Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/e4741b-f5b5-418f-8e96-154e599fd35f/1/lowsVdyOuZe_WRIdTC_9VESiLi0.mft
File: lowsVdyOuZe_WRIdTC_9VESiLi0.mft (raw, json)
Hash identifier: sMaYkbsHD8UBDZxLn6CoG+3T6ZOHoPYG+TZvzN5nzOc=
Subject key identifier: 5F:40:C7:32:02:6C:18:B7:E1:35:8A:83:57:87:A5:C3:EF:82:D5:0D
Authority key identifier: 96:8C:2C:55:DC:8E:B9:97:BF:59:12:1D:4C:2F:FD:54:44:A2:2E:2D
Certificate issuer: /CN=968c2c55dc8eb997bf59121d4c2ffd5444a22e2d
Certificate serial: 019A4F625402D1598B2086B7CEC4C17C1043
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lowsVdyOuZe_WRIdTC_9VESiLi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/e4741b-f5b5-418f-8e96-154e599fd35f/1/lowsVdyOuZe_WRIdTC_9VESiLi0.mft
Manifest number: 170A
Signing time: Tue 04 Nov 2025 15:00:35 +0000
Manifest this update: Tue 04 Nov 2025 15:00:35 +0000
Manifest next update: Wed 05 Nov 2025 15:00:35 +0000
Files and hashes: 1: lowsVdyOuZe_WRIdTC_9VESiLi0.crl (hash: VMBGfUJRsIPFopJYIXUT6NggnO43FWbWJCPN14UVa+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/e4741b-f5b5-418f-8e96-154e599fd35f/1/lowsVdyOuZe_WRIdTC_9VESiLi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/e4741b-f5b5-418f-8e96-154e599fd35f/1/lowsVdyOuZe_WRIdTC_9VESiLi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lowsVdyOuZe_WRIdTC_9VESiLi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:54:02:d1:59:8b:20:86:b7:ce:c4:c1:7c:10:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=968c2c55dc8eb997bf59121d4c2ffd5444a22e2d
Validity
Not Before: Nov 4 15:00:35 2025 GMT
Not After : Nov 5 15:00:35 2025 GMT
Subject: CN=5f40c732026c18b7e1358a835787a5c3ef82d50d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:57:5d:8e:6e:69:aa:14:83:e8:de:78:20:29:
4a:01:a5:4b:f8:2c:2d:05:55:2d:b1:71:cc:8c:c4:
e5:e3:21:14:af:cf:30:db:07:a5:2f:73:dc:fd:01:
0d:10:e8:7e:27:c5:b6:5a:93:e8:1e:3c:3d:b8:75:
6a:fb:4c:d3:e2:39:a4:1b:65:5d:8f:61:d1:d9:2c:
f6:47:17:f1:cd:64:c3:e2:3c:9c:cf:d7:07:bf:7e:
35:6c:19:01:7a:e9:39:60:ce:b9:43:5b:f4:6f:80:
bd:36:40:83:02:ff:6b:d5:a0:89:1a:a2:45:b6:70:
f9:a3:c3:f1:d1:6f:cc:4a:2f:e3:4c:de:84:90:4a:
d2:e1:a4:7d:20:d0:79:8d:db:9b:8d:70:b1:ac:8f:
60:6f:99:8c:42:3f:da:54:b1:e5:1c:1f:37:47:63:
8d:2b:fb:87:33:eb:57:20:35:6e:a4:25:13:ab:4a:
93:45:0b:b7:17:e5:d2:44:67:71:9a:ee:23:4b:bc:
bc:23:1b:76:b2:fd:e9:c2:5a:20:f3:ba:e2:49:15:
c6:27:c0:45:13:92:a8:5a:1e:aa:6a:1d:fe:60:5d:
fe:85:e4:c5:24:68:03:80:61:73:36:a6:6b:5c:96:
21:4f:92:9e:10:fb:fa:2d:26:7f:a1:79:c0:bf:a3:
39:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:40:C7:32:02:6C:18:B7:E1:35:8A:83:57:87:A5:C3:EF:82:D5:0D
X509v3 Authority Key Identifier:
keyid:96:8C:2C:55:DC:8E:B9:97:BF:59:12:1D:4C:2F:FD:54:44:A2:2E:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lowsVdyOuZe_WRIdTC_9VESiLi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/e4741b-f5b5-418f-8e96-154e599fd35f/1/lowsVdyOuZe_WRIdTC_9VESiLi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/e4741b-f5b5-418f-8e96-154e599fd35f/1/lowsVdyOuZe_WRIdTC_9VESiLi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:06:47:db:7d:a2:07:1c:93:48:c4:d6:9c:a6:c8:a2:41:93:
10:a5:1a:fa:79:8c:ed:df:84:98:a8:54:dc:fd:ac:b8:49:81:
d3:b3:80:28:ff:00:38:f4:c5:0c:29:cc:64:6a:f9:26:f7:63:
8a:ea:d0:cc:33:3c:dc:b4:80:5a:d8:28:27:33:14:cc:14:ce:
46:5d:5b:cd:9b:25:bd:28:54:4d:d5:73:60:38:9e:a1:1d:20:
17:c5:df:a2:65:1b:a9:07:3b:dd:8a:05:d5:22:29:ef:0e:dd:
23:3f:ec:db:f2:41:04:13:9b:d2:52:33:81:c9:47:f4:6d:31:
ac:fb:ef:4c:8a:69:77:e3:74:ab:0c:ec:4a:95:d7:3f:61:b2:
c0:b4:bd:f9:73:0f:f3:36:b9:e3:09:c6:53:71:5d:31:e4:00:
07:83:62:2f:5a:ee:ca:26:88:46:c0:8f:20:57:41:5b:c3:10:
71:38:c1:78:6a:95:37:42:42:25:19:e2:23:1d:bc:c3:b0:e8:
ae:a0:18:57:ba:d9:de:33:3d:39:8a:03:df:16:4c:8b:f7:db:
8e:47:b6:a1:a3:a4:4e:15:0c:32:17:be:78:d2:44:24:6c:0b:
4f:2b:3f:bd:60:b4:ac:cd:66:93:d3:4f:a8:fa:a3:19:0a:7b:
f8:9f:52:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPYlQC0VmLIIa3zsTBfBBDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2OGMyYzU1ZGM4ZWI5OTdiZjU5MTIxZDRjMmZmZDU0NDRh
MjJlMmQwHhcNMjUxMTA0MTUwMDM1WhcNMjUxMTA1MTUwMDM1WjAzMTEwLwYDVQQD
Eyg1ZjQwYzczMjAyNmMxOGI3ZTEzNThhODM1Nzg3YTVjM2VmODJkNTBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1ddjm5pqhSD6N54IClKAaVL+Cwt
BVUtsXHMjMTl4yEUr88w2welL3Pc/QENEOh+J8W2WpPoHjw9uHVq+0zT4jmkG2Vd
j2HR2Sz2RxfxzWTD4jycz9cHv341bBkBeuk5YM65Q1v0b4C9NkCDAv9r1aCJGqJF
tnD5o8Px0W/MSi/jTN6EkErS4aR9INB5jdubjXCxrI9gb5mMQj/aVLHlHB83R2ON
K/uHM+tXIDVupCUTq0qTRQu3F+XSRGdxmu4jS7y8Ixt2sv3pwlog87riSRXGJ8BF
E5KoWh6qah3+YF3+heTFJGgDgGFzNqZrXJYhT5KeEPv6LSZ/oXnAv6M5uwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF9AxzICbBi34TWKg1eHpcPvgtUNMB8GA1UdIwQY
MBaAFJaMLFXcjrmXv1kSHUwv/VREoi4tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbG93c1ZkeU91WmVfV1JJZFRDXzlWRVNpTGkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC9lNDc0MWItZjViNS00MThmLThlOTYt
MTU0ZTU5OWZkMzVmLzEvbG93c1ZkeU91WmVfV1JJZFRDXzlWRVNpTGkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC9lNDc0MWItZjViNS00MThmLThlOTYtMTU0ZTU5OWZkMzVm
LzEvbG93c1ZkeU91WmVfV1JJZFRDXzlWRVNpTGkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjgZH232i
BxyTSMTWnKbIokGTEKUa+nmM7d+EmKhU3P2suEmB07OAKP8AOPTFDCnMZGr5Jvdj
iurQzDM83LSAWtgoJzMUzBTORl1bzZslvShUTdVzYDieoR0gF8XfomUbqQc73YoF
1SIp7w7dIz/s2/JBBBOb0lIzgclH9G0xrPvvTIppd+N0qwzsSpXXP2GywLS9+XMP
8za54wnGU3FdMeQAB4NiL1ruyiaIRsCPIFdBW8MQcTjBeGqVN0JCJRniIx28w7Do
rqAYV7rZ3jM9OYoD3xZMi/fbjke2oaOkThUMMhe+eNJEJGwLTys/vWC0rM1mk9NP
qPqjGQp7+J9SLw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:17:54 2025 by rpki-client