Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/71c590-246d-4aab-9dde-86304f5fe52a/1/L4IFe98YT8Q6GjsF492Z_-KgvmA.mft
File: L4IFe98YT8Q6GjsF492Z_-KgvmA.mft (raw, json)
Hash identifier: 1UO87iWoI1H1P9QGHHSikoaeAVeLkBq2uy1wC+wv4nI=
Subject key identifier: F5:1B:0E:E7:9C:E2:45:48:95:D5:89:60:D5:ED:A4:D3:9F:40:C1:AC
Authority key identifier: 2F:82:05:7B:DF:18:4F:C4:3A:1A:3B:05:E3:DD:99:FF:E2:A0:BE:60
Certificate issuer: /CN=2f82057bdf184fc43a1a3b05e3dd99ffe2a0be60
Certificate serial: 0199FA6A4129E0E2AF59B2F5BD50154A04B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L4IFe98YT8Q6GjsF492Z_-KgvmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/71c590-246d-4aab-9dde-86304f5fe52a/1/L4IFe98YT8Q6GjsF492Z_-KgvmA.mft
Manifest number: 69
Signing time: Sun 19 Oct 2025 03:01:31 +0000
Manifest this update: Sun 19 Oct 2025 03:01:31 +0000
Manifest next update: Mon 20 Oct 2025 03:01:31 +0000
Files and hashes: 1: JgS-n-wNqWZrJNFBUoK-xA0PR9k.roa (hash: /mEkB78+oSmFupgf2hrBJR3V+vJktDDVV7xA/T40FWQ=)
2: L4IFe98YT8Q6GjsF492Z_-KgvmA.crl (hash: V5Bj9OZrf3u+2HxX982/juwIJfT6tAsIOUxcW078gR4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/71c590-246d-4aab-9dde-86304f5fe52a/1/L4IFe98YT8Q6GjsF492Z_-KgvmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/71c590-246d-4aab-9dde-86304f5fe52a/1/L4IFe98YT8Q6GjsF492Z_-KgvmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/L4IFe98YT8Q6GjsF492Z_-KgvmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 03:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:6a:41:29:e0:e2:af:59:b2:f5:bd:50:15:4a:04:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f82057bdf184fc43a1a3b05e3dd99ffe2a0be60
Validity
Not Before: Oct 19 03:01:31 2025 GMT
Not After : Oct 20 03:01:31 2025 GMT
Subject: CN=f51b0ee79ce2454895d58960d5eda4d39f40c1ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:80:84:78:4b:05:8e:1f:a3:1d:d6:6f:e0:17:
d3:19:db:f0:b6:65:95:eb:61:7d:93:6f:28:0d:7d:
b1:c2:07:8d:b9:ff:5f:dc:13:e6:13:96:c4:49:d5:
59:57:16:09:b5:e6:9a:33:45:27:d1:83:83:03:0d:
55:58:80:e3:85:38:cb:16:9d:63:fe:2f:64:00:83:
0f:ea:ce:24:06:33:3f:11:e5:68:95:0b:9c:81:d9:
49:59:d6:7c:58:13:62:dc:27:83:85:44:c9:ba:e8:
f6:2d:45:b8:4f:3c:0e:d0:ca:51:b9:93:91:45:14:
8f:93:2f:9e:be:33:14:29:fc:a2:c6:fc:67:e6:4e:
dd:45:cf:a7:74:fc:eb:22:d1:87:98:f2:63:4d:fb:
9d:69:fc:e5:da:b5:7e:26:57:e6:e5:5d:fd:8b:53:
c8:99:aa:70:6b:f2:5b:0c:4f:e4:51:f6:9e:22:ae:
5b:a7:98:02:b7:15:70:16:6f:46:33:29:27:72:bb:
b2:cf:51:3f:cb:4e:64:78:2c:e8:e8:e7:66:2f:a5:
71:ca:57:5f:66:c1:16:e6:75:f3:03:8f:7f:f7:b0:
0c:62:61:7e:4a:8c:99:90:31:b5:2b:e4:31:e4:40:
cf:2b:6e:8c:99:71:96:50:ff:13:c7:1b:13:c9:9f:
cf:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:1B:0E:E7:9C:E2:45:48:95:D5:89:60:D5:ED:A4:D3:9F:40:C1:AC
X509v3 Authority Key Identifier:
keyid:2F:82:05:7B:DF:18:4F:C4:3A:1A:3B:05:E3:DD:99:FF:E2:A0:BE:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4IFe98YT8Q6GjsF492Z_-KgvmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/71c590-246d-4aab-9dde-86304f5fe52a/1/L4IFe98YT8Q6GjsF492Z_-KgvmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/71c590-246d-4aab-9dde-86304f5fe52a/1/L4IFe98YT8Q6GjsF492Z_-KgvmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:e4:18:94:d2:c5:29:86:8d:66:3d:5f:57:3d:d8:0f:bd:7f:
1b:61:90:bc:8f:82:bc:50:83:d4:c2:82:36:d7:19:d7:92:83:
0d:17:e9:ba:d0:37:ad:de:8d:bd:51:ef:6e:c1:c5:d1:72:10:
df:6c:d5:1a:14:c6:39:c8:60:31:73:36:d5:0a:78:d2:1a:09:
2f:f2:38:81:ac:7f:29:3c:58:3e:95:33:36:c6:bc:81:63:fe:
4b:0f:0b:76:3a:59:1f:db:9a:43:59:0d:67:c7:7e:2b:8a:86:
44:05:72:0a:8f:6e:74:df:15:80:42:c0:38:9d:81:af:5c:ea:
ac:db:3e:91:c5:65:46:a2:07:50:c2:29:8a:b0:cd:30:da:3b:
f4:7f:cd:48:b6:34:53:d4:89:78:92:b9:63:5e:70:bf:eb:75:
98:78:0b:c4:8d:68:cc:2e:6c:81:e8:1f:ee:ad:8c:c2:a9:93:
92:e7:08:5a:03:85:66:e8:c1:25:85:48:1c:24:d5:01:64:b1:
ba:6a:84:3c:9e:73:7c:b8:6b:49:ad:eb:22:47:0e:76:4e:45:
93:c3:e6:1d:fe:9a:91:ea:17:5e:e9:be:d3:7e:15:06:79:4b:
f8:65:ad:d5:db:26:a0:f9:71:81:54:4e:15:f0:80:b2:56:ec:
48:9d:4a:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn6akEp4OKvWbL1vVAVSgSxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmODIwNTdiZGYxODRmYzQzYTFhM2IwNWUzZGQ5OWZmZTJh
MGJlNjAwHhcNMjUxMDE5MDMwMTMxWhcNMjUxMDIwMDMwMTMxWjAzMTEwLwYDVQQD
EyhmNTFiMGVlNzljZTI0NTQ4OTVkNTg5NjBkNWVkYTRkMzlmNDBjMWFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnoCEeEsFjh+jHdZv4BfTGdvwtmWV
62F9k28oDX2xwgeNuf9f3BPmE5bESdVZVxYJteaaM0Un0YODAw1VWIDjhTjLFp1j
/i9kAIMP6s4kBjM/EeVolQucgdlJWdZ8WBNi3CeDhUTJuuj2LUW4TzwO0MpRuZOR
RRSPky+evjMUKfyixvxn5k7dRc+ndPzrItGHmPJjTfudafzl2rV+Jlfm5V39i1PI
mapwa/JbDE/kUfaeIq5bp5gCtxVwFm9GMykncruyz1E/y05keCzo6OdmL6Vxyldf
ZsEW5nXzA49/97AMYmF+SoyZkDG1K+Qx5EDPK26MmXGWUP8TxxsTyZ/P4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPUbDuec4kVIldWJYNXtpNOfQMGsMB8GA1UdIwQY
MBaAFC+CBXvfGE/EOho7BePdmf/ioL5gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDRJRmU5OFlUOFE2R2pzRjQ5MlpfLUtndm1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC83MWM1OTAtMjQ2ZC00YWFiLTlkZGUt
ODYzMDRmNWZlNTJhLzEvTDRJRmU5OFlUOFE2R2pzRjQ5MlpfLUtndm1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC83MWM1OTAtMjQ2ZC00YWFiLTlkZGUtODYzMDRmNWZlNTJh
LzEvTDRJRmU5OFlUOFE2R2pzRjQ5MlpfLUtndm1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXuQYlNLF
KYaNZj1fVz3YD71/G2GQvI+CvFCD1MKCNtcZ15KDDRfputA3rd6NvVHvbsHF0XIQ
32zVGhTGOchgMXM21Qp40hoJL/I4gax/KTxYPpUzNsa8gWP+Sw8LdjpZH9uaQ1kN
Z8d+K4qGRAVyCo9udN8VgELAOJ2Br1zqrNs+kcVlRqIHUMIpirDNMNo79H/NSLY0
U9SJeJK5Y15wv+t1mHgLxI1ozC5sgegf7q2MwqmTkucIWgOFZujBJYVIHCTVAWSx
umqEPJ5zfLhrSa3rIkcOdk5Fk8PmHf6akeoXXum+034VBnlL+GWt1dsmoPlxgVRO
FfCAslbsSJ1KuA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:13 2025 by rpki-client