Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/811108-e8f7-47af-bc8b-a5b7831a8ce1/1/Lg4zjXPnWEaEVmMvW8quB68NhzE.mft
File: Lg4zjXPnWEaEVmMvW8quB68NhzE.mft (raw, json)
Hash identifier: R0N+963qOiJ9PIZY52n7Wsl5ICepkmRzyor77hAAWRI=
Subject key identifier: 4B:58:E2:7E:9B:61:23:4E:8D:0F:2A:EB:3D:8E:F5:40:AC:D8:52:A0
Authority key identifier: 2E:0E:33:8D:73:E7:58:46:84:56:63:2F:5B:CA:AE:07:AF:0D:87:31
Certificate issuer: /CN=2e0e338d73e758468456632f5bcaae07af0d8731
Certificate serial: 019A4EF459F6B9B92418EDED8AD21C9F7D45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lg4zjXPnWEaEVmMvW8quB68NhzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/811108-e8f7-47af-bc8b-a5b7831a8ce1/1/Lg4zjXPnWEaEVmMvW8quB68NhzE.mft
Manifest number: 16CF
Signing time: Tue 04 Nov 2025 13:00:27 +0000
Manifest this update: Tue 04 Nov 2025 13:00:27 +0000
Manifest next update: Wed 05 Nov 2025 13:00:27 +0000
Files and hashes: 1: Lg4zjXPnWEaEVmMvW8quB68NhzE.crl (hash: AL3unl+d4Lfoe4+qZRusFiu/lWWwEdZo5kxn3v3877I=)
2: zikRvY768723iyo08jZe02hR3F0.roa (hash: M9gppb+fjlRMhi68GyyEsDrKEHbWqY+OImTK0xt739Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/811108-e8f7-47af-bc8b-a5b7831a8ce1/1/Lg4zjXPnWEaEVmMvW8quB68NhzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/811108-e8f7-47af-bc8b-a5b7831a8ce1/1/Lg4zjXPnWEaEVmMvW8quB68NhzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lg4zjXPnWEaEVmMvW8quB68NhzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:59:f6:b9:b9:24:18:ed:ed:8a:d2:1c:9f:7d:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e0e338d73e758468456632f5bcaae07af0d8731
Validity
Not Before: Nov 4 13:00:27 2025 GMT
Not After : Nov 5 13:00:27 2025 GMT
Subject: CN=4b58e27e9b61234e8d0f2aeb3d8ef540acd852a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a5:ca:39:48:59:d1:d5:eb:26:da:c2:9d:29:
87:db:1e:2c:61:ef:bf:91:61:80:bf:d4:92:6e:2c:
e0:ae:9c:0b:97:d6:fd:06:8c:40:ee:9e:ec:b2:78:
03:a8:c2:43:74:9d:f1:06:75:be:ae:db:33:45:33:
95:e7:9a:93:e0:6c:1e:7a:78:5a:a4:08:3f:5c:22:
c7:07:d0:6c:2f:f7:c3:33:3e:8f:79:9b:d3:14:fb:
ff:36:20:7b:51:bd:b0:9a:95:85:0f:74:e8:a0:e7:
42:f9:68:dc:65:27:1b:07:20:3a:15:ea:56:37:62:
a0:3f:dd:79:d0:4f:3e:e7:1e:39:40:ac:25:8f:bc:
12:9f:5b:e2:73:06:aa:8e:2b:9c:5d:81:96:7e:7e:
2e:e9:dc:7a:a8:a1:2d:74:e9:a2:c3:f7:75:b9:6e:
76:67:31:d6:7b:1f:00:65:ad:a2:70:e0:bf:5d:3d:
4b:de:f8:07:eb:7a:0d:60:b0:bd:7c:18:37:ae:5d:
18:e0:41:9b:1d:d6:c9:5b:cb:d7:b4:ba:ba:e6:1a:
48:e6:ea:bc:25:9a:a0:3d:40:2b:28:8c:59:70:8f:
c6:be:37:42:f6:15:67:8b:5d:ae:7c:cf:d6:23:c1:
65:b3:91:9a:e7:ba:81:8d:ba:89:11:30:ac:5b:4e:
98:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:58:E2:7E:9B:61:23:4E:8D:0F:2A:EB:3D:8E:F5:40:AC:D8:52:A0
X509v3 Authority Key Identifier:
keyid:2E:0E:33:8D:73:E7:58:46:84:56:63:2F:5B:CA:AE:07:AF:0D:87:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lg4zjXPnWEaEVmMvW8quB68NhzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/811108-e8f7-47af-bc8b-a5b7831a8ce1/1/Lg4zjXPnWEaEVmMvW8quB68NhzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/811108-e8f7-47af-bc8b-a5b7831a8ce1/1/Lg4zjXPnWEaEVmMvW8quB68NhzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:93:f2:e8:87:9d:89:e3:6c:ab:10:4d:e7:4a:8f:ef:e7:de:
b0:9e:c6:88:ab:61:8a:72:af:db:6e:06:43:b3:3a:3e:e8:ec:
06:88:13:07:89:99:41:5d:47:a5:bb:f9:78:f3:fa:6e:68:3b:
c9:bb:86:34:42:a4:a1:76:50:90:91:65:53:18:05:84:f6:ab:
d5:1b:b0:b7:39:48:79:eb:b6:d7:3d:12:dd:19:85:61:21:05:
c0:39:73:89:92:48:84:12:13:fe:79:74:fa:76:3d:99:76:f5:
71:6e:24:08:7a:34:ad:96:c8:ee:27:41:6d:c6:0b:25:4b:68:
07:e8:31:a9:e4:b0:72:ea:ac:2f:68:76:a1:27:62:ef:f5:79:
07:eb:03:c4:77:b1:a7:c5:70:fa:39:26:fb:17:67:3f:07:b7:
9b:cf:1b:a5:b9:fd:aa:34:85:7f:d0:b8:67:11:c6:64:96:99:
f8:22:f1:3d:2f:72:b6:fd:9f:26:68:a9:da:e2:68:e8:a0:a4:
fa:e7:fb:42:c7:13:e4:c8:c6:43:af:76:ce:35:0b:f4:1f:1b:
61:1b:1a:35:6f:8a:63:fb:e9:49:c3:e3:2a:d5:f0:2a:f4:62:
d7:a7:d0:48:a8:50:ec:5a:06:9f:34:bc:38:b9:82:34:90:18:
08:21:5a:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9Fn2ubkkGO3titIcn31FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlMGUzMzhkNzNlNzU4NDY4NDU2NjMyZjViY2FhZTA3YWYw
ZDg3MzEwHhcNMjUxMTA0MTMwMDI3WhcNMjUxMTA1MTMwMDI3WjAzMTEwLwYDVQQD
Eyg0YjU4ZTI3ZTliNjEyMzRlOGQwZjJhZWIzZDhlZjU0MGFjZDg1MmEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKXKOUhZ0dXrJtrCnSmH2x4sYe+/
kWGAv9SSbizgrpwLl9b9BoxA7p7ssngDqMJDdJ3xBnW+rtszRTOV55qT4Gweenha
pAg/XCLHB9BsL/fDMz6PeZvTFPv/NiB7Ub2wmpWFD3TooOdC+WjcZScbByA6FepW
N2KgP9150E8+5x45QKwlj7wSn1vicwaqjiucXYGWfn4u6dx6qKEtdOmiw/d1uW52
ZzHWex8AZa2icOC/XT1L3vgH63oNYLC9fBg3rl0Y4EGbHdbJW8vXtLq65hpI5uq8
JZqgPUArKIxZcI/GvjdC9hVni12ufM/WI8Fls5Ga57qBjbqJETCsW06YmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEtY4n6bYSNOjQ8q6z2O9UCs2FKgMB8GA1UdIwQY
MBaAFC4OM41z51hGhFZjL1vKrgevDYcxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGc0empYUG5XRWFFVm1Ndlc4cXVCNjhOaHpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy84MTExMDgtZThmNy00N2FmLWJjOGIt
YTViNzgzMWE4Y2UxLzEvTGc0empYUG5XRWFFVm1Ndlc4cXVCNjhOaHpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy84MTExMDgtZThmNy00N2FmLWJjOGItYTViNzgzMWE4Y2Ux
LzEvTGc0empYUG5XRWFFVm1Ndlc4cXVCNjhOaHpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbJPy6Ied
ieNsqxBN50qP7+fesJ7GiKthinKv224GQ7M6PujsBogTB4mZQV1Hpbv5ePP6bmg7
ybuGNEKkoXZQkJFlUxgFhPar1RuwtzlIeeu21z0S3RmFYSEFwDlziZJIhBIT/nl0
+nY9mXb1cW4kCHo0rZbI7idBbcYLJUtoB+gxqeSwcuqsL2h2oSdi7/V5B+sDxHex
p8Vw+jkm+xdnPwe3m88bpbn9qjSFf9C4ZxHGZJaZ+CLxPS9ytv2fJmip2uJo6KCk
+uf7QscT5MjGQ692zjUL9B8bYRsaNW+KY/vpScPjKtXwKvRi16fQSKhQ7FoGnzS8
OLmCNJAYCCFarg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:32:12 2025 by rpki-client