Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/552f0d-01c2-418a-aa3c-acc4aac78d0d/1/L4ilP8uWd3-Z4C34lA3QQLRUzRw.mft
File: L4ilP8uWd3-Z4C34lA3QQLRUzRw.mft (raw, json)
Hash identifier: u2UIkE17EWHn0HUVk3QHZBJi1kxirDH6COMe/up9Cb0=
Subject key identifier: 69:37:CA:92:E5:E2:E1:AD:F2:84:FC:D9:45:54:1C:64:53:1B:22:14
Authority key identifier: 2F:88:A5:3F:CB:96:77:7F:99:E0:2D:F8:94:0D:D0:40:B4:54:CD:1C
Certificate issuer: /CN=2f88a53fcb96777f99e02df8940dd040b454cd1c
Certificate serial: 0199FC58D533E32C9E0F59A07617E241B32C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L4ilP8uWd3-Z4C34lA3QQLRUzRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/552f0d-01c2-418a-aa3c-acc4aac78d0d/1/L4ilP8uWd3-Z4C34lA3QQLRUzRw.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 12:01:44 +0000
Manifest this update: Sun 19 Oct 2025 12:01:44 +0000
Manifest next update: Mon 20 Oct 2025 12:01:44 +0000
Files and hashes: 1: 8vDMjaVS40emmzGFVsGL0I8-fQo.roa (hash: ZQlfpvu51NDsYdzNjhzj60BOHewjbF75+WG+cK0BDP8=)
2: L4ilP8uWd3-Z4C34lA3QQLRUzRw.crl (hash: 4A4OHWPpy89s/78Yedkskbus+yKZGvDIHAlC3rJ/hD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/552f0d-01c2-418a-aa3c-acc4aac78d0d/1/L4ilP8uWd3-Z4C34lA3QQLRUzRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/552f0d-01c2-418a-aa3c-acc4aac78d0d/1/L4ilP8uWd3-Z4C34lA3QQLRUzRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/L4ilP8uWd3-Z4C34lA3QQLRUzRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:d5:33:e3:2c:9e:0f:59:a0:76:17:e2:41:b3:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f88a53fcb96777f99e02df8940dd040b454cd1c
Validity
Not Before: Oct 19 12:01:44 2025 GMT
Not After : Oct 20 12:01:44 2025 GMT
Subject: CN=6937ca92e5e2e1adf284fcd945541c64531b2214
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:55:3a:48:e2:c2:f3:98:4c:b9:b6:21:7a:08:
e8:50:11:57:94:8d:2d:01:5f:5c:36:52:03:6d:70:
ff:37:1d:49:89:ab:d0:85:1d:28:2a:13:1a:d6:3d:
74:29:98:55:15:62:5d:1b:a9:6d:ba:b8:9d:96:de:
6e:28:da:dc:71:f6:e5:1f:5f:38:a3:40:3c:0b:cb:
a7:0e:07:d7:82:09:c7:c6:1e:65:6a:a1:2e:92:ff:
69:ed:89:45:93:5d:41:03:b5:94:78:b6:d1:69:8f:
91:79:4c:f7:e7:03:b2:cc:f7:7b:15:ae:2e:01:f8:
3e:01:d4:33:f0:cf:cd:63:3a:06:f6:2e:72:91:10:
2c:16:2d:38:45:94:45:bf:89:ad:0e:c2:3b:87:bf:
b8:67:a7:ee:37:28:67:4c:ae:eb:b3:8f:e0:d2:89:
a5:f2:28:19:0e:8e:4f:f8:f2:25:4e:9b:b9:4c:e8:
69:e0:f5:69:34:83:74:96:bd:20:df:75:c9:53:1b:
19:8e:ff:4b:14:c1:97:25:2f:b0:7c:40:af:9e:3f:
ce:8e:09:2d:2a:ac:1e:a0:82:e0:99:8c:d1:87:e9:
9c:8c:50:8b:14:04:13:a4:16:60:93:bd:5b:cf:e7:
a1:8e:01:a7:74:01:80:10:93:19:bf:82:16:fe:41:
09:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:37:CA:92:E5:E2:E1:AD:F2:84:FC:D9:45:54:1C:64:53:1B:22:14
X509v3 Authority Key Identifier:
keyid:2F:88:A5:3F:CB:96:77:7F:99:E0:2D:F8:94:0D:D0:40:B4:54:CD:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4ilP8uWd3-Z4C34lA3QQLRUzRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/552f0d-01c2-418a-aa3c-acc4aac78d0d/1/L4ilP8uWd3-Z4C34lA3QQLRUzRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/552f0d-01c2-418a-aa3c-acc4aac78d0d/1/L4ilP8uWd3-Z4C34lA3QQLRUzRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:d1:43:d5:8e:e3:43:39:9b:6b:0e:1f:11:b3:b7:cf:68:d4:
82:32:bf:dd:77:19:aa:eb:53:d8:48:89:8e:2d:60:94:42:90:
87:7e:cd:3f:47:27:71:0d:4c:30:ea:60:13:16:28:b4:dc:21:
1b:39:cd:b0:d3:a8:94:24:2b:a8:9f:d2:3d:5d:c3:03:fb:99:
d1:c8:da:4c:cd:58:31:69:95:26:45:79:9e:b4:1c:92:a5:ef:
0e:b1:a6:3d:e3:9d:2d:6d:92:bd:97:a2:71:82:fd:b2:d5:c8:
1c:80:77:0a:13:7a:51:01:6a:30:28:c6:74:e3:74:f2:27:c8:
b4:a3:a5:e7:08:ff:f7:21:20:0c:ca:ef:d3:11:da:a2:64:48:
82:b6:57:16:be:32:cd:c9:aa:7b:ee:01:b2:36:91:1d:f0:93:
02:93:2c:25:66:f9:9e:1b:1c:2a:36:1e:d7:5c:3f:2b:25:0e:
89:2d:c1:00:eb:d5:fb:3b:23:2d:4a:5e:23:3e:c4:26:75:4e:
6e:ad:b8:9a:1f:c4:37:b0:65:92:8d:e2:60:f5:51:0a:c7:61:
ce:d8:7b:b9:66:e0:9b:be:fd:16:1e:71:70:83:10:c8:9b:bf:
db:dd:ea:5d:51:d7:2a:32:29:58:22:fe:b6:59:f0:77:8d:84:
b6:37:a2:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WNUz4yyeD1mgdhfiQbMsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmODhhNTNmY2I5Njc3N2Y5OWUwMmRmODk0MGRkMDQwYjQ1
NGNkMWMwHhcNMjUxMDE5MTIwMTQ0WhcNMjUxMDIwMTIwMTQ0WjAzMTEwLwYDVQQD
Eyg2OTM3Y2E5MmU1ZTJlMWFkZjI4NGZjZDk0NTU0MWM2NDUzMWIyMjE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1U6SOLC85hMubYhegjoUBFXlI0t
AV9cNlIDbXD/Nx1JiavQhR0oKhMa1j10KZhVFWJdG6lturidlt5uKNrccfblH184
o0A8C8unDgfXggnHxh5laqEukv9p7YlFk11BA7WUeLbRaY+ReUz35wOyzPd7Fa4u
Afg+AdQz8M/NYzoG9i5ykRAsFi04RZRFv4mtDsI7h7+4Z6fuNyhnTK7rs4/g0oml
8igZDo5P+PIlTpu5TOhp4PVpNIN0lr0g33XJUxsZjv9LFMGXJS+wfECvnj/Ojgkt
KqweoILgmYzRh+mcjFCLFAQTpBZgk71bz+ehjgGndAGAEJMZv4IW/kEJlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGk3ypLl4uGt8oT82UVUHGRTGyIUMB8GA1UdIwQY
MBaAFC+IpT/Llnd/meAt+JQN0EC0VM0cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDRpbFA4dVdkMy1aNEMzNGxBM1FRTFJVelJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS81NTJmMGQtMDFjMi00MThhLWFhM2Mt
YWNjNGFhYzc4ZDBkLzEvTDRpbFA4dVdkMy1aNEMzNGxBM1FRTFJVelJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS81NTJmMGQtMDFjMi00MThhLWFhM2MtYWNjNGFhYzc4ZDBk
LzEvTDRpbFA4dVdkMy1aNEMzNGxBM1FRTFJVelJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtdFD1Y7j
Qzmbaw4fEbO3z2jUgjK/3XcZqutT2EiJji1glEKQh37NP0cncQ1MMOpgExYotNwh
GznNsNOolCQrqJ/SPV3DA/uZ0cjaTM1YMWmVJkV5nrQckqXvDrGmPeOdLW2SvZei
cYL9stXIHIB3ChN6UQFqMCjGdON08ifItKOl5wj/9yEgDMrv0xHaomRIgrZXFr4y
zcmqe+4BsjaRHfCTApMsJWb5nhscKjYe11w/KyUOiS3BAOvV+zsjLUpeIz7EJnVO
bq24mh/EN7Blko3iYPVRCsdhzth7uWbgm779Fh5xcIMQyJu/293qXVHXKjIpWCL+
tlnwd42EtjeiDA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:28:45 2025 by rpki-client