Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft
File: Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft (raw, json)
Hash identifier: z/LZzEXn7YARBNl5N022vWXV3taYjEXgPdT0GsdEur4=
Subject key identifier: CC:46:9B:18:37:E3:13:60:39:B3:B4:19:CC:9C:36:23:A2:96:FB:EF
Authority key identifier: 2E:BB:36:24:B8:2F:0E:1E:53:8B:00:91:9F:44:2D:20:0C:7E:3C:D2
Certificate issuer: /CN=2ebb3624b82f0e1e538b00919f442d200c7e3cd2
Certificate serial: 0199FC217BE135C94581DCDD6C8EC98ECF16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 11:01:16 +0000
Manifest this update: Sun 19 Oct 2025 11:01:16 +0000
Manifest next update: Mon 20 Oct 2025 11:01:16 +0000
Files and hashes: 1: 0CCtO-p9B4ORLnQWHO_vIlBkP0Y.roa (hash: OI3JSqGoVhnWz6wBW9AEkvVH4snnPUL3xdpL+eJr7uQ=)
2: Fkh2hiOOX1_9ZIsh1QOkg1uOFC8.roa (hash: 4wHVTXOU9z+SM/PpUwslG9Qh7bHf21AbIIUgGIPuA60=)
3: Lrs2JLgvDh5TiwCRn0QtIAx-PNI.crl (hash: 2Wl0K5F0qk0qPTCBQjvRNsH8ieqhygCiUtsVrxlTmdA=)
4: sbB_qhcZ5C6QsaRQey8d6Z2fiqQ.roa (hash: UF7xshn/lezkLw7gZiOHSmc0ml+xgRop+HTs7XfValk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:7b:e1:35:c9:45:81:dc:dd:6c:8e:c9:8e:cf:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ebb3624b82f0e1e538b00919f442d200c7e3cd2
Validity
Not Before: Oct 19 11:01:16 2025 GMT
Not After : Oct 20 11:01:16 2025 GMT
Subject: CN=cc469b1837e3136039b3b419cc9c3623a296fbef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:53:dd:9d:40:eb:76:54:e8:c3:10:0a:78:96:
e8:c9:af:f5:ff:2f:7a:90:97:09:04:09:26:88:c3:
b6:f4:12:fd:7c:80:0b:c9:4d:83:66:38:3b:40:1b:
ac:c0:c2:fd:12:8a:dc:c1:5e:77:0a:7e:90:78:85:
d3:69:6d:4f:ae:fe:e1:07:50:9a:12:a2:97:95:4c:
79:77:d7:ad:8e:b5:36:4e:38:af:c9:c9:d9:93:88:
14:e0:34:e2:e2:7f:37:eb:5c:a3:01:41:5a:04:30:
86:45:94:3c:a3:c7:11:b6:d1:74:73:80:df:25:ed:
34:8c:0d:2a:86:9b:73:da:bf:54:0a:5a:5e:03:0b:
3c:5d:3c:19:89:61:82:bb:e8:3c:5e:4c:3e:0c:18:
a6:a1:11:aa:d4:72:ac:f5:01:c3:16:d7:41:64:91:
e8:1b:25:93:bd:39:95:a5:ae:62:99:38:51:6f:f4:
e7:c2:4d:a1:d6:87:60:21:32:36:ba:06:b7:f5:c4:
71:bc:43:71:ae:ef:0f:0c:9a:f8:de:17:c4:fd:4c:
f2:b9:ae:5e:ba:48:b9:79:87:0a:53:92:83:15:4e:
10:36:4e:6f:e8:14:ba:ad:ba:36:da:eb:40:ed:b7:
8f:4c:92:8e:b6:53:a6:0d:e5:cd:3d:06:ec:66:72:
d5:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:46:9B:18:37:E3:13:60:39:B3:B4:19:CC:9C:36:23:A2:96:FB:EF
X509v3 Authority Key Identifier:
keyid:2E:BB:36:24:B8:2F:0E:1E:53:8B:00:91:9F:44:2D:20:0C:7E:3C:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:34:db:e0:1c:80:3b:8e:5c:57:44:4d:80:8e:65:7b:b2:25:
1c:c2:3c:4b:29:06:c1:25:76:7c:ce:f5:39:8b:33:ec:a7:78:
5c:ac:a9:33:7e:16:4e:29:d0:df:5d:0c:50:d5:b4:5e:14:77:
39:81:d1:cf:89:18:a9:67:d4:f3:fe:f7:24:8d:b5:22:ff:c2:
7d:35:61:67:a4:72:10:ed:44:67:00:65:ab:da:d4:65:f8:cd:
77:eb:70:34:b9:d7:c1:e4:69:8a:69:2b:3f:31:3a:ae:25:98:
ff:b2:2d:34:a7:d5:9f:d1:ff:53:67:59:8d:0c:04:fe:ee:74:
e2:57:29:71:99:d1:1d:7c:f9:a1:9c:c2:80:fa:5a:ce:90:6f:
a2:55:26:b3:8e:55:5b:c3:40:8d:2f:78:ef:c7:23:0e:cc:8a:
d6:86:33:15:54:de:ab:03:39:80:33:22:60:ed:e6:54:e7:5e:
47:95:c8:fd:a6:0b:b0:46:85:14:5e:ba:58:d0:97:9d:fa:b4:
b2:74:83:9e:a3:0b:e8:d8:43:75:9a:ed:8e:12:3e:2b:77:d5:
c8:2b:49:3c:71:ec:51:27:a3:38:ed:4d:29:d6:57:fd:c2:f7:
08:b3:76:92:ce:e4:4f:ed:c2:f3:d6:27:ad:cc:d2:d9:e0:42:
4f:1e:b1:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8IXvhNclFgdzdbI7Jjs8WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlYmIzNjI0YjgyZjBlMWU1MzhiMDA5MTlmNDQyZDIwMGM3
ZTNjZDIwHhcNMjUxMDE5MTEwMTE2WhcNMjUxMDIwMTEwMTE2WjAzMTEwLwYDVQQD
EyhjYzQ2OWIxODM3ZTMxMzYwMzliM2I0MTljYzljMzYyM2EyOTZmYmVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVPdnUDrdlTowxAKeJboya/1/y96
kJcJBAkmiMO29BL9fIALyU2DZjg7QBuswML9EorcwV53Cn6QeIXTaW1Prv7hB1Ca
EqKXlUx5d9etjrU2TjivycnZk4gU4DTi4n8361yjAUFaBDCGRZQ8o8cRttF0c4Df
Je00jA0qhptz2r9UClpeAws8XTwZiWGCu+g8Xkw+DBimoRGq1HKs9QHDFtdBZJHo
GyWTvTmVpa5imThRb/Tnwk2h1odgITI2uga39cRxvENxru8PDJr43hfE/Uzyua5e
uki5eYcKU5KDFU4QNk5v6BS6rbo22utA7bePTJKOtlOmDeXNPQbsZnLVCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMxGmxg34xNgObO0GcycNiOilvvvMB8GA1UdIwQY
MBaAFC67NiS4Lw4eU4sAkZ9ELSAMfjzSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHJzMkpMZ3ZEaDVUaXdDUm4wUXRJQXgtUE5JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC80OWJlZjEtNDAxYS00OGQyLTg3NDYt
MjY3Mjc1ZTkyNTcwLzEvTHJzMkpMZ3ZEaDVUaXdDUm4wUXRJQXgtUE5JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC80OWJlZjEtNDAxYS00OGQyLTg3NDYtMjY3Mjc1ZTkyNTcw
LzEvTHJzMkpMZ3ZEaDVUaXdDUm4wUXRJQXgtUE5JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArTTb4ByA
O45cV0RNgI5le7IlHMI8SykGwSV2fM71OYsz7Kd4XKypM34WTinQ310MUNW0XhR3
OYHRz4kYqWfU8/73JI21Iv/CfTVhZ6RyEO1EZwBlq9rUZfjNd+twNLnXweRpimkr
PzE6riWY/7ItNKfVn9H/U2dZjQwE/u504lcpcZnRHXz5oZzCgPpazpBvolUms45V
W8NAjS9478cjDsyK1oYzFVTeqwM5gDMiYO3mVOdeR5XI/aYLsEaFFF66WNCXnfq0
snSDnqML6NhDdZrtjhI+K3fVyCtJPHHsUSejOO1NKdZX/cL3CLN2ks7kT+3C89Yn
rczS2eBCTx6x1w==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:18:55 2025 by rpki-client