Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.mft
File: LZ4xyQKe5EvWgbUVMwM1xqHP3u4.mft (raw, json)
Hash identifier: 5xrz/h2Kqr8PdOGBfwNuFO5lYugRVXyf0RQs8QFdZzY=
Subject key identifier: F1:BC:E1:F9:5B:0C:D7:F9:AD:D5:0F:A7:65:91:70:BC:30:58:D7:E2
Authority key identifier: 2D:9E:31:C9:02:9E:E4:4B:D6:81:B5:15:33:03:35:C6:A1:CF:DE:EE
Certificate issuer: /CN=2d9e31c9029ee44bd681b515330335c6a1cfdeee
Certificate serial: 0199FC216C536C85331E93B638D6A4CFB1D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.mft
Manifest number: 16E6
Signing time: Sun 19 Oct 2025 11:01:12 +0000
Manifest this update: Sun 19 Oct 2025 11:01:12 +0000
Manifest next update: Mon 20 Oct 2025 11:01:12 +0000
Files and hashes: 1: 5rwnt7U3zNdamjh9hhJ_HA_VCqo.roa (hash: LxqMIG4f6G1y41E4bvnnaVLXMyv0wjoLuCjGmeNYJdQ=)
2: LZ4xyQKe5EvWgbUVMwM1xqHP3u4.crl (hash: HuzUU6/LA0fvsIUBRdFqka82yyV5n34Zw67rmWQDAHI=)
3: NwLeIR_NPESbC4GUi2khijtoK7k.roa (hash: Cvm1rAd7KCGPEyQkopdZwWDBR/07H5izzQrtF4lbhAA=)
4: upgE53Ne0KMFUsGR-miso-8-5TQ.roa (hash: u1TgVu5CTRcoIplPeSQE03Pq8xZKbvkqbqoHvKMUbWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:6c:53:6c:85:33:1e:93:b6:38:d6:a4:cf:b1:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d9e31c9029ee44bd681b515330335c6a1cfdeee
Validity
Not Before: Oct 19 11:01:12 2025 GMT
Not After : Oct 20 11:01:12 2025 GMT
Subject: CN=f1bce1f95b0cd7f9add50fa7659170bc3058d7e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:19:62:93:f2:57:83:d2:bf:72:3d:a2:91:d3:
75:39:c6:70:1a:58:fa:bf:53:48:a6:0b:4a:a6:c2:
75:8c:93:32:9d:cf:b0:27:58:53:c1:9f:26:cc:bf:
72:4d:55:75:dd:51:58:d4:68:f8:c6:cc:8d:86:53:
85:bd:ac:a9:cc:51:e9:3e:e4:13:2d:6a:c7:c8:88:
2d:6c:ce:2d:62:08:54:2d:e7:b9:bc:77:ef:6f:e6:
d2:f1:a3:0e:3b:5c:31:4e:b1:16:4d:78:ed:9d:17:
25:e0:ea:ab:6d:13:10:f1:73:53:45:aa:53:8d:de:
77:d6:8c:95:d1:37:f9:dd:1c:8b:0f:91:ab:45:83:
bd:6a:aa:dc:4f:dd:af:5d:e0:54:a6:4e:f8:e2:de:
0f:a9:91:fc:a7:13:94:61:1a:12:3b:87:20:15:a7:
8f:ca:14:cd:01:7c:1e:49:12:ce:80:c7:12:bb:eb:
0a:62:21:b0:90:67:a9:b2:33:23:7f:ae:20:77:aa:
4d:49:20:06:9b:ca:df:85:b3:a0:1b:d2:cc:80:f8:
42:ba:d1:8a:ae:b6:eb:d4:bd:82:0a:16:e9:74:aa:
1b:ff:f4:c7:b8:ce:1a:11:15:0c:61:0d:c5:c3:9e:
75:2a:7c:0d:08:35:5c:64:46:3f:02:55:1b:53:9b:
78:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:BC:E1:F9:5B:0C:D7:F9:AD:D5:0F:A7:65:91:70:BC:30:58:D7:E2
X509v3 Authority Key Identifier:
keyid:2D:9E:31:C9:02:9E:E4:4B:D6:81:B5:15:33:03:35:C6:A1:CF:DE:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:a8:18:7a:74:6d:03:6e:28:6b:b8:b8:e2:f5:cd:ea:d2:1e:
f2:e8:cd:a2:bf:e8:f3:33:36:75:05:76:85:44:d3:a4:16:b3:
e9:03:3e:3a:4f:65:7e:a5:ef:b2:26:aa:87:de:f2:ac:02:1d:
1b:7a:d4:2b:3a:27:c7:69:3c:bb:20:00:76:ca:3a:67:24:17:
ec:18:05:d4:c9:d0:56:28:bc:9e:58:1b:c4:19:1b:fe:b0:21:
b0:5a:a4:14:b5:e4:f4:24:60:3d:27:d5:3d:d2:72:67:b4:20:
96:93:9a:47:69:94:50:4a:48:82:d3:1f:31:4f:d7:5e:ac:e6:
90:cc:b2:8c:a7:d9:3a:a2:79:d9:1f:37:a2:32:00:19:87:b3:
79:7d:00:11:d6:02:60:fa:8b:22:37:79:b8:dd:df:f8:32:64:
1f:97:69:b1:3f:17:a9:c9:e6:59:71:c5:e3:25:8c:6b:d3:e9:
4f:67:cf:95:4c:ba:97:53:31:c4:5a:ed:16:47:d2:24:83:5b:
ff:d5:23:a3:55:4c:4f:d0:52:af:f0:37:9e:f5:f8:65:0e:24:
19:38:d8:0a:8d:b1:3e:58:8b:bc:06:68:40:56:e7:3b:6c:7a:
59:ec:5d:f2:e8:81:f8:79:3f:22:be:67:e2:e9:91:f1:f0:de:
62:a1:52:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8IWxTbIUzHpO2ONakz7HZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkOWUzMWM5MDI5ZWU0NGJkNjgxYjUxNTMzMDMzNWM2YTFj
ZmRlZWUwHhcNMjUxMDE5MTEwMTEyWhcNMjUxMDIwMTEwMTEyWjAzMTEwLwYDVQQD
EyhmMWJjZTFmOTViMGNkN2Y5YWRkNTBmYTc2NTkxNzBiYzMwNThkN2UyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Rlik/JXg9K/cj2ikdN1OcZwGlj6
v1NIpgtKpsJ1jJMync+wJ1hTwZ8mzL9yTVV13VFY1Gj4xsyNhlOFvaypzFHpPuQT
LWrHyIgtbM4tYghULee5vHfvb+bS8aMOO1wxTrEWTXjtnRcl4OqrbRMQ8XNTRapT
jd531oyV0Tf53RyLD5GrRYO9aqrcT92vXeBUpk744t4PqZH8pxOUYRoSO4cgFaeP
yhTNAXweSRLOgMcSu+sKYiGwkGepsjMjf64gd6pNSSAGm8rfhbOgG9LMgPhCutGK
rrbr1L2CChbpdKob//THuM4aERUMYQ3Fw551KnwNCDVcZEY/AlUbU5t4LwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPG84flbDNf5rdUPp2WRcLwwWNfiMB8GA1UdIwQY
MBaAFC2eMckCnuRL1oG1FTMDNcahz97uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFo0eHlRS2U1RXZXZ2JVVk13TTF4cUhQM3U0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi8xNWQ4OTYtMmY2OS00Njk3LWE2ZmMt
MDhkYTY2NTJhODY3LzEvTFo0eHlRS2U1RXZXZ2JVVk13TTF4cUhQM3U0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi8xNWQ4OTYtMmY2OS00Njk3LWE2ZmMtMDhkYTY2NTJhODY3
LzEvTFo0eHlRS2U1RXZXZ2JVVk13TTF4cUhQM3U0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhqgYenRt
A24oa7i44vXN6tIe8ujNor/o8zM2dQV2hUTTpBaz6QM+Ok9lfqXvsiaqh97yrAId
G3rUKzonx2k8uyAAdso6ZyQX7BgF1MnQVii8nlgbxBkb/rAhsFqkFLXk9CRgPSfV
PdJyZ7QglpOaR2mUUEpIgtMfMU/XXqzmkMyyjKfZOqJ52R83ojIAGYezeX0AEdYC
YPqLIjd5uN3f+DJkH5dpsT8XqcnmWXHF4yWMa9PpT2fPlUy6l1MxxFrtFkfSJINb
/9Ujo1VMT9BSr/A3nvX4ZQ4kGTjYCo2xPliLvAZoQFbnO2x6Wexd8uiB+Hk/Ir5n
4umR8fDeYqFSOA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:58:52 2025 by rpki-client