Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/91431a-b50d-4d50-a6d6-f17f095dd3af/1/lCbTCdDbAt8dfgS7s5MTvR3xM1g.mft
File: lCbTCdDbAt8dfgS7s5MTvR3xM1g.mft (raw, json)
Hash identifier: hfQxICmLXpGmmcSWX+F2OhXxirpiNQGsGf5tHmDnrFc=
Subject key identifier: ED:D0:71:FF:07:40:2E:9B:83:27:F9:56:DC:0C:C3:67:C8:1F:EF:2B
Authority key identifier: 94:26:D3:09:D0:DB:02:DF:1D:7E:04:BB:B3:93:13:BD:1D:F1:33:58
Certificate issuer: /CN=9426d309d0db02df1d7e04bbb39313bd1df13358
Certificate serial: 0199FDDA3A0999406614A15D66920C64F4F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lCbTCdDbAt8dfgS7s5MTvR3xM1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/91431a-b50d-4d50-a6d6-f17f095dd3af/1/lCbTCdDbAt8dfgS7s5MTvR3xM1g.mft
Manifest number: 0D6F
Signing time: Sun 19 Oct 2025 19:02:41 +0000
Manifest this update: Sun 19 Oct 2025 19:02:41 +0000
Manifest next update: Mon 20 Oct 2025 19:02:41 +0000
Files and hashes: 1: JXlTdhSRTj5ed6JsXH8jc65Ou3M.roa (hash: ddm9bvtQw1cVvC7zNZuu5Y38UnapRIQ8ZhO6Ib5Ks0o=)
2: lCbTCdDbAt8dfgS7s5MTvR3xM1g.crl (hash: 6kbdG1fjsKjY8SqTME2IM3OB8VKIB5MiziPb0pwBeco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/91431a-b50d-4d50-a6d6-f17f095dd3af/1/lCbTCdDbAt8dfgS7s5MTvR3xM1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/91431a-b50d-4d50-a6d6-f17f095dd3af/1/lCbTCdDbAt8dfgS7s5MTvR3xM1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/lCbTCdDbAt8dfgS7s5MTvR3xM1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:02:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:3a:09:99:40:66:14:a1:5d:66:92:0c:64:f4:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9426d309d0db02df1d7e04bbb39313bd1df13358
Validity
Not Before: Oct 19 19:02:41 2025 GMT
Not After : Oct 20 19:02:41 2025 GMT
Subject: CN=edd071ff07402e9b8327f956dc0cc367c81fef2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d2:ad:5d:2d:a7:12:e0:05:0d:52:50:7a:fa:
69:63:e5:b0:d1:2c:59:ac:d8:4b:fc:c0:2b:c9:7c:
24:23:8c:b0:8f:8a:f6:cc:35:ed:dd:20:54:35:f4:
b5:3d:e6:db:ba:f1:70:43:36:d3:6f:51:9a:59:60:
14:ff:9c:b6:dd:4e:e9:01:96:0d:fa:93:c0:a7:a9:
3d:77:b8:22:45:cf:34:7c:33:c3:18:bf:52:a1:a3:
cb:c8:d0:3b:c6:92:c5:e8:4b:d6:56:3b:6e:75:0f:
e4:23:1a:0c:d0:38:b3:b3:d1:85:b8:3b:8e:b1:2f:
4c:7c:48:9a:72:6c:d5:03:2d:f1:ee:d6:2c:2d:55:
fc:09:02:aa:06:86:06:7f:8f:55:78:7c:fc:d9:29:
13:41:30:b6:20:9e:4b:e5:08:25:13:85:26:ba:35:
d9:c8:45:f2:47:de:dd:3d:e3:fa:a5:4e:09:c7:4b:
dd:76:4f:88:a3:d9:ba:2c:25:b0:e2:1e:3e:01:94:
d9:e1:d8:de:f9:24:19:d9:ef:e6:a7:82:b3:f7:02:
dd:4a:44:7f:d5:3b:12:67:89:94:2a:c9:e3:69:bc:
c0:53:e7:ab:d3:27:26:41:19:70:1f:79:b0:a9:d2:
2f:93:67:d8:fb:b7:47:72:a9:7e:14:8c:86:73:62:
58:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:D0:71:FF:07:40:2E:9B:83:27:F9:56:DC:0C:C3:67:C8:1F:EF:2B
X509v3 Authority Key Identifier:
keyid:94:26:D3:09:D0:DB:02:DF:1D:7E:04:BB:B3:93:13:BD:1D:F1:33:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lCbTCdDbAt8dfgS7s5MTvR3xM1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/91431a-b50d-4d50-a6d6-f17f095dd3af/1/lCbTCdDbAt8dfgS7s5MTvR3xM1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/91431a-b50d-4d50-a6d6-f17f095dd3af/1/lCbTCdDbAt8dfgS7s5MTvR3xM1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:77:79:89:41:e6:b8:eb:a4:9e:22:b1:36:93:66:18:41:05:
4d:3e:f2:01:35:79:a1:57:9f:35:ff:c0:2a:4a:ab:d5:07:89:
9a:a6:10:e7:61:5b:04:21:b6:f8:90:63:fa:5e:f7:ee:15:6c:
58:f5:84:d3:53:35:05:17:71:48:7a:84:11:c8:ae:5d:07:46:
32:41:31:9e:50:d9:e2:9b:e4:d8:92:e4:c6:1a:82:cf:f1:6b:
6b:af:53:2f:a9:cb:8e:50:5b:d2:f7:ba:b1:54:c7:9b:fa:3a:
07:51:70:1a:52:51:af:de:42:19:49:0b:37:61:e1:78:99:ee:
f5:65:ec:38:f0:1d:d9:0a:7e:44:a1:93:b3:12:04:7b:9e:6b:
a5:f7:9c:35:8e:3e:b3:ae:a8:64:53:9a:2e:f0:78:be:77:f6:
3d:db:55:50:3b:49:66:c6:41:83:52:6e:70:74:f2:94:86:67:
d8:98:14:47:39:ef:19:eb:21:97:9f:60:1c:f8:d8:ae:8d:ab:
ee:a1:af:90:99:45:85:db:8c:a9:a2:85:76:7c:92:c9:de:d8:
94:79:1f:8d:33:b6:56:3c:f0:ed:cb:c8:25:65:11:28:ae:91:
1b:94:06:d8:ce:40:52:af:02:2e:f8:ee:1e:9b:c1:bd:3e:67:
28:b1:cc:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92joJmUBmFKFdZpIMZPT3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0MjZkMzA5ZDBkYjAyZGYxZDdlMDRiYmIzOTMxM2JkMWRm
MTMzNTgwHhcNMjUxMDE5MTkwMjQxWhcNMjUxMDIwMTkwMjQxWjAzMTEwLwYDVQQD
EyhlZGQwNzFmZjA3NDAyZTliODMyN2Y5NTZkYzBjYzM2N2M4MWZlZjJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutKtXS2nEuAFDVJQevppY+Ww0SxZ
rNhL/MAryXwkI4ywj4r2zDXt3SBUNfS1PebbuvFwQzbTb1GaWWAU/5y23U7pAZYN
+pPAp6k9d7giRc80fDPDGL9SoaPLyNA7xpLF6EvWVjtudQ/kIxoM0Dizs9GFuDuO
sS9MfEiacmzVAy3x7tYsLVX8CQKqBoYGf49VeHz82SkTQTC2IJ5L5QglE4UmujXZ
yEXyR97dPeP6pU4Jx0vddk+Io9m6LCWw4h4+AZTZ4dje+SQZ2e/mp4Kz9wLdSkR/
1TsSZ4mUKsnjabzAU+er0ycmQRlwH3mwqdIvk2fY+7dHcql+FIyGc2JYlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO3Qcf8HQC6bgyf5VtwMw2fIH+8rMB8GA1UdIwQY
MBaAFJQm0wnQ2wLfHX4Eu7OTE70d8TNYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbENiVENkRGJBdDhkZmdTN3M1TVR2UjN4TTFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi85MTQzMWEtYjUwZC00ZDUwLWE2ZDYt
ZjE3ZjA5NWRkM2FmLzEvbENiVENkRGJBdDhkZmdTN3M1TVR2UjN4TTFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi85MTQzMWEtYjUwZC00ZDUwLWE2ZDYtZjE3ZjA5NWRkM2Fm
LzEvbENiVENkRGJBdDhkZmdTN3M1TVR2UjN4TTFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhXd5iUHm
uOukniKxNpNmGEEFTT7yATV5oVefNf/AKkqr1QeJmqYQ52FbBCG2+JBj+l737hVs
WPWE01M1BRdxSHqEEciuXQdGMkExnlDZ4pvk2JLkxhqCz/Fra69TL6nLjlBb0ve6
sVTHm/o6B1FwGlJRr95CGUkLN2HheJnu9WXsOPAd2Qp+RKGTsxIEe55rpfecNY4+
s66oZFOaLvB4vnf2PdtVUDtJZsZBg1JucHTylIZn2JgURznvGeshl59gHPjYro2r
7qGvkJlFhduMqaKFdnySyd7YlHkfjTO2Vjzw7cvIJWURKK6RG5QG2M5AUq8CLvju
HpvBvT5nKLHMGg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 01:38:58 2025 by rpki-client