Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.mft
File: llpqv9sIdPL-wiYs3qM3Otyy3FU.mft (raw, json)
Hash identifier: nIniG2qU3G/uPwtXPoFYrC1C/tG6Lr7dtyK8oyZqpsU=
Subject key identifier: A5:9C:2C:44:5D:7F:4F:FE:EA:DB:B4:ED:09:10:4C:31:64:B8:98:97
Authority key identifier: 96:5A:6A:BF:DB:08:74:F2:FE:C2:26:2C:DE:A3:37:3A:DC:B2:DC:55
Certificate issuer: /CN=965a6abfdb0874f2fec2262cdea3373adcb2dc55
Certificate serial: 0199FB461DA8F02B81B47139719FF320371F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/llpqv9sIdPL-wiYs3qM3Otyy3FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.mft
Manifest number: 0E47
Signing time: Sun 19 Oct 2025 07:01:40 +0000
Manifest this update: Sun 19 Oct 2025 07:01:40 +0000
Manifest next update: Mon 20 Oct 2025 07:01:40 +0000
Files and hashes: 1: jx2XkRRJ1Pen6eLqWGsTXmBaP9o.roa (hash: yl4Uer3PsgYBYL8law/V2acfxxr/ONbHAHnzrh/MmEQ=)
2: llpqv9sIdPL-wiYs3qM3Otyy3FU.crl (hash: xW/H2aStlgtB1y7k0Ghd7VmgffnoeRtcm4LuVwGu7dU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.mft
rsync://rpki.ripe.net/repository/DEFAULT/llpqv9sIdPL-wiYs3qM3Otyy3FU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:46:1d:a8:f0:2b:81:b4:71:39:71:9f:f3:20:37:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=965a6abfdb0874f2fec2262cdea3373adcb2dc55
Validity
Not Before: Oct 19 07:01:40 2025 GMT
Not After : Oct 20 07:01:40 2025 GMT
Subject: CN=a59c2c445d7f4ffeeadbb4ed09104c3164b89897
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:54:f2:73:f3:5a:a1:8d:de:1a:8f:fd:3a:96:
d9:bf:f6:f0:b5:af:bf:89:62:ff:e4:3b:d2:9c:3d:
e3:98:15:4b:fb:ea:3c:8e:e1:77:24:f9:2d:35:f4:
31:57:5a:3b:72:79:76:e9:4b:06:a6:9c:92:41:97:
a9:d5:48:06:3a:eb:6a:7b:f7:cb:0c:50:09:56:50:
00:8f:bf:d9:8a:32:87:7e:5b:49:97:3d:cb:14:de:
5c:2f:d5:2b:2e:ed:69:3a:6e:78:9b:a1:33:38:b6:
50:64:ac:a3:b1:77:fb:53:34:4a:13:fb:da:cc:0e:
dd:02:89:3c:82:72:54:17:fb:4e:fd:69:e7:0c:28:
a7:b0:d6:22:dd:11:13:cf:08:70:db:26:c6:3f:42:
89:c9:68:ce:4c:c0:53:a1:ae:6a:86:21:d2:ba:7f:
e4:c3:83:71:80:f0:9d:ed:21:7c:81:68:9b:ef:d3:
57:4d:77:3e:25:5c:c3:6b:14:0d:11:e8:1e:d3:9c:
77:b9:d5:d7:fc:0a:12:7e:d9:17:18:ed:00:c8:06:
db:ed:c1:08:7e:4a:4a:54:3c:d3:5b:06:07:e3:2b:
59:ae:c7:dc:12:20:35:70:17:8b:7f:64:97:84:17:
c1:84:5f:5d:55:0e:30:4f:fe:ff:c2:df:3e:c4:a0:
33:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:9C:2C:44:5D:7F:4F:FE:EA:DB:B4:ED:09:10:4C:31:64:B8:98:97
X509v3 Authority Key Identifier:
keyid:96:5A:6A:BF:DB:08:74:F2:FE:C2:26:2C:DE:A3:37:3A:DC:B2:DC:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/llpqv9sIdPL-wiYs3qM3Otyy3FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:f5:65:f7:bc:48:a6:bf:64:a4:23:2f:0d:68:18:98:82:8c:
04:52:d9:bf:f1:08:d5:77:1c:56:37:41:6a:b4:bb:79:3e:12:
84:17:84:8b:b2:02:ed:69:bc:6e:17:14:cc:ab:d4:ac:c8:61:
16:46:5a:48:1b:32:b2:b2:4e:e1:41:16:d9:ab:3e:51:20:bb:
39:27:bb:64:cb:54:e3:e2:e2:47:29:fc:44:2b:eb:99:96:7b:
e2:dc:6f:51:ab:78:4c:27:b5:8f:c8:a8:6a:9b:47:8b:1d:ea:
d8:59:aa:23:c3:ac:1a:51:29:9b:6e:35:0d:02:52:1f:05:89:
d3:53:3c:26:29:f9:7c:1e:05:02:51:ba:b1:8a:56:c2:cc:a6:
9b:e0:92:29:3e:77:2c:02:1e:b2:e2:d5:c5:bc:cc:9c:94:36:
e3:5d:53:3d:3f:d5:01:d3:0e:78:f2:54:e1:17:de:96:76:77:
93:34:17:99:c2:26:20:e4:e9:11:6b:7b:3f:70:8b:67:df:99:
19:46:d2:71:27:ac:5a:89:d0:a5:99:29:69:b1:6a:29:f6:d4:
bd:6d:3e:f3:b9:90:20:30:51:51:99:6c:10:ec:f8:55:71:5b:
ec:cc:a4:88:17:85:78:35:1e:09:80:91:ae:96:25:5b:4a:5f:
79:70:ef:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7Rh2o8CuBtHE5cZ/zIDcfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2NWE2YWJmZGIwODc0ZjJmZWMyMjYyY2RlYTMzNzNhZGNi
MmRjNTUwHhcNMjUxMDE5MDcwMTQwWhcNMjUxMDIwMDcwMTQwWjAzMTEwLwYDVQQD
EyhhNTljMmM0NDVkN2Y0ZmZlZWFkYmI0ZWQwOTEwNGMzMTY0Yjg5ODk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFTyc/NaoY3eGo/9OpbZv/bwta+/
iWL/5DvSnD3jmBVL++o8juF3JPktNfQxV1o7cnl26UsGppySQZep1UgGOutqe/fL
DFAJVlAAj7/ZijKHfltJlz3LFN5cL9UrLu1pOm54m6EzOLZQZKyjsXf7UzRKE/va
zA7dAok8gnJUF/tO/WnnDCinsNYi3RETzwhw2ybGP0KJyWjOTMBToa5qhiHSun/k
w4NxgPCd7SF8gWib79NXTXc+JVzDaxQNEege05x3udXX/AoSftkXGO0AyAbb7cEI
fkpKVDzTWwYH4ytZrsfcEiA1cBeLf2SXhBfBhF9dVQ4wT/7/wt8+xKAzHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKWcLERdf0/+6tu07QkQTDFkuJiXMB8GA1UdIwQY
MBaAFJZaar/bCHTy/sImLN6jNzrcstxVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGxwcXY5c0lkUEwtd2lZczNxTTNPdHl5M0ZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8xMjQxN2YtNzY2NS00MDk4LWEzMzgt
NDk0OWIxZTJiNjBmLzEvbGxwcXY5c0lkUEwtd2lZczNxTTNPdHl5M0ZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC8xMjQxN2YtNzY2NS00MDk4LWEzMzgtNDk0OWIxZTJiNjBm
LzEvbGxwcXY5c0lkUEwtd2lZczNxTTNPdHl5M0ZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhvVl97xI
pr9kpCMvDWgYmIKMBFLZv/EI1XccVjdBarS7eT4ShBeEi7IC7Wm8bhcUzKvUrMhh
FkZaSBsysrJO4UEW2as+USC7OSe7ZMtU4+LiRyn8RCvrmZZ74txvUat4TCe1j8io
aptHix3q2FmqI8OsGlEpm241DQJSHwWJ01M8Jin5fB4FAlG6sYpWwsymm+CSKT53
LAIesuLVxbzMnJQ2411TPT/VAdMOePJU4RfelnZ3kzQXmcImIOTpEWt7P3CLZ9+Z
GUbScSesWonQpZkpabFqKfbUvW0+87mQIDBRUZlsEOz4VXFb7MykiBeFeDUeCYCR
rpYlW0pfeXDvhg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:39:39 2025 by rpki-client