Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/lFtz335v4RAPHROgfBjVmvIoQow.mft
File: lFtz335v4RAPHROgfBjVmvIoQow.mft (raw, json)
Hash identifier: HLq4Ltu1eY1c6gg0ZpZ0uMbJBs81YuWs6JP+xbX+Ya4=
Subject key identifier: A6:67:6F:6B:6B:08:09:EE:2D:C4:DF:A0:79:21:B2:D8:8E:DE:F0:E2
Authority key identifier: 94:5B:73:DF:7E:6F:E1:10:0F:1D:13:A0:7C:18:D5:9A:F2:28:42:8C
Certificate issuer: /CN=945b73df7e6fe1100f1d13a07c18d59af228428c
Certificate serial: 0199FB7C8750FC426701C3BDAEAA0794CABE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lFtz335v4RAPHROgfBjVmvIoQow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/lFtz335v4RAPHROgfBjVmvIoQow.mft
Manifest number: 1588
Signing time: Sun 19 Oct 2025 08:01:06 +0000
Manifest this update: Sun 19 Oct 2025 08:01:06 +0000
Manifest next update: Mon 20 Oct 2025 08:01:06 +0000
Files and hashes: 1: 9LVEIaMlmJxNlD9z3n5kSDNE07w.roa (hash: Ts++AgaSboNBt9jLBwSwB9DRgMmL7vyooMiQkdJdfP8=)
2: lFtz335v4RAPHROgfBjVmvIoQow.crl (hash: fVVsibZ7OBKi8WTfIcpqQlAVF1Y4C4+Iz9s2VLOZooo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/lFtz335v4RAPHROgfBjVmvIoQow.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/lFtz335v4RAPHROgfBjVmvIoQow.mft
rsync://rpki.ripe.net/repository/DEFAULT/lFtz335v4RAPHROgfBjVmvIoQow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:87:50:fc:42:67:01:c3:bd:ae:aa:07:94:ca:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=945b73df7e6fe1100f1d13a07c18d59af228428c
Validity
Not Before: Oct 19 08:01:06 2025 GMT
Not After : Oct 20 08:01:06 2025 GMT
Subject: CN=a6676f6b6b0809ee2dc4dfa07921b2d88edef0e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:70:0f:82:6e:9f:86:3d:07:f5:cd:82:2c:5f:
5c:9d:60:9d:70:75:40:95:88:44:82:f0:9a:a3:2d:
a0:62:b3:71:e2:92:4b:9a:85:37:22:18:5a:8a:c0:
a0:64:6e:28:5d:19:72:7f:67:c0:b4:8f:24:48:0c:
3e:0b:da:36:91:10:2f:92:0a:5b:d0:91:35:18:02:
69:80:cb:7e:29:16:6d:41:81:5d:75:0f:a9:8f:18:
c5:9c:73:11:e7:ad:e4:72:aa:ef:8b:c7:66:cc:89:
99:c7:bf:0c:f0:68:ce:9c:72:d3:36:cf:82:da:93:
f8:57:4f:f8:57:1f:45:7e:4a:83:b9:f1:93:30:3b:
8b:8a:86:ac:d2:d7:96:bd:2b:64:2b:71:96:67:cf:
a9:7a:80:89:8f:d8:f5:d6:2a:c6:8b:32:f7:1f:70:
0a:de:10:b8:51:db:f8:8b:50:f3:80:d5:48:47:8f:
85:9b:1c:4e:4e:c2:f7:75:1a:a3:89:15:83:f8:83:
63:11:55:71:8c:c0:91:e3:ea:3e:1f:1d:16:a0:8f:
9c:c8:f8:6a:af:90:b3:98:2c:0d:ec:99:f6:f9:30:
16:4b:6f:03:97:2b:74:43:96:13:96:29:aa:11:8b:
c9:c9:7b:75:88:f7:54:6c:10:d7:3b:3a:b3:f7:91:
67:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:67:6F:6B:6B:08:09:EE:2D:C4:DF:A0:79:21:B2:D8:8E:DE:F0:E2
X509v3 Authority Key Identifier:
keyid:94:5B:73:DF:7E:6F:E1:10:0F:1D:13:A0:7C:18:D5:9A:F2:28:42:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lFtz335v4RAPHROgfBjVmvIoQow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/lFtz335v4RAPHROgfBjVmvIoQow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/lFtz335v4RAPHROgfBjVmvIoQow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:38:4c:09:6a:1d:c1:2e:1f:b5:6a:b0:ea:fd:ee:24:fa:e9:
b3:59:1c:d2:fb:67:c9:7d:4f:52:d8:51:c6:b9:7c:56:1b:82:
62:9f:a4:ec:d6:f1:32:3e:76:42:82:0f:60:f0:a0:ef:46:a1:
83:36:c8:91:08:88:13:8f:bb:30:e8:d2:85:a8:c8:16:ee:5b:
6c:31:1c:e8:45:10:f3:cd:c6:5b:e9:b8:d7:f5:0c:20:45:83:
86:25:4d:12:12:88:e0:40:61:eb:db:8a:13:48:c6:e6:6a:f9:
17:18:a3:07:71:1c:94:90:50:2f:99:14:b1:c6:73:38:cb:72:
d8:84:d9:7b:4c:66:50:88:de:9b:41:be:83:b1:6c:2c:e4:11:
24:b0:91:cd:5e:e2:5a:67:da:75:ae:a5:87:a5:fa:76:1b:3a:
05:be:a6:6a:06:59:c7:b5:e2:bd:fa:43:25:0d:ce:7f:f3:48:
fd:c5:66:2a:9b:2f:b3:a3:f2:c3:07:1c:0b:60:6b:17:07:4c:
cf:3d:e1:a9:17:94:1f:10:75:79:cb:65:0c:b6:70:5e:1f:b9:
94:b0:0c:0a:69:cb:6d:7e:f8:d3:09:64:c3:b1:08:c3:58:f2:
14:28:38:69:35:54:32:1d:4a:57:a8:68:ee:10:9e:5c:62:0c:
c1:ec:5a:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7fIdQ/EJnAcO9rqoHlMq+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0NWI3M2RmN2U2ZmUxMTAwZjFkMTNhMDdjMThkNTlhZjIy
ODQyOGMwHhcNMjUxMDE5MDgwMTA2WhcNMjUxMDIwMDgwMTA2WjAzMTEwLwYDVQQD
EyhhNjY3NmY2YjZiMDgwOWVlMmRjNGRmYTA3OTIxYjJkODhlZGVmMGUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHAPgm6fhj0H9c2CLF9cnWCdcHVA
lYhEgvCaoy2gYrNx4pJLmoU3IhhaisCgZG4oXRlyf2fAtI8kSAw+C9o2kRAvkgpb
0JE1GAJpgMt+KRZtQYFddQ+pjxjFnHMR563kcqrvi8dmzImZx78M8GjOnHLTNs+C
2pP4V0/4Vx9FfkqDufGTMDuLioas0teWvStkK3GWZ8+peoCJj9j11irGizL3H3AK
3hC4Udv4i1DzgNVIR4+FmxxOTsL3dRqjiRWD+INjEVVxjMCR4+o+Hx0WoI+cyPhq
r5CzmCwN7Jn2+TAWS28Dlyt0Q5YTlimqEYvJyXt1iPdUbBDXOzqz95FncwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKZnb2trCAnuLcTfoHkhstiO3vDiMB8GA1UdIwQY
MBaAFJRbc99+b+EQDx0ToHwY1ZryKEKMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEZ0ejMzNXY0UkFQSFJPZ2ZCalZtdklvUW93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9lYzYxOGYtOWY2MS00MTg1LWJhMGQt
NmU0NTI0MjVhMTkzLzEvbEZ0ejMzNXY0UkFQSFJPZ2ZCalZtdklvUW93Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC9lYzYxOGYtOWY2MS00MTg1LWJhMGQtNmU0NTI0MjVhMTkz
LzEvbEZ0ejMzNXY0UkFQSFJPZ2ZCalZtdklvUW93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQDhMCWod
wS4ftWqw6v3uJPrps1kc0vtnyX1PUthRxrl8VhuCYp+k7NbxMj52QoIPYPCg70ah
gzbIkQiIE4+7MOjShajIFu5bbDEc6EUQ883GW+m41/UMIEWDhiVNEhKI4EBh69uK
E0jG5mr5FxijB3EclJBQL5kUscZzOMty2ITZe0xmUIjem0G+g7FsLOQRJLCRzV7i
Wmfada6lh6X6dhs6Bb6magZZx7XivfpDJQ3Of/NI/cVmKpsvs6PywwccC2BrFwdM
zz3hqReUHxB1ectlDLZwXh+5lLAMCmnLbX740wlkw7EIw1jyFCg4aTVUMh1KV6ho
7hCeXGIMwexarA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:37:42 2025 by rpki-client