Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.mft
File: lplI0P5Nf5nVS6i__NmaGmCK4NM.mft (raw, json)
Hash identifier: dp70Jgvmb2SLtSnXnklE3rXQAaPQKKm0M6C3UOv/4vs=
Subject key identifier: DC:FA:88:EC:EE:6C:16:A9:83:26:82:20:AE:C2:73:D4:D9:32:DC:4D
Authority key identifier: 96:99:48:D0:FE:4D:7F:99:D5:4B:A8:BF:FC:D9:9A:1A:60:8A:E0:D3
Certificate issuer: /CN=969948d0fe4d7f99d54ba8bffcd99a1a608ae0d3
Certificate serial: 019A4E187EB671D8741A2FDC3F7DA771D77D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lplI0P5Nf5nVS6i__NmaGmCK4NM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 09:00:19 +0000
Manifest this update: Tue 04 Nov 2025 09:00:19 +0000
Manifest next update: Wed 05 Nov 2025 09:00:19 +0000
Files and hashes: 1: 0lLIFsMnJfjbMITyMtcjv5rwpaE.roa (hash: CF29X9QV8+/p4F0B+TvxRr6hYoLcahP5zhILwH1ecU8=)
2: B4HZRq24-rI189mz0dH0U8s_ltQ.roa (hash: A6pfIWVk2BahEy10SSDKRy1UWbMHkr6lU9e1Reqwdy0=)
3: FIOPjgBkgq7xEXRKyPRQ1Oqa0NU.roa (hash: UWt78DgDOwppGpFR4S+tA4PHXjI0OjWHkXa+j+bLBU4=)
4: HK20-4xA8hXC3VUWTBAr-y0NF0k.roa (hash: tOa/5dnYfrENcgkdAf/ulPnezPgqB/HRljD/FB3y1H8=)
5: QmV9qZxHtRiAwIkPUDogIluAj8k.roa (hash: wEM8dRvMzPCx7UP9+Bvx7YlKlSBJp54YWMFcK+7IhRA=)
6: R_qbdcP3J6fNY4wBg9OY5tABKio.roa (hash: qGQBfwpujLWSfdD+BfOupXx9Us5BBEVEXuBPudsfsCw=)
7: lplI0P5Nf5nVS6i__NmaGmCK4NM.crl (hash: cq/HOU5lt8OfmhqIGHsPc/YQhXIraFlqCko5rDoS2SY=)
8: sZG-sGNF2g_bzP7UHFWS46eQwHU.roa (hash: ZW7Hklpbp5glvilF6Rijbfiz4n0SIQTxH3Q9fTmMQy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lplI0P5Nf5nVS6i__NmaGmCK4NM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:7e:b6:71:d8:74:1a:2f:dc:3f:7d:a7:71:d7:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=969948d0fe4d7f99d54ba8bffcd99a1a608ae0d3
Validity
Not Before: Nov 4 09:00:19 2025 GMT
Not After : Nov 5 09:00:19 2025 GMT
Subject: CN=dcfa88ecee6c16a983268220aec273d4d932dc4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:57:75:58:69:24:30:ea:ae:59:9d:31:e1:8b:
4e:de:d3:90:85:19:9c:39:14:ae:ee:d7:ee:86:0b:
cb:01:95:2e:ae:2e:e8:98:41:5f:f5:e5:36:cd:d9:
23:2e:39:c2:97:d3:4c:1b:e1:6c:02:9f:cb:55:bb:
9e:26:0c:71:97:9c:c0:1f:73:fa:b2:2f:21:a1:10:
a9:5f:5c:68:61:76:32:8f:d0:7b:cb:13:c7:ba:cf:
12:19:9a:32:60:c0:61:c9:b6:30:4f:10:e3:81:fd:
59:85:87:31:6e:a2:50:39:77:23:db:a5:8a:44:e8:
28:ab:20:84:cb:38:e4:30:2e:63:a4:a5:96:28:a6:
24:f1:37:a8:42:2d:f5:e1:0f:30:82:33:5b:95:d2:
95:89:ee:6d:48:d8:c3:e3:38:81:09:66:09:71:d5:
c9:ca:e2:81:eb:a4:05:97:a2:f7:a4:31:87:ca:40:
96:8c:42:4b:4e:9e:92:b2:6e:79:a3:1b:54:91:34:
54:bd:a2:f2:ca:42:cd:bc:d0:17:be:19:a8:fb:eb:
4b:9e:e8:73:e6:41:e8:0b:19:09:3e:9d:b6:3e:fe:
56:05:5b:46:c9:f9:ed:ef:ef:51:47:a7:98:5d:fa:
b6:47:54:0a:a6:42:e5:eb:b7:04:f6:22:fd:c2:3d:
18:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:FA:88:EC:EE:6C:16:A9:83:26:82:20:AE:C2:73:D4:D9:32:DC:4D
X509v3 Authority Key Identifier:
keyid:96:99:48:D0:FE:4D:7F:99:D5:4B:A8:BF:FC:D9:9A:1A:60:8A:E0:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lplI0P5Nf5nVS6i__NmaGmCK4NM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:60:d9:56:e3:90:ff:c2:5d:f6:d4:a6:ed:ed:e2:a5:2a:2e:
4d:81:f3:89:f7:fc:bb:ac:5c:3e:b7:91:a3:e9:e8:d4:ad:7c:
aa:fd:a8:c1:9d:17:d4:ff:08:94:c5:82:60:e7:5d:e1:19:5f:
58:33:3e:ed:53:8a:7b:6a:5d:5c:bb:a1:40:e7:02:44:e0:e2:
b8:ae:07:8d:08:d0:ab:1b:0d:22:f3:28:1b:cb:45:9b:3c:7d:
bf:42:43:ef:91:43:dd:28:5f:5b:81:85:8c:18:63:b9:a4:35:
6a:bd:0a:61:39:25:47:86:72:ed:c7:4b:42:2f:2a:a2:79:a3:
6b:db:b3:69:0a:2d:9b:d8:4e:9d:12:fb:31:11:05:1c:0b:47:
2f:a8:ea:a9:13:a2:4e:99:02:69:eb:21:57:c7:13:4a:ef:11:
60:cc:99:7a:33:cc:80:f9:62:a7:d3:b1:cc:7b:45:d7:d8:46:
04:72:f1:79:e2:96:64:9e:4e:56:30:85:e9:41:59:ae:a1:20:
f1:0d:06:06:fb:1d:b9:1e:fd:a8:17:75:de:f3:5f:7b:db:a3:
36:d4:aa:37:be:3b:bd:df:6c:ba:b8:35:3b:c7:76:07:95:5b:
4f:13:02:f1:c0:b4:b8:0f:0b:c2:4a:d2:77:0d:64:28:b1:30:
2c:7f:bf:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOGH62cdh0Gi/cP32ncdd9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2OTk0OGQwZmU0ZDdmOTlkNTRiYThiZmZjZDk5YTFhNjA4
YWUwZDMwHhcNMjUxMTA0MDkwMDE5WhcNMjUxMTA1MDkwMDE5WjAzMTEwLwYDVQQD
EyhkY2ZhODhlY2VlNmMxNmE5ODMyNjgyMjBhZWMyNzNkNGQ5MzJkYzRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVd1WGkkMOquWZ0x4YtO3tOQhRmc
ORSu7tfuhgvLAZUuri7omEFf9eU2zdkjLjnCl9NMG+FsAp/LVbueJgxxl5zAH3P6
si8hoRCpX1xoYXYyj9B7yxPHus8SGZoyYMBhybYwTxDjgf1ZhYcxbqJQOXcj26WK
ROgoqyCEyzjkMC5jpKWWKKYk8TeoQi314Q8wgjNbldKVie5tSNjD4ziBCWYJcdXJ
yuKB66QFl6L3pDGHykCWjEJLTp6Ssm55oxtUkTRUvaLyykLNvNAXvhmo++tLnuhz
5kHoCxkJPp22Pv5WBVtGyfnt7+9RR6eYXfq2R1QKpkLl67cE9iL9wj0YkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNz6iOzubBapgyaCIK7Cc9TZMtxNMB8GA1UdIwQY
MBaAFJaZSND+TX+Z1Uuov/zZmhpgiuDTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHBsSTBQNU5mNW5WUzZpX19ObWFHbUNLNE5NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi8xYTJmYTItZWViMy00MzEyLTkxMzAt
NTNjYzVkYWY1MmNmLzEvbHBsSTBQNU5mNW5WUzZpX19ObWFHbUNLNE5NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi8xYTJmYTItZWViMy00MzEyLTkxMzAtNTNjYzVkYWY1MmNm
LzEvbHBsSTBQNU5mNW5WUzZpX19ObWFHbUNLNE5NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKGDZVuOQ
/8Jd9tSm7e3ipSouTYHziff8u6xcPreRo+no1K18qv2owZ0X1P8IlMWCYOdd4Rlf
WDM+7VOKe2pdXLuhQOcCRODiuK4HjQjQqxsNIvMoG8tFmzx9v0JD75FD3ShfW4GF
jBhjuaQ1ar0KYTklR4Zy7cdLQi8qonmja9uzaQotm9hOnRL7MREFHAtHL6jqqROi
TpkCaeshV8cTSu8RYMyZejPMgPlip9OxzHtF19hGBHLxeeKWZJ5OVjCF6UFZrqEg
8Q0GBvsduR79qBd13vNfe9ujNtSqN747vd9surg1O8d2B5VbTxMC8cC0uA8LwkrS
dw1kKLEwLH+/mQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:19:06 2025 by rpki-client