Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/9307f6-1458-432f-9915-ca4ed8097970/1/LPAizk3IHwOzswcwpsI-rzQuzF4.mft
File: LPAizk3IHwOzswcwpsI-rzQuzF4.mft (raw, json)
Hash identifier: j2ai/xA2KV6u1QX/40X2jb6GmMnBgc8v1Fa0qWqR8QA=
Subject key identifier: B3:21:A5:A2:E8:3B:B0:96:29:49:5B:69:45:85:DE:89:6F:61:6C:1C
Authority key identifier: 2C:F0:22:CE:4D:C8:1F:03:B3:B3:07:30:A6:C2:3E:AF:34:2E:CC:5E
Certificate issuer: /CN=2cf022ce4dc81f03b3b30730a6c23eaf342ecc5e
Certificate serial: 0199FE7E207375ADFF31C952B80C9E6DB471
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LPAizk3IHwOzswcwpsI-rzQuzF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/9307f6-1458-432f-9915-ca4ed8097970/1/LPAizk3IHwOzswcwpsI-rzQuzF4.mft
Manifest number: 0C04
Signing time: Sun 19 Oct 2025 22:01:42 +0000
Manifest this update: Sun 19 Oct 2025 22:01:42 +0000
Manifest next update: Mon 20 Oct 2025 22:01:42 +0000
Files and hashes: 1: LPAizk3IHwOzswcwpsI-rzQuzF4.crl (hash: C3Gobyi9Z8v+PCsT4w7GNRrqJkLJWfCHimAe38+bQdM=)
2: SiSRrPcHelaVZsbMdPyYnFpcX7g.roa (hash: MiZDViUeplCOeEov/OOx4T8K/9EA6SimsIwRAIFKwms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/9307f6-1458-432f-9915-ca4ed8097970/1/LPAizk3IHwOzswcwpsI-rzQuzF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/9307f6-1458-432f-9915-ca4ed8097970/1/LPAizk3IHwOzswcwpsI-rzQuzF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LPAizk3IHwOzswcwpsI-rzQuzF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7e:20:73:75:ad:ff:31:c9:52:b8:0c:9e:6d:b4:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cf022ce4dc81f03b3b30730a6c23eaf342ecc5e
Validity
Not Before: Oct 19 22:01:42 2025 GMT
Not After : Oct 20 22:01:42 2025 GMT
Subject: CN=b321a5a2e83bb09629495b694585de896f616c1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:6d:93:dd:25:ce:1d:e1:d3:b9:a7:88:cc:d4:
f3:ce:d6:ad:d3:67:67:dc:36:64:9b:72:75:1f:71:
49:3c:3e:e5:fa:69:d6:66:e5:fa:47:15:19:fe:5e:
33:64:a6:58:5a:88:89:a0:60:7c:d4:38:87:34:f2:
60:34:b8:2f:cb:2d:7b:aa:38:9e:af:91:85:35:63:
df:c7:d1:2d:b1:5b:75:7b:e0:84:c9:49:e4:ca:a5:
ca:d2:d3:15:3b:f1:41:9f:ad:d2:fc:a7:fa:0e:e5:
3b:09:48:d1:1e:bc:d4:f0:5a:81:aa:10:0c:8d:f4:
d4:58:4c:fb:00:3e:f3:bd:6c:e5:c9:95:d2:29:01:
15:dc:a9:fc:2e:5d:2b:b4:52:a8:b1:b2:ca:05:a4:
86:2f:20:93:84:58:15:b7:da:6f:ba:9a:63:18:34:
8d:78:42:cc:e6:47:e6:bb:ad:5a:78:d3:a2:f3:50:
ea:7a:d7:c9:a7:7f:70:fc:99:80:41:8d:59:13:28:
ae:1f:d0:2e:5c:b2:08:9a:8b:bc:47:b3:50:b4:58:
68:60:46:86:0a:1a:5b:61:a8:3c:49:2b:0d:bc:9f:
ea:74:16:d8:29:74:56:ae:57:dd:32:a3:8e:84:cc:
a6:a5:9e:56:3a:d7:a7:d7:19:63:1e:87:9e:0d:54:
2c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:21:A5:A2:E8:3B:B0:96:29:49:5B:69:45:85:DE:89:6F:61:6C:1C
X509v3 Authority Key Identifier:
keyid:2C:F0:22:CE:4D:C8:1F:03:B3:B3:07:30:A6:C2:3E:AF:34:2E:CC:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LPAizk3IHwOzswcwpsI-rzQuzF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/9307f6-1458-432f-9915-ca4ed8097970/1/LPAizk3IHwOzswcwpsI-rzQuzF4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/9307f6-1458-432f-9915-ca4ed8097970/1/LPAizk3IHwOzswcwpsI-rzQuzF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:1e:b0:d3:4b:ed:b9:99:f1:99:ce:ba:1e:f3:05:e3:96:9d:
c6:51:24:15:bf:b4:81:29:d3:62:3f:88:e1:2b:dc:89:c7:19:
d8:13:57:80:8c:93:96:8f:a4:e1:76:8b:a0:fe:63:e1:fb:ae:
5b:b5:98:17:5e:a8:2c:8a:82:5a:07:4a:30:d1:e3:bf:01:db:
80:67:88:1a:c9:ad:95:fc:3f:00:96:94:d0:38:c9:1e:8b:6c:
e7:a4:1f:1f:d4:66:aa:72:43:c7:3b:ba:3e:d1:86:0d:c3:ba:
e7:d7:2d:df:1d:ce:c3:39:fc:ca:a0:de:23:5d:a2:90:17:80:
9b:0b:1f:8e:f3:25:33:58:6c:36:65:c3:b2:b7:29:c4:e0:86:
59:4a:6e:e5:1b:4b:97:db:a8:e0:d6:30:8d:c5:0f:37:cb:57:
bd:3a:cf:63:75:00:ab:c2:a6:0a:c7:22:bc:45:3f:43:33:9b:
30:7b:9a:2b:6e:c2:64:fa:26:18:15:8b:c2:0e:65:8f:1f:38:
08:42:fb:8a:81:89:0a:5f:ad:0b:16:3d:cd:75:b1:c8:89:4f:
01:20:66:bc:2c:ab:a7:ad:1b:61:db:0c:4f:20:82:d2:f1:f6:
9f:a7:37:1d:22:92:c3:af:e7:69:4f:06:ff:ed:38:51:fa:41:
08:5d:d1:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+fiBzda3/MclSuAyebbRxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjZjAyMmNlNGRjODFmMDNiM2IzMDczMGE2YzIzZWFmMzQy
ZWNjNWUwHhcNMjUxMDE5MjIwMTQyWhcNMjUxMDIwMjIwMTQyWjAzMTEwLwYDVQQD
EyhiMzIxYTVhMmU4M2JiMDk2Mjk0OTViNjk0NTg1ZGU4OTZmNjE2YzFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA722T3SXOHeHTuaeIzNTzztat02dn
3DZkm3J1H3FJPD7l+mnWZuX6RxUZ/l4zZKZYWoiJoGB81DiHNPJgNLgvyy17qjie
r5GFNWPfx9EtsVt1e+CEyUnkyqXK0tMVO/FBn63S/Kf6DuU7CUjRHrzU8FqBqhAM
jfTUWEz7AD7zvWzlyZXSKQEV3Kn8Ll0rtFKosbLKBaSGLyCThFgVt9pvuppjGDSN
eELM5kfmu61aeNOi81DqetfJp39w/JmAQY1ZEyiuH9AuXLIImou8R7NQtFhoYEaG
ChpbYag8SSsNvJ/qdBbYKXRWrlfdMqOOhMympZ5WOten1xljHoeeDVQsMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLMhpaLoO7CWKUlbaUWF3olvYWwcMB8GA1UdIwQY
MBaAFCzwIs5NyB8Ds7MHMKbCPq80LsxeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFBBaXprM0lId096c3djd3BzSS1yelF1ekY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC85MzA3ZjYtMTQ1OC00MzJmLTk5MTUt
Y2E0ZWQ4MDk3OTcwLzEvTFBBaXprM0lId096c3djd3BzSS1yelF1ekY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC85MzA3ZjYtMTQ1OC00MzJmLTk5MTUtY2E0ZWQ4MDk3OTcw
LzEvTFBBaXprM0lId096c3djd3BzSS1yelF1ekY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEB6w00vt
uZnxmc66HvMF45adxlEkFb+0gSnTYj+I4SvciccZ2BNXgIyTlo+k4XaLoP5j4fuu
W7WYF16oLIqCWgdKMNHjvwHbgGeIGsmtlfw/AJaU0DjJHots56QfH9RmqnJDxzu6
PtGGDcO659ct3x3Owzn8yqDeI12ikBeAmwsfjvMlM1hsNmXDsrcpxOCGWUpu5RtL
l9uo4NYwjcUPN8tXvTrPY3UAq8KmCscivEU/QzObMHuaK27CZPomGBWLwg5ljx84
CEL7ioGJCl+tCxY9zXWxyIlPASBmvCyrp60bYdsMTyCC0vH2n6c3HSKSw6/naU8G
/+04UfpBCF3R8A==
-----END CERTIFICATE-----
Generated at Mon Oct 20 05:39:27 2025 by rpki-client