Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/0Lqrm9jGnQe2UBFHVD33QnCjOiE.mft
File: 0Lqrm9jGnQe2UBFHVD33QnCjOiE.mft (raw, json)
Hash identifier: hdDZQvMhh3jpQWs5afH7zIxpVW2RRE6GAyy1o7njqc0=
Subject key identifier: 27:74:CC:33:97:AC:D1:F6:91:2A:0D:FF:35:33:96:EA:DD:0F:CC:02
Authority key identifier: D0:BA:AB:9B:D8:C6:9D:07:B6:50:11:47:54:3D:F7:42:70:A3:3A:21
Certificate issuer: /CN=d0baab9bd8c69d07b6501147543df74270a33a21
Certificate serial: 0199FC21A6A4E4D5A8305145D2D3AD0937B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Lqrm9jGnQe2UBFHVD33QnCjOiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/0Lqrm9jGnQe2UBFHVD33QnCjOiE.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 11:01:27 +0000
Manifest this update: Sun 19 Oct 2025 11:01:27 +0000
Manifest next update: Mon 20 Oct 2025 11:01:27 +0000
Files and hashes: 1: 0Lqrm9jGnQe2UBFHVD33QnCjOiE.crl (hash: bioFYWbY7VduYaMnl5afUHHGT4ENxI+t7Kt2PZr0Zmc=)
2: juIbMy-ZOag5FvgvGV0o5yTeEN8.roa (hash: +hUGE34YMtW1+houvKxGq1sllVhVFyMUSU1KkXLa0fI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/0Lqrm9jGnQe2UBFHVD33QnCjOiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/0Lqrm9jGnQe2UBFHVD33QnCjOiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Lqrm9jGnQe2UBFHVD33QnCjOiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:a6:a4:e4:d5:a8:30:51:45:d2:d3:ad:09:37:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0baab9bd8c69d07b6501147543df74270a33a21
Validity
Not Before: Oct 19 11:01:27 2025 GMT
Not After : Oct 20 11:01:27 2025 GMT
Subject: CN=2774cc3397acd1f6912a0dff353396eadd0fcc02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:69:d5:67:31:c2:79:0d:b2:5c:38:e1:d5:3f:
05:c4:65:ea:2e:2d:35:07:5f:bf:90:1e:fe:94:a9:
48:eb:1a:42:2d:da:9a:a9:96:a6:85:4a:aa:9b:89:
6c:42:8d:df:ed:ca:7c:ad:cf:b7:a9:c4:55:d8:85:
00:a4:90:e5:d5:70:37:71:d5:c1:e4:d6:32:d5:1d:
ac:af:fb:0a:a9:a0:5c:6e:7e:ae:41:f0:b3:a8:13:
34:51:17:ba:f2:5d:4a:ae:bf:a7:49:52:6f:c9:6d:
8d:da:32:8c:c4:77:f6:f7:86:1d:95:01:61:9a:94:
3e:f8:b0:76:f8:b8:d9:38:f6:2d:07:d3:64:79:12:
94:a0:85:dd:e8:30:c7:cb:69:d5:fa:fa:2a:f6:5b:
2e:28:50:37:7f:96:15:2e:15:85:8e:7c:9e:d7:8e:
bf:78:e6:79:d2:46:1f:99:4c:d7:a0:3a:ba:d0:f3:
63:1f:8e:f8:b4:d2:ea:42:d1:c0:0f:c8:9a:e8:d3:
d6:88:d5:e4:22:f9:8d:99:0c:ad:7a:cb:b7:98:05:
49:7b:fd:52:40:76:22:e1:88:43:de:b0:38:99:90:
47:e6:a0:22:c6:43:1f:fc:8f:f9:0f:f9:77:8f:ff:
19:a2:bf:2b:45:0e:65:02:46:04:2c:34:b1:d6:9a:
4e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:74:CC:33:97:AC:D1:F6:91:2A:0D:FF:35:33:96:EA:DD:0F:CC:02
X509v3 Authority Key Identifier:
keyid:D0:BA:AB:9B:D8:C6:9D:07:B6:50:11:47:54:3D:F7:42:70:A3:3A:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Lqrm9jGnQe2UBFHVD33QnCjOiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/0Lqrm9jGnQe2UBFHVD33QnCjOiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/0Lqrm9jGnQe2UBFHVD33QnCjOiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:79:75:a5:79:98:88:f6:8b:66:d2:1e:98:68:7b:ff:23:a9:
72:36:3f:81:4a:99:3d:55:06:f3:17:2d:d6:80:ed:ca:50:88:
33:e7:69:3d:15:99:69:e7:d0:f0:5e:80:0a:3d:2a:83:a0:70:
04:76:99:c0:b8:81:4b:1e:df:0e:55:47:d2:a2:80:d1:a4:e8:
c2:45:db:09:4f:df:1c:ea:5f:c1:9d:4f:73:e7:13:bc:0e:22:
ef:b3:3a:58:89:89:42:fb:f1:ea:c6:e4:7d:90:26:ed:fd:5b:
71:96:9f:07:d6:35:b7:b7:5a:e9:02:26:34:d0:2d:6e:fd:32:
fa:c6:a2:a1:93:cb:98:8c:59:5e:d7:eb:30:2f:aa:58:4b:52:
2f:c3:dc:45:6b:a6:a2:95:d0:f0:3d:fb:b2:ab:bf:2a:e8:df:
3d:c7:f0:19:db:68:63:76:ff:24:82:cf:bf:4e:b3:48:28:37:
da:7b:d1:a1:08:7e:cb:53:69:95:f5:06:bf:4d:a2:fa:c7:39:
09:9d:33:be:f4:18:45:5a:c7:4f:3a:fb:52:9b:c1:c7:9d:31:
a0:68:f4:a0:7e:2e:28:5a:ab:63:ad:b7:d0:b2:f9:74:2f:1b:
12:dd:54:d0:ff:cd:e3:11:e8:1a:eb:f6:54:27:44:3b:e8:0c:
6f:07:56:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8Iaak5NWoMFFF0tOtCTe4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwYmFhYjliZDhjNjlkMDdiNjUwMTE0NzU0M2RmNzQyNzBh
MzNhMjEwHhcNMjUxMDE5MTEwMTI3WhcNMjUxMDIwMTEwMTI3WjAzMTEwLwYDVQQD
EygyNzc0Y2MzMzk3YWNkMWY2OTEyYTBkZmYzNTMzOTZlYWRkMGZjYzAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymnVZzHCeQ2yXDjh1T8FxGXqLi01
B1+/kB7+lKlI6xpCLdqaqZamhUqqm4lsQo3f7cp8rc+3qcRV2IUApJDl1XA3cdXB
5NYy1R2sr/sKqaBcbn6uQfCzqBM0URe68l1Krr+nSVJvyW2N2jKMxHf294YdlQFh
mpQ++LB2+LjZOPYtB9NkeRKUoIXd6DDHy2nV+voq9lsuKFA3f5YVLhWFjnye146/
eOZ50kYfmUzXoDq60PNjH474tNLqQtHAD8ia6NPWiNXkIvmNmQytesu3mAVJe/1S
QHYi4YhD3rA4mZBH5qAixkMf/I/5D/l3j/8Zor8rRQ5lAkYELDSx1ppOjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCd0zDOXrNH2kSoN/zUzlurdD8wCMB8GA1UdIwQY
MBaAFNC6q5vYxp0HtlARR1Q990JwozohMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMExxcm05akduUWUyVUJGSFZEMzNRbkNqT2lFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi85MTk5ZWItZThlYi00MDRkLTg5NTUt
OWJkNWQ1MTM4MDU5LzEvMExxcm05akduUWUyVUJGSFZEMzNRbkNqT2lFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi85MTk5ZWItZThlYi00MDRkLTg5NTUtOWJkNWQ1MTM4MDU5
LzEvMExxcm05akduUWUyVUJGSFZEMzNRbkNqT2lFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXXl1pXmY
iPaLZtIemGh7/yOpcjY/gUqZPVUG8xct1oDtylCIM+dpPRWZaefQ8F6ACj0qg6Bw
BHaZwLiBSx7fDlVH0qKA0aTowkXbCU/fHOpfwZ1Pc+cTvA4i77M6WImJQvvx6sbk
fZAm7f1bcZafB9Y1t7da6QImNNAtbv0y+saioZPLmIxZXtfrMC+qWEtSL8PcRWum
opXQ8D37squ/KujfPcfwGdtoY3b/JILPv06zSCg32nvRoQh+y1NplfUGv02i+sc5
CZ0zvvQYRVrHTzr7UpvBx50xoGj0oH4uKFqrY6230LL5dC8bEt1U0P/N4xHoGuv2
VCdEO+gMbwdWtg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:45:02 2025 by rpki-client