Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.mft
File: lXPBpW7MJKV9K2hOVILat7jZ0ss.mft (raw, json)
Hash identifier: SBSIH1vc8kzOBnb6VNweebOYHFv+kdDsO1KTDMQkXs0=
Subject key identifier: D0:04:4D:4F:53:E3:82:B1:10:5F:5D:AD:81:62:C6:04:05:C7:DC:03
Authority key identifier: 95:73:C1:A5:6E:CC:24:A5:7D:2B:68:4E:54:82:DA:B7:B8:D9:D2:CB
Certificate issuer: /CN=9573c1a56ecc24a57d2b684e5482dab7b8d9d2cb
Certificate serial: 019A4E187589E6FC50F7540B6A40F666CD94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lXPBpW7MJKV9K2hOVILat7jZ0ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.mft
Manifest number: 1555
Signing time: Tue 04 Nov 2025 09:00:16 +0000
Manifest this update: Tue 04 Nov 2025 09:00:16 +0000
Manifest next update: Wed 05 Nov 2025 09:00:16 +0000
Files and hashes: 1: i6ZkgPOU4WKpq6-T7FEmeCgO4_U.roa (hash: 4/Gord29LMo6fRm1iefbRHE4SPhSa5o/5bLxx5zdzBU=)
2: lXPBpW7MJKV9K2hOVILat7jZ0ss.crl (hash: 08csdEwzlkeQktcHDYt+YOIFNg0NkskEt8ufnCPHhYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.mft
rsync://rpki.ripe.net/repository/DEFAULT/lXPBpW7MJKV9K2hOVILat7jZ0ss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:75:89:e6:fc:50:f7:54:0b:6a:40:f6:66:cd:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9573c1a56ecc24a57d2b684e5482dab7b8d9d2cb
Validity
Not Before: Nov 4 09:00:16 2025 GMT
Not After : Nov 5 09:00:16 2025 GMT
Subject: CN=d0044d4f53e382b1105f5dad8162c60405c7dc03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0b:b6:f5:23:d8:49:84:e3:2b:2b:1b:96:d6:
91:d8:c9:e3:42:de:e1:c8:0b:14:cb:9a:fa:00:73:
17:0c:c3:56:21:dd:2f:97:6e:fc:53:1c:ae:ef:7b:
54:55:5f:06:c6:b8:17:4f:be:9a:a3:eb:4e:8d:de:
57:84:06:1d:e7:62:34:fd:cc:bb:7b:d3:d7:64:53:
3f:61:4b:0d:80:45:1e:ff:cb:d1:3b:40:e6:fa:09:
cd:42:83:64:98:6f:00:16:fe:33:20:6c:3a:3c:90:
e9:ba:1b:21:9a:33:de:d7:72:8d:5e:c3:84:10:9b:
5c:3c:32:44:cd:cc:48:ec:b3:d7:07:ee:12:26:f9:
ff:0a:5a:3c:00:4a:83:30:42:cf:eb:5d:fa:f9:bb:
8a:5a:1d:cc:13:af:42:bb:5e:29:bb:07:6f:a5:43:
7b:0e:35:31:e3:2e:63:51:a8:62:6d:29:44:49:08:
1e:2f:a1:de:6f:d5:aa:3c:6d:9e:6c:86:12:ee:84:
05:e6:ae:38:91:ab:d1:d7:7b:8d:dd:05:d6:40:3c:
0a:2f:c9:78:3a:16:ee:c6:71:19:37:22:da:12:9a:
a1:c2:b9:7e:f6:e3:48:42:bf:c3:92:e6:44:f4:f5:
1e:d9:25:77:7d:10:36:d7:64:42:b9:5d:ba:fd:da:
c8:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:04:4D:4F:53:E3:82:B1:10:5F:5D:AD:81:62:C6:04:05:C7:DC:03
X509v3 Authority Key Identifier:
keyid:95:73:C1:A5:6E:CC:24:A5:7D:2B:68:4E:54:82:DA:B7:B8:D9:D2:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lXPBpW7MJKV9K2hOVILat7jZ0ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:23:7c:1a:33:b6:2e:6c:21:83:f0:c9:e0:8b:13:12:ce:9f:
86:e4:b9:62:54:e9:93:4d:2d:4b:4d:fd:c3:88:03:02:ab:1c:
cf:25:7b:fa:5e:94:b3:b8:49:2f:c6:80:88:35:f3:a8:9d:15:
e9:6c:98:61:fb:e4:cc:3c:94:8a:73:5b:2e:0a:8e:cd:9b:21:
98:62:59:1f:b8:74:e3:10:48:8c:f0:41:05:5d:ac:e5:c6:4d:
17:6e:23:77:78:75:88:5d:21:ee:5d:a2:a4:34:be:fb:93:54:
ef:14:4a:47:6a:0a:d0:35:e4:f9:ad:8f:8c:e2:56:e0:f7:84:
6d:dc:a3:97:ea:7f:a7:5f:d9:1a:2a:2b:1b:4a:91:63:2f:ac:
56:60:8f:bc:b1:f4:42:46:17:9d:75:29:6c:a3:3e:bc:c5:f1:
b5:f4:fd:e5:20:a4:dc:04:f1:7b:36:5a:4b:b4:dd:f0:73:83:
f1:00:6a:7f:1a:99:f7:e0:66:dc:a4:21:22:11:3d:a3:f1:a5:
2f:44:72:bc:11:1e:6a:a0:75:11:a9:37:6e:e8:32:b8:c0:6a:
3c:be:1a:bd:5c:0d:af:ce:b7:ac:6c:ad:1b:42:37:bb:35:15:
3e:3a:a4:76:71:84:7e:4e:da:22:0e:c2:60:7c:b3:09:6b:3c:
af:c8:3d:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOGHWJ5vxQ91QLakD2Zs2UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1NzNjMWE1NmVjYzI0YTU3ZDJiNjg0ZTU0ODJkYWI3Yjhk
OWQyY2IwHhcNMjUxMTA0MDkwMDE2WhcNMjUxMTA1MDkwMDE2WjAzMTEwLwYDVQQD
EyhkMDA0NGQ0ZjUzZTM4MmIxMTA1ZjVkYWQ4MTYyYzYwNDA1YzdkYzAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwu29SPYSYTjKysbltaR2MnjQt7h
yAsUy5r6AHMXDMNWId0vl278Uxyu73tUVV8GxrgXT76ao+tOjd5XhAYd52I0/cy7
e9PXZFM/YUsNgEUe/8vRO0Dm+gnNQoNkmG8AFv4zIGw6PJDpuhshmjPe13KNXsOE
EJtcPDJEzcxI7LPXB+4SJvn/Clo8AEqDMELP6136+buKWh3ME69Cu14puwdvpUN7
DjUx4y5jUahibSlESQgeL6Heb9WqPG2ebIYS7oQF5q44kavR13uN3QXWQDwKL8l4
OhbuxnEZNyLaEpqhwrl+9uNIQr/DkuZE9PUe2SV3fRA212RCuV26/drIgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNAETU9T44KxEF9drYFixgQFx9wDMB8GA1UdIwQY
MBaAFJVzwaVuzCSlfStoTlSC2re42dLLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFhQQnBXN01KS1Y5SzJoT1ZJTGF0N2paMHNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC82NDI4NGYtMDM1Yy00NjIwLTk0ZGIt
NGNiOWRkZjA5ZDQ1LzEvbFhQQnBXN01KS1Y5SzJoT1ZJTGF0N2paMHNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC82NDI4NGYtMDM1Yy00NjIwLTk0ZGItNGNiOWRkZjA5ZDQ1
LzEvbFhQQnBXN01KS1Y5SzJoT1ZJTGF0N2paMHNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQCN8GjO2
Lmwhg/DJ4IsTEs6fhuS5YlTpk00tS039w4gDAqsczyV7+l6Us7hJL8aAiDXzqJ0V
6WyYYfvkzDyUinNbLgqOzZshmGJZH7h04xBIjPBBBV2s5cZNF24jd3h1iF0h7l2i
pDS++5NU7xRKR2oK0DXk+a2PjOJW4PeEbdyjl+p/p1/ZGiorG0qRYy+sVmCPvLH0
QkYXnXUpbKM+vMXxtfT95SCk3ATxezZaS7Td8HOD8QBqfxqZ9+Bm3KQhIhE9o/Gl
L0RyvBEeaqB1Eak3bugyuMBqPL4avVwNr863rGytG0I3uzUVPjqkdnGEfk7aIg7C
YHyzCWs8r8g9Mw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:21:59 2025 by rpki-client