Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/1e1ebf-c3ac-49a1-b6a8-a4a075398b0e/1/l0iCjXuZsKlwF-wmvL7-lv2-lXk.mft
File: l0iCjXuZsKlwF-wmvL7-lv2-lXk.mft (raw, json)
Hash identifier: tjqw8w/GKz4SVSDSEDsNbC5e/hUtKuWi3FC9z3ZSYSI=
Subject key identifier: A8:FE:10:CE:5A:34:D0:54:07:66:03:53:86:FB:5C:5A:A2:DC:0B:38
Authority key identifier: 97:48:82:8D:7B:99:B0:A9:70:17:EC:26:BC:BE:FE:96:FD:BE:95:79
Certificate issuer: /CN=9748828d7b99b0a97017ec26bcbefe96fdbe9579
Certificate serial: 019A01110F4A8D25A96A4A42B88CCAF20D23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l0iCjXuZsKlwF-wmvL7-lv2-lXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/1e1ebf-c3ac-49a1-b6a8-a4a075398b0e/1/l0iCjXuZsKlwF-wmvL7-lv2-lXk.mft
Manifest number: 14DB
Signing time: Mon 20 Oct 2025 10:01:26 +0000
Manifest this update: Mon 20 Oct 2025 10:01:26 +0000
Manifest next update: Tue 21 Oct 2025 10:01:26 +0000
Files and hashes: 1: GYwl8BFvRYxoWPkgG0LFX5Kh3wY.roa (hash: po/DPr4lC/jP6El38brtzMkXAB3zwNPviTVID9wQBCU=)
2: l0iCjXuZsKlwF-wmvL7-lv2-lXk.crl (hash: xZWJtatva1HhquaMHfigSrc0D1pfSs64VSLnXBhXqk0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/1e1ebf-c3ac-49a1-b6a8-a4a075398b0e/1/l0iCjXuZsKlwF-wmvL7-lv2-lXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/1e1ebf-c3ac-49a1-b6a8-a4a075398b0e/1/l0iCjXuZsKlwF-wmvL7-lv2-lXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/l0iCjXuZsKlwF-wmvL7-lv2-lXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:11:0f:4a:8d:25:a9:6a:4a:42:b8:8c:ca:f2:0d:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9748828d7b99b0a97017ec26bcbefe96fdbe9579
Validity
Not Before: Oct 20 10:01:26 2025 GMT
Not After : Oct 21 10:01:26 2025 GMT
Subject: CN=a8fe10ce5a34d0540766035386fb5c5aa2dc0b38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:65:58:6d:05:35:ad:17:f8:0d:6e:12:d3:c4:
5c:89:57:d1:00:27:30:3c:a8:e1:8c:8a:f0:9e:eb:
a7:87:87:fb:80:41:3a:68:ba:73:7a:06:87:14:b2:
26:8f:d8:15:a2:c8:6c:01:b0:92:11:f2:24:8e:fd:
dc:c0:0f:e6:14:26:72:38:b2:69:df:de:a8:de:17:
7e:6b:3c:b2:bd:d5:73:67:dd:80:8f:ce:97:cc:5a:
5b:c2:dd:9c:75:d7:91:7d:95:b5:bd:81:72:33:bd:
68:a5:ae:46:5d:25:05:f9:55:ac:e2:8e:43:89:b3:
c8:6e:41:b7:aa:44:6e:e0:47:5e:25:d0:bb:1b:1b:
1c:53:f2:d3:2c:dd:a9:04:66:de:73:8c:16:34:4d:
87:5f:56:ea:3d:43:f6:4a:c1:1e:b5:0c:8f:9e:a9:
a7:f2:95:a2:f1:c8:d7:6e:63:ef:f4:0b:a1:2b:62:
8b:d9:1f:47:75:c5:73:20:1b:00:21:34:cc:c8:ab:
1a:b8:79:05:5f:d8:f8:2e:91:c0:d9:80:22:e0:89:
ae:50:5e:70:74:9a:e8:36:8d:ec:0b:4c:25:43:66:
af:73:94:cb:96:47:0b:05:3b:6e:ad:da:c1:6e:3b:
2d:ac:59:4a:02:01:d2:07:ff:25:6c:9e:06:47:d6:
36:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:FE:10:CE:5A:34:D0:54:07:66:03:53:86:FB:5C:5A:A2:DC:0B:38
X509v3 Authority Key Identifier:
keyid:97:48:82:8D:7B:99:B0:A9:70:17:EC:26:BC:BE:FE:96:FD:BE:95:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0iCjXuZsKlwF-wmvL7-lv2-lXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1e1ebf-c3ac-49a1-b6a8-a4a075398b0e/1/l0iCjXuZsKlwF-wmvL7-lv2-lXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1e1ebf-c3ac-49a1-b6a8-a4a075398b0e/1/l0iCjXuZsKlwF-wmvL7-lv2-lXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:17:4c:3d:d7:7c:f4:a0:9f:9e:01:58:e9:f9:16:be:eb:1e:
c4:99:14:e4:ab:9e:f8:ab:7d:43:a1:90:2f:b4:7d:54:b8:d2:
b0:44:7e:b1:fa:13:4d:66:31:2c:9b:88:c5:68:8a:8b:ff:be:
56:51:90:a9:22:30:4b:9d:fb:d0:99:04:1a:a1:18:3b:fb:98:
5f:85:a4:37:69:e3:d6:36:1d:a3:32:4a:ed:67:a5:d8:ab:97:
7b:1d:87:64:d7:75:d5:df:83:9d:43:a1:42:1f:bc:27:81:01:
cd:4f:8e:00:cc:19:ef:8e:b9:57:d2:57:5d:c3:49:4b:6e:8b:
34:8e:55:e0:24:f8:4b:ea:b3:ff:c5:37:6e:03:f4:24:71:5d:
28:5a:9e:ce:e1:4f:ab:7c:37:e0:27:de:fe:91:75:19:31:c1:
27:b5:80:6a:a2:21:90:59:85:d2:62:15:81:54:d8:b5:61:61:
f0:b0:e1:ff:16:46:37:05:1a:bc:8b:bc:cc:3e:18:f1:ba:93:
2c:7d:d8:5e:b1:95:86:79:65:9d:9c:5f:09:ad:ba:72:92:a7:
55:84:70:43:9a:22:85:d5:64:fc:bc:e4:99:f8:55:be:5a:c2:
80:b9:8c:d8:20:cf:60:bc:14:f4:1a:1f:89:00:fd:d6:34:01:
ed:2a:2e:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoBEQ9KjSWpakpCuIzK8g0jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3NDg4MjhkN2I5OWIwYTk3MDE3ZWMyNmJjYmVmZTk2ZmRi
ZTk1NzkwHhcNMjUxMDIwMTAwMTI2WhcNMjUxMDIxMTAwMTI2WjAzMTEwLwYDVQQD
EyhhOGZlMTBjZTVhMzRkMDU0MDc2NjAzNTM4NmZiNWM1YWEyZGMwYjM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7mVYbQU1rRf4DW4S08RciVfRACcw
PKjhjIrwnuunh4f7gEE6aLpzegaHFLImj9gVoshsAbCSEfIkjv3cwA/mFCZyOLJp
396o3hd+azyyvdVzZ92Aj86XzFpbwt2cddeRfZW1vYFyM71opa5GXSUF+VWs4o5D
ibPIbkG3qkRu4EdeJdC7GxscU/LTLN2pBGbec4wWNE2HX1bqPUP2SsEetQyPnqmn
8pWi8cjXbmPv9AuhK2KL2R9HdcVzIBsAITTMyKsauHkFX9j4LpHA2YAi4ImuUF5w
dJroNo3sC0wlQ2avc5TLlkcLBTturdrBbjstrFlKAgHSB/8lbJ4GR9Y2NQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKj+EM5aNNBUB2YDU4b7XFqi3As4MB8GA1UdIwQY
MBaAFJdIgo17mbCpcBfsJry+/pb9vpV5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDBpQ2pYdVpzS2x3Ri13bXZMNy1sdjItbFhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy8xZTFlYmYtYzNhYy00OWExLWI2YTgt
YTRhMDc1Mzk4YjBlLzEvbDBpQ2pYdVpzS2x3Ri13bXZMNy1sdjItbFhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy8xZTFlYmYtYzNhYy00OWExLWI2YTgtYTRhMDc1Mzk4YjBl
LzEvbDBpQ2pYdVpzS2x3Ri13bXZMNy1sdjItbFhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMhdMPdd8
9KCfngFY6fkWvusexJkU5Kue+Kt9Q6GQL7R9VLjSsER+sfoTTWYxLJuIxWiKi/++
VlGQqSIwS5370JkEGqEYO/uYX4WkN2nj1jYdozJK7Wel2KuXex2HZNd11d+DnUOh
Qh+8J4EBzU+OAMwZ7465V9JXXcNJS26LNI5V4CT4S+qz/8U3bgP0JHFdKFqezuFP
q3w34Cfe/pF1GTHBJ7WAaqIhkFmF0mIVgVTYtWFh8LDh/xZGNwUavIu8zD4Y8bqT
LH3YXrGVhnllnZxfCa26cpKnVYRwQ5oihdVk/LzkmfhVvlrCgLmM2CDPYLwU9Bof
iQD91jQB7SouRg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:40:13 2025 by rpki-client