Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.mft
File: lBZrcEhD09l1QJXIOpG0k4KCAKI.mft (raw, json)
Hash identifier: xb0RN4jitIJtKeE+vgxhouqX+tyYxefEP1G9sxSFyck=
Subject key identifier: E6:B0:B6:1F:BA:5C:9F:7B:1B:85:83:23:06:96:9A:D2:D5:DE:37:D2
Authority key identifier: 94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
Certificate issuer: /CN=94166b704843d3d9754095c83a91b493828200a2
Certificate serial: 0199FC21B8971182F3690DFB34D3A6A8C24E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.mft
Manifest number: 179B
Signing time: Sun 19 Oct 2025 11:01:32 +0000
Manifest this update: Sun 19 Oct 2025 11:01:32 +0000
Manifest next update: Mon 20 Oct 2025 11:01:32 +0000
Files and hashes: 1: 7NOWSwr6Ix9WqMtFCauUoXq2B4E.roa (hash: 71eyC9fYC2VExHc19u8sJwP29ASsjLuAVH+CBPHOF2M=)
2: QE-0-GHrWq5bT_oQzBuxsGZ0jgg.roa (hash: Whew7oC4VAA4M2out/vzMuiYeBE1U3ZiPJv+gEs+1dU=)
3: Ruw-x4zfVCc3GTiQCnnMayYLrMQ.roa (hash: VPqD7NaSAxVUR7gCvmAQcQt1SUni3lPjk7OqIt9I1TI=)
4: Z7uuC5XE4-fMCsGBtqQw7mSeH9U.roa (hash: W7maKhHagBpEQgNK15fnWc66E1ZuDuwRIn7gOriSZAo=)
5: h9d0ktI5MHIktnWrhY2zneTKIew.roa (hash: 9qkOa4Wd+V/Z+xQC2CIhkz1VoRa5qCsYXEwwfKMwhGQ=)
6: lBZrcEhD09l1QJXIOpG0k4KCAKI.crl (hash: O+w/3nUru2gOYFUYOkR1xEyd6AmRo2TKQtKlOkuejyQ=)
7: sCbiretHkvpeYn6X-YO7yjpBd3I.roa (hash: m4o26nuHfI88h55NDmirhyFa20WJfqvTKSftUFTfvL0=)
8: zIA6BDrr_xrDLDlzAGpw_9P6klo.roa (hash: pfzDsna4zGoCQX7v3ji49EBWdSr9XYlq27X+4n1BNgY=)
9: zRIEfiHVhkzqHiYdm3McIGPDP2Q.roa (hash: 32bioXyHcsiw84uow4i7c6KhRJSD3457u6OM44k/3vM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:b8:97:11:82:f3:69:0d:fb:34:d3:a6:a8:c2:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94166b704843d3d9754095c83a91b493828200a2
Validity
Not Before: Oct 19 11:01:32 2025 GMT
Not After : Oct 20 11:01:32 2025 GMT
Subject: CN=e6b0b61fba5c9f7b1b85832306969ad2d5de37d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:40:f8:81:59:f1:e0:86:c2:2e:0b:06:76:ca:
78:c6:7c:e4:e4:9d:95:eb:ef:1f:b2:e9:fe:a6:52:
f4:dc:1c:3f:fa:92:a9:fa:49:11:a8:e6:bd:09:d6:
5d:2c:06:25:f3:08:73:dc:aa:d9:c5:1a:6a:6f:dc:
b7:62:51:18:1d:74:60:42:00:a6:de:8c:74:b3:67:
ad:00:f3:c0:8d:a6:6a:cf:62:62:96:3d:36:06:2f:
c5:6c:e6:f6:d3:82:58:68:1c:a1:7a:fa:cd:bd:9e:
c1:55:3a:ce:b9:1e:fb:80:b1:eb:6a:fe:bf:65:77:
56:d6:b5:50:fe:31:1a:8b:66:cb:bf:28:b0:fd:8d:
4b:bc:33:3e:45:4e:45:23:48:b6:76:79:22:f5:80:
c5:49:11:c2:c5:e1:0b:f0:96:30:e9:2a:bc:d4:89:
87:7a:bf:39:0e:7b:a7:c6:6f:6c:8d:7c:07:f2:32:
0a:a3:2e:a2:55:b7:90:4b:9d:6e:62:b1:52:b6:56:
56:e9:24:d5:ac:10:59:14:6d:d0:cd:03:9a:93:a9:
ce:7b:48:3f:04:8e:0e:ca:49:81:fb:cc:85:ff:17:
fb:b2:f7:79:b2:3b:7e:0a:5f:c6:52:83:f3:63:42:
0e:55:f9:47:1e:c6:57:3e:ab:de:fb:7a:fd:85:b8:
a0:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:B0:B6:1F:BA:5C:9F:7B:1B:85:83:23:06:96:9A:D2:D5:DE:37:D2
X509v3 Authority Key Identifier:
keyid:94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:85:a5:0a:01:49:85:6d:d0:18:39:34:33:cc:36:ee:68:01:
ac:e2:8d:a0:e8:f1:5e:a4:56:8b:ae:a7:6f:58:0b:e7:00:52:
d7:0c:34:31:db:58:36:42:5e:59:05:26:b9:73:cc:e3:a0:28:
e2:24:9b:d7:12:c6:a2:cc:e3:46:49:0d:e2:e9:43:ef:7f:4d:
e5:dd:f3:d1:42:3f:61:41:fc:d6:b7:80:23:66:3f:e8:c7:ae:
4b:3b:0d:ab:13:c9:de:ca:e8:95:5a:5c:8b:fe:b7:e0:8c:a8:
2b:58:11:d2:12:68:28:27:77:2e:5a:3f:4d:7f:3b:21:d5:c0:
9e:31:2d:4e:0c:23:8f:29:d6:5c:3f:bc:01:f0:05:38:11:ed:
16:29:b9:99:4c:68:40:36:c7:cb:a9:54:d9:94:d2:3f:d7:e1:
5b:58:06:82:fb:95:e6:ef:70:c5:bb:01:dd:2f:eb:cf:7d:3a:
b8:dc:2a:ea:c6:8e:4d:d0:b0:91:17:6b:af:9e:0c:bd:6b:62:
1c:2c:b2:a5:86:f5:7e:3a:6e:4a:bb:b8:1b:7a:5e:b0:8d:12:
d8:e5:47:8e:cc:65:2d:eb:4f:52:7a:e2:03:1c:8e:c5:96:59:
3a:17:6a:87:25:77:2d:6b:e8:0e:3d:fe:6d:83:b5:76:53:49:
b7:82:0a:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8IbiXEYLzaQ37NNOmqMJOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0MTY2YjcwNDg0M2QzZDk3NTQwOTVjODNhOTFiNDkzODI4
MjAwYTIwHhcNMjUxMDE5MTEwMTMyWhcNMjUxMDIwMTEwMTMyWjAzMTEwLwYDVQQD
EyhlNmIwYjYxZmJhNWM5ZjdiMWI4NTgzMjMwNjk2OWFkMmQ1ZGUzN2QyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukD4gVnx4IbCLgsGdsp4xnzk5J2V
6+8fsun+plL03Bw/+pKp+kkRqOa9CdZdLAYl8whz3KrZxRpqb9y3YlEYHXRgQgCm
3ox0s2etAPPAjaZqz2Jilj02Bi/FbOb204JYaByhevrNvZ7BVTrOuR77gLHrav6/
ZXdW1rVQ/jEai2bLvyiw/Y1LvDM+RU5FI0i2dnki9YDFSRHCxeEL8JYw6Sq81ImH
er85Dnunxm9sjXwH8jIKoy6iVbeQS51uYrFStlZW6STVrBBZFG3QzQOak6nOe0g/
BI4OykmB+8yF/xf7svd5sjt+Cl/GUoPzY0IOVflHHsZXPqve+3r9hbig0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOawth+6XJ97G4WDIwaWmtLV3jfSMB8GA1UdIwQY
MBaAFJQWa3BIQ9PZdUCVyDqRtJOCggCiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEJacmNFaEQwOWwxUUpYSU9wRzBrNEtDQUtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi80M2ZmOGYtY2Q1NC00Y2YxLThhYWYt
NGJlMThlZjEyOGI0LzEvbEJacmNFaEQwOWwxUUpYSU9wRzBrNEtDQUtJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi80M2ZmOGYtY2Q1NC00Y2YxLThhYWYtNGJlMThlZjEyOGI0
LzEvbEJacmNFaEQwOWwxUUpYSU9wRzBrNEtDQUtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhIWlCgFJ
hW3QGDk0M8w27mgBrOKNoOjxXqRWi66nb1gL5wBS1ww0MdtYNkJeWQUmuXPM46Ao
4iSb1xLGoszjRkkN4ulD739N5d3z0UI/YUH81reAI2Y/6MeuSzsNqxPJ3srolVpc
i/634IyoK1gR0hJoKCd3Llo/TX87IdXAnjEtTgwjjynWXD+8AfAFOBHtFim5mUxo
QDbHy6lU2ZTSP9fhW1gGgvuV5u9wxbsB3S/rz306uNwq6saOTdCwkRdrr54MvWti
HCyypYb1fjpuSru4G3pesI0S2OVHjsxlLetPUnriAxyOxZZZOhdqhyV3LWvoDj3+
bYO1dlNJt4IKEA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:29:44 2025 by rpki-client