Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/930caf-76ee-456c-afe0-a25255329dc0/1/l0UG8_IC2GhJu03Vx1OdIrTfUYI.mft
File: l0UG8_IC2GhJu03Vx1OdIrTfUYI.mft (raw, json)
Hash identifier: IBorOauDZSylpB4l9iXpHWnoKiXiZdDgIHmApEpGs+I=
Subject key identifier: 38:99:76:22:98:4A:8A:A0:15:C0:D6:B2:93:1C:4F:83:F5:5E:02:59
Authority key identifier: 97:45:06:F3:F2:02:D8:68:49:BB:4D:D5:C7:53:9D:22:B4:DF:51:82
Certificate issuer: /CN=974506f3f202d86849bb4dd5c7539d22b4df5182
Certificate serial: 019A4E188BCD6F0082CFD0EB52E72EAA0374
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l0UG8_IC2GhJu03Vx1OdIrTfUYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/930caf-76ee-456c-afe0-a25255329dc0/1/l0UG8_IC2GhJu03Vx1OdIrTfUYI.mft
Manifest number: 099A
Signing time: Tue 04 Nov 2025 09:00:22 +0000
Manifest this update: Tue 04 Nov 2025 09:00:22 +0000
Manifest next update: Wed 05 Nov 2025 09:00:22 +0000
Files and hashes: 1: Dlst4zdGN0XEjaRKAVG2aUW3Zys.roa (hash: JUWMAM2lZQg8cUdPcrThF2mh7HbwsAT1N8ME9RsjW/U=)
2: l0UG8_IC2GhJu03Vx1OdIrTfUYI.crl (hash: Dlzfuy6IRcyPHBa5DzWgp5Qc+m1Ggy5DUcQKO2XoEc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/930caf-76ee-456c-afe0-a25255329dc0/1/l0UG8_IC2GhJu03Vx1OdIrTfUYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/930caf-76ee-456c-afe0-a25255329dc0/1/l0UG8_IC2GhJu03Vx1OdIrTfUYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/l0UG8_IC2GhJu03Vx1OdIrTfUYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:8b:cd:6f:00:82:cf:d0:eb:52:e7:2e:aa:03:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=974506f3f202d86849bb4dd5c7539d22b4df5182
Validity
Not Before: Nov 4 09:00:22 2025 GMT
Not After : Nov 5 09:00:22 2025 GMT
Subject: CN=38997622984a8aa015c0d6b2931c4f83f55e0259
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:df:95:8b:a3:8b:59:24:bc:a0:e4:a0:07:8f:
ff:d4:42:43:4f:10:c1:8a:04:e1:3d:b7:c6:1d:3f:
d8:bc:b1:a7:bc:31:d8:69:f5:5e:3c:ec:c3:07:ea:
7f:3e:aa:5f:ad:66:79:4f:31:ed:8c:4c:d9:92:7c:
b3:0e:d7:74:e1:86:f0:e0:62:df:86:05:22:be:b2:
c0:47:f4:ab:ba:3e:ed:db:1e:8e:0d:e4:e1:2d:cf:
15:05:d1:3b:1f:1d:01:4b:ea:4f:33:23:dd:ef:ba:
1c:b1:b0:32:54:0e:d7:52:65:74:18:7c:55:a1:7f:
25:c8:ae:6d:cf:00:6c:74:7d:27:90:c5:db:df:f6:
b7:96:b7:ff:2e:ab:2e:0c:ed:85:13:ce:03:2d:8b:
eb:61:2e:c4:27:9c:da:b0:d8:ee:28:fe:54:99:fb:
df:fc:08:84:7d:93:e4:be:88:6d:df:2a:35:73:89:
41:d8:af:c1:ae:5b:f4:da:d3:73:25:50:e0:cb:76:
29:e1:0d:b9:f0:fd:bf:55:a3:69:95:33:c6:c4:c6:
54:ed:80:47:6c:8a:f9:04:cb:53:09:7d:06:43:b2:
04:9e:c8:92:27:9a:6c:fc:3d:24:d3:3d:15:2e:ed:
d1:5c:1d:53:b8:b7:c7:f4:5c:1a:65:1c:65:5c:aa:
da:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:99:76:22:98:4A:8A:A0:15:C0:D6:B2:93:1C:4F:83:F5:5E:02:59
X509v3 Authority Key Identifier:
keyid:97:45:06:F3:F2:02:D8:68:49:BB:4D:D5:C7:53:9D:22:B4:DF:51:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0UG8_IC2GhJu03Vx1OdIrTfUYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/930caf-76ee-456c-afe0-a25255329dc0/1/l0UG8_IC2GhJu03Vx1OdIrTfUYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/930caf-76ee-456c-afe0-a25255329dc0/1/l0UG8_IC2GhJu03Vx1OdIrTfUYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:c1:70:7a:df:9c:83:45:0b:10:e7:94:21:39:ae:02:16:45:
b6:6c:50:ce:9c:55:95:9d:c1:ac:c3:bc:ab:55:d6:ec:5a:e1:
bd:d2:92:ef:ca:67:93:6f:b0:27:ae:bc:42:63:3c:b0:a3:a3:
9c:6d:aa:bf:09:35:39:9a:0b:2b:f4:db:5e:22:85:c5:ee:34:
19:63:e6:f4:80:05:31:f2:69:3e:63:29:3c:12:13:32:b1:6f:
e2:2a:3e:6c:f5:a7:dc:fe:22:68:00:62:a3:1a:28:16:14:6d:
d1:65:61:a2:cd:2e:4f:53:20:ac:77:71:31:f2:38:b8:52:da:
d2:40:3c:66:4b:9d:4c:3f:42:44:4e:fc:ab:20:f8:25:7c:72:
9b:ae:03:71:45:c2:06:d7:49:7f:eb:06:8e:75:76:07:ae:e9:
82:8c:84:88:00:d6:1c:15:d7:68:e0:a6:6a:aa:8a:30:c8:07:
97:8e:44:84:e7:cc:6d:37:b4:6f:fd:ce:93:b8:9e:d6:33:c9:
56:99:b0:d3:82:27:01:9b:e9:20:5d:48:dc:89:44:d6:e7:a1:
ad:a1:62:fe:b3:e7:c2:6e:50:2f:33:a4:e9:b6:cc:da:08:d6:
1a:d4:07:4b:46:5d:db:04:7c:40:fc:a0:94:fd:b2:d6:97:16:
b2:3d:bd:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOGIvNbwCCz9DrUucuqgN0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3NDUwNmYzZjIwMmQ4Njg0OWJiNGRkNWM3NTM5ZDIyYjRk
ZjUxODIwHhcNMjUxMTA0MDkwMDIyWhcNMjUxMTA1MDkwMDIyWjAzMTEwLwYDVQQD
EygzODk5NzYyMjk4NGE4YWEwMTVjMGQ2YjI5MzFjNGY4M2Y1NWUwMjU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmN+Vi6OLWSS8oOSgB4//1EJDTxDB
igThPbfGHT/YvLGnvDHYafVePOzDB+p/PqpfrWZ5TzHtjEzZknyzDtd04Ybw4GLf
hgUivrLAR/Sruj7t2x6ODeThLc8VBdE7Hx0BS+pPMyPd77ocsbAyVA7XUmV0GHxV
oX8lyK5tzwBsdH0nkMXb3/a3lrf/LqsuDO2FE84DLYvrYS7EJ5zasNjuKP5Umfvf
/AiEfZPkvoht3yo1c4lB2K/Brlv02tNzJVDgy3Yp4Q258P2/VaNplTPGxMZU7YBH
bIr5BMtTCX0GQ7IEnsiSJ5ps/D0k0z0VLu3RXB1TuLfH9FwaZRxlXKraKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDiZdiKYSoqgFcDWspMcT4P1XgJZMB8GA1UdIwQY
MBaAFJdFBvPyAthoSbtN1cdTnSK031GCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDBVRzhfSUMyR2hKdTAzVngxT2RJclRmVVlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi85MzBjYWYtNzZlZS00NTZjLWFmZTAt
YTI1MjU1MzI5ZGMwLzEvbDBVRzhfSUMyR2hKdTAzVngxT2RJclRmVVlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi85MzBjYWYtNzZlZS00NTZjLWFmZTAtYTI1MjU1MzI5ZGMw
LzEvbDBVRzhfSUMyR2hKdTAzVngxT2RJclRmVVlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhcFwet+c
g0ULEOeUITmuAhZFtmxQzpxVlZ3BrMO8q1XW7FrhvdKS78pnk2+wJ668QmM8sKOj
nG2qvwk1OZoLK/TbXiKFxe40GWPm9IAFMfJpPmMpPBITMrFv4io+bPWn3P4iaABi
oxooFhRt0WVhos0uT1MgrHdxMfI4uFLa0kA8ZkudTD9CRE78qyD4JXxym64DcUXC
BtdJf+sGjnV2B67pgoyEiADWHBXXaOCmaqqKMMgHl45EhOfMbTe0b/3Ok7ie1jPJ
Vpmw04InAZvpIF1I3IlE1uehraFi/rPnwm5QLzOk6bbM2gjWGtQHS0Zd2wR8QPyg
lP2y1pcWsj29pg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:05 2025 by rpki-client