Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.mft
File: lKOAb3QqvNXbEgT1KPTKbd6x6do.mft (raw, json)
Hash identifier: dWATtd7BW1fJc4uoLDk1iGfGPaCksclr1uqRkQia2dY=
Subject key identifier: A9:7D:AC:61:A8:B3:D4:A1:E0:59:0D:44:9F:A0:D8:43:7B:0C:5C:7E
Authority key identifier: 94:A3:80:6F:74:2A:BC:D5:DB:12:04:F5:28:F4:CA:6D:DE:B1:E9:DA
Certificate issuer: /CN=94a3806f742abcd5db1204f528f4ca6ddeb1e9da
Certificate serial: 0199FC21631BF48E41D96BDB0C88D65F6E00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lKOAb3QqvNXbEgT1KPTKbd6x6do.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.mft
Manifest number: 0E27
Signing time: Sun 19 Oct 2025 11:01:10 +0000
Manifest this update: Sun 19 Oct 2025 11:01:10 +0000
Manifest next update: Mon 20 Oct 2025 11:01:10 +0000
Files and hashes: 1: ZmObsjMWeB9ecv8Y-alGgZTX2vA.roa (hash: sKxCzrP68EEiJiVgfkANI2KkD6xerh0joHKgW2snD88=)
2: lKOAb3QqvNXbEgT1KPTKbd6x6do.crl (hash: sUsL26K9KCyNBGv1Uzn2l2X3Vux907YTqtII6Q9Lamo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.mft
rsync://rpki.ripe.net/repository/DEFAULT/lKOAb3QqvNXbEgT1KPTKbd6x6do.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:63:1b:f4:8e:41:d9:6b:db:0c:88:d6:5f:6e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94a3806f742abcd5db1204f528f4ca6ddeb1e9da
Validity
Not Before: Oct 19 11:01:10 2025 GMT
Not After : Oct 20 11:01:10 2025 GMT
Subject: CN=a97dac61a8b3d4a1e0590d449fa0d8437b0c5c7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:12:6e:57:1a:e0:c8:7f:eb:80:e1:3f:a1:a8:
f5:1b:b4:ae:bc:37:c4:ae:dd:42:4b:a7:f8:3a:74:
24:68:66:64:70:20:b9:ce:16:92:f3:34:78:50:4e:
d4:2c:d1:8c:82:1e:fa:44:bd:72:12:02:ec:f3:07:
da:86:ec:b9:c3:0b:6c:23:1a:0a:37:67:dd:21:d3:
24:93:95:cf:1d:aa:ce:19:53:ac:9a:ea:ce:8b:2f:
c7:1b:ab:65:ac:9a:fb:de:e2:26:0b:5f:33:9f:8f:
94:d9:e8:4f:9f:f4:62:33:13:50:3b:b7:bc:35:48:
2f:93:f9:02:30:33:87:c2:5f:71:91:18:15:b4:36:
2d:b4:c8:e5:60:a9:b1:0e:45:66:e8:73:53:c9:10:
73:2b:c5:34:0e:1a:a0:04:93:7d:02:14:54:9a:ae:
d5:38:84:31:b2:a1:47:01:b4:7c:ff:b1:b8:7e:d5:
3a:ef:c3:9a:7c:d1:cd:ed:23:bd:0a:14:cd:5e:a1:
7d:93:ee:2d:9f:70:52:df:c9:cf:8d:b0:5f:6d:d0:
d7:4c:9b:3c:4a:e9:37:a9:d1:87:14:3a:b4:6b:d4:
ae:cf:6c:4e:83:63:4b:72:74:87:4e:4d:27:14:5b:
17:d6:76:4f:6a:2d:b6:aa:e0:70:94:ba:8b:22:e1:
91:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:7D:AC:61:A8:B3:D4:A1:E0:59:0D:44:9F:A0:D8:43:7B:0C:5C:7E
X509v3 Authority Key Identifier:
keyid:94:A3:80:6F:74:2A:BC:D5:DB:12:04:F5:28:F4:CA:6D:DE:B1:E9:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lKOAb3QqvNXbEgT1KPTKbd6x6do.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:96:08:a0:7a:60:54:76:8d:4c:db:dc:c3:45:5f:f2:0a:77:
bf:b1:1d:a7:15:76:e9:75:b4:89:ed:79:a2:a3:82:31:90:62:
f1:a8:c9:26:52:a5:5e:d3:a7:63:1a:23:a4:5b:de:57:23:d2:
e0:d8:5d:53:5c:0f:cc:b9:b0:b6:14:9e:c1:c5:e6:40:2d:d3:
74:65:0b:f0:59:c8:33:5f:fe:25:84:d0:be:a8:1d:4d:19:8a:
c9:5f:32:cb:e9:01:fc:b7:ac:c3:2e:72:29:49:33:24:77:33:
f0:8c:42:6c:30:6e:58:92:53:ea:fc:58:84:d6:c4:77:c3:75:
2b:fd:76:37:f4:d3:51:57:43:ad:fc:c1:6f:f3:ba:58:7b:8a:
18:29:ac:0a:0e:23:26:87:38:0f:9c:b1:69:4c:e2:bf:83:0d:
ea:55:4a:59:ea:41:bd:7d:8b:2e:7b:8b:42:3d:7f:40:fe:cb:
26:76:9b:c6:fa:ce:51:5a:35:fb:02:24:0d:dd:42:52:ae:d9:
78:c4:5d:d1:62:0b:2f:c6:60:bc:1e:24:83:93:c0:cc:b8:b4:
ba:c0:d4:a3:28:7d:15:e6:59:4b:b7:ac:23:04:d2:d8:b4:72:
8c:a8:2a:04:44:27:1f:8c:a5:16:6a:0b:26:37:04:a6:87:a2:
63:c8:77:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8IWMb9I5B2WvbDIjWX24AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0YTM4MDZmNzQyYWJjZDVkYjEyMDRmNTI4ZjRjYTZkZGVi
MWU5ZGEwHhcNMjUxMDE5MTEwMTEwWhcNMjUxMDIwMTEwMTEwWjAzMTEwLwYDVQQD
EyhhOTdkYWM2MWE4YjNkNGExZTA1OTBkNDQ5ZmEwZDg0MzdiMGM1YzdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6BJuVxrgyH/rgOE/oaj1G7SuvDfE
rt1CS6f4OnQkaGZkcCC5zhaS8zR4UE7ULNGMgh76RL1yEgLs8wfahuy5wwtsIxoK
N2fdIdMkk5XPHarOGVOsmurOiy/HG6tlrJr73uImC18zn4+U2ehPn/RiMxNQO7e8
NUgvk/kCMDOHwl9xkRgVtDYttMjlYKmxDkVm6HNTyRBzK8U0DhqgBJN9AhRUmq7V
OIQxsqFHAbR8/7G4ftU678OafNHN7SO9ChTNXqF9k+4tn3BS38nPjbBfbdDXTJs8
Suk3qdGHFDq0a9Suz2xOg2NLcnSHTk0nFFsX1nZPai22quBwlLqLIuGRJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKl9rGGos9Sh4FkNRJ+g2EN7DFx+MB8GA1UdIwQY
MBaAFJSjgG90KrzV2xIE9Sj0ym3esenaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEtPQWIzUXF2TlhiRWdUMUtQVEtiZDZ4NmRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9jN2I1MjQtYzRkOS00MWE0LTg4ZmEt
ZDhiZjUyMWIyNmIwLzEvbEtPQWIzUXF2TlhiRWdUMUtQVEtiZDZ4NmRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9jN2I1MjQtYzRkOS00MWE0LTg4ZmEtZDhiZjUyMWIyNmIw
LzEvbEtPQWIzUXF2TlhiRWdUMUtQVEtiZDZ4NmRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASZYIoHpg
VHaNTNvcw0Vf8gp3v7EdpxV26XW0ie15oqOCMZBi8ajJJlKlXtOnYxojpFveVyPS
4NhdU1wPzLmwthSewcXmQC3TdGUL8FnIM1/+JYTQvqgdTRmKyV8yy+kB/Leswy5y
KUkzJHcz8IxCbDBuWJJT6vxYhNbEd8N1K/12N/TTUVdDrfzBb/O6WHuKGCmsCg4j
Joc4D5yxaUziv4MN6lVKWepBvX2LLnuLQj1/QP7LJnabxvrOUVo1+wIkDd1CUq7Z
eMRd0WILL8ZgvB4kg5PAzLi0usDUoyh9FeZZS7esIwTS2LRyjKgqBEQnH4ylFmoL
JjcEpoeiY8h3NQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:57:40 2025 by rpki-client