Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/6a7c93-87b4-4a4c-a21e-41a84f419ac5/1/0LkE317sIhazQwFsXLJLuQpD06Q.mft
File: 0LkE317sIhazQwFsXLJLuQpD06Q.mft (raw, json)
Hash identifier: gSYOTo2SEx4xFAhCtHkOthocYxKyT3RILyc51vDxaoM=
Subject key identifier: 9D:5F:95:13:5D:B8:9D:2D:77:F7:7E:7B:FF:69:93:59:B4:59:EE:07
Authority key identifier: D0:B9:04:DF:5E:EC:22:16:B3:43:01:6C:5C:B2:4B:B9:0A:43:D3:A4
Certificate issuer: /CN=d0b904df5eec2216b343016c5cb24bb90a43d3a4
Certificate serial: 0199FC8F9D83AF62F84EC6F95492FFA668A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0LkE317sIhazQwFsXLJLuQpD06Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/6a7c93-87b4-4a4c-a21e-41a84f419ac5/1/0LkE317sIhazQwFsXLJLuQpD06Q.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 13:01:34 +0000
Manifest this update: Sun 19 Oct 2025 13:01:34 +0000
Manifest next update: Mon 20 Oct 2025 13:01:34 +0000
Files and hashes: 1: 0LkE317sIhazQwFsXLJLuQpD06Q.crl (hash: vqgPbbTHbjJGqH53yixN0ksrvIhF6hLZghdBiPHrl28=)
2: NrSqEKUOU2XauV-i5XcFK6G4SDE.roa (hash: QbfLyNgfhw89ncOBcXtsqNeuurH1zO/6qaF1UEA+u6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/6a7c93-87b4-4a4c-a21e-41a84f419ac5/1/0LkE317sIhazQwFsXLJLuQpD06Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/6a7c93-87b4-4a4c-a21e-41a84f419ac5/1/0LkE317sIhazQwFsXLJLuQpD06Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/0LkE317sIhazQwFsXLJLuQpD06Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:9d:83:af:62:f8:4e:c6:f9:54:92:ff:a6:68:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0b904df5eec2216b343016c5cb24bb90a43d3a4
Validity
Not Before: Oct 19 13:01:34 2025 GMT
Not After : Oct 20 13:01:34 2025 GMT
Subject: CN=9d5f95135db89d2d77f77e7bff699359b459ee07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:5c:55:b0:86:80:13:0c:76:2e:9a:4d:5a:be:
58:5a:25:b6:b9:bc:f3:43:76:d9:fd:3e:cc:ef:33:
c0:78:9e:b5:c7:2f:50:4d:e6:b4:86:ca:e1:92:08:
30:c1:7b:81:d8:13:48:d6:15:fc:dc:d3:55:b7:35:
02:3b:0e:22:27:e3:fe:af:12:a9:83:89:a8:04:4b:
61:f2:6a:aa:0d:e1:15:fd:31:36:08:0a:08:c7:74:
06:92:8d:80:4c:90:f5:a2:87:7f:0e:c6:54:97:8e:
13:9e:66:7b:6a:42:9e:c3:ee:4a:ba:13:b0:c9:a4:
44:89:e1:07:91:70:0e:47:2c:06:c1:f3:60:31:3d:
44:cb:65:4d:cd:a4:82:66:b5:79:7b:43:08:d8:aa:
e2:9f:e6:53:a3:89:57:8b:2d:2c:c0:22:b4:14:38:
9d:5b:3c:7e:2c:59:a8:ab:4c:3f:de:44:e9:dc:7b:
10:c0:f4:b6:7c:8f:9c:d8:c1:4a:7c:81:60:95:87:
8e:9a:59:ab:8e:b8:d3:61:d1:07:0e:cb:5b:1b:1a:
75:7e:85:7f:59:59:fe:df:44:7a:83:8c:2e:57:a4:
9e:47:88:82:55:66:2c:26:21:79:24:3a:bf:b6:f5:
37:8a:4f:8f:81:7f:34:6d:9d:a9:1b:5d:33:39:7f:
dd:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:5F:95:13:5D:B8:9D:2D:77:F7:7E:7B:FF:69:93:59:B4:59:EE:07
X509v3 Authority Key Identifier:
keyid:D0:B9:04:DF:5E:EC:22:16:B3:43:01:6C:5C:B2:4B:B9:0A:43:D3:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0LkE317sIhazQwFsXLJLuQpD06Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/6a7c93-87b4-4a4c-a21e-41a84f419ac5/1/0LkE317sIhazQwFsXLJLuQpD06Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/6a7c93-87b4-4a4c-a21e-41a84f419ac5/1/0LkE317sIhazQwFsXLJLuQpD06Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:e7:93:8b:56:56:52:72:27:43:12:d2:97:5b:d9:3e:91:69:
bd:0e:69:b5:06:d3:24:fc:fb:1d:ea:4c:8b:dc:48:37:b0:b5:
c8:19:93:6e:64:82:34:24:a3:bb:86:8f:47:6c:8f:81:4f:83:
1d:39:71:58:ba:60:c9:93:30:2f:e3:b6:42:63:a3:39:17:e9:
98:ce:1f:91:8a:4a:53:96:cf:85:a4:2c:d3:c7:21:40:d1:52:
ed:54:c5:44:ec:9e:b5:fe:48:af:8d:0c:26:07:89:aa:d1:9f:
8c:4c:fe:83:97:e8:10:a1:fe:78:aa:e1:73:af:fc:25:da:7d:
e2:fc:1a:98:16:62:82:bd:c1:cd:6d:e6:9a:5b:4a:04:aa:ef:
d6:49:b1:7a:78:ad:98:83:b2:db:f5:53:82:73:4a:c0:c3:a6:
54:90:12:f3:95:c0:ce:b9:3a:43:72:25:4b:33:c9:21:4a:a1:
b8:ad:dc:4d:7a:a0:1c:c1:cb:a1:dc:a5:df:d4:d3:5f:0b:1c:
4b:ac:c8:36:3c:ee:09:1f:50:6d:48:94:d7:51:a6:f2:af:4f:
91:87:a5:a3:60:86:78:bd:47:78:4d:d8:31:77:fd:38:79:3e:
3d:3f:dd:1c:ee:69:d3:ae:0c:03:d2:76:dc:86:22:e0:ef:c7:
4b:12:83:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8j52Dr2L4Tsb5VJL/pmimMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwYjkwNGRmNWVlYzIyMTZiMzQzMDE2YzVjYjI0YmI5MGE0
M2QzYTQwHhcNMjUxMDE5MTMwMTM0WhcNMjUxMDIwMTMwMTM0WjAzMTEwLwYDVQQD
Eyg5ZDVmOTUxMzVkYjg5ZDJkNzdmNzdlN2JmZjY5OTM1OWI0NTllZTA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1VxVsIaAEwx2LppNWr5YWiW2ubzz
Q3bZ/T7M7zPAeJ61xy9QTea0hsrhkggwwXuB2BNI1hX83NNVtzUCOw4iJ+P+rxKp
g4moBEth8mqqDeEV/TE2CAoIx3QGko2ATJD1ood/DsZUl44TnmZ7akKew+5KuhOw
yaREieEHkXAORywGwfNgMT1Ey2VNzaSCZrV5e0MI2Krin+ZTo4lXiy0swCK0FDid
Wzx+LFmoq0w/3kTp3HsQwPS2fI+c2MFKfIFglYeOmlmrjrjTYdEHDstbGxp1foV/
WVn+30R6g4wuV6SeR4iCVWYsJiF5JDq/tvU3ik+PgX80bZ2pG10zOX/dCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ1flRNduJ0td/d+e/9pk1m0We4HMB8GA1UdIwQY
MBaAFNC5BN9e7CIWs0MBbFyyS7kKQ9OkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMExrRTMxN3NJaGF6UXdGc1hMSkx1UXBEMDZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi82YTdjOTMtODdiNC00YTRjLWEyMWUt
NDFhODRmNDE5YWM1LzEvMExrRTMxN3NJaGF6UXdGc1hMSkx1UXBEMDZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi82YTdjOTMtODdiNC00YTRjLWEyMWUtNDFhODRmNDE5YWM1
LzEvMExrRTMxN3NJaGF6UXdGc1hMSkx1UXBEMDZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqeeTi1ZW
UnInQxLSl1vZPpFpvQ5ptQbTJPz7HepMi9xIN7C1yBmTbmSCNCSju4aPR2yPgU+D
HTlxWLpgyZMwL+O2QmOjORfpmM4fkYpKU5bPhaQs08chQNFS7VTFROyetf5Ir40M
JgeJqtGfjEz+g5foEKH+eKrhc6/8Jdp94vwamBZigr3BzW3mmltKBKrv1kmxenit
mIOy2/VTgnNKwMOmVJAS85XAzrk6Q3IlSzPJIUqhuK3cTXqgHMHLodyl39TTXwsc
S6zINjzuCR9QbUiU11Gm8q9PkYelo2CGeL1HeE3YMXf9OHk+PT/dHO5p064MA9J2
3IYi4O/HSxKD5A==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:27:00 2025 by rpki-client