Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.mft
File: 0LhJubyQQqFVczGTfkrXFRivYc8.mft (raw, json)
Hash identifier: NOMpHwvw/uL+1VGOVIMC31yyi8AJrWXWmDysa2qs+c8=
Subject key identifier: 55:E5:DC:07:F1:C4:D4:4D:2F:0A:FB:8D:16:5D:75:14:EB:CB:CB:D8
Authority key identifier: D0:B8:49:B9:BC:90:42:A1:55:73:31:93:7E:4A:D7:15:18:AF:61:CF
Certificate issuer: /CN=d0b849b9bc9042a1557331937e4ad71518af61cf
Certificate serial: 0199FEB49CC761177E7F6A8DA414864DABD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0LhJubyQQqFVczGTfkrXFRivYc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.mft
Manifest number: 16EE
Signing time: Sun 19 Oct 2025 23:01:13 +0000
Manifest this update: Sun 19 Oct 2025 23:01:13 +0000
Manifest next update: Mon 20 Oct 2025 23:01:13 +0000
Files and hashes: 1: 0LhJubyQQqFVczGTfkrXFRivYc8.crl (hash: uj+Q/x3ayJNdteseuJuqGAeaRBME/JOBbExlTlQQEc4=)
2: 1-eb9r-ZDRcfXM319Xm17VSwOe2g.roa (hash: gjasaH7lkMMANTCzqIlftWjMy6V6Szhqm9mZMjotXY4=)
3: H0lhlyvHrJBUbelTUSco_7dJSjQ.roa (hash: L/m4BXMaiGyOl/b45Q9sPqlYrX5v9RjW3QD40e1E52s=)
4: eANGg9nd8brobQxQsq-OUws_-A0.roa (hash: lEUfEgigb66go+VnP4oXCP4ZNWVGI/eBV8YRKR1wILc=)
5: fchmYh0XMmIa-Ncr7a7fqAnAY00.roa (hash: ZlxUCwJ7bUmXJFbrCkwij8tMOrG795eaKW3Q7cSegWE=)
6: gbFyA5kAyF3D91TwTtuIgfKJGwg.roa (hash: P+ljc7ooXveuyv4fpj4pataLqZnV6kSVgO14/6L0j+k=)
7: m885sdRVL7vvTw9o72IDISfg7CA.roa (hash: G7PZpicKtRlgQZhGAEn8Nx8P/JZomwfCGr+1m/KgFYQ=)
8: ncGsNjTWkIf28hHD5IvPQUyPHT4.roa (hash: OTRCAQhrm/oTjMPsGhu8HQvEnrVxNQI7H4S1GDdgIBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0LhJubyQQqFVczGTfkrXFRivYc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:9c:c7:61:17:7e:7f:6a:8d:a4:14:86:4d:ab:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0b849b9bc9042a1557331937e4ad71518af61cf
Validity
Not Before: Oct 19 23:01:13 2025 GMT
Not After : Oct 20 23:01:13 2025 GMT
Subject: CN=55e5dc07f1c4d44d2f0afb8d165d7514ebcbcbd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:74:fa:cb:1d:57:f3:6c:d9:c5:99:3d:f4:a3:
99:8a:4e:b8:d8:96:bb:9b:42:de:d9:e6:58:61:5c:
61:cb:9a:fb:10:a6:92:a2:49:d3:94:e0:e4:ae:10:
d4:bb:a6:67:cf:98:8a:76:ad:c2:1d:6d:7a:a0:47:
6c:7e:34:cc:e7:a4:b3:73:5b:4f:75:64:0e:9e:ce:
2c:82:26:3f:de:20:18:a5:04:3a:df:eb:68:eb:92:
57:03:8e:0a:ea:6c:3e:42:be:b9:95:a9:c9:8f:2a:
3f:ab:75:9f:47:fd:85:2e:0f:84:e8:a2:03:23:49:
7d:18:1a:9e:43:f0:0b:32:9d:f3:af:8d:1f:86:af:
77:9f:56:07:4a:4f:bd:3b:15:a3:75:b9:5d:e9:f0:
55:a5:9d:b8:6c:49:3b:71:6e:54:67:af:61:dc:51:
71:fd:04:a1:cb:24:95:06:a7:ed:a9:66:34:31:7b:
40:44:4a:de:8e:7b:b1:21:8e:e9:af:f4:a5:4a:bb:
57:37:4b:9a:d2:7e:93:81:58:9d:48:9a:2c:8e:de:
ac:6c:ed:5a:57:7e:68:17:96:8e:2d:48:85:b8:37:
f0:90:f9:2b:6c:53:c8:c4:5e:76:fa:d7:4d:09:60:
a2:6d:ac:cf:9d:97:5e:de:31:1a:9f:11:e4:95:48:
f8:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:E5:DC:07:F1:C4:D4:4D:2F:0A:FB:8D:16:5D:75:14:EB:CB:CB:D8
X509v3 Authority Key Identifier:
keyid:D0:B8:49:B9:BC:90:42:A1:55:73:31:93:7E:4A:D7:15:18:AF:61:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0LhJubyQQqFVczGTfkrXFRivYc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:2a:c0:5a:a1:71:0e:b6:37:18:7b:4a:70:d8:21:e0:42:35:
2e:45:a3:d1:69:ca:31:e0:81:90:69:99:17:83:b6:d8:c3:c4:
47:0c:23:b0:de:f2:1d:34:bc:21:82:fa:c6:8e:6e:e4:62:db:
ea:04:d3:46:5e:3a:87:08:0a:d0:cd:5f:19:3a:77:92:6f:67:
07:b6:f6:b2:cb:f4:8d:ed:ea:32:2f:4c:12:58:23:10:4a:5e:
e6:04:55:43:18:2b:51:6f:43:e4:a5:49:03:19:25:62:9d:f0:
0b:65:39:69:02:5e:9f:1f:6c:da:ce:78:be:e0:19:0e:aa:a9:
81:a9:10:ea:4e:c2:7e:f4:8d:e8:04:96:84:50:1b:44:ab:5a:
a3:07:86:4d:d6:60:63:42:ee:18:63:7b:14:82:57:98:44:f4:
75:35:29:fa:4c:28:e2:f3:49:6f:cc:fd:8c:3f:2e:b7:8e:32:
21:2d:86:cb:ca:03:df:f6:20:ab:58:14:c8:c4:fd:cb:7d:7e:
3b:58:f1:fa:6a:44:f3:8a:ac:78:d4:34:75:5d:9c:a7:99:c9:
d9:08:95:62:26:bf:6f:eb:72:93:c5:60:f7:99:df:3f:11:4f:
68:3b:7a:c2:a8:70:18:8e:04:f2:76:07:9f:2d:18:2c:db:cf:
3b:1f:1a:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+tJzHYRd+f2qNpBSGTavSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwYjg0OWI5YmM5MDQyYTE1NTczMzE5MzdlNGFkNzE1MThh
ZjYxY2YwHhcNMjUxMDE5MjMwMTEzWhcNMjUxMDIwMjMwMTEzWjAzMTEwLwYDVQQD
Eyg1NWU1ZGMwN2YxYzRkNDRkMmYwYWZiOGQxNjVkNzUxNGViY2JjYmQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXT6yx1X82zZxZk99KOZik642Ja7
m0Le2eZYYVxhy5r7EKaSoknTlODkrhDUu6Znz5iKdq3CHW16oEdsfjTM56Szc1tP
dWQOns4sgiY/3iAYpQQ63+to65JXA44K6mw+Qr65lanJjyo/q3WfR/2FLg+E6KID
I0l9GBqeQ/ALMp3zr40fhq93n1YHSk+9OxWjdbld6fBVpZ24bEk7cW5UZ69h3FFx
/QShyySVBqftqWY0MXtARErejnuxIY7pr/SlSrtXN0ua0n6TgVidSJosjt6sbO1a
V35oF5aOLUiFuDfwkPkrbFPIxF52+tdNCWCibazPnZde3jEanxHklUj4bQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFXl3AfxxNRNLwr7jRZddRTry8vYMB8GA1UdIwQY
MBaAFNC4Sbm8kEKhVXMxk35K1xUYr2HPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMExoSnVieVFRcUZWY3pHVGZrclhGUml2WWM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9hM2ZiNjctZDUxNC00YWVlLWFkYjkt
NzJiYWQ5ZDczYzgwLzEvMExoSnVieVFRcUZWY3pHVGZrclhGUml2WWM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9hM2ZiNjctZDUxNC00YWVlLWFkYjktNzJiYWQ5ZDczYzgw
LzEvMExoSnVieVFRcUZWY3pHVGZrclhGUml2WWM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWCrAWqFx
DrY3GHtKcNgh4EI1LkWj0WnKMeCBkGmZF4O22MPERwwjsN7yHTS8IYL6xo5u5GLb
6gTTRl46hwgK0M1fGTp3km9nB7b2ssv0je3qMi9MElgjEEpe5gRVQxgrUW9D5KVJ
AxklYp3wC2U5aQJenx9s2s54vuAZDqqpgakQ6k7CfvSN6ASWhFAbRKtaoweGTdZg
Y0LuGGN7FIJXmET0dTUp+kwo4vNJb8z9jD8ut44yIS2Gy8oD3/Ygq1gUyMT9y31+
O1jx+mpE84qseNQ0dV2cp5nJ2QiVYia/b+tyk8Vg95nfPxFPaDt6wqhwGI4E8nYH
ny0YLNvPOx8a5A==
-----END CERTIFICATE-----
Generated at Mon Oct 20 02:50:12 2025 by rpki-client