Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.mft
File: LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.mft (raw, json)
Hash identifier: FPWfcG6REINBHx+m+rCTVAc4b95KZFeUAozQu+UhVPk=
Subject key identifier: 43:6D:D8:0D:52:EF:46:9C:56:38:51:7A:78:95:49:FC:1F:15:FB:46
Authority key identifier: 2E:87:28:26:FC:E0:2B:D9:48:5E:F2:76:64:1D:2B:58:4F:59:9B:37
Certificate issuer: /CN=2e872826fce02bd9485ef276641d2b584f599b37
Certificate serial: 019A2553F31FD9AE4168AD8D9D7F35EBDF67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.mft
Manifest number: 034B
Signing time: Mon 27 Oct 2025 11:00:49 +0000
Manifest this update: Mon 27 Oct 2025 11:00:49 +0000
Manifest next update: Tue 28 Oct 2025 11:00:49 +0000
Files and hashes: 1: LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.crl (hash: l9Y7dR4Gd7eceVvp3XmPNaL2mbSkuLE5cQe38Vru+YQ=)
2: Mzj29HFabYUUzd0b2x71rCWYxpc.roa (hash: CtBd18sCBkrUSbVpakXbp+UYL2hKAze7NhB+GbMH/4U=)
3: Sdx0s8uspLK2JEfxE0Zqq-P7qdc.roa (hash: SB/yO/98dSqVsNjGD6z9bUudXfStWVjKdpjSXqLPG2I=)
4: VOPfsPLo2qD6WzGvi49ZWNyWRCQ.roa (hash: U4NKV1QaU6X7/z8jYu2ZN8ojJKZniu0yv+LX0DQZ7Lw=)
5: sXkk9RexS8Df6sg2xdkc7cVwBT0.roa (hash: EPX6TU1BjJqVBea1HkWMPFI7ngY4YBybKK+v3369Nok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.mft
rsync://rpki.ripe.net/repository/DEFAULT/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:53:f3:1f:d9:ae:41:68:ad:8d:9d:7f:35:eb:df:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e872826fce02bd9485ef276641d2b584f599b37
Validity
Not Before: Oct 27 11:00:49 2025 GMT
Not After : Oct 28 11:00:49 2025 GMT
Subject: CN=436dd80d52ef469c5638517a789549fc1f15fb46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:76:57:e8:8d:8d:46:94:86:da:e2:ec:24:b9:
e5:a0:c5:34:c8:25:91:c9:ec:92:8e:94:f0:d5:01:
21:94:9f:12:5b:ab:81:12:7f:ff:1c:c2:b5:ec:a7:
57:67:1d:69:bb:bf:4f:dc:a4:11:fd:8e:04:9e:22:
0b:e0:c7:0d:38:54:db:c5:60:01:43:19:42:20:03:
5b:35:3f:98:cf:bf:c2:e4:b8:69:63:46:f6:ed:f7:
1e:3a:2b:4e:a4:83:11:47:1e:ec:73:cc:cb:38:7b:
e1:46:db:1d:bf:46:88:88:78:b8:3c:1a:97:cb:2b:
39:cf:58:06:37:db:5d:97:55:f9:46:b9:72:00:09:
d0:b1:af:0a:43:77:6e:31:c3:2a:14:39:87:0c:46:
29:a7:1e:05:68:ce:20:2b:4f:e9:d4:f8:fa:09:3d:
50:d6:3c:2a:b6:7c:e0:31:5d:0f:24:80:b6:5d:43:
62:57:af:14:02:79:e1:42:a9:75:de:5a:5d:9d:80:
6b:b6:94:b6:b0:c0:75:b6:09:0e:34:17:8a:ed:25:
f0:29:e4:51:6b:cd:ed:99:fe:68:b7:91:b1:a7:4f:
3b:f9:44:99:c5:21:56:fb:e2:97:2d:45:72:9f:94:
b8:65:cd:f8:f1:b6:80:d3:28:b1:1d:ad:15:b9:d1:
de:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:6D:D8:0D:52:EF:46:9C:56:38:51:7A:78:95:49:FC:1F:15:FB:46
X509v3 Authority Key Identifier:
keyid:2E:87:28:26:FC:E0:2B:D9:48:5E:F2:76:64:1D:2B:58:4F:59:9B:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:35:ea:f0:2e:39:c9:77:76:fb:65:57:5a:58:3b:6f:95:ac:
dc:8a:cd:24:19:9c:a9:8a:ed:a5:ad:e4:9b:c6:3e:53:2e:64:
49:92:99:64:f7:f7:a7:d6:67:8a:33:82:21:d6:36:9b:38:c9:
c0:5a:60:95:88:26:96:ad:22:3b:b9:7f:cc:64:80:82:a4:c6:
6f:da:26:e2:14:09:48:1c:b2:ec:0b:27:42:b5:79:1f:51:2d:
22:72:8e:14:fd:de:94:ab:8d:d4:5e:88:0b:7c:a7:0c:a7:3c:
e8:bf:2e:94:77:85:d4:0f:57:55:b1:50:99:ee:51:08:f6:22:
01:53:9a:44:0e:6c:dd:9e:63:c0:ce:58:e4:dc:96:2f:b9:e1:
13:7d:12:58:ee:01:8e:ec:db:20:b1:4c:05:9f:1e:a2:6b:70:
41:fa:2b:59:00:11:60:d4:0b:be:9c:9b:75:ab:b0:14:44:dd:
81:2c:2b:3a:d3:85:f7:2c:77:c0:41:aa:74:92:0e:de:32:c0:
65:80:9e:e6:64:8a:9d:3d:0a:c5:48:d5:86:19:a2:ce:a1:fd:
27:91:42:58:1c:65:71:3a:73:25:88:de:6f:53:29:c7:4c:40:
55:b1:f9:f7:f9:84:b6:3c:59:78:19:8a:8c:ea:11:91:80:2a:
a1:59:f1:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 14:20:57 2025 by rpki-client