Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.mft
File: lWhmVi2fJYMewKzoqdjNDllNcfw.mft (raw, json)
Hash identifier: 8Cg8CkYuLRUl7yRzM9HivcW7fJWhRaRd+YXjWAi53Lo=
Subject key identifier: 74:EF:FE:A0:CD:53:B0:E0:E4:26:A6:0E:44:DB:F9:B3:A8:2B:2E:11
Authority key identifier: 95:68:66:56:2D:9F:25:83:1E:C0:AC:E8:A9:D8:CD:0E:59:4D:71:FC
Certificate issuer: /CN=956866562d9f25831ec0ace8a9d8cd0e594d71fc
Certificate serial: 0199FC8F2E45EF299FD32728498589641F36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lWhmVi2fJYMewKzoqdjNDllNcfw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 13:01:05 +0000
Manifest this update: Sun 19 Oct 2025 13:01:05 +0000
Manifest next update: Mon 20 Oct 2025 13:01:05 +0000
Files and hashes: 1: 5A1rFRWiaoMZrd1W-j1DOiNHcxg.roa (hash: V+WxsJZcqfyEzzmw0OXvgqJRZOf8o70VUJRyRrh0lh8=)
2: dwjCitSclr7fGwprU9bQVIbfmCg.roa (hash: p2lC46dhETK6ft6AVZYruiB24S2hxZ7wuf8RUwFJV9o=)
3: lWhmVi2fJYMewKzoqdjNDllNcfw.crl (hash: yrS0XKF7P9xW/XhODx8VpNHr/Ec0vzYfNHDsPTJ5UE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lWhmVi2fJYMewKzoqdjNDllNcfw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:2e:45:ef:29:9f:d3:27:28:49:85:89:64:1f:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=956866562d9f25831ec0ace8a9d8cd0e594d71fc
Validity
Not Before: Oct 19 13:01:05 2025 GMT
Not After : Oct 20 13:01:05 2025 GMT
Subject: CN=74effea0cd53b0e0e426a60e44dbf9b3a82b2e11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:79:b3:20:e1:2c:94:26:8b:62:9c:61:cc:9d:
84:72:94:79:c1:c5:6a:f1:e1:26:af:4f:74:a8:58:
d4:2a:f9:5d:74:37:ea:d1:36:aa:f9:0e:20:2a:11:
56:82:f4:ae:30:04:88:50:41:c4:68:4f:8d:4e:e9:
14:3a:b1:a5:d6:eb:71:54:ea:29:d1:8a:b1:84:46:
65:93:16:7a:f6:94:45:c0:32:8e:e1:bd:40:4d:9f:
82:f0:bf:7e:a7:fd:f9:92:1d:51:7c:25:bd:73:8f:
b0:c5:f2:1f:9e:e2:da:34:66:50:02:ac:fa:a7:e9:
05:61:e8:37:6c:0a:7f:05:79:ff:bc:e1:90:f6:4d:
e4:83:40:2e:a6:d8:fe:e2:38:1a:ca:37:9f:09:7a:
b7:11:44:f0:7c:7a:ee:c3:a6:04:d2:11:ad:65:81:
ef:53:3e:f7:85:c6:f3:59:6d:7e:90:77:b3:62:24:
a8:ce:3c:02:2e:d9:52:c2:83:b2:50:6a:ed:81:7a:
65:fa:47:d8:af:af:ec:51:4c:3d:c8:67:f0:a6:0b:
34:55:4b:b0:ca:20:cd:7e:37:79:10:f8:ea:63:fc:
06:df:23:c9:f1:9c:7b:ff:f6:ca:cc:9e:d9:ea:47:
cc:f0:ad:76:a2:75:41:c7:f7:ac:95:ef:ae:31:d8:
01:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:EF:FE:A0:CD:53:B0:E0:E4:26:A6:0E:44:DB:F9:B3:A8:2B:2E:11
X509v3 Authority Key Identifier:
keyid:95:68:66:56:2D:9F:25:83:1E:C0:AC:E8:A9:D8:CD:0E:59:4D:71:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lWhmVi2fJYMewKzoqdjNDllNcfw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:cb:09:ae:b0:9a:d3:66:20:ad:dd:b1:55:f3:51:48:3b:38:
59:ed:57:41:35:6a:14:1c:44:e6:75:76:43:36:04:2e:6c:19:
da:0d:28:6b:08:b8:94:63:f7:d5:89:da:cd:ce:95:3b:b9:1e:
47:41:7d:59:17:0f:94:1c:51:80:ba:32:60:81:0f:f6:c1:61:
67:f5:25:92:a6:a8:63:38:4d:82:a9:85:ba:bd:ee:b8:03:2d:
d3:cd:bb:5e:fb:ad:dc:53:f7:0c:f4:fe:d7:c1:c5:f6:22:b1:
76:14:d3:57:34:89:03:1e:c7:e2:33:05:53:83:06:d4:b2:21:
95:1a:d9:7a:9d:b1:18:fb:9e:af:f8:32:36:91:db:5f:b6:4e:
af:ff:89:57:56:84:32:cc:4e:dd:32:45:29:3b:15:ea:fc:1d:
44:16:b9:7e:85:b8:a1:6e:f8:0c:13:b7:f7:d9:f8:fb:43:f2:
05:da:d2:6b:d9:91:a6:ef:87:d4:75:3a:70:1a:b9:b0:22:e1:
a0:29:7f:b9:09:7e:4f:f1:c3:cc:15:b7:a3:96:ad:29:4c:e2:
84:23:b5:10:f7:0f:94:ae:cf:f7:f1:6d:93:7a:73:bd:f9:9f:
d7:85:99:66:90:fb:3a:b8:79:8e:83:d4:60:3e:6c:04:be:25:
9d:c3:b2:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8jy5F7ymf0ycoSYWJZB82MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1Njg2NjU2MmQ5ZjI1ODMxZWMwYWNlOGE5ZDhjZDBlNTk0
ZDcxZmMwHhcNMjUxMDE5MTMwMTA1WhcNMjUxMDIwMTMwMTA1WjAzMTEwLwYDVQQD
Eyg3NGVmZmVhMGNkNTNiMGUwZTQyNmE2MGU0NGRiZjliM2E4MmIyZTExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3mzIOEslCaLYpxhzJ2EcpR5wcVq
8eEmr090qFjUKvlddDfq0Taq+Q4gKhFWgvSuMASIUEHEaE+NTukUOrGl1utxVOop
0YqxhEZlkxZ69pRFwDKO4b1ATZ+C8L9+p/35kh1RfCW9c4+wxfIfnuLaNGZQAqz6
p+kFYeg3bAp/BXn/vOGQ9k3kg0Auptj+4jgayjefCXq3EUTwfHruw6YE0hGtZYHv
Uz73hcbzWW1+kHezYiSozjwCLtlSwoOyUGrtgXpl+kfYr6/sUUw9yGfwpgs0VUuw
yiDNfjd5EPjqY/wG3yPJ8Zx7//bKzJ7Z6kfM8K12onVBx/esle+uMdgB9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHTv/qDNU7Dg5CamDkTb+bOoKy4RMB8GA1UdIwQY
MBaAFJVoZlYtnyWDHsCs6KnYzQ5ZTXH8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFdobVZpMmZKWU1ld0t6b3Fkak5EbGxOY2Z3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9jYjJlZTgtODc4Mi00YWY0LThmNmIt
OWQ3Zjg2ZjBkNDc3LzEvbFdobVZpMmZKWU1ld0t6b3Fkak5EbGxOY2Z3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS9jYjJlZTgtODc4Mi00YWY0LThmNmItOWQ3Zjg2ZjBkNDc3
LzEvbFdobVZpMmZKWU1ld0t6b3Fkak5EbGxOY2Z3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgssJrrCa
02Ygrd2xVfNRSDs4We1XQTVqFBxE5nV2QzYELmwZ2g0oawi4lGP31Ynazc6VO7ke
R0F9WRcPlBxRgLoyYIEP9sFhZ/UlkqaoYzhNgqmFur3uuAMt0827Xvut3FP3DPT+
18HF9iKxdhTTVzSJAx7H4jMFU4MG1LIhlRrZep2xGPuer/gyNpHbX7ZOr/+JV1aE
MsxO3TJFKTsV6vwdRBa5foW4oW74DBO399n4+0PyBdrSa9mRpu+H1HU6cBq5sCLh
oCl/uQl+T/HDzBW3o5atKUzihCO1EPcPlK7P9/Ftk3pzvfmf14WZZpD7Orh5joPU
YD5sBL4lncOyVQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:13:20 2025 by rpki-client