Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/dLQqbeTgH8MSUNG74yIoEEbuYao.mft
File: dLQqbeTgH8MSUNG74yIoEEbuYao.mft (raw, json)
Hash identifier: aOB+wxHNi2AlBoqFoYKPN9T0cFqOLGcuAVrk6V/Fh1M=
Subject key identifier: 62:53:46:B0:D7:11:E9:26:20:E9:3F:D6:71:4C:06:1D:74:FD:93:3F
Authority key identifier: 74:B4:2A:6D:E4:E0:1F:C3:12:50:D1:BB:E3:22:28:10:46:EE:61:AA
Certificate issuer: /CN=74b42a6de4e01fc31250d1bbe322281046ee61aa
Certificate serial: 0199FFFE7494E59556D42CF02825D0EBE28F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dLQqbeTgH8MSUNG74yIoEEbuYao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/dLQqbeTgH8MSUNG74yIoEEbuYao.mft
Manifest number: 1187
Signing time: Mon 20 Oct 2025 05:01:29 +0000
Manifest this update: Mon 20 Oct 2025 05:01:29 +0000
Manifest next update: Tue 21 Oct 2025 05:01:29 +0000
Files and hashes: 1: Lgun1kUgKuu9jlLCkgKdcwux9To.roa (hash: lGBfmzCEfkvZzXJZAi/9+uOmPeLs0qMduHpdLInrHEE=)
2: bt6q6PTF8ueRiqJegnWl0jfi6G4.roa (hash: 8TVgggZ1XLtgR7AATYFo0DWz6MeX2DZ1/wik7k03eIU=)
3: dLQqbeTgH8MSUNG74yIoEEbuYao.crl (hash: QKrzPaJG3o2QhSITJcs9isTBzr4XARrPjzhFufCM/WQ=)
4: dM8kA9UdpYik4eGdd4p2YObVlEA.roa (hash: 09Lj5oy/dbzOsXRPbe2C4Tko7I3Jb+mI9jtmELQT9g8=)
5: jSoECDBgi6VXYwcb2Ry0gxkfevA.roa (hash: IB9PwzbzFSot/avb9nPz1wMhdqqmWhuiYKAtdM5DSM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/dLQqbeTgH8MSUNG74yIoEEbuYao.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/dLQqbeTgH8MSUNG74yIoEEbuYao.mft
rsync://rpki.ripe.net/repository/DEFAULT/dLQqbeTgH8MSUNG74yIoEEbuYao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:fe:74:94:e5:95:56:d4:2c:f0:28:25:d0:eb:e2:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74b42a6de4e01fc31250d1bbe322281046ee61aa
Validity
Not Before: Oct 20 05:01:29 2025 GMT
Not After : Oct 21 05:01:29 2025 GMT
Subject: CN=625346b0d711e92620e93fd6714c061d74fd933f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2c:6b:1b:bd:d8:f8:a1:e6:f6:ba:4b:9e:52:
4a:b3:51:bc:af:c4:a0:7f:28:ae:de:67:20:ed:ad:
2d:89:2e:25:26:90:a3:8d:34:5c:ed:a0:06:95:1d:
94:da:a1:8e:e0:f4:93:35:64:ee:d7:f6:db:24:5b:
87:b3:28:ff:3d:62:f2:ac:7f:5e:f0:f7:d5:47:43:
fe:5a:b7:8b:f4:f8:5e:dd:2b:63:95:1d:a5:d0:88:
eb:ab:f6:8b:25:14:54:62:8e:f2:b7:03:1d:a7:2d:
cb:20:d6:f6:8c:c3:cb:00:ed:00:47:c0:6a:b4:6b:
35:05:ac:7d:c3:23:c7:47:7e:38:51:73:07:5a:c4:
c9:a2:85:b2:1c:17:7c:03:e1:32:91:3f:23:10:8c:
89:bc:a5:51:8b:99:b4:ba:10:b4:2f:ed:e1:39:f7:
f1:0f:db:2b:58:86:f3:5b:53:3b:74:ec:08:88:cb:
b6:10:d4:28:8b:14:c8:c7:c5:af:93:1e:1c:4f:41:
d6:32:f1:f5:db:25:b0:f4:1a:7b:67:c9:c9:9f:32:
a1:02:20:f8:a1:34:b1:f5:16:be:90:34:64:41:2d:
58:2b:33:24:20:93:69:d7:28:13:be:45:85:e2:83:
ed:14:7c:62:d6:47:27:fe:10:23:c8:a2:a0:be:60:
82:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:53:46:B0:D7:11:E9:26:20:E9:3F:D6:71:4C:06:1D:74:FD:93:3F
X509v3 Authority Key Identifier:
keyid:74:B4:2A:6D:E4:E0:1F:C3:12:50:D1:BB:E3:22:28:10:46:EE:61:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLQqbeTgH8MSUNG74yIoEEbuYao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/dLQqbeTgH8MSUNG74yIoEEbuYao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/dLQqbeTgH8MSUNG74yIoEEbuYao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:f2:bc:e2:46:de:67:1d:3e:58:9b:25:ad:7c:cb:5b:1e:8e:
c8:31:bd:a0:92:65:40:0f:01:88:f1:cb:56:a4:ad:cf:00:0f:
47:45:98:f5:c1:0b:b8:9f:8d:da:1f:45:1d:02:20:74:84:55:
fc:65:c2:9b:29:3c:23:6a:8e:c4:8b:7f:c6:40:ea:68:6d:e8:
10:26:51:b0:19:fe:ab:0d:a3:f0:29:b1:38:93:4d:c5:8e:f8:
e9:19:b0:ff:cf:08:91:5f:9b:95:bf:84:56:14:af:34:96:f3:
d4:de:4b:cc:f9:67:e0:00:c2:24:18:69:99:c1:d7:ea:a0:86:
86:ac:53:4e:18:4a:bb:7c:1c:ab:3c:5d:0a:2b:5c:42:a1:fe:
3e:a8:bc:a9:35:09:62:a5:e4:a0:0d:1c:21:e6:3f:64:71:42:
1b:25:ca:05:95:53:87:7d:a0:ee:81:84:48:30:43:19:7f:1e:
47:68:c6:44:fe:b3:85:81:8d:0a:07:06:71:51:f0:fe:35:11:
fa:bd:aa:aa:9c:ae:99:bd:34:82:90:55:9b:5b:77:3b:e7:58:
7f:fc:be:15:db:81:f4:dc:1a:51:57:5e:e5:2d:db:97:37:cd:
2b:55:a2:3a:b6:ad:c3:dc:ce:0f:ea:1e:57:38:ab:72:12:67:
ca:f4:22:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn//nSU5ZVW1CzwKCXQ6+KPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0YjQyYTZkZTRlMDFmYzMxMjUwZDFiYmUzMjIyODEwNDZl
ZTYxYWEwHhcNMjUxMDIwMDUwMTI5WhcNMjUxMDIxMDUwMTI5WjAzMTEwLwYDVQQD
Eyg2MjUzNDZiMGQ3MTFlOTI2MjBlOTNmZDY3MTRjMDYxZDc0ZmQ5MzNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArixrG73Y+KHm9rpLnlJKs1G8r8Sg
fyiu3mcg7a0tiS4lJpCjjTRc7aAGlR2U2qGO4PSTNWTu1/bbJFuHsyj/PWLyrH9e
8PfVR0P+WreL9Phe3StjlR2l0Ijrq/aLJRRUYo7ytwMdpy3LINb2jMPLAO0AR8Bq
tGs1Bax9wyPHR344UXMHWsTJooWyHBd8A+EykT8jEIyJvKVRi5m0uhC0L+3hOffx
D9srWIbzW1M7dOwIiMu2ENQoixTIx8Wvkx4cT0HWMvH12yWw9Bp7Z8nJnzKhAiD4
oTSx9Ra+kDRkQS1YKzMkIJNp1ygTvkWF4oPtFHxi1kcn/hAjyKKgvmCCWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGJTRrDXEekmIOk/1nFMBh10/ZM/MB8GA1UdIwQY
MBaAFHS0Km3k4B/DElDRu+MiKBBG7mGqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZExRcWJlVGdIOE1TVU5HNzR5SW9FRWJ1WWFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9lNTU1NmMtY2ZlYS00OTcyLWFhZjgt
MTdhMWRjZGNjNmUwLzEvZExRcWJlVGdIOE1TVU5HNzR5SW9FRWJ1WWFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9lNTU1NmMtY2ZlYS00OTcyLWFhZjgtMTdhMWRjZGNjNmUw
LzEvZExRcWJlVGdIOE1TVU5HNzR5SW9FRWJ1WWFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfvK84kbe
Zx0+WJslrXzLWx6OyDG9oJJlQA8BiPHLVqStzwAPR0WY9cELuJ+N2h9FHQIgdIRV
/GXCmyk8I2qOxIt/xkDqaG3oECZRsBn+qw2j8CmxOJNNxY746Rmw/88IkV+blb+E
VhSvNJbz1N5LzPln4ADCJBhpmcHX6qCGhqxTThhKu3wcqzxdCitcQqH+Pqi8qTUJ
YqXkoA0cIeY/ZHFCGyXKBZVTh32g7oGESDBDGX8eR2jGRP6zhYGNCgcGcVHw/jUR
+r2qqpyumb00gpBVm1t3O+dYf/y+FduB9NwaUVde5S3blzfNK1WiOratw9zOD+oe
VzirchJnyvQiOg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 09:02:53 2025 by rpki-client