Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/e17e9a-d3e9-43b1-a2c7-5f65103e6f70/1/LnOM8y5uT5QCIPO4KPB7d-gT0JY.mft
File: LnOM8y5uT5QCIPO4KPB7d-gT0JY.mft (raw, json)
Hash identifier: PhnL3vyXlVdxT2AWuE/o8TwGhBhYAJBXWo/3txA5zMU=
Subject key identifier: 11:7C:95:EB:AE:3E:54:E0:FC:54:7C:A9:D0:B9:93:DE:FB:28:F5:E7
Authority key identifier: 2E:73:8C:F3:2E:6E:4F:94:02:20:F3:B8:28:F0:7B:77:E8:13:D0:96
Certificate issuer: /CN=2e738cf32e6e4f940220f3b828f07b77e813d096
Certificate serial: 0199FEEBB9C59EA2A8B62897FBE7C29ED34C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LnOM8y5uT5QCIPO4KPB7d-gT0JY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/e17e9a-d3e9-43b1-a2c7-5f65103e6f70/1/LnOM8y5uT5QCIPO4KPB7d-gT0JY.mft
Manifest number: 0632
Signing time: Mon 20 Oct 2025 00:01:25 +0000
Manifest this update: Mon 20 Oct 2025 00:01:25 +0000
Manifest next update: Tue 21 Oct 2025 00:01:25 +0000
Files and hashes: 1: LnOM8y5uT5QCIPO4KPB7d-gT0JY.crl (hash: QXQqmIvqke4MlCOx0s2lTmvO0dpT0KF55mGMafiKkFg=)
2: oe97wSbY_88YdH_dfh2cAaxIIGc.roa (hash: rf6pyZdYCbMMLh4GoGVJWNXbBBHbQfaEuZdhu42zCSU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/e17e9a-d3e9-43b1-a2c7-5f65103e6f70/1/LnOM8y5uT5QCIPO4KPB7d-gT0JY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/e17e9a-d3e9-43b1-a2c7-5f65103e6f70/1/LnOM8y5uT5QCIPO4KPB7d-gT0JY.mft
rsync://rpki.ripe.net/repository/DEFAULT/LnOM8y5uT5QCIPO4KPB7d-gT0JY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:b9:c5:9e:a2:a8:b6:28:97:fb:e7:c2:9e:d3:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e738cf32e6e4f940220f3b828f07b77e813d096
Validity
Not Before: Oct 20 00:01:25 2025 GMT
Not After : Oct 21 00:01:25 2025 GMT
Subject: CN=117c95ebae3e54e0fc547ca9d0b993defb28f5e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4c:6d:1b:24:d4:1a:a3:1c:ff:6c:bd:ad:a7:
3d:1b:ec:e9:e1:75:1e:a2:40:da:fc:ad:b8:77:8c:
c1:cf:74:3e:15:07:c2:9c:86:54:79:78:82:be:30:
29:2a:5d:2b:fa:9f:af:b1:b6:65:18:bc:13:8e:e2:
b7:54:64:d8:d3:39:65:74:ad:de:e5:e2:52:b0:6c:
71:b3:ea:ca:65:d4:ac:f4:ee:4a:3d:bd:6f:48:b2:
22:3c:a5:71:ac:10:92:0d:21:32:e2:71:b2:34:7f:
96:ae:da:ab:10:4a:b5:54:7c:91:92:a6:dc:60:b0:
9e:c9:e4:dc:2d:fc:5a:fc:c8:9b:14:36:87:35:37:
79:a6:b6:f1:55:7e:fc:fa:0c:3f:57:30:96:29:84:
70:76:e8:b1:0a:83:40:d3:1f:95:88:93:3a:eb:a1:
cd:2b:1e:a9:98:5f:ca:7f:f9:da:0c:59:b9:79:de:
e9:dd:46:0b:43:5f:c7:81:c2:68:8f:20:d0:66:df:
8c:28:96:e1:35:cd:e7:e7:e1:f2:e7:e6:22:eb:48:
e9:71:a5:53:3a:03:79:fb:e1:d2:8b:51:ec:09:f3:
75:51:ef:22:f4:41:f3:21:cd:67:5e:c7:c3:61:00:
6f:34:d6:79:66:cf:08:36:f0:c1:df:44:2e:27:68:
25:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:7C:95:EB:AE:3E:54:E0:FC:54:7C:A9:D0:B9:93:DE:FB:28:F5:E7
X509v3 Authority Key Identifier:
keyid:2E:73:8C:F3:2E:6E:4F:94:02:20:F3:B8:28:F0:7B:77:E8:13:D0:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LnOM8y5uT5QCIPO4KPB7d-gT0JY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e17e9a-d3e9-43b1-a2c7-5f65103e6f70/1/LnOM8y5uT5QCIPO4KPB7d-gT0JY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e17e9a-d3e9-43b1-a2c7-5f65103e6f70/1/LnOM8y5uT5QCIPO4KPB7d-gT0JY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:08:a6:e8:04:8b:c9:5f:f2:6f:03:0d:de:42:c8:fb:1a:e1:
bd:49:90:3b:f8:9e:47:8e:f4:fa:5d:55:36:ac:64:23:a7:25:
b7:0c:0c:8a:b4:c7:23:2b:4c:b7:a9:c4:09:de:f4:10:c0:98:
de:4c:43:3e:11:0a:5e:84:12:d5:03:ef:fb:d4:45:4a:76:4c:
2d:b3:23:cc:a6:44:ef:2a:7d:0b:bd:2d:83:3a:7d:27:51:ce:
ae:be:bc:07:4a:94:35:aa:a9:21:42:da:6f:7c:40:91:3e:78:
9a:62:98:42:cd:77:7d:5f:df:a6:c8:70:da:2a:46:e9:f9:1d:
8f:69:62:ac:12:91:f9:47:bb:b0:18:a8:66:af:c2:65:cf:a1:
57:54:d1:3d:aa:75:7c:3a:12:80:f0:e8:7c:f2:1e:87:ce:85:
91:34:54:65:ae:a9:ab:6b:1a:83:9b:d3:88:9f:d3:51:3e:32:
47:e4:85:74:2b:f1:55:54:4a:49:ed:6c:66:1d:f9:09:73:39:
65:35:6a:66:05:29:bb:6d:16:31:b4:3f:13:63:c4:fa:94:d8:
a0:47:76:12:f7:e0:c1:74:ed:22:34:39:71:98:ce:5f:07:6a:
18:79:8f:07:1d:0e:0e:a1:2e:e5:08:dd:ce:78:07:8d:c7:8b:
9b:8b:f4:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+67nFnqKotiiX++fCntNMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlNzM4Y2YzMmU2ZTRmOTQwMjIwZjNiODI4ZjA3Yjc3ZTgx
M2QwOTYwHhcNMjUxMDIwMDAwMTI1WhcNMjUxMDIxMDAwMTI1WjAzMTEwLwYDVQQD
EygxMTdjOTVlYmFlM2U1NGUwZmM1NDdjYTlkMGI5OTNkZWZiMjhmNWU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskxtGyTUGqMc/2y9rac9G+zp4XUe
okDa/K24d4zBz3Q+FQfCnIZUeXiCvjApKl0r+p+vsbZlGLwTjuK3VGTY0zlldK3e
5eJSsGxxs+rKZdSs9O5KPb1vSLIiPKVxrBCSDSEy4nGyNH+WrtqrEEq1VHyRkqbc
YLCeyeTcLfxa/MibFDaHNTd5prbxVX78+gw/VzCWKYRwduixCoNA0x+ViJM666HN
Kx6pmF/Kf/naDFm5ed7p3UYLQ1/HgcJojyDQZt+MKJbhNc3n5+Hy5+Yi60jpcaVT
OgN5++HSi1HsCfN1Ue8i9EHzIc1nXsfDYQBvNNZ5Zs8INvDB30QuJ2glIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBF8leuuPlTg/FR8qdC5k977KPXnMB8GA1UdIwQY
MBaAFC5zjPMubk+UAiDzuCjwe3foE9CWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTG5PTTh5NXVUNVFDSVBPNEtQQjdkLWdUMEpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9lMTdlOWEtZDNlOS00M2IxLWEyYzct
NWY2NTEwM2U2ZjcwLzEvTG5PTTh5NXVUNVFDSVBPNEtQQjdkLWdUMEpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS9lMTdlOWEtZDNlOS00M2IxLWEyYzctNWY2NTEwM2U2Zjcw
LzEvTG5PTTh5NXVUNVFDSVBPNEtQQjdkLWdUMEpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAQim6ASL
yV/ybwMN3kLI+xrhvUmQO/ieR470+l1VNqxkI6cltwwMirTHIytMt6nECd70EMCY
3kxDPhEKXoQS1QPv+9RFSnZMLbMjzKZE7yp9C70tgzp9J1HOrr68B0qUNaqpIULa
b3xAkT54mmKYQs13fV/fpshw2ipG6fkdj2lirBKR+Ue7sBioZq/CZc+hV1TRPap1
fDoSgPDofPIeh86FkTRUZa6pq2sag5vTiJ/TUT4yR+SFdCvxVVRKSe1sZh35CXM5
ZTVqZgUpu20WMbQ/E2PE+pTYoEd2EvfgwXTtIjQ5cZjOXwdqGHmPBx0ODqEu5Qjd
zngHjceLm4v0gg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 06:23:30 2025 by rpki-client