Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/8d9aa5-d52a-486f-b64c-7c605d32165d/1/lGIh95q-ptPAw0gGQlkN0K4Mqjs.mft
File: lGIh95q-ptPAw0gGQlkN0K4Mqjs.mft (raw, json)
Hash identifier: 8/D5dqiusAY6pPch9Uni9+aKaUjJoZlBER12VpsKqms=
Subject key identifier: 74:29:96:3D:43:9E:7B:7B:67:EB:6B:ED:41:E0:1E:2F:D5:A8:58:C2
Authority key identifier: 94:62:21:F7:9A:BE:A6:D3:C0:C3:48:06:42:59:0D:D0:AE:0C:AA:3B
Certificate issuer: /CN=946221f79abea6d3c0c3480642590dd0ae0caa3b
Certificate serial: 0199FBEAC68975689893386B44F749A43DA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lGIh95q-ptPAw0gGQlkN0K4Mqjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/8d9aa5-d52a-486f-b64c-7c605d32165d/1/lGIh95q-ptPAw0gGQlkN0K4Mqjs.mft
Manifest number: 13E2
Signing time: Sun 19 Oct 2025 10:01:31 +0000
Manifest this update: Sun 19 Oct 2025 10:01:31 +0000
Manifest next update: Mon 20 Oct 2025 10:01:31 +0000
Files and hashes: 1: lGIh95q-ptPAw0gGQlkN0K4Mqjs.crl (hash: GHsgv2cpdpRjoirOFmzg6HVOKycKWjAi7cS58eDxm04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/8d9aa5-d52a-486f-b64c-7c605d32165d/1/lGIh95q-ptPAw0gGQlkN0K4Mqjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/8d9aa5-d52a-486f-b64c-7c605d32165d/1/lGIh95q-ptPAw0gGQlkN0K4Mqjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/lGIh95q-ptPAw0gGQlkN0K4Mqjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:c6:89:75:68:98:93:38:6b:44:f7:49:a4:3d:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=946221f79abea6d3c0c3480642590dd0ae0caa3b
Validity
Not Before: Oct 19 10:01:31 2025 GMT
Not After : Oct 20 10:01:31 2025 GMT
Subject: CN=7429963d439e7b7b67eb6bed41e01e2fd5a858c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:94:a9:2b:ca:07:c4:a5:b7:bc:52:54:bb:c4:
31:cd:22:57:fb:d8:a0:7b:1a:36:0b:fe:a8:bf:80:
41:93:13:00:bf:bf:a8:20:a6:da:87:6e:6b:15:76:
c5:c0:6f:5a:03:62:95:6e:8a:ae:53:c9:c4:4c:24:
79:0c:13:d0:11:d3:cf:b9:47:66:68:0f:51:83:b0:
a0:c9:ef:13:fe:2b:c9:68:27:7f:93:69:38:fd:3a:
7d:d5:78:93:b2:96:3e:e2:17:89:31:ca:db:ad:55:
03:e8:99:72:8f:7f:a4:f0:5a:d9:c6:f5:02:44:fd:
ef:cf:0d:e2:dc:cf:a1:f0:6f:da:88:e1:29:44:9e:
40:97:bd:96:14:9d:a4:68:34:64:fa:66:73:c3:4e:
1f:0f:86:93:15:1c:1b:86:27:18:e2:81:2b:de:d4:
5f:0f:bd:7c:86:b5:4c:64:51:7b:f7:1f:28:8e:9f:
48:ec:8d:65:91:23:01:5d:ae:17:db:00:a3:5e:2e:
92:01:f9:86:7d:ab:6d:03:80:54:f8:22:fb:7f:d4:
20:e7:97:cb:48:07:f7:a6:54:f4:00:dd:73:08:4a:
3d:75:b1:0e:8e:75:90:18:54:8a:f7:b7:9e:c0:c8:
df:58:d3:8e:78:e8:48:9f:7b:53:3a:9b:e5:e8:dd:
42:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:29:96:3D:43:9E:7B:7B:67:EB:6B:ED:41:E0:1E:2F:D5:A8:58:C2
X509v3 Authority Key Identifier:
keyid:94:62:21:F7:9A:BE:A6:D3:C0:C3:48:06:42:59:0D:D0:AE:0C:AA:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lGIh95q-ptPAw0gGQlkN0K4Mqjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/8d9aa5-d52a-486f-b64c-7c605d32165d/1/lGIh95q-ptPAw0gGQlkN0K4Mqjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/8d9aa5-d52a-486f-b64c-7c605d32165d/1/lGIh95q-ptPAw0gGQlkN0K4Mqjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:cb:80:e1:40:63:bc:c8:54:27:18:fd:48:52:79:a7:5a:42:
ee:d0:22:9b:ca:3c:3c:65:ca:54:98:03:b0:59:12:b7:18:f1:
e5:fb:bb:b5:80:8a:4c:4d:4b:81:4d:08:b4:5e:6d:ba:1c:34:
7b:69:52:f0:a2:61:a7:59:5a:fb:9c:5a:09:15:f0:6c:0f:62:
68:44:ba:fb:ce:68:2f:71:ec:de:a0:5e:3f:02:fb:38:74:df:
16:1e:df:4a:45:52:e8:52:82:f0:93:25:70:03:9c:35:85:70:
5b:8b:7c:b7:bc:ec:f0:e3:78:b2:33:0a:c6:d4:3f:61:89:6c:
15:92:b4:90:3c:ba:6b:0b:3a:98:a3:70:19:1e:a2:dc:3c:e2:
fc:c6:e9:db:73:f4:71:c1:ec:07:6b:8f:d1:73:ac:06:61:29:
7e:d9:73:d3:e5:eb:f8:ba:be:81:05:40:b2:55:00:7e:e8:06:
e6:cc:4a:69:78:0d:71:18:27:57:30:95:87:0e:4c:c1:b3:54:
80:71:19:27:90:87:76:ce:95:25:17:47:71:21:d2:84:50:af:
87:49:73:64:d4:16:97:ce:f5:8b:c5:f9:00:4d:c0:59:36:8c:
42:38:e4:a2:55:af:d5:6a:f1:2a:55:11:27:a3:c3:e2:be:3f:
f1:7f:00:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76saJdWiYkzhrRPdJpD2oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0NjIyMWY3OWFiZWE2ZDNjMGMzNDgwNjQyNTkwZGQwYWUw
Y2FhM2IwHhcNMjUxMDE5MTAwMTMxWhcNMjUxMDIwMTAwMTMxWjAzMTEwLwYDVQQD
Eyg3NDI5OTYzZDQzOWU3YjdiNjdlYjZiZWQ0MWUwMWUyZmQ1YTg1OGMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5SpK8oHxKW3vFJUu8QxzSJX+9ig
exo2C/6ov4BBkxMAv7+oIKbah25rFXbFwG9aA2KVboquU8nETCR5DBPQEdPPuUdm
aA9Rg7Cgye8T/ivJaCd/k2k4/Tp91XiTspY+4heJMcrbrVUD6Jlyj3+k8FrZxvUC
RP3vzw3i3M+h8G/aiOEpRJ5Al72WFJ2kaDRk+mZzw04fD4aTFRwbhicY4oEr3tRf
D718hrVMZFF79x8ojp9I7I1lkSMBXa4X2wCjXi6SAfmGfattA4BU+CL7f9Qg55fL
SAf3plT0AN1zCEo9dbEOjnWQGFSK97eewMjfWNOOeOhIn3tTOpvl6N1C0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHQplj1Dnnt7Z+tr7UHgHi/VqFjCMB8GA1UdIwQY
MBaAFJRiIfeavqbTwMNIBkJZDdCuDKo7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEdJaDk1cS1wdFBBdzBnR1Fsa04wSzRNcWpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi84ZDlhYTUtZDUyYS00ODZmLWI2NGMt
N2M2MDVkMzIxNjVkLzEvbEdJaDk1cS1wdFBBdzBnR1Fsa04wSzRNcWpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi84ZDlhYTUtZDUyYS00ODZmLWI2NGMtN2M2MDVkMzIxNjVk
LzEvbEdJaDk1cS1wdFBBdzBnR1Fsa04wSzRNcWpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn8uA4UBj
vMhUJxj9SFJ5p1pC7tAim8o8PGXKVJgDsFkStxjx5fu7tYCKTE1LgU0ItF5tuhw0
e2lS8KJhp1la+5xaCRXwbA9iaES6+85oL3Hs3qBePwL7OHTfFh7fSkVS6FKC8JMl
cAOcNYVwW4t8t7zs8ON4sjMKxtQ/YYlsFZK0kDy6aws6mKNwGR6i3Dzi/Mbp23P0
ccHsB2uP0XOsBmEpftlz0+Xr+Lq+gQVAslUAfugG5sxKaXgNcRgnVzCVhw5MwbNU
gHEZJ5CHds6VJRdHcSHShFCvh0lzZNQWl871i8X5AE3AWTaMQjjkolWv1WrxKlUR
J6PD4r4/8X8Asw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:26:19 2025 by rpki-client