Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/d31230-cbdc-42c1-8732-902ff17bc494/1/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.mft
File: lg3Xzc5Yi9qit6jLBW1NsBZwFTI.mft (raw, json)
Hash identifier: n2oYNEMMP3drmy7G6ZDXO8LJT49dOnDHYuVgOFwSbKY=
Subject key identifier: 4D:F3:D8:1D:70:41:33:20:02:40:F7:19:34:B0:73:0F:63:A0:51:9E
Authority key identifier: 96:0D:D7:CD:CE:58:8B:DA:A2:B7:A8:CB:05:6D:4D:B0:16:70:15:32
Certificate issuer: /CN=960dd7cdce588bdaa2b7a8cb056d4db016701532
Certificate serial: 0199FC8F456EF41E484E33DA594E79D7827D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/d31230-cbdc-42c1-8732-902ff17bc494/1/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.mft
Manifest number: 0DC1
Signing time: Sun 19 Oct 2025 13:01:11 +0000
Manifest this update: Sun 19 Oct 2025 13:01:11 +0000
Manifest next update: Mon 20 Oct 2025 13:01:11 +0000
Files and hashes: 1: lg3Xzc5Yi9qit6jLBW1NsBZwFTI.crl (hash: Tz1PyPq6GpS0tCGmV88qVPcwaxgO/KDqqukGLQlCVWk=)
2: xk5JW7mEcm3gYIGJEbgbndDf_D4.roa (hash: vX0UTn7T1VcnsWTR+h1UQPipjvJLxqxVpR3OQQyE5Fg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/d31230-cbdc-42c1-8732-902ff17bc494/1/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/d31230-cbdc-42c1-8732-902ff17bc494/1/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:45:6e:f4:1e:48:4e:33:da:59:4e:79:d7:82:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=960dd7cdce588bdaa2b7a8cb056d4db016701532
Validity
Not Before: Oct 19 13:01:11 2025 GMT
Not After : Oct 20 13:01:11 2025 GMT
Subject: CN=4df3d81d704133200240f71934b0730f63a0519e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:bc:cf:58:64:39:45:a2:59:68:fd:69:6e:06:
f2:6b:92:9c:60:58:46:df:e9:c0:0a:53:fb:26:a5:
aa:de:40:17:a9:b6:de:05:17:68:d8:43:6b:91:b7:
c9:17:f1:24:26:fa:d7:15:8e:4a:3f:5c:ae:93:b9:
b9:68:40:4c:5f:73:a5:bf:5c:a1:86:dc:e0:9e:98:
b2:a4:60:30:ef:3f:80:9b:31:76:11:52:ef:b2:a8:
d4:10:d2:d9:c8:f3:3b:06:a9:66:e2:59:ea:7c:14:
25:76:1a:c1:dc:ec:1f:af:62:b5:15:90:9b:4d:ef:
58:ac:f8:15:ee:78:61:5d:fe:76:32:3d:75:41:e6:
8e:18:25:cd:12:61:93:d0:f7:69:fa:13:fc:c7:f6:
40:f5:a6:9a:3b:5c:83:7c:d9:d7:f8:2d:42:fc:35:
c4:5a:06:73:76:5e:e4:1b:b1:e6:65:b3:ba:36:18:
01:21:cb:73:98:dc:40:06:cc:18:9e:69:b0:32:59:
ef:2c:98:8c:a4:b9:69:98:c8:cf:d7:12:fc:52:e4:
c6:d0:b0:86:09:54:97:b1:47:a9:4b:ca:7d:26:30:
52:2f:6c:72:cf:05:db:4c:17:c0:f5:5a:6f:fa:74:
43:f7:96:81:7e:17:0f:7e:75:47:50:3c:d5:1c:1b:
78:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:F3:D8:1D:70:41:33:20:02:40:F7:19:34:B0:73:0F:63:A0:51:9E
X509v3 Authority Key Identifier:
keyid:96:0D:D7:CD:CE:58:8B:DA:A2:B7:A8:CB:05:6D:4D:B0:16:70:15:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/d31230-cbdc-42c1-8732-902ff17bc494/1/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/d31230-cbdc-42c1-8732-902ff17bc494/1/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:e5:4c:ae:95:c9:8a:bb:a2:39:ad:20:03:a8:ad:40:ff:c9:
d6:e3:e6:e7:a0:05:83:35:e2:bd:ab:e0:4d:8e:85:c9:69:84:
08:08:94:58:6d:8a:db:a9:aa:f1:d4:84:92:58:f3:10:4c:d9:
9a:cd:6b:49:d9:6f:57:e1:27:7b:42:a2:43:c2:20:a4:63:0b:
54:34:95:1b:18:4e:c9:5e:7b:54:53:f1:55:73:ea:d2:bd:33:
80:8d:a6:91:9f:b7:05:63:3b:35:c3:78:ba:f3:4b:70:7f:80:
f7:d3:d1:85:5b:aa:2b:1d:da:db:3b:6a:bf:5a:75:5b:fd:a7:
27:69:29:ac:ea:d1:c4:e6:88:0e:9a:8e:6b:33:99:51:61:e7:
7e:12:ca:a3:8e:92:58:d4:88:76:81:51:0c:40:91:67:2b:1a:
8e:d0:5a:ea:96:e1:8e:35:7e:35:2d:42:ec:47:4c:91:68:b4:
a7:20:76:43:29:7e:36:76:1d:b2:75:15:6d:cc:5c:b4:5d:07:
89:e5:f8:a0:4d:a7:3f:fb:9a:cd:37:b8:e3:8e:12:67:2b:6a:
13:3a:22:cb:66:96:14:d5:9a:39:65:79:8b:cb:87:27:c7:c9:
91:94:8a:d1:e5:46:35:20:cd:12:4f:13:62:ea:65:64:30:13:
48:46:af:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8j0Vu9B5ITjPaWU5514J9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2MGRkN2NkY2U1ODhiZGFhMmI3YThjYjA1NmQ0ZGIwMTY3
MDE1MzIwHhcNMjUxMDE5MTMwMTExWhcNMjUxMDIwMTMwMTExWjAzMTEwLwYDVQQD
Eyg0ZGYzZDgxZDcwNDEzMzIwMDI0MGY3MTkzNGIwNzMwZjYzYTA1MTllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy7zPWGQ5RaJZaP1pbgbya5KcYFhG
3+nAClP7JqWq3kAXqbbeBRdo2ENrkbfJF/EkJvrXFY5KP1yuk7m5aEBMX3Olv1yh
htzgnpiypGAw7z+AmzF2EVLvsqjUENLZyPM7Bqlm4lnqfBQldhrB3Owfr2K1FZCb
Te9YrPgV7nhhXf52Mj11QeaOGCXNEmGT0Pdp+hP8x/ZA9aaaO1yDfNnX+C1C/DXE
WgZzdl7kG7HmZbO6NhgBIctzmNxABswYnmmwMlnvLJiMpLlpmMjP1xL8UuTG0LCG
CVSXsUepS8p9JjBSL2xyzwXbTBfA9Vpv+nRD95aBfhcPfnVHUDzVHBt4EwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE3z2B1wQTMgAkD3GTSwcw9joFGeMB8GA1UdIwQY
MBaAFJYN183OWIvaoreoywVtTbAWcBUyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGczWHpjNVlpOXFpdDZqTEJXMU5zQlp3RlRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9kMzEyMzAtY2JkYy00MmMxLTg3MzIt
OTAyZmYxN2JjNDk0LzEvbGczWHpjNVlpOXFpdDZqTEJXMU5zQlp3RlRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS9kMzEyMzAtY2JkYy00MmMxLTg3MzItOTAyZmYxN2JjNDk0
LzEvbGczWHpjNVlpOXFpdDZqTEJXMU5zQlp3RlRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ+VMrpXJ
iruiOa0gA6itQP/J1uPm56AFgzXivavgTY6FyWmECAiUWG2K26mq8dSEkljzEEzZ
ms1rSdlvV+Ene0KiQ8IgpGMLVDSVGxhOyV57VFPxVXPq0r0zgI2mkZ+3BWM7NcN4
uvNLcH+A99PRhVuqKx3a2ztqv1p1W/2nJ2kprOrRxOaIDpqOazOZUWHnfhLKo46S
WNSIdoFRDECRZysajtBa6pbhjjV+NS1C7EdMkWi0pyB2Qyl+NnYdsnUVbcxctF0H
ieX4oE2nP/uazTe4444SZytqEzoiy2aWFNWaOWV5i8uHJ8fJkZSK0eVGNSDNEk8T
YuplZDATSEavDA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:24:25 2025 by rpki-client