiuCGaikg7hY9UC_o.crl (hash: FK4zeBb9zqdlkQ431UE9pKrpbEZo0LhRy1AX0qPh4Mw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/dddf3d-e887-4273-bb7b-681fa0d99821/1/lo-QT-7x95FiuCGaikg7hY9UC_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/dddf3d-e887-4273-bb7b-681fa0d99821/1/lo-QT-7x95FiuCGaikg7hY9UC_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/lo-QT-7x95FiuCGaikg7hY9UC_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:8e:82:27:bc:41:5d:0a:c9:85:9c:b4:7e:4c:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=968f904feef1f79162b8219a8a483b858f540bfa
Validity
Not Before: Nov 11 07:00:46 2025 GMT
Not After : Nov 12 07:00:46 2025 GMT
Subject: CN=022f3a404e93bec28d788a8097c6baa7a8c9c6c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:09:5c:d6:62:1a:b3:6c:16:e1:59:e8:b5:58:
e6:b8:69:38:5a:9d:be:76:37:9a:ca:c2:42:8b:f5:
3a:61:00:bf:fa:7f:b6:79:2c:6a:19:59:4b:05:22:
db:69:58:26:69:e3:a8:0d:23:cb:e6:eb:01:bc:0e:
d5:1f:3b:7a:88:a1:08:85:3e:22:6d:f9:1a:44:61:
ca:e6:89:0d:af:0e:0b:35:ee:11:d9:77:b2:d7:6a:
35:36:72:b3:11:bb:74:33:db:6b:7f:87:94:9d:33:
2a:37:34:3a:67:4b:36:95:83:f2:ef:e3:4f:1e:1d:
33:5e:b3:92:4f:46:14:db:4f:2f:a4:2b:d3:1b:71:
52:7f:9b:5e:4f:cb:42:76:b4:ae:b9:9c:84:8f:03:
e8:ec:68:cd:1d:c6:ec:ba:9d:7a:bd:1f:ee:94:31:
0b:23:ca:d1:57:ba:8f:17:e0:c7:c0:06:5c:2b:8e:
bf:c5:c4:3c:0d:91:aa:71:aa:92:3e:c5:3a:62:9e:
56:79:f3:2e:b8:3d:23:34:5c:a8:57:bf:41:35:ea:
20:6a:3e:d6:90:59:9a:b0:a3:43:a7:66:4c:d0:31:
a7:40:18:60:f7:71:23:bb:c1:94:30:04:f6:e0:52:
8a:ab:6e:90:51:34:d7:9f:4a:67:fe:ae:62:df:85:
80:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:2F:3A:40:4E:93:BE:C2:8D:78:8A:80:97:C6:BA:A7:A8:C9:C6:C9
X509v3 Authority Key Identifier:
keyid:96:8F:90:4F:EE:F1:F7:91:62:B8:21:9A:8A:48:3B:85:8F:54:0B:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lo-QT-7x95FiuCGaikg7hY9UC_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/dddf3d-e887-4273-bb7b-681fa0d99821/1/lo-QT-7x95FiuCGaikg7hY9UC_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/dddf3d-e887-4273-bb7b-681fa0d99821/1/lo-QT-7x95FiuCGaikg7hY9UC_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:82:58:db:52:c3:b4:03:1c:1e:60:82:03:c6:29:a2:06:fb:
b1:f5:d3:a0:1e:d4:fe:44:29:18:8e:d3:dd:79:f5:76:47:4f:
e5:26:c1:ec:6b:1f:70:7b:d3:35:98:47:62:e0:5a:4b:a4:70:
98:f3:87:65:81:33:e9:d4:4f:ec:f4:9f:77:7c:6c:6f:23:3e:
a9:5d:e3:62:22:83:37:20:4f:44:c5:e8:52:b7:eb:5c:d5:f8:
20:3f:7f:87:de:05:e3:18:a9:48:b0:7d:f1:5c:d8:b3:12:61:
e2:61:77:7e:83:ae:a3:84:29:12:bb:31:d6:e4:ea:d2:19:92:
f1:4c:4f:9f:5d:8e:10:39:02:bd:9e:a3:29:13:a3:0c:ea:1a:
d7:65:30:d4:83:cc:59:83:2c:9e:c5:10:c3:ca:ae:1b:47:b2:
31:58:27:8c:c6:22:b6:df:9e:d9:01:83:f3:7a:99:ba:88:fc:
0c:3b:18:74:6c:bb:6a:f8:46:b3:45:ab:d5:99:af:48:33:2f:
e0:fe:7c:31:ad:95:5f:8c:19:00:b2:05:f7:b4:a6:e2:64:a6:
89:4a:d0:a2:8e:58:88:af:a1:41:be:44:0f:4b:0a:83:6b:8b:
76:b2:f4:89:a9:48:4e:30:c5:c0:56:7a:f4:df:2e:7f:ec:4e:
36:8e:20:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxt46CJ7xBXQrJhZy0fkwyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2OGY5MDRmZWVmMWY3OTE2MmI4MjE5YThhNDgzYjg1OGY1
NDBiZmEwHhcNMjUxMTExMDcwMDQ2WhcNMjUxMTEyMDcwMDQ2WjAzMTEwLwYDVQQD
EygwMjJmM2E0MDRlOTNiZWMyOGQ3ODhhODA5N2M2YmFhN2E4YzljNmM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQlc1mIas2wW4VnotVjmuGk4Wp2+
djeaysJCi/U6YQC/+n+2eSxqGVlLBSLbaVgmaeOoDSPL5usBvA7VHzt6iKEIhT4i
bfkaRGHK5okNrw4LNe4R2Xey12o1NnKzEbt0M9trf4eUnTMqNzQ6Z0s2lYPy7+NP
Hh0zXrOST0YU208vpCvTG3FSf5teT8tCdrSuuZyEjwPo7GjNHcbsup16vR/ulDEL
I8rRV7qPF+DHwAZcK46/xcQ8DZGqcaqSPsU6Yp5WefMuuD0jNFyoV79BNeogaj7W
kFmasKNDp2ZM0DGnQBhg93Eju8GUMAT24FKKq26QUTTXn0pn/q5i34WAiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAIvOkBOk77CjXiKgJfGuqeoycbJMB8GA1UdIwQY
MBaAFJaPkE/u8feRYrghmopIO4WPVAv6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbG8tUVQtN3g5NUZpdUNHYWlrZzdoWTlVQ19vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9kZGRmM2QtZTg4Ny00MjczLWJiN2It
NjgxZmEwZDk5ODIxLzEvbG8tUVQtN3g5NUZpdUNHYWlrZzdoWTlVQ19vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9kZGRmM2QtZTg4Ny00MjczLWJiN2ItNjgxZmEwZDk5ODIx
LzEvbG8tUVQtN3g5NUZpdUNHYWlrZzdoWTlVQ19vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhIJY21LD
tAMcHmCCA8Ypogb7sfXToB7U/kQpGI7T3Xn1dkdP5SbB7GsfcHvTNZhHYuBaS6Rw
mPOHZYEz6dRP7PSfd3xsbyM+qV3jYiKDNyBPRMXoUrfrXNX4ID9/h94F4xipSLB9
8VzYsxJh4mF3foOuo4QpErsx1uTq0hmS8UxPn12OEDkCvZ6jKROjDOoa12Uw1IPM
WYMsnsUQw8quG0eyMVgnjMYitt+e2QGD83qZuoj8DDsYdGy7avhGs0Wr1ZmvSDMv
4P58Ma2VX4wZALIF97Sm4mSmiUrQoo5YiK+hQb5ED0sKg2uLdrL0ialITjDFwFZ6
9N8uf+xONo4gvw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:18 2025 by rpki-client