Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/d6a552-e035-4721-9ecf-93fe5bf6daff/1/L5WgWJsoRuv8c2bAbGRLRqLY0ys.mft
File: L5WgWJsoRuv8c2bAbGRLRqLY0ys.mft (raw, json)
Hash identifier: bYIQ8MNaJhtv3gxByOJpSQRNEO/NE1VJkCBt6WVmqrU=
Subject key identifier: D6:17:10:D4:39:12:36:2B:8A:E5:A4:BD:CF:17:87:C7:65:BC:02:33
Authority key identifier: 2F:95:A0:58:9B:28:46:EB:FC:73:66:C0:6C:64:4B:46:A2:D8:D3:2B
Certificate issuer: /CN=2f95a0589b2846ebfc7366c06c644b46a2d8d32b
Certificate serial: 019A4EF51852DCEC01642B5F3EC36D78C75E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5WgWJsoRuv8c2bAbGRLRqLY0ys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/d6a552-e035-4721-9ecf-93fe5bf6daff/1/L5WgWJsoRuv8c2bAbGRLRqLY0ys.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 13:01:16 +0000
Manifest this update: Tue 04 Nov 2025 13:01:16 +0000
Manifest next update: Wed 05 Nov 2025 13:01:16 +0000
Files and hashes: 1: L5WgWJsoRuv8c2bAbGRLRqLY0ys.crl (hash: kBpC7jAqqnJ/CFzI0v6YwcLlKYRLdjTdgesNcD4FJKI=)
2: fVFqHVP_QiliJMl-kIcrOxmuCro.roa (hash: GkKxdagAYy+CINxI1Dp6ck9rxu8bkF9hmUyqgByM5jo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/d6a552-e035-4721-9ecf-93fe5bf6daff/1/L5WgWJsoRuv8c2bAbGRLRqLY0ys.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/d6a552-e035-4721-9ecf-93fe5bf6daff/1/L5WgWJsoRuv8c2bAbGRLRqLY0ys.mft
rsync://rpki.ripe.net/repository/DEFAULT/L5WgWJsoRuv8c2bAbGRLRqLY0ys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:18:52:dc:ec:01:64:2b:5f:3e:c3:6d:78:c7:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f95a0589b2846ebfc7366c06c644b46a2d8d32b
Validity
Not Before: Nov 4 13:01:16 2025 GMT
Not After : Nov 5 13:01:16 2025 GMT
Subject: CN=d61710d43912362b8ae5a4bdcf1787c765bc0233
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:8b:36:d6:cb:ac:6e:44:e3:84:fc:1d:cb:fb:
0f:17:9b:d5:9f:9f:14:62:67:3d:07:17:12:1d:98:
60:4d:23:e1:2f:03:80:5a:a3:d7:7b:1f:e2:5b:37:
ff:48:dc:91:95:08:26:96:de:03:aa:c1:ab:4f:3f:
96:b0:e7:3f:d1:e8:45:7b:f3:05:0a:ac:3b:ee:b6:
f9:05:3b:ad:02:3a:f8:b3:9a:f8:3e:92:b7:bc:fc:
e7:a7:2d:dc:5a:08:d0:cd:80:ac:5f:97:76:ff:ae:
43:93:19:09:02:03:46:42:e3:dc:42:b7:4f:0b:4a:
d5:0b:56:28:a3:af:38:52:bf:70:c9:f2:40:e0:e9:
d3:20:d3:aa:7f:8b:0f:fb:74:59:ed:9e:d2:11:2d:
5b:9d:e1:7c:3b:bc:97:b1:eb:ed:be:ea:93:a5:0d:
e8:ec:f1:75:7b:8d:33:d5:db:b8:69:d4:84:dd:35:
bf:47:14:ef:de:41:8e:72:78:1e:b2:20:cc:15:bb:
e7:ed:f3:09:14:cf:1a:0a:8a:0f:ed:c4:47:ab:c8:
b3:3b:20:a1:4c:d8:7a:c2:66:25:60:d3:84:67:b7:
c6:58:da:5f:91:35:46:18:ca:0c:8c:ad:63:f9:c4:
41:e9:a0:ee:e0:b3:64:3e:f4:21:3a:cd:a8:ba:1c:
26:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:17:10:D4:39:12:36:2B:8A:E5:A4:BD:CF:17:87:C7:65:BC:02:33
X509v3 Authority Key Identifier:
keyid:2F:95:A0:58:9B:28:46:EB:FC:73:66:C0:6C:64:4B:46:A2:D8:D3:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5WgWJsoRuv8c2bAbGRLRqLY0ys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/d6a552-e035-4721-9ecf-93fe5bf6daff/1/L5WgWJsoRuv8c2bAbGRLRqLY0ys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/d6a552-e035-4721-9ecf-93fe5bf6daff/1/L5WgWJsoRuv8c2bAbGRLRqLY0ys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:5f:6e:83:a5:8d:12:bd:68:9a:6f:15:20:9e:66:12:b5:b8:
ef:82:56:bf:d7:ec:4c:b3:40:ca:ed:61:05:61:68:98:fd:37:
da:9b:da:ed:c8:7f:ac:2f:7f:2e:a2:52:40:74:b0:4a:2b:5f:
c6:41:c8:cb:d8:a0:df:4d:07:ef:05:12:06:41:83:4b:44:86:
ae:9e:d7:44:de:da:4f:27:c5:e0:a7:3c:bd:b3:c8:1a:50:dc:
67:d2:5d:a1:7e:90:0c:ea:4d:af:ef:c3:72:62:a2:a0:b3:09:
04:f6:8c:80:0e:b9:2c:30:be:07:ef:8c:bd:9c:ed:ef:3d:7d:
77:0c:02:51:85:81:21:e2:32:18:d4:b4:4b:08:bf:2e:67:b1:
e6:08:6c:a5:17:46:34:34:3f:e9:76:c6:e5:47:31:a9:f7:9b:
f9:5f:f6:c9:33:fd:27:f2:3d:a5:72:ab:ce:45:e7:b1:5f:12:
23:0f:f9:d5:7e:5a:7c:e6:f9:c3:bb:b3:58:98:40:65:27:dd:
50:56:53:a8:da:28:be:3d:7f:09:29:76:c5:53:f4:d2:c7:4b:
f9:ec:51:2a:31:86:75:0d:16:fb:cc:a9:96:c2:5a:94:ca:0c:
34:a2:5c:50:6c:58:0a:eb:ab:67:a4:97:10:57:f6:37:8b:ac:
2f:92:83:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9RhS3OwBZCtfPsNteMdeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmOTVhMDU4OWIyODQ2ZWJmYzczNjZjMDZjNjQ0YjQ2YTJk
OGQzMmIwHhcNMjUxMTA0MTMwMTE2WhcNMjUxMTA1MTMwMTE2WjAzMTEwLwYDVQQD
EyhkNjE3MTBkNDM5MTIzNjJiOGFlNWE0YmRjZjE3ODdjNzY1YmMwMjMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA04s21susbkTjhPwdy/sPF5vVn58U
Ymc9BxcSHZhgTSPhLwOAWqPXex/iWzf/SNyRlQgmlt4DqsGrTz+WsOc/0ehFe/MF
Cqw77rb5BTutAjr4s5r4PpK3vPznpy3cWgjQzYCsX5d2/65DkxkJAgNGQuPcQrdP
C0rVC1Yoo684Ur9wyfJA4OnTINOqf4sP+3RZ7Z7SES1bneF8O7yXsevtvuqTpQ3o
7PF1e40z1du4adSE3TW/RxTv3kGOcngesiDMFbvn7fMJFM8aCooP7cRHq8izOyCh
TNh6wmYlYNOEZ7fGWNpfkTVGGMoMjK1j+cRB6aDu4LNkPvQhOs2ouhwmmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNYXENQ5EjYriuWkvc8Xh8dlvAIzMB8GA1UdIwQY
MBaAFC+VoFibKEbr/HNmwGxkS0ai2NMrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDVXZ1dKc29SdXY4YzJiQWJHUkxScUxZMHlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9kNmE1NTItZTAzNS00NzIxLTllY2Yt
OTNmZTViZjZkYWZmLzEvTDVXZ1dKc29SdXY4YzJiQWJHUkxScUxZMHlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni9kNmE1NTItZTAzNS00NzIxLTllY2YtOTNmZTViZjZkYWZm
LzEvTDVXZ1dKc29SdXY4YzJiQWJHUkxScUxZMHlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYV9ug6WN
Er1omm8VIJ5mErW474JWv9fsTLNAyu1hBWFomP032pva7ch/rC9/LqJSQHSwSitf
xkHIy9ig300H7wUSBkGDS0SGrp7XRN7aTyfF4Kc8vbPIGlDcZ9JdoX6QDOpNr+/D
cmKioLMJBPaMgA65LDC+B++MvZzt7z19dwwCUYWBIeIyGNS0Swi/Lmex5ghspRdG
NDQ/6XbG5Ucxqfeb+V/2yTP9J/I9pXKrzkXnsV8SIw/51X5afOb5w7uzWJhAZSfd
UFZTqNoovj1/CSl2xVP00sdL+exRKjGGdQ0W+8yplsJalMoMNKJcUGxYCuurZ6SX
EFf2N4usL5KDlg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:59:41 2025 by rpki-client