Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.mft
File: lQLYuCacawf4FKzwx-1ymz9LWYQ.mft (raw, json)
Hash identifier: ZQTPpQ/VEl5g60buLypRRM2fFm5+c4jctm+MgAcpajY=
Subject key identifier: A3:F5:E3:95:5A:22:88:B0:77:54:C4:95:FC:5D:99:C9:B2:61:33:8D
Authority key identifier: 95:02:D8:B8:26:9C:6B:07:F8:14:AC:F0:C7:ED:72:9B:3F:4B:59:84
Certificate issuer: /CN=9502d8b8269c6b07f814acf0c7ed729b3f4b5984
Certificate serial: 0199FBEAD0D9FC1DC0E2F0E924A9D2390DB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lQLYuCacawf4FKzwx-1ymz9LWYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.mft
Manifest number: 0CC1
Signing time: Sun 19 Oct 2025 10:01:34 +0000
Manifest this update: Sun 19 Oct 2025 10:01:34 +0000
Manifest next update: Mon 20 Oct 2025 10:01:34 +0000
Files and hashes: 1: 1-l2kYHPzzOgxMyPGeYc0XGNjBT4.roa (hash: LNd5PHqRanBJORsf7oSyFeUFPQrcAuT39Hzl/svHnzg=)
2: KIcKUhtodUhmesQcw4UOrgje-VM.roa (hash: ZjtXxzfOCPus9MATQw2KmYmGCHHWM6Ux5YwzOydVNao=)
3: dNgsJxplyBIdN0aFghsbI0uLoiA.roa (hash: CotLpiY9ZJ1LzZdIjbzRKpHMH68ToWHXGhtpPv2E3iM=)
4: jdOGk8r2X0W4V4e-zXV1RTBK7zg.roa (hash: T8mkOaeaMXTxvWWAciz/M3jQHK7JfEnnQmxEEL6wiJg=)
5: lEBj_UwUplOdey7hYZVGhtt7f2c.roa (hash: z/KEoxchf9RVTBMsvFAyziRDdzuolM10ZmoiGr8Esu0=)
6: lQLYuCacawf4FKzwx-1ymz9LWYQ.crl (hash: yBG0eH9Rh3NNH+N4SKTqVdqegOYTynsAddSUiJUEelU=)
7: nO7XGwbyoaznlQBrQTYZ4Wkidzk.roa (hash: 4ZlvJNXrGAdIi01cEy8MCjKiv0cc4QMFsSk8kg4630Q=)
8: nzaW7aFzNZWZ3s1WL84iARdReAc.roa (hash: tcY1jL8rHcVFx+anuSB4DW5VRR2l1AU/8uCjHxYTjls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lQLYuCacawf4FKzwx-1ymz9LWYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:d0:d9:fc:1d:c0:e2:f0:e9:24:a9:d2:39:0d:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9502d8b8269c6b07f814acf0c7ed729b3f4b5984
Validity
Not Before: Oct 19 10:01:34 2025 GMT
Not After : Oct 20 10:01:34 2025 GMT
Subject: CN=a3f5e3955a2288b07754c495fc5d99c9b261338d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fb:18:c6:a8:81:01:bb:d0:a5:9a:47:6c:68:
e8:5c:2c:4b:99:53:42:dd:43:68:32:86:82:a7:42:
5a:e3:f3:d0:53:cc:81:e2:f5:e3:82:4b:04:fc:d3:
ed:b5:1a:67:49:f7:9e:d4:f5:05:62:23:f4:42:0f:
93:2a:30:65:83:e0:16:02:c3:5d:fa:e6:05:c3:e9:
20:2b:fa:ac:f2:f6:0a:d6:2b:cc:d1:fa:e5:89:28:
f8:b8:2b:cc:68:29:61:a2:79:43:7a:55:b4:7e:e7:
25:99:35:d4:18:a0:0a:e9:87:35:42:f5:6e:6d:c5:
95:de:7e:4d:ef:53:19:f1:79:66:b8:62:64:93:3f:
fa:dd:f6:0d:73:47:cd:12:57:ac:d7:45:30:29:da:
ad:d5:9b:87:96:cd:7c:74:33:49:10:ac:94:41:0a:
d0:ba:25:61:79:ea:4c:a0:d3:34:2c:8b:54:8a:01:
77:2a:33:c8:26:4d:fb:09:3a:0f:a6:8a:bf:60:5b:
c6:fb:e3:70:f0:d2:57:80:4b:26:27:48:8a:fe:8c:
30:1a:e0:58:09:72:bf:72:f5:ed:04:86:00:af:0d:
77:f6:19:d8:02:53:43:4c:2f:69:f6:a9:14:38:3f:
70:b7:75:4d:77:51:a0:a1:3c:b7:ed:c6:87:33:f6:
3e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:F5:E3:95:5A:22:88:B0:77:54:C4:95:FC:5D:99:C9:B2:61:33:8D
X509v3 Authority Key Identifier:
keyid:95:02:D8:B8:26:9C:6B:07:F8:14:AC:F0:C7:ED:72:9B:3F:4B:59:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lQLYuCacawf4FKzwx-1ymz9LWYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:3e:be:41:d2:1b:3f:f3:96:24:27:0b:07:a4:d7:41:ea:4e:
76:3e:c8:2f:a9:83:ba:b2:b8:99:6d:76:c3:a4:aa:e4:b6:12:
fb:a3:c4:09:25:23:60:93:a6:69:45:0e:13:ba:ff:e7:2b:27:
10:9a:c8:f0:1c:80:f0:d2:e8:39:f1:2d:d6:e3:45:e3:6f:c2:
20:64:ea:35:91:a6:a3:f9:c0:a0:0e:8d:3f:d9:d9:9e:72:89:
5e:91:a2:69:f4:b4:bf:75:98:4c:23:11:91:94:e8:fc:fa:d5:
bd:4b:bf:e1:b9:b0:c0:ce:b5:88:99:2f:13:11:e6:8d:39:f4:
d1:5d:fb:f9:cf:0a:a2:ea:32:33:85:4c:b6:67:8a:9c:f3:f8:
c2:26:03:a7:0b:18:d1:51:75:d7:31:0e:8b:14:d8:fa:df:07:
7c:98:e9:d8:ba:cb:73:9e:50:28:31:f7:74:9a:59:ed:50:00:
60:6c:84:4d:ca:90:9b:ef:e7:34:08:38:b8:4c:8e:05:e7:03:
57:ed:f6:fb:d1:98:be:5b:3f:40:be:99:6c:21:f2:60:02:f7:
00:06:93:84:89:c4:aa:e9:70:e7:c7:1e:35:c7:e4:b7:f3:58:
a3:10:00:d2:02:35:56:cb:54:01:2f:52:dd:a6:3f:aa:a6:fc:
3a:94:29:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76tDZ/B3A4vDpJKnSOQ25MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1MDJkOGI4MjY5YzZiMDdmODE0YWNmMGM3ZWQ3MjliM2Y0
YjU5ODQwHhcNMjUxMDE5MTAwMTM0WhcNMjUxMDIwMTAwMTM0WjAzMTEwLwYDVQQD
EyhhM2Y1ZTM5NTVhMjI4OGIwNzc1NGM0OTVmYzVkOTljOWIyNjEzMzhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPsYxqiBAbvQpZpHbGjoXCxLmVNC
3UNoMoaCp0Ja4/PQU8yB4vXjgksE/NPttRpnSfee1PUFYiP0Qg+TKjBlg+AWAsNd
+uYFw+kgK/qs8vYK1ivM0frliSj4uCvMaClhonlDelW0fuclmTXUGKAK6Yc1QvVu
bcWV3n5N71MZ8XlmuGJkkz/63fYNc0fNEles10UwKdqt1ZuHls18dDNJEKyUQQrQ
uiVheepMoNM0LItUigF3KjPIJk37CToPpoq/YFvG++Nw8NJXgEsmJ0iK/owwGuBY
CXK/cvXtBIYArw139hnYAlNDTC9p9qkUOD9wt3VNd1GgoTy37caHM/Y+GQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKP145VaIoiwd1TElfxdmcmyYTONMB8GA1UdIwQY
MBaAFJUC2LgmnGsH+BSs8Mftcps/S1mEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFFMWXVDYWNhd2Y0Rkt6d3gtMXltejlMV1lRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS85ZGVjYWYtNDdlYi00MzQ5LTllODYt
MDFiOGJiNmFkOTBhLzEvbFFMWXVDYWNhd2Y0Rkt6d3gtMXltejlMV1lRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS85ZGVjYWYtNDdlYi00MzQ5LTllODYtMDFiOGJiNmFkOTBh
LzEvbFFMWXVDYWNhd2Y0Rkt6d3gtMXltejlMV1lRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZT6+QdIb
P/OWJCcLB6TXQepOdj7IL6mDurK4mW12w6Sq5LYS+6PECSUjYJOmaUUOE7r/5ysn
EJrI8ByA8NLoOfEt1uNF42/CIGTqNZGmo/nAoA6NP9nZnnKJXpGiafS0v3WYTCMR
kZTo/PrVvUu/4bmwwM61iJkvExHmjTn00V37+c8KouoyM4VMtmeKnPP4wiYDpwsY
0VF11zEOixTY+t8HfJjp2LrLc55QKDH3dJpZ7VAAYGyETcqQm+/nNAg4uEyOBecD
V+32+9GYvls/QL6ZbCHyYAL3AAaThInEqulw58ceNcfkt/NYoxAA0gI1VstUAS9S
3aY/qqb8OpQpYA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:43:03 2025 by rpki-client