Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.mft
File: lgYvXdsY-W14SSs1ONd0XMRxSiY.mft (raw, json)
Hash identifier: 0xJNSHw0E1FRKB4IeTBm02brsin9icocwqt8hxDoc8c=
Subject key identifier: D6:D0:72:EF:A1:61:2A:C7:49:A3:E2:A9:59:68:B9:66:FA:E2:C1:BA
Authority key identifier: 96:06:2F:5D:DB:18:F9:6D:78:49:2B:35:38:D7:74:5C:C4:71:4A:26
Certificate issuer: /CN=96062f5ddb18f96d78492b3538d7745cc4714a26
Certificate serial: 019A4EF41CE7F05EC4EDF7FD402D4479FA27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lgYvXdsY-W14SSs1ONd0XMRxSiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.mft
Manifest number: 09EF
Signing time: Tue 04 Nov 2025 13:00:12 +0000
Manifest this update: Tue 04 Nov 2025 13:00:12 +0000
Manifest next update: Wed 05 Nov 2025 13:00:12 +0000
Files and hashes: 1: lgYvXdsY-W14SSs1ONd0XMRxSiY.crl (hash: bSXt5BYDg06ewvlBmEtrv0+LCURSR1Q9m0xUewNbgcU=)
2: tfoDF7zyFas9gs6WFrVbnqLVtKs.roa (hash: x+5zZ3Gyf9InZ2EuLZGBkdxKiWzA8pOKE0Jk5ZEXWWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lgYvXdsY-W14SSs1ONd0XMRxSiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:1c:e7:f0:5e:c4:ed:f7:fd:40:2d:44:79:fa:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96062f5ddb18f96d78492b3538d7745cc4714a26
Validity
Not Before: Nov 4 13:00:12 2025 GMT
Not After : Nov 5 13:00:12 2025 GMT
Subject: CN=d6d072efa1612ac749a3e2a95968b966fae2c1ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:a4:c5:65:6e:f2:4c:1a:1f:33:cd:e9:5a:91:
fc:fc:5d:39:25:75:72:65:0e:df:ed:10:51:e8:58:
59:70:31:b0:b6:dc:92:e7:98:43:31:25:cd:47:76:
e3:e8:ab:b3:d4:92:a3:63:19:35:2c:73:1b:ad:ab:
6f:ca:f1:9f:59:99:9e:51:3c:b2:40:7f:8d:96:a4:
86:4f:7f:80:a2:6c:a8:83:c0:67:ca:26:16:da:44:
97:c1:71:21:cf:07:0b:4b:88:a3:e1:a9:09:05:4a:
b5:cd:61:ed:eb:b4:31:78:91:db:b4:a0:9f:da:7f:
1e:82:98:1c:82:31:e5:8f:f3:12:56:9b:fd:3b:c6:
4c:3c:78:0c:72:f4:6f:09:4a:ae:66:d6:75:2d:89:
af:87:25:00:6f:1a:63:a5:64:a1:e5:02:b4:27:c9:
e3:ba:95:1a:0e:62:21:e6:7c:ce:9d:be:fd:e6:fa:
52:03:21:2b:6b:0c:33:55:25:01:76:a4:51:53:4e:
3c:0c:63:15:62:79:e5:b2:27:f2:c3:fe:d0:1f:2a:
c2:fd:cd:b5:79:f5:ff:29:cf:14:31:13:8c:32:e2:
2c:72:77:85:de:8e:a6:79:f6:cf:8c:8f:8e:82:9d:
fb:05:f4:48:a6:55:0d:21:79:44:b7:f5:b5:26:66:
69:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:D0:72:EF:A1:61:2A:C7:49:A3:E2:A9:59:68:B9:66:FA:E2:C1:BA
X509v3 Authority Key Identifier:
keyid:96:06:2F:5D:DB:18:F9:6D:78:49:2B:35:38:D7:74:5C:C4:71:4A:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lgYvXdsY-W14SSs1ONd0XMRxSiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
de:7a:63:85:da:52:de:41:3a:d8:c9:49:ee:64:4f:a8:8b:7b:
cf:6f:97:e0:7a:c1:63:d0:89:7a:c9:70:1e:3c:15:ae:e9:88:
a4:98:35:28:95:35:03:ef:96:db:96:8b:d1:92:ca:17:e8:45:
7c:2b:a2:ae:d8:a7:fa:a3:0d:44:d1:a1:95:67:c9:1a:2f:51:
2e:43:d4:ea:99:61:2e:f8:db:ec:86:9b:da:13:2a:80:7a:75:
2c:63:b7:81:c1:c3:37:36:77:62:c2:bd:21:75:3f:c3:8b:97:
40:cd:ae:f6:95:ac:a4:40:40:59:37:bc:40:cd:cb:ce:a1:8e:
2f:ab:ce:04:25:bb:a3:31:c5:2c:51:4f:9b:c3:fe:39:79:a8:
54:68:3c:c3:cb:b2:67:ca:8b:bd:b0:99:fa:b3:6a:e6:66:c2:
b8:81:34:7d:b6:5c:20:dc:25:01:5f:25:de:14:9c:7f:a1:ac:
07:5f:79:0d:6b:be:38:3e:20:d3:8f:ce:07:bf:1f:9d:2b:d9:
ec:6c:77:57:a8:34:a5:57:93:dd:e8:6c:5b:0a:30:7e:94:ca:
87:11:ca:b7:b9:7c:8e:5d:7e:68:a3:57:79:3e:d3:a2:03:5f:
63:c9:64:f1:2a:ea:4e:f1:4a:55:26:d2:ec:d8:04:a4:3f:c8:
11:0a:97:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9Bzn8F7E7ff9QC1EefonMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2MDYyZjVkZGIxOGY5NmQ3ODQ5MmIzNTM4ZDc3NDVjYzQ3
MTRhMjYwHhcNMjUxMTA0MTMwMDEyWhcNMjUxMTA1MTMwMDEyWjAzMTEwLwYDVQQD
EyhkNmQwNzJlZmExNjEyYWM3NDlhM2UyYTk1OTY4Yjk2NmZhZTJjMWJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7KTFZW7yTBofM83pWpH8/F05JXVy
ZQ7f7RBR6FhZcDGwttyS55hDMSXNR3bj6Kuz1JKjYxk1LHMbratvyvGfWZmeUTyy
QH+NlqSGT3+Aomyog8BnyiYW2kSXwXEhzwcLS4ij4akJBUq1zWHt67QxeJHbtKCf
2n8egpgcgjHlj/MSVpv9O8ZMPHgMcvRvCUquZtZ1LYmvhyUAbxpjpWSh5QK0J8nj
upUaDmIh5nzOnb795vpSAyErawwzVSUBdqRRU048DGMVYnnlsifyw/7QHyrC/c21
efX/Kc8UMROMMuIscneF3o6mefbPjI+Ogp37BfRIplUNIXlEt/W1JmZpXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNbQcu+hYSrHSaPiqVlouWb64sG6MB8GA1UdIwQY
MBaAFJYGL13bGPlteEkrNTjXdFzEcUomMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGdZdlhkc1ktVzE0U1NzMU9OZDBYTVJ4U2lZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9lMDU5NzUtZGE4ZS00NjBiLTllYmIt
M2ZjYjVmM2YzYzU5LzEvbGdZdlhkc1ktVzE0U1NzMU9OZDBYTVJ4U2lZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9lMDU5NzUtZGE4ZS00NjBiLTllYmItM2ZjYjVmM2YzYzU5
LzEvbGdZdlhkc1ktVzE0U1NzMU9OZDBYTVJ4U2lZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3npjhdpS
3kE62MlJ7mRPqIt7z2+X4HrBY9CJeslwHjwVrumIpJg1KJU1A++W25aL0ZLKF+hF
fCuirtin+qMNRNGhlWfJGi9RLkPU6plhLvjb7Iab2hMqgHp1LGO3gcHDNzZ3YsK9
IXU/w4uXQM2u9pWspEBAWTe8QM3LzqGOL6vOBCW7ozHFLFFPm8P+OXmoVGg8w8uy
Z8qLvbCZ+rNq5mbCuIE0fbZcINwlAV8l3hScf6GsB195DWu+OD4g04/OB78fnSvZ
7Gx3V6g0pVeT3ehsWwowfpTKhxHKt7l8jl1+aKNXeT7TogNfY8lk8SrqTvFKVSbS
7NgEpD/IEQqXpw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:54:42 2025 by rpki-client