Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.mft
File: licbYtGOSsd8YQlpDqrkzDTQ6bY.mft (raw, json)
Hash identifier: PZ59q/Q45UWTa+pGSOKIwlDuQinRLLwhumxMa8l5DSA=
Subject key identifier: E5:71:CF:FF:54:FE:28:51:3A:34:E2:D9:27:A2:E2:46:AD:29:BC:0E
Authority key identifier: 96:27:1B:62:D1:8E:4A:C7:7C:61:09:69:0E:AA:E4:CC:34:D0:E9:B6
Certificate issuer: /CN=96271b62d18e4ac77c6109690eaae4cc34d0e9b6
Certificate serial: 0199FB7C82DA91646023168E3698E4119359
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/licbYtGOSsd8YQlpDqrkzDTQ6bY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.mft
Manifest number: 0B97
Signing time: Sun 19 Oct 2025 08:01:05 +0000
Manifest this update: Sun 19 Oct 2025 08:01:05 +0000
Manifest next update: Mon 20 Oct 2025 08:01:05 +0000
Files and hashes: 1: IaAYctjYC9OdNTPcnTixy2ccUzU.roa (hash: eOFbMC4GCXw4TW2u0+c7a73RmqtvjAxvsy3+jqBN21w=)
2: X6SMQ0jEGeZDJ_4uYPtUEXmYusc.roa (hash: FdAgr11itjQmO3uyq8UgNfN1pT9LErTuoVrKYdZ843k=)
3: licbYtGOSsd8YQlpDqrkzDTQ6bY.crl (hash: jvD7ax+32bpLLfN7pETiXtONI/ShKJGQyI6U4mKMgxY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.mft
rsync://rpki.ripe.net/repository/DEFAULT/licbYtGOSsd8YQlpDqrkzDTQ6bY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:82:da:91:64:60:23:16:8e:36:98:e4:11:93:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96271b62d18e4ac77c6109690eaae4cc34d0e9b6
Validity
Not Before: Oct 19 08:01:05 2025 GMT
Not After : Oct 20 08:01:05 2025 GMT
Subject: CN=e571cfff54fe28513a34e2d927a2e246ad29bc0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:98:4c:c5:ad:31:c7:a2:96:cc:17:3a:9a:90:
45:ef:2f:bf:c2:66:47:4e:d5:a7:2a:cd:82:51:ce:
d5:b0:00:52:2e:56:18:ad:45:83:86:99:4a:88:0e:
20:16:b1:43:54:6e:b3:35:c8:c0:23:9c:99:25:7e:
c4:5f:12:2e:7a:f6:81:a7:9e:1d:71:a2:41:a9:5a:
a4:23:1a:ea:dc:97:67:0f:c7:24:3e:aa:62:7c:de:
ee:d2:18:38:dd:7a:53:d3:42:81:d6:b6:ce:07:dc:
70:0c:22:12:b4:32:d7:b3:02:a5:77:aa:98:c7:28:
6f:57:fe:26:c7:33:16:c2:b0:cc:d7:59:c5:61:de:
e1:07:01:b6:77:35:7a:99:cf:c8:92:a2:49:b5:93:
ae:4d:24:78:75:5e:b8:da:58:87:78:8b:e7:85:45:
7f:20:f4:c3:ab:78:5c:17:79:fe:c2:dc:c7:86:60:
79:ed:dc:41:a3:b0:0d:f4:28:68:48:9f:47:d4:46:
d2:3b:58:aa:ab:be:68:cf:00:b4:58:a6:3b:b2:56:
d5:99:28:ed:e6:60:92:ff:3b:30:7a:58:65:59:ae:
bb:3c:5a:70:52:07:87:bd:9f:4c:ba:bb:05:9c:9d:
97:f0:e1:0b:80:7b:12:eb:4b:f0:dd:8e:e6:c4:63:
bc:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:71:CF:FF:54:FE:28:51:3A:34:E2:D9:27:A2:E2:46:AD:29:BC:0E
X509v3 Authority Key Identifier:
keyid:96:27:1B:62:D1:8E:4A:C7:7C:61:09:69:0E:AA:E4:CC:34:D0:E9:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/licbYtGOSsd8YQlpDqrkzDTQ6bY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:3b:e9:45:bd:f9:17:d1:fe:bb:b9:f6:5c:b4:f2:08:b9:73:
57:ff:a2:a8:31:94:06:f1:e2:23:86:52:eb:91:76:45:b7:11:
2c:5f:9c:84:75:9a:3b:23:77:fa:cb:3f:2c:4c:5f:8a:b4:66:
fa:e9:d3:07:4f:65:30:37:b2:7b:e7:0d:46:6e:88:b0:a9:91:
1b:1a:95:03:0e:53:ae:f0:8e:3e:85:36:7e:f6:ff:a3:a4:f1:
b5:e5:8e:53:52:1b:fd:ac:d6:01:df:b7:81:42:ff:f5:ad:ea:
1a:25:35:57:e5:70:62:07:3b:67:4b:89:e0:fa:87:83:82:a3:
28:03:7d:0c:42:c1:7f:e0:48:c5:c7:31:24:c5:da:39:3d:2c:
54:fd:e8:83:f0:d7:8f:f2:f0:5f:ea:d4:8e:ef:0a:8a:3e:97:
d1:43:f7:e0:64:bf:f7:f5:fc:94:0c:e8:09:fa:60:5a:6b:fe:
63:ef:93:bc:61:b5:e2:1d:66:3f:ff:99:a9:c3:4f:a7:ee:f4:
09:5a:86:ba:a4:8f:9b:c6:0d:3e:2e:f2:3c:4b:6e:67:75:0a:
8b:a6:99:49:00:54:1e:40:50:48:11:36:e6:45:b5:9d:23:f7:
67:c5:8a:e2:26:8b:71:8a:ad:5d:53:ce:25:88:d8:4d:9c:96:
0f:1e:88:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7fILakWRgIxaONpjkEZNZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2MjcxYjYyZDE4ZTRhYzc3YzYxMDk2OTBlYWFlNGNjMzRk
MGU5YjYwHhcNMjUxMDE5MDgwMTA1WhcNMjUxMDIwMDgwMTA1WjAzMTEwLwYDVQQD
EyhlNTcxY2ZmZjU0ZmUyODUxM2EzNGUyZDkyN2EyZTI0NmFkMjliYzBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZhMxa0xx6KWzBc6mpBF7y+/wmZH
TtWnKs2CUc7VsABSLlYYrUWDhplKiA4gFrFDVG6zNcjAI5yZJX7EXxIuevaBp54d
caJBqVqkIxrq3JdnD8ckPqpifN7u0hg43XpT00KB1rbOB9xwDCIStDLXswKld6qY
xyhvV/4mxzMWwrDM11nFYd7hBwG2dzV6mc/IkqJJtZOuTSR4dV642liHeIvnhUV/
IPTDq3hcF3n+wtzHhmB57dxBo7AN9ChoSJ9H1EbSO1iqq75ozwC0WKY7slbVmSjt
5mCS/zswelhlWa67PFpwUgeHvZ9MursFnJ2X8OELgHsS60vw3Y7mxGO8lwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOVxz/9U/ihROjTi2Sei4katKbwOMB8GA1UdIwQY
MBaAFJYnG2LRjkrHfGEJaQ6q5Mw00Om2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGljYll0R09Tc2Q4WVFscERxcmt6RFRRNmJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9mNmI2MGItNTgwOC00OGEyLTgyMDMt
MWNhM2ZiYmZiYTNmLzEvbGljYll0R09Tc2Q4WVFscERxcmt6RFRRNmJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9mNmI2MGItNTgwOC00OGEyLTgyMDMtMWNhM2ZiYmZiYTNm
LzEvbGljYll0R09Tc2Q4WVFscERxcmt6RFRRNmJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkTvpRb35
F9H+u7n2XLTyCLlzV/+iqDGUBvHiI4ZS65F2RbcRLF+chHWaOyN3+ss/LExfirRm
+unTB09lMDeye+cNRm6IsKmRGxqVAw5TrvCOPoU2fvb/o6TxteWOU1Ib/azWAd+3
gUL/9a3qGiU1V+VwYgc7Z0uJ4PqHg4KjKAN9DELBf+BIxccxJMXaOT0sVP3og/DX
j/LwX+rUju8Kij6X0UP34GS/9/X8lAzoCfpgWmv+Y++TvGG14h1mP/+ZqcNPp+70
CVqGuqSPm8YNPi7yPEtuZ3UKi6aZSQBUHkBQSBE25kW1nSP3Z8WK4iaLcYqtXVPO
JYjYTZyWDx6IoA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:43 2025 by rpki-client