Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.mft
File: LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.mft (raw, json)
Hash identifier: 3zE5lzSTXEz1FCvqIOcSDkla6GC23rYIlJKlmQzb1bc=
Subject key identifier: D4:98:41:A1:8D:7A:3A:07:F2:6C:96:15:35:27:B4:9A:FB:7E:E0:90
Authority key identifier: 2E:87:28:26:FC:E0:2B:D9:48:5E:F2:76:64:1D:2B:58:4F:59:9B:37
Certificate issuer: /CN=2e872826fce02bd9485ef276641d2b584f599b37
Certificate serial: 019931FFC423DCB323247A1AE2B8D85E07C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.mft
Manifest number: 02CD
Signing time: Wed 10 Sep 2025 05:01:09 +0000
Manifest this update: Wed 10 Sep 2025 05:01:09 +0000
Manifest next update: Thu 11 Sep 2025 05:01:09 +0000
Files and hashes: 1: LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.crl (hash: fh43Jc2UR52r5MBwS1EZ3xSmde0ZJSKZLGwjFi4tAsM=)
2: Mzj29HFabYUUzd0b2x71rCWYxpc.roa (hash: CtBd18sCBkrUSbVpakXbp+UYL2hKAze7NhB+GbMH/4U=)
3: Sdx0s8uspLK2JEfxE0Zqq-P7qdc.roa (hash: SB/yO/98dSqVsNjGD6z9bUudXfStWVjKdpjSXqLPG2I=)
4: VOPfsPLo2qD6WzGvi49ZWNyWRCQ.roa (hash: U4NKV1QaU6X7/z8jYu2ZN8ojJKZniu0yv+LX0DQZ7Lw=)
5: sXkk9RexS8Df6sg2xdkc7cVwBT0.roa (hash: EPX6TU1BjJqVBea1HkWMPFI7ngY4YBybKK+v3369Nok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.mft
rsync://rpki.ripe.net/repository/DEFAULT/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 05:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:ff:c4:23:dc:b3:23:24:7a:1a:e2:b8:d8:5e:07:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e872826fce02bd9485ef276641d2b584f599b37
Validity
Not Before: Sep 10 05:01:09 2025 GMT
Not After : Sep 11 05:01:09 2025 GMT
Subject: CN=d49841a18d7a3a07f26c96153527b49afb7ee090
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:95:3b:18:fb:56:5b:90:e7:29:d7:9b:de:ad:
b1:b6:d7:1a:e3:ed:c4:2c:3c:c0:ef:67:c8:ba:b0:
c3:07:80:d7:9a:d6:af:f3:c5:24:e5:02:ac:8f:05:
f2:a4:cf:e6:e6:ce:a9:93:0b:e8:be:5c:09:c2:ec:
dc:e4:f8:17:62:d5:70:65:91:84:0a:6c:e9:7e:7d:
6a:25:d9:6e:64:a4:79:f4:91:ea:71:36:b9:21:e9:
29:33:dd:9e:3b:9b:d2:51:46:f4:43:ce:d3:f1:f1:
bd:2a:80:a9:b5:b9:d9:6d:a2:d9:6d:97:9f:46:be:
b5:7e:5d:43:c3:79:57:47:42:3f:83:71:07:bf:eb:
23:f7:91:ca:91:87:42:77:99:66:e2:bb:0e:0f:02:
e3:ef:89:6e:6f:7b:b4:e7:d0:57:b8:18:a6:48:22:
f7:86:53:a5:40:90:4a:79:a1:1f:55:18:ac:43:75:
2b:6c:64:a0:5f:d6:64:2c:d0:eb:4b:1e:18:90:4c:
22:16:8a:3a:5a:dc:5a:6d:db:24:5a:26:51:13:48:
e6:11:79:d1:94:d1:74:8b:3a:e2:c1:3b:2e:20:e8:
9f:50:e5:37:df:ee:a4:df:07:1f:00:62:62:97:2b:
81:09:4e:12:9a:ff:83:d0:18:60:7b:5d:2a:40:85:
ec:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:98:41:A1:8D:7A:3A:07:F2:6C:96:15:35:27:B4:9A:FB:7E:E0:90
X509v3 Authority Key Identifier:
keyid:2E:87:28:26:FC:E0:2B:D9:48:5E:F2:76:64:1D:2B:58:4F:59:9B:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:59:51:38:7b:bb:a6:a6:22:ba:b2:29:1e:34:f0:98:88:22:
9b:05:95:29:5e:5d:43:0f:8e:e4:43:d5:48:42:9a:1f:4a:8d:
14:a1:76:6a:85:fc:cc:ae:ee:98:30:4c:b3:77:72:01:56:9d:
c3:03:6b:ea:3b:a0:db:72:d2:53:dc:bd:24:d1:97:58:ba:f0:
a1:fc:49:fb:bb:52:fd:1d:9e:f8:58:5b:16:73:c7:ed:72:bb:
a4:4d:ad:c7:04:8a:38:07:86:5d:7e:87:81:aa:d9:38:ec:0a:
ca:35:5e:29:98:b5:25:4f:af:16:06:c2:e3:6d:53:6b:ea:09:
2f:c1:b5:a4:69:e1:64:63:20:b7:65:6e:cd:fc:c2:de:ce:6f:
22:65:08:dc:92:22:4a:3b:89:70:97:7b:6e:9b:ef:dd:9c:d9:
24:b0:5d:57:90:65:28:ec:5d:62:c0:4a:2f:cf:d9:e4:6e:b0:
d0:2d:e8:ec:75:25:33:82:55:98:7f:2b:da:a9:57:90:03:af:
8e:23:26:3b:de:e5:a5:f4:02:dc:7a:8b:fc:36:36:79:a6:76:
f5:d1:12:ed:44:ad:b5:b0:a8:a1:b2:6d:15:3c:8a:3e:92:be:
3f:51:d2:62:13:31:bf:f8:c9:e6:ca:f4:d9:a1:ca:cd:e4:53:
49:64:ce:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkx/8Qj3LMjJHoa4rjYXgfIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlODcyODI2ZmNlMDJiZDk0ODVlZjI3NjY0MWQyYjU4NGY1
OTliMzcwHhcNMjUwOTEwMDUwMTA5WhcNMjUwOTExMDUwMTA5WjAzMTEwLwYDVQQD
EyhkNDk4NDFhMThkN2EzYTA3ZjI2Yzk2MTUzNTI3YjQ5YWZiN2VlMDkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhpU7GPtWW5DnKdeb3q2xttca4+3E
LDzA72fIurDDB4DXmtav88Uk5QKsjwXypM/m5s6pkwvovlwJwuzc5PgXYtVwZZGE
Cmzpfn1qJdluZKR59JHqcTa5IekpM92eO5vSUUb0Q87T8fG9KoCptbnZbaLZbZef
Rr61fl1Dw3lXR0I/g3EHv+sj95HKkYdCd5lm4rsODwLj74lub3u059BXuBimSCL3
hlOlQJBKeaEfVRisQ3UrbGSgX9ZkLNDrSx4YkEwiFoo6WtxabdskWiZRE0jmEXnR
lNF0izriwTsuIOifUOU33+6k3wcfAGJilyuBCU4Smv+D0Bhge10qQIXsqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNSYQaGNejoH8myWFTUntJr7fuCQMB8GA1UdIwQY
MBaAFC6HKCb84CvZSF7ydmQdK1hPWZs3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTG9jb0p2emdLOWxJWHZKMlpCMHJXRTlabXpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8xYmNlZjQtMTMxZC00ZGI1LTk0Yzct
MjRjNzliMWNiNGRhLzEvTG9jb0p2emdLOWxJWHZKMlpCMHJXRTlabXpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy8xYmNlZjQtMTMxZC00ZGI1LTk0YzctMjRjNzliMWNiNGRh
LzEvTG9jb0p2emdLOWxJWHZKMlpCMHJXRTlabXpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoVlROHu7
pqYiurIpHjTwmIgimwWVKV5dQw+O5EPVSEKaH0qNFKF2aoX8zK7umDBMs3dyAVad
wwNr6jug23LSU9y9JNGXWLrwofxJ+7tS/R2e+FhbFnPH7XK7pE2txwSKOAeGXX6H
garZOOwKyjVeKZi1JU+vFgbC421Ta+oJL8G1pGnhZGMgt2VuzfzC3s5vImUI3JIi
SjuJcJd7bpvv3ZzZJLBdV5BlKOxdYsBKL8/Z5G6w0C3o7HUlM4JVmH8r2qlXkAOv
jiMmO97lpfQC3HqL/DY2eaZ29dES7USttbCoobJtFTyKPpK+P1HSYhMxv/jJ5sr0
2aHKzeRTSWTOPg==
-----END CERTIFICATE-----
Generated at Wed Sep 10 13:53:37 2025 by rpki-client