Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft
File: LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft (raw, json)
Hash identifier: gati1d6+yaYu6RWFW8XckAHvv3SdCc9TpteFcGZzJh4=
Subject key identifier: 54:FE:B4:33:0C:7A:73:9E:95:E0:80:4C:D9:9C:C8:B4:DA:D0:A6:30
Authority key identifier: 2D:0D:62:12:9D:02:06:3D:40:9E:BF:B0:1C:64:8D:46:F3:48:89:E0
Certificate issuer: /CN=2d0d62129d02063d409ebfb01c648d46f34889e0
Certificate serial: 0199FCC676A056042ABA66FC1D39F373CDF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LQ1iEp0CBj1Anr-wHGSNRvNIieA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft
Manifest number: 06D4
Signing time: Sun 19 Oct 2025 14:01:28 +0000
Manifest this update: Sun 19 Oct 2025 14:01:28 +0000
Manifest next update: Mon 20 Oct 2025 14:01:28 +0000
Files and hashes: 1: LQ1iEp0CBj1Anr-wHGSNRvNIieA.crl (hash: sE6zi460YF+kh7JmoNXNt+KCh8XmELapiHaLKbAimRk=)
2: PFluydWOaBTgnh4o2FnGy8AoCI0.roa (hash: dYpglGU9LkXsNL5grxQDMbO9Dj9URsF+c2voMiQoHR0=)
3: eQf0fzT1TpCrCtQpX64ANEQyzhI.roa (hash: HlHU7MK+aLw3ArQHYGvb135KcLlwl9X+zO2+NofGyyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LQ1iEp0CBj1Anr-wHGSNRvNIieA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:76:a0:56:04:2a:ba:66:fc:1d:39:f3:73:cd:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d0d62129d02063d409ebfb01c648d46f34889e0
Validity
Not Before: Oct 19 14:01:28 2025 GMT
Not After : Oct 20 14:01:28 2025 GMT
Subject: CN=54feb4330c7a739e95e0804cd99cc8b4dad0a630
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:9a:0d:0a:06:e1:df:f9:4c:b0:16:2b:23:af:
3c:c0:75:74:4e:33:83:99:ef:e1:cb:f0:e5:61:93:
25:2d:eb:6c:29:92:ee:93:29:67:7c:50:e6:d8:24:
4d:7a:11:1b:35:e5:19:95:af:eb:64:d6:f5:e7:9d:
be:2a:5f:9d:9b:15:90:2d:9b:cb:c0:29:b8:1b:f9:
e5:05:f5:32:1b:8c:67:92:52:a5:06:a3:0a:8a:4b:
81:ff:d2:aa:eb:38:93:a1:2d:99:6f:52:84:4e:e1:
9f:59:8b:28:aa:a8:cc:ea:60:8f:00:29:63:d6:f8:
0b:b1:20:4e:f2:e8:65:e6:2d:32:86:78:03:b7:09:
ed:6e:54:16:fe:00:23:7a:49:29:61:26:09:cd:e4:
cd:35:58:ab:89:c7:5e:80:7c:74:e0:ad:be:90:34:
2e:25:e4:6c:6f:f9:7f:bb:b8:4a:c5:7e:7d:9f:7c:
1d:90:26:7d:27:22:48:97:68:ad:bb:f4:42:81:0f:
05:4e:19:44:35:16:ef:f9:f6:c2:ad:21:2d:2b:50:
3b:cf:3d:86:9f:13:00:3f:95:a2:67:65:3e:f1:7a:
97:8f:fb:50:ae:d7:24:3c:98:43:10:7c:44:be:e0:
b2:1e:a3:48:f7:d0:f9:c4:71:9b:8e:a3:33:38:d7:
de:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:FE:B4:33:0C:7A:73:9E:95:E0:80:4C:D9:9C:C8:B4:DA:D0:A6:30
X509v3 Authority Key Identifier:
keyid:2D:0D:62:12:9D:02:06:3D:40:9E:BF:B0:1C:64:8D:46:F3:48:89:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LQ1iEp0CBj1Anr-wHGSNRvNIieA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:21:f5:8a:39:63:1a:77:29:77:0b:11:64:d2:7b:42:b4:65:
a1:79:60:91:d3:df:d8:2f:f1:c8:8e:a1:3d:3e:42:f0:e0:be:
97:ac:1c:1e:3e:68:5e:6e:dd:62:c1:f0:4c:ac:23:67:bc:6c:
fb:93:e1:20:05:0b:11:dd:0d:59:61:94:c9:10:74:7b:50:b7:
39:3f:f9:f4:fa:12:38:0d:8d:e7:1b:75:70:35:f5:27:29:6f:
94:7a:d7:0e:e5:94:7b:63:92:c5:54:9c:d4:34:6b:2f:46:e2:
ab:51:60:fd:02:93:06:f2:ed:78:c4:61:fd:54:19:ac:f2:85:
00:c6:54:e4:1a:89:08:32:fa:1b:1c:7e:13:e1:d0:5d:f1:43:
94:c5:71:a9:60:77:87:89:76:b5:40:c3:99:6d:e7:b9:47:b0:
ee:33:40:f6:f6:1f:9f:4d:c9:a5:ab:42:7e:f3:33:94:f3:d4:
3c:99:e7:a2:9a:cc:23:7f:0e:08:02:6f:91:64:15:68:da:78:
a7:46:2c:16:28:35:3c:33:cf:43:ed:ca:bb:55:91:e6:e5:0b:
23:d5:f9:af:00:e8:af:b5:16:47:71:84:ec:c2:fc:f1:7c:b0:
2f:87:21:50:37:47:d6:7c:42:14:13:3a:49:0f:80:37:83:57:
c9:68:16:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xnagVgQqumb8HTnzc83wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkMGQ2MjEyOWQwMjA2M2Q0MDllYmZiMDFjNjQ4ZDQ2ZjM0
ODg5ZTAwHhcNMjUxMDE5MTQwMTI4WhcNMjUxMDIwMTQwMTI4WjAzMTEwLwYDVQQD
Eyg1NGZlYjQzMzBjN2E3MzllOTVlMDgwNGNkOTljYzhiNGRhZDBhNjMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1JoNCgbh3/lMsBYrI688wHV0TjOD
me/hy/DlYZMlLetsKZLukylnfFDm2CRNehEbNeUZla/rZNb1552+Kl+dmxWQLZvL
wCm4G/nlBfUyG4xnklKlBqMKikuB/9Kq6ziToS2Zb1KETuGfWYsoqqjM6mCPAClj
1vgLsSBO8uhl5i0yhngDtwntblQW/gAjekkpYSYJzeTNNViricdegHx04K2+kDQu
JeRsb/l/u7hKxX59n3wdkCZ9JyJIl2itu/RCgQ8FThlENRbv+fbCrSEtK1A7zz2G
nxMAP5WiZ2U+8XqXj/tQrtckPJhDEHxEvuCyHqNI99D5xHGbjqMzONfenwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFT+tDMMenOeleCATNmcyLTa0KYwMB8GA1UdIwQY
MBaAFC0NYhKdAgY9QJ6/sBxkjUbzSIngMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFExaUVwMENCajFBbnItd0hHU05Sdk5JaWVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8wNjBmN2UtOGNmMC00ZWMyLWFmN2Et
MWRhZWE0YmM5NGIzLzEvTFExaUVwMENCajFBbnItd0hHU05Sdk5JaWVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8wNjBmN2UtOGNmMC00ZWMyLWFmN2EtMWRhZWE0YmM5NGIz
LzEvTFExaUVwMENCajFBbnItd0hHU05Sdk5JaWVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjiH1ijlj
GncpdwsRZNJ7QrRloXlgkdPf2C/xyI6hPT5C8OC+l6wcHj5oXm7dYsHwTKwjZ7xs
+5PhIAULEd0NWWGUyRB0e1C3OT/59PoSOA2N5xt1cDX1JylvlHrXDuWUe2OSxVSc
1DRrL0biq1Fg/QKTBvLteMRh/VQZrPKFAMZU5BqJCDL6Gxx+E+HQXfFDlMVxqWB3
h4l2tUDDmW3nuUew7jNA9vYfn03JpatCfvMzlPPUPJnnoprMI38OCAJvkWQVaNp4
p0YsFig1PDPPQ+3Ku1WR5uULI9X5rwDor7UWR3GE7ML88XywL4chUDdH1nxCFBM6
SQ+AN4NXyWgWhg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:56:39 2025 by rpki-client