Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/9911ac-4cf2-4ee5-8d63-049bdc6b8ef3/1/l0Kd6LzDvkdKu9or4qidDzIIw4U.mft
File: l0Kd6LzDvkdKu9or4qidDzIIw4U.mft (raw, json)
Hash identifier: Z4G/k+XOxGkgRQZSj2mrzoJ/osuROUPY3KRgwKTEagA=
Subject key identifier: F1:9B:43:90:9C:FD:D3:99:85:F5:AC:C2:C8:4D:8F:45:90:EA:E9:08
Authority key identifier: 97:42:9D:E8:BC:C3:BE:47:4A:BB:DA:2B:E2:A8:9D:0F:32:08:C3:85
Certificate issuer: /CN=97429de8bcc3be474abbda2be2a89d0f3208c385
Certificate serial: 019A4F62C6A038DE5CC882B7B2C986411891
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l0Kd6LzDvkdKu9or4qidDzIIw4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/9911ac-4cf2-4ee5-8d63-049bdc6b8ef3/1/l0Kd6LzDvkdKu9or4qidDzIIw4U.mft
Manifest number: 1025
Signing time: Tue 04 Nov 2025 15:01:04 +0000
Manifest this update: Tue 04 Nov 2025 15:01:04 +0000
Manifest next update: Wed 05 Nov 2025 15:01:04 +0000
Files and hashes: 1: HTyoOey4HT5zP_JyxfBfKahHFmY.roa (hash: QyYp6qHPSKM0SQk6N5S4fNiWDVTxBA9QRWpKOqYhb4w=)
2: l0Kd6LzDvkdKu9or4qidDzIIw4U.crl (hash: HkiE+ikimBTAmjG+Lb+8uyJyNw1Zt354tctsRR1hAoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/9911ac-4cf2-4ee5-8d63-049bdc6b8ef3/1/l0Kd6LzDvkdKu9or4qidDzIIw4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/9911ac-4cf2-4ee5-8d63-049bdc6b8ef3/1/l0Kd6LzDvkdKu9or4qidDzIIw4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/l0Kd6LzDvkdKu9or4qidDzIIw4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:c6:a0:38:de:5c:c8:82:b7:b2:c9:86:41:18:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97429de8bcc3be474abbda2be2a89d0f3208c385
Validity
Not Before: Nov 4 15:01:04 2025 GMT
Not After : Nov 5 15:01:04 2025 GMT
Subject: CN=f19b43909cfdd39985f5acc2c84d8f4590eae908
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:93:f3:a0:65:51:d6:7c:b9:b7:ad:5f:e0:54:
49:3e:e6:b6:53:fe:5c:51:03:93:1f:4e:d4:88:0a:
e8:60:f7:87:38:de:47:4f:7f:cd:0e:3f:cf:cd:b3:
3b:1d:d3:c7:d0:18:58:60:63:20:cd:84:f9:62:d0:
92:d8:41:6a:a2:74:19:b9:97:c6:02:b8:a3:7a:5f:
08:56:12:9b:34:61:06:89:7e:6f:a3:68:d2:86:5c:
f5:ab:e1:ff:bf:84:95:ff:96:3d:cd:7d:49:a8:1b:
17:10:1b:b0:fe:04:da:2a:46:68:77:7a:54:2f:56:
e2:7a:9f:52:41:aa:fb:41:96:2f:9d:70:00:ad:ce:
b4:33:c6:02:b8:37:8f:11:58:2a:7e:58:80:4d:32:
09:eb:b6:60:c0:18:6c:3e:a0:14:7d:5c:31:ed:a4:
db:50:56:a6:7f:8a:4c:2e:e1:18:01:2c:a2:4e:0a:
df:a1:fa:b6:7c:2f:82:13:85:17:4b:f1:a9:41:22:
4a:79:ad:6d:96:91:50:1f:bf:31:c6:92:cf:bd:9b:
16:c6:ed:05:25:0c:92:d4:f5:25:ec:64:3a:c6:1f:
a8:ee:bd:25:7d:dc:c3:28:50:56:28:a0:c1:62:b6:
f2:05:c7:d7:16:52:9b:96:1c:be:32:c0:b9:c5:da:
7a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:9B:43:90:9C:FD:D3:99:85:F5:AC:C2:C8:4D:8F:45:90:EA:E9:08
X509v3 Authority Key Identifier:
keyid:97:42:9D:E8:BC:C3:BE:47:4A:BB:DA:2B:E2:A8:9D:0F:32:08:C3:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0Kd6LzDvkdKu9or4qidDzIIw4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/9911ac-4cf2-4ee5-8d63-049bdc6b8ef3/1/l0Kd6LzDvkdKu9or4qidDzIIw4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/9911ac-4cf2-4ee5-8d63-049bdc6b8ef3/1/l0Kd6LzDvkdKu9or4qidDzIIw4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:81:36:3d:fc:ba:4a:e8:3e:05:d5:1f:54:00:26:90:c9:64:
4a:22:35:a3:80:d5:a4:c1:80:c4:2a:30:df:16:e4:4a:f9:73:
f0:d5:93:71:f5:d2:c7:09:49:38:81:14:63:a7:c5:83:4f:5e:
e2:45:87:06:cc:69:40:1e:6b:2a:a5:d3:cd:ff:5c:f0:1b:72:
05:a1:62:34:87:43:31:b9:37:93:f5:70:38:1f:e2:69:cb:50:
cd:03:f1:26:c3:76:55:57:87:17:41:af:0a:57:c2:aa:6c:7f:
77:36:46:1b:0d:e4:b4:26:b1:af:9a:1c:3c:e6:56:44:9a:a8:
95:ff:e8:80:57:43:8a:14:c2:dd:ee:96:a2:a8:c5:f8:64:b3:
de:92:02:69:e2:50:9b:66:17:ab:6c:05:6b:ca:6b:30:8c:8b:
ef:3e:05:b4:67:25:ad:3f:fc:e3:e7:0f:a1:5a:38:92:bb:88:
9d:14:20:e7:8e:37:25:44:89:eb:30:6a:40:f2:50:b4:60:11:
18:a2:c4:f2:18:e3:36:2d:fc:51:80:3f:d2:7c:d3:42:8e:7a:
67:2b:3d:15:c4:b2:e9:b7:e5:55:c2:d9:a7:86:65:f4:3d:2f:
30:1e:37:6b:6e:65:73:d1:98:b6:e8:49:17:03:55:96:24:39:
76:af:fa:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPYsagON5cyIK3ssmGQRiRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3NDI5ZGU4YmNjM2JlNDc0YWJiZGEyYmUyYTg5ZDBmMzIw
OGMzODUwHhcNMjUxMTA0MTUwMTA0WhcNMjUxMTA1MTUwMTA0WjAzMTEwLwYDVQQD
EyhmMTliNDM5MDljZmRkMzk5ODVmNWFjYzJjODRkOGY0NTkwZWFlOTA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5PzoGVR1ny5t61f4FRJPua2U/5c
UQOTH07UiAroYPeHON5HT3/NDj/PzbM7HdPH0BhYYGMgzYT5YtCS2EFqonQZuZfG
Arijel8IVhKbNGEGiX5vo2jShlz1q+H/v4SV/5Y9zX1JqBsXEBuw/gTaKkZod3pU
L1biep9SQar7QZYvnXAArc60M8YCuDePEVgqfliATTIJ67ZgwBhsPqAUfVwx7aTb
UFamf4pMLuEYASyiTgrfofq2fC+CE4UXS/GpQSJKea1tlpFQH78xxpLPvZsWxu0F
JQyS1PUl7GQ6xh+o7r0lfdzDKFBWKKDBYrbyBcfXFlKblhy+MsC5xdp69QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPGbQ5Cc/dOZhfWswshNj0WQ6ukIMB8GA1UdIwQY
MBaAFJdCnei8w75HSrvaK+KonQ8yCMOFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDBLZDZMekR2a2RLdTlvcjRxaWREeklJdzRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC85OTExYWMtNGNmMi00ZWU1LThkNjMt
MDQ5YmRjNmI4ZWYzLzEvbDBLZDZMekR2a2RLdTlvcjRxaWREeklJdzRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC85OTExYWMtNGNmMi00ZWU1LThkNjMtMDQ5YmRjNmI4ZWYz
LzEvbDBLZDZMekR2a2RLdTlvcjRxaWREeklJdzRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr4E2Pfy6
Sug+BdUfVAAmkMlkSiI1o4DVpMGAxCow3xbkSvlz8NWTcfXSxwlJOIEUY6fFg09e
4kWHBsxpQB5rKqXTzf9c8BtyBaFiNIdDMbk3k/VwOB/iactQzQPxJsN2VVeHF0Gv
ClfCqmx/dzZGGw3ktCaxr5ocPOZWRJqolf/ogFdDihTC3e6WoqjF+GSz3pICaeJQ
m2YXq2wFa8prMIyL7z4FtGclrT/84+cPoVo4kruInRQg5443JUSJ6zBqQPJQtGAR
GKLE8hjjNi38UYA/0nzTQo56Zys9FcSy6bflVcLZp4Zl9D0vMB43a25lc9GYtuhJ
FwNVliQ5dq/6Qg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:43:09 2025 by rpki-client