Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/9911ac-4cf2-4ee5-8d63-049bdc6b8ef3/1/l0Kd6LzDvkdKu9or4qidDzIIw4U.mft
File: l0Kd6LzDvkdKu9or4qidDzIIw4U.mft (raw, json)
Hash identifier: olGGvJdMcqIhEHOIMn4eYhhkeG0LgBtMXa8ryhKf82U=
Subject key identifier: 42:59:AA:24:6B:4E:06:6D:4E:2E:2A:77:48:B3:25:00:FB:AC:21:52
Authority key identifier: 97:42:9D:E8:BC:C3:BE:47:4A:BB:DA:2B:E2:A8:9D:0F:32:08:C3:85
Certificate issuer: /CN=97429de8bcc3be474abbda2be2a89d0f3208c385
Certificate serial: 0199FC591D626C18A05DF304913D93CA63EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l0Kd6LzDvkdKu9or4qidDzIIw4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/9911ac-4cf2-4ee5-8d63-049bdc6b8ef3/1/l0Kd6LzDvkdKu9or4qidDzIIw4U.mft
Manifest number: 0FFA
Signing time: Sun 19 Oct 2025 12:02:02 +0000
Manifest this update: Sun 19 Oct 2025 12:02:02 +0000
Manifest next update: Mon 20 Oct 2025 12:02:02 +0000
Files and hashes: 1: HTyoOey4HT5zP_JyxfBfKahHFmY.roa (hash: QyYp6qHPSKM0SQk6N5S4fNiWDVTxBA9QRWpKOqYhb4w=)
2: l0Kd6LzDvkdKu9or4qidDzIIw4U.crl (hash: XyrA/rLt8a+TAV6paPgRPW9n9u+INB2DuuYsRJiHp2w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/9911ac-4cf2-4ee5-8d63-049bdc6b8ef3/1/l0Kd6LzDvkdKu9or4qidDzIIw4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/9911ac-4cf2-4ee5-8d63-049bdc6b8ef3/1/l0Kd6LzDvkdKu9or4qidDzIIw4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/l0Kd6LzDvkdKu9or4qidDzIIw4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:59:1d:62:6c:18:a0:5d:f3:04:91:3d:93:ca:63:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97429de8bcc3be474abbda2be2a89d0f3208c385
Validity
Not Before: Oct 19 12:02:02 2025 GMT
Not After : Oct 20 12:02:02 2025 GMT
Subject: CN=4259aa246b4e066d4e2e2a7748b32500fbac2152
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:3f:3f:38:33:82:1e:e4:86:2f:d6:bc:e0:a0:
16:43:90:2b:b4:bd:06:83:99:56:3e:40:a6:9a:d6:
b7:40:6a:e5:87:fd:23:92:a1:e3:63:65:3d:39:50:
ad:a1:f0:30:40:1e:98:d4:22:29:f1:0c:a7:a7:63:
25:92:48:4d:d3:fc:ba:de:31:7e:5b:d8:58:f9:3d:
66:88:3a:b5:e7:16:40:ba:dd:a4:3e:bc:3b:09:7c:
07:ff:fa:7f:c6:8f:70:08:60:ef:e3:37:8c:24:45:
0a:5f:1e:dc:1c:d3:0f:e1:96:ad:96:2c:5c:c2:b6:
29:f9:7d:99:42:8c:ac:f9:2d:97:0a:53:80:77:f7:
50:5b:f4:20:1f:f0:cf:07:81:c6:93:e7:ba:06:5e:
9d:e7:fe:e3:c2:a4:e4:5f:b2:73:90:f4:80:5a:2d:
76:26:e0:78:b7:33:02:8c:51:a4:3d:a9:db:87:56:
b8:e9:5a:39:00:ae:15:87:cd:c6:84:f5:c6:0e:1e:
9a:e0:93:5c:c4:b7:d9:6e:bc:34:e4:98:38:ce:f2:
7b:b0:19:fe:71:24:17:a8:13:f0:ca:9f:3a:48:7a:
77:c8:62:78:8f:0a:13:63:2e:f2:7f:4f:44:41:0c:
79:e2:64:1a:0d:28:21:a6:7d:fe:88:99:b3:5e:f8:
81:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:59:AA:24:6B:4E:06:6D:4E:2E:2A:77:48:B3:25:00:FB:AC:21:52
X509v3 Authority Key Identifier:
keyid:97:42:9D:E8:BC:C3:BE:47:4A:BB:DA:2B:E2:A8:9D:0F:32:08:C3:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0Kd6LzDvkdKu9or4qidDzIIw4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/9911ac-4cf2-4ee5-8d63-049bdc6b8ef3/1/l0Kd6LzDvkdKu9or4qidDzIIw4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/9911ac-4cf2-4ee5-8d63-049bdc6b8ef3/1/l0Kd6LzDvkdKu9or4qidDzIIw4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:c4:08:8d:a6:c7:7c:64:3c:b3:0f:65:11:4e:81:e5:0d:61:
c4:f7:b6:bb:c4:c5:b8:48:91:de:b8:7c:55:af:99:dc:f3:5d:
fe:1c:22:ae:f7:c4:3e:c4:fc:57:17:8d:ee:a8:6f:81:44:03:
29:44:4e:cc:a5:ba:34:5b:12:30:23:77:05:b4:2d:2f:28:83:
dd:3a:30:63:d6:84:19:3d:a8:50:e6:46:36:76:6b:05:79:52:
79:fb:1b:94:03:d6:e4:c8:a1:05:bc:7e:18:d5:b8:21:26:ee:
ff:0e:3b:e0:14:0b:16:a2:0b:fd:2e:79:36:24:38:1f:0a:a5:
82:eb:5a:83:75:e2:09:e6:79:ef:61:e9:6c:ce:5d:07:a3:36:
d2:ad:a7:13:c7:c0:fb:7f:67:2c:60:00:d0:f5:5f:dc:12:f3:
a7:08:b3:b1:87:ce:b6:6e:43:cc:76:ad:8c:86:56:87:3f:7a:
d0:32:e9:7b:34:4f:cc:0c:3f:3e:c6:91:59:96:f5:3b:84:f1:
26:bd:6b:d5:e1:37:e9:e1:32:2f:ed:1c:5d:cd:ad:72:ca:52:
67:c5:aa:4b:50:e8:3d:4d:5f:1b:e0:e4:8a:cc:0d:54:54:54:
e4:17:8f:7a:ca:1a:55:bf:4d:08:b9:52:cc:e8:f8:e0:3b:7c:
ce:45:bb:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WR1ibBigXfMEkT2TymPrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3NDI5ZGU4YmNjM2JlNDc0YWJiZGEyYmUyYTg5ZDBmMzIw
OGMzODUwHhcNMjUxMDE5MTIwMjAyWhcNMjUxMDIwMTIwMjAyWjAzMTEwLwYDVQQD
Eyg0MjU5YWEyNDZiNGUwNjZkNGUyZTJhNzc0OGIzMjUwMGZiYWMyMTUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5j8/ODOCHuSGL9a84KAWQ5ArtL0G
g5lWPkCmmta3QGrlh/0jkqHjY2U9OVCtofAwQB6Y1CIp8Qynp2MlkkhN0/y63jF+
W9hY+T1miDq15xZAut2kPrw7CXwH//p/xo9wCGDv4zeMJEUKXx7cHNMP4Zatlixc
wrYp+X2ZQoys+S2XClOAd/dQW/QgH/DPB4HGk+e6Bl6d5/7jwqTkX7JzkPSAWi12
JuB4tzMCjFGkPanbh1a46Vo5AK4Vh83GhPXGDh6a4JNcxLfZbrw05Jg4zvJ7sBn+
cSQXqBPwyp86SHp3yGJ4jwoTYy7yf09EQQx54mQaDSghpn3+iJmzXviBwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEJZqiRrTgZtTi4qd0izJQD7rCFSMB8GA1UdIwQY
MBaAFJdCnei8w75HSrvaK+KonQ8yCMOFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDBLZDZMekR2a2RLdTlvcjRxaWREeklJdzRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC85OTExYWMtNGNmMi00ZWU1LThkNjMt
MDQ5YmRjNmI4ZWYzLzEvbDBLZDZMekR2a2RLdTlvcjRxaWREeklJdzRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC85OTExYWMtNGNmMi00ZWU1LThkNjMtMDQ5YmRjNmI4ZWYz
LzEvbDBLZDZMekR2a2RLdTlvcjRxaWREeklJdzRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIcQIjabH
fGQ8sw9lEU6B5Q1hxPe2u8TFuEiR3rh8Va+Z3PNd/hwirvfEPsT8VxeN7qhvgUQD
KUROzKW6NFsSMCN3BbQtLyiD3TowY9aEGT2oUOZGNnZrBXlSefsblAPW5MihBbx+
GNW4ISbu/w474BQLFqIL/S55NiQ4Hwqlgutag3XiCeZ572HpbM5dB6M20q2nE8fA
+39nLGAA0PVf3BLzpwizsYfOtm5DzHatjIZWhz960DLpezRPzAw/PsaRWZb1O4Tx
Jr1r1eE36eEyL+0cXc2tcspSZ8WqS1DoPU1fG+DkiswNVFRU5BePesoaVb9NCLlS
zOj44Dt8zkW76A==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:56:35 2025 by rpki-client