Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/42ad02-d48a-41ac-a80b-2102d96ee355/1/LrqqxROYKzwk02DG1GXPgkIFaok.mft
File: LrqqxROYKzwk02DG1GXPgkIFaok.mft (raw, json)
Hash identifier: DjjffmTNN1zAbjjB6IC+iAT0K0GSm9V+TPlX8OY6QDo=
Subject key identifier: A5:41:41:53:B9:BE:1A:97:42:EB:11:8D:AF:F5:CC:4E:CA:34:E1:02
Authority key identifier: 2E:BA:AA:C5:13:98:2B:3C:24:D3:60:C6:D4:65:CF:82:42:05:6A:89
Certificate issuer: /CN=2ebaaac513982b3c24d360c6d465cf8242056a89
Certificate serial: 0199FC219872C2A15FA99C0026E44521382F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LrqqxROYKzwk02DG1GXPgkIFaok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/42ad02-d48a-41ac-a80b-2102d96ee355/1/LrqqxROYKzwk02DG1GXPgkIFaok.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 11:01:24 +0000
Manifest this update: Sun 19 Oct 2025 11:01:24 +0000
Manifest next update: Mon 20 Oct 2025 11:01:24 +0000
Files and hashes: 1: GY1X78tUCHALN-6VezXTntkS1S0.roa (hash: B4/LrjmuUdItXDnKDdePMAJjiq+F77UrPT1SZV8fodQ=)
2: LrqqxROYKzwk02DG1GXPgkIFaok.crl (hash: KGmmO1FYrRIXTbTTewQHrraSaD22ZrHiZvhiGtflXIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/42ad02-d48a-41ac-a80b-2102d96ee355/1/LrqqxROYKzwk02DG1GXPgkIFaok.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/42ad02-d48a-41ac-a80b-2102d96ee355/1/LrqqxROYKzwk02DG1GXPgkIFaok.mft
rsync://rpki.ripe.net/repository/DEFAULT/LrqqxROYKzwk02DG1GXPgkIFaok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:98:72:c2:a1:5f:a9:9c:00:26:e4:45:21:38:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ebaaac513982b3c24d360c6d465cf8242056a89
Validity
Not Before: Oct 19 11:01:24 2025 GMT
Not After : Oct 20 11:01:24 2025 GMT
Subject: CN=a5414153b9be1a9742eb118daff5cc4eca34e102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:db:81:63:3f:6f:b0:1e:49:fb:2a:4e:ef:60:
99:c6:26:97:50:0a:69:50:ac:bb:2a:aa:0c:a9:46:
fc:04:61:75:7d:ed:33:cc:ca:d8:0b:cd:cd:47:6b:
d6:17:b9:50:13:12:ae:20:77:99:80:18:2c:3f:96:
8e:d4:0b:36:2b:4c:66:a1:47:72:d4:5c:f6:97:7f:
cb:9b:03:b5:65:f3:33:ee:e0:ec:98:7a:94:86:a6:
94:d0:48:ee:aa:5d:2d:22:22:13:4f:1a:f1:f1:22:
d4:d3:b0:89:86:02:9a:e4:0d:48:2b:5d:a5:be:bb:
67:0a:de:6c:f2:61:b9:a6:7e:03:09:33:9e:39:a0:
e7:5a:59:1c:13:93:ec:7b:85:62:ec:4b:d8:82:80:
96:f3:5b:a4:50:ff:e4:ee:f6:5b:21:17:ed:2f:b7:
ce:45:e4:79:59:f0:06:73:f2:a2:cf:7f:1e:5a:e3:
03:a0:31:ca:cc:6a:5b:22:71:9d:5b:5d:96:61:2f:
b0:6f:04:37:64:8e:3a:bf:51:0c:c3:f7:90:ef:97:
98:6e:06:e0:a0:5a:34:f3:94:f2:fd:7a:d8:c8:0d:
b5:ad:29:45:94:6d:69:e2:fb:e5:00:fd:5b:2d:d3:
11:71:f6:0f:1d:cb:58:c8:c3:0b:42:b7:06:93:d9:
a8:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:41:41:53:B9:BE:1A:97:42:EB:11:8D:AF:F5:CC:4E:CA:34:E1:02
X509v3 Authority Key Identifier:
keyid:2E:BA:AA:C5:13:98:2B:3C:24:D3:60:C6:D4:65:CF:82:42:05:6A:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LrqqxROYKzwk02DG1GXPgkIFaok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/42ad02-d48a-41ac-a80b-2102d96ee355/1/LrqqxROYKzwk02DG1GXPgkIFaok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/42ad02-d48a-41ac-a80b-2102d96ee355/1/LrqqxROYKzwk02DG1GXPgkIFaok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:5f:8e:a1:cd:1f:92:37:03:95:d5:3e:6b:5a:1b:73:71:de:
ce:dd:64:b1:4e:7c:19:1f:0a:08:4f:ee:b7:f1:ac:e8:8e:20:
75:01:40:dc:fd:8c:d2:4a:3b:f6:5e:61:1d:b3:3e:ff:56:b5:
5f:25:c4:96:a3:c8:13:b6:1f:74:2b:30:66:e8:65:b8:17:a1:
ba:d9:8a:62:7b:4a:b5:16:e0:7f:6a:a0:01:e8:cb:a0:39:55:
2d:11:ad:b1:4d:de:56:08:84:9e:3f:ee:eb:05:52:81:d8:ba:
03:06:0d:e8:2c:e1:6c:61:f2:f1:a7:c8:65:f0:a0:9c:30:0b:
2d:1a:70:fe:41:f0:c1:6d:82:8e:25:57:83:34:ce:8f:4d:1f:
1b:56:36:e1:e2:d7:5f:4a:10:71:09:b5:c3:a6:32:3b:a0:2e:
0d:2c:42:4f:15:a8:13:c9:c4:ba:60:f5:58:0c:d5:69:df:67:
3e:ba:a9:07:10:54:b6:3d:fe:b1:d4:66:0d:95:7b:ce:b1:ec:
0f:3b:00:33:89:16:4e:bd:4c:00:a9:d2:c8:bd:ee:ed:cf:d1:
56:85:86:0d:91:f2:96:fa:04:bf:3d:38:93:54:21:d4:1e:59:
91:3e:6d:9f:85:d0:3e:2f:17:1a:ea:cd:fa:34:94:aa:22:cd:
ad:6e:28:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8IZhywqFfqZwAJuRFITgvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlYmFhYWM1MTM5ODJiM2MyNGQzNjBjNmQ0NjVjZjgyNDIw
NTZhODkwHhcNMjUxMDE5MTEwMTI0WhcNMjUxMDIwMTEwMTI0WjAzMTEwLwYDVQQD
EyhhNTQxNDE1M2I5YmUxYTk3NDJlYjExOGRhZmY1Y2M0ZWNhMzRlMTAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxduBYz9vsB5J+ypO72CZxiaXUApp
UKy7KqoMqUb8BGF1fe0zzMrYC83NR2vWF7lQExKuIHeZgBgsP5aO1As2K0xmoUdy
1Fz2l3/LmwO1ZfMz7uDsmHqUhqaU0Ejuql0tIiITTxrx8SLU07CJhgKa5A1IK12l
vrtnCt5s8mG5pn4DCTOeOaDnWlkcE5Pse4Vi7EvYgoCW81ukUP/k7vZbIRftL7fO
ReR5WfAGc/Kiz38eWuMDoDHKzGpbInGdW12WYS+wbwQ3ZI46v1EMw/eQ75eYbgbg
oFo085Ty/XrYyA21rSlFlG1p4vvlAP1bLdMRcfYPHctYyMMLQrcGk9moKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKVBQVO5vhqXQusRja/1zE7KNOECMB8GA1UdIwQY
MBaAFC66qsUTmCs8JNNgxtRlz4JCBWqJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHJxcXhST1lLendrMDJERzFHWFBna0lGYW9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC80MmFkMDItZDQ4YS00MWFjLWE4MGIt
MjEwMmQ5NmVlMzU1LzEvTHJxcXhST1lLendrMDJERzFHWFBna0lGYW9rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC80MmFkMDItZDQ4YS00MWFjLWE4MGItMjEwMmQ5NmVlMzU1
LzEvTHJxcXhST1lLendrMDJERzFHWFBna0lGYW9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ1+Ooc0f
kjcDldU+a1obc3Hezt1ksU58GR8KCE/ut/Gs6I4gdQFA3P2M0ko79l5hHbM+/1a1
XyXElqPIE7YfdCswZuhluBehutmKYntKtRbgf2qgAejLoDlVLRGtsU3eVgiEnj/u
6wVSgdi6AwYN6CzhbGHy8afIZfCgnDALLRpw/kHwwW2CjiVXgzTOj00fG1Y24eLX
X0oQcQm1w6YyO6AuDSxCTxWoE8nEumD1WAzVad9nPrqpBxBUtj3+sdRmDZV7zrHs
DzsAM4kWTr1MAKnSyL3u7c/RVoWGDZHylvoEvz04k1Qh1B5ZkT5tn4XQPi8XGurN
+jSUqiLNrW4oRQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:38:43 2025 by rpki-client