Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.mft
File: l6r4kriZHowCd5yy24ZNMh7r6QU.mft (raw, json)
Hash identifier: csSnWlddjejQChSvvnBjxbb13qOJ82XDEqO8Fft0Kjs=
Subject key identifier: 89:38:E2:9E:B7:14:C8:78:0F:FD:B3:CE:F1:04:2D:BA:94:00:CC:6E
Authority key identifier: 97:AA:F8:92:B8:99:1E:8C:02:77:9C:B2:DB:86:4D:32:1E:EB:E9:05
Certificate issuer: /CN=97aaf892b8991e8c02779cb2db864d321eebe905
Certificate serial: 0199FC2155E1632B4940612A29B6FCC57796
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l6r4kriZHowCd5yy24ZNMh7r6QU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.mft
Manifest number: 0DC3
Signing time: Sun 19 Oct 2025 11:01:07 +0000
Manifest this update: Sun 19 Oct 2025 11:01:07 +0000
Manifest next update: Mon 20 Oct 2025 11:01:07 +0000
Files and hashes: 1: Sf5t6YxNuVy_QmmCDlAJFdLydbs.roa (hash: 84pXBKdWUeBM3XRDHyhAVZXwwfPh9reL6aBdIjVrlKs=)
2: l6r4kriZHowCd5yy24ZNMh7r6QU.crl (hash: Wj2r1MOQrab3ZJImw+YqoiH/Hka9FwK7jEHqS76pVTA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.mft
rsync://rpki.ripe.net/repository/DEFAULT/l6r4kriZHowCd5yy24ZNMh7r6QU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:55:e1:63:2b:49:40:61:2a:29:b6:fc:c5:77:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97aaf892b8991e8c02779cb2db864d321eebe905
Validity
Not Before: Oct 19 11:01:07 2025 GMT
Not After : Oct 20 11:01:07 2025 GMT
Subject: CN=8938e29eb714c8780ffdb3cef1042dba9400cc6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:37:bb:e5:19:ff:91:e2:8d:52:d3:03:59:ce:
9e:52:4b:f1:13:45:a0:1f:9b:de:fd:94:fb:f3:3c:
8b:b5:81:68:1f:16:72:be:53:d9:43:7e:44:1c:57:
ba:1a:eb:8d:b3:41:1d:1e:ed:c7:2f:a6:52:d6:af:
32:a9:0f:b3:12:be:94:5d:e0:35:dc:e5:1b:52:0a:
6c:d9:25:cb:24:03:c1:0e:92:31:b7:75:44:b9:04:
59:b5:20:29:23:d5:17:33:6f:a3:2c:30:8f:84:56:
fc:ae:cd:fd:42:e6:12:58:11:00:5c:62:2f:7d:0a:
48:70:2b:08:68:e9:e5:16:d4:1a:66:61:98:9b:c7:
ab:f5:d9:1c:ea:ea:68:00:86:eb:ab:7a:ad:81:34:
3b:5d:fe:73:d5:9c:ff:36:5c:6f:ad:d1:48:68:93:
dd:66:3d:60:58:9b:43:5c:e3:46:bb:4a:b8:fc:8d:
2f:37:23:e1:56:71:1f:60:d8:25:e3:91:0f:d0:81:
ac:b1:59:31:61:09:8b:a4:f2:86:b7:cc:30:7d:70:
a6:d7:26:8d:24:db:70:8c:a0:10:2a:25:0d:25:ff:
fd:5f:25:6f:ec:dc:b3:b6:1c:a1:48:22:7d:8b:cf:
c4:ce:83:19:7a:50:79:64:c6:51:26:a0:3a:80:35:
5a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:38:E2:9E:B7:14:C8:78:0F:FD:B3:CE:F1:04:2D:BA:94:00:CC:6E
X509v3 Authority Key Identifier:
keyid:97:AA:F8:92:B8:99:1E:8C:02:77:9C:B2:DB:86:4D:32:1E:EB:E9:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l6r4kriZHowCd5yy24ZNMh7r6QU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:65:46:cc:98:a0:31:3a:cc:61:5e:2f:1a:83:16:9e:46:dc:
8c:e8:24:52:c1:3f:c0:1b:e3:3e:56:f1:d7:04:e7:df:0f:76:
d5:e2:3e:c7:37:50:fb:ea:dd:e6:cb:d4:42:48:e7:9b:31:f9:
ec:5e:25:59:51:21:c9:9b:36:99:6c:1c:03:2f:0c:d5:fa:1a:
8f:3f:01:6e:6e:ed:82:5b:1a:0d:61:81:ca:29:3e:dd:15:7d:
27:67:6d:21:14:0c:46:5b:d6:1b:c6:f5:98:7b:d5:9a:cb:65:
73:54:66:31:cc:9c:99:89:47:13:b3:7a:36:d9:3c:3a:a4:50:
05:95:ba:a0:ba:21:53:d2:51:d3:93:bf:51:4a:89:4e:e6:24:
f8:56:86:db:da:ba:6d:9b:30:bb:62:65:d9:e2:b4:f5:60:fe:
f4:d2:6b:2e:8b:86:c6:62:1d:fd:c9:39:ad:e7:19:88:47:c0:
c7:35:39:c8:2b:d6:d4:ef:a6:80:96:0d:6f:e9:1f:da:55:d8:
02:22:74:ae:69:5b:b3:be:46:77:c9:82:35:6b:3e:0d:8b:b0:
73:e5:29:6a:56:c7:9a:70:67:f4:23:d4:0a:f9:3f:57:bc:a9:
8a:02:15:3b:d3:05:6d:ba:08:28:38:94:46:35:47:c3:df:0b:
f6:c2:be:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8IVXhYytJQGEqKbb8xXeWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3YWFmODkyYjg5OTFlOGMwMjc3OWNiMmRiODY0ZDMyMWVl
YmU5MDUwHhcNMjUxMDE5MTEwMTA3WhcNMjUxMDIwMTEwMTA3WjAzMTEwLwYDVQQD
Eyg4OTM4ZTI5ZWI3MTRjODc4MGZmZGIzY2VmMTA0MmRiYTk0MDBjYzZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoje75Rn/keKNUtMDWc6eUkvxE0Wg
H5ve/ZT78zyLtYFoHxZyvlPZQ35EHFe6GuuNs0EdHu3HL6ZS1q8yqQ+zEr6UXeA1
3OUbUgps2SXLJAPBDpIxt3VEuQRZtSApI9UXM2+jLDCPhFb8rs39QuYSWBEAXGIv
fQpIcCsIaOnlFtQaZmGYm8er9dkc6upoAIbrq3qtgTQ7Xf5z1Zz/NlxvrdFIaJPd
Zj1gWJtDXONGu0q4/I0vNyPhVnEfYNgl45EP0IGssVkxYQmLpPKGt8wwfXCm1yaN
JNtwjKAQKiUNJf/9XyVv7NyzthyhSCJ9i8/EzoMZelB5ZMZRJqA6gDVavQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIk44p63FMh4D/2zzvEELbqUAMxuMB8GA1UdIwQY
MBaAFJeq+JK4mR6MAnecstuGTTIe6+kFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDZyNGtyaVpIb3dDZDV5eTI0Wk5NaDdyNlFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC80MWZlMWItMmYwZS00ZmFhLTlmZDQt
Y2E3NDY4NjdkYWM4LzEvbDZyNGtyaVpIb3dDZDV5eTI0Wk5NaDdyNlFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC80MWZlMWItMmYwZS00ZmFhLTlmZDQtY2E3NDY4NjdkYWM4
LzEvbDZyNGtyaVpIb3dDZDV5eTI0Wk5NaDdyNlFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAImVGzJig
MTrMYV4vGoMWnkbcjOgkUsE/wBvjPlbx1wTn3w921eI+xzdQ++rd5svUQkjnmzH5
7F4lWVEhyZs2mWwcAy8M1foajz8Bbm7tglsaDWGByik+3RV9J2dtIRQMRlvWG8b1
mHvVmstlc1RmMcycmYlHE7N6Ntk8OqRQBZW6oLohU9JR05O/UUqJTuYk+FaG29q6
bZswu2Jl2eK09WD+9NJrLouGxmId/ck5recZiEfAxzU5yCvW1O+mgJYNb+kf2lXY
AiJ0rmlbs75Gd8mCNWs+DYuwc+UpalbHmnBn9CPUCvk/V7ypigIVO9MFbboIKDiU
RjVHw98L9sK+IQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:28:32 2025 by rpki-client