Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.mft
File: LWmLr5_z7uvmYoSIn79onU5oPIE.mft (raw, json)
Hash identifier: agaKtcdIuTLcTEHC4f/LENRTvoc4WIjXcm8S/6yOcGc=
Subject key identifier: 83:E0:F0:45:E2:74:6E:22:24:52:7D:53:83:75:66:B8:84:6B:30:7E
Authority key identifier: 2D:69:8B:AF:9F:F3:EE:EB:E6:62:84:88:9F:BF:68:9D:4E:68:3C:81
Certificate issuer: /CN=2d698baf9ff3eeebe66284889fbf689d4e683c81
Certificate serial: 019A4E863FE4E04460D017078CFC4AACD9EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LWmLr5_z7uvmYoSIn79onU5oPIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.mft
Manifest number: 0F96
Signing time: Tue 04 Nov 2025 11:00:12 +0000
Manifest this update: Tue 04 Nov 2025 11:00:12 +0000
Manifest next update: Wed 05 Nov 2025 11:00:12 +0000
Files and hashes: 1: LWmLr5_z7uvmYoSIn79onU5oPIE.crl (hash: /R0gmyc7nq5vTz3GZKcTiIIZIH7FogoFdYL5yHPkzyk=)
2: k4aTxBF_DmBio83fOwNHIHkeyiA.roa (hash: IVVbmDsKyhVLGaHbxiyIMsj1K/TNy+QiBpkicXXI0O8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LWmLr5_z7uvmYoSIn79onU5oPIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 11:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:3f:e4:e0:44:60:d0:17:07:8c:fc:4a:ac:d9:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d698baf9ff3eeebe66284889fbf689d4e683c81
Validity
Not Before: Nov 4 11:00:12 2025 GMT
Not After : Nov 5 11:00:12 2025 GMT
Subject: CN=83e0f045e2746e2224527d53837566b8846b307e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d8:03:f7:f2:91:df:26:4a:54:ea:01:7f:a0:
47:f8:38:42:61:03:95:f8:67:a7:ea:55:76:98:10:
93:68:ae:76:51:b7:cd:83:09:02:9d:c2:6a:a9:50:
a2:76:a5:ee:3b:2b:74:3d:75:b6:a9:d4:5f:a7:8e:
21:41:36:58:ed:dc:9d:68:2b:eb:3d:9c:20:be:45:
2f:b1:91:da:a7:87:d6:81:4b:85:74:2e:10:6e:7a:
ec:d9:2d:da:9a:9e:c1:2d:86:e1:22:1f:13:cf:6a:
f8:8f:6b:0e:0a:34:40:78:ac:01:90:41:a9:7a:c8:
3f:a9:3b:5a:53:98:2b:71:fd:3f:3a:3a:9e:9c:02:
58:7e:60:ff:be:52:ee:35:fd:dc:cc:b9:db:24:ac:
c0:fe:ff:bd:65:83:f2:e2:70:f6:7d:4f:89:1a:c4:
2c:b6:05:2e:56:06:51:3c:3a:e2:3b:26:1c:93:cc:
a9:b4:f8:06:06:67:3b:a1:3e:00:c4:fc:87:68:69:
fc:7d:ed:9e:9b:ea:56:46:07:a8:1e:45:dd:52:0b:
59:2d:16:b9:99:f6:41:03:7e:92:3f:33:2c:1a:f4:
57:1c:1e:c2:18:12:a2:41:9d:22:20:60:ba:d8:49:
1d:33:11:89:07:f4:73:74:b4:76:72:53:53:71:07:
d4:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:E0:F0:45:E2:74:6E:22:24:52:7D:53:83:75:66:B8:84:6B:30:7E
X509v3 Authority Key Identifier:
keyid:2D:69:8B:AF:9F:F3:EE:EB:E6:62:84:88:9F:BF:68:9D:4E:68:3C:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LWmLr5_z7uvmYoSIn79onU5oPIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:d5:5b:e2:99:36:62:3a:92:6e:0c:9b:5c:d7:a1:37:e9:9b:
e7:e2:73:b1:c6:49:da:2e:b0:2c:ee:b5:b3:91:84:01:fc:1e:
70:6d:e4:ee:0b:28:b4:d9:b6:35:ac:a8:fe:e1:5e:99:15:eb:
4a:c5:90:03:6b:2c:c4:7d:1f:f3:5e:82:a3:a5:75:5b:85:36:
ad:d9:ec:f0:50:ce:c2:f3:3b:64:3b:8c:51:19:34:92:af:3e:
e4:ec:97:9b:df:10:ad:3a:78:09:36:fd:fd:1d:82:ee:20:c2:
a2:f4:35:14:c2:36:1e:42:91:64:87:4e:4c:a4:1a:b2:17:bb:
8c:33:b3:7c:03:4f:6b:4e:20:19:1b:7b:3b:14:e4:65:7e:69:
85:b8:2c:6d:09:92:1a:6e:35:3b:12:cf:3a:ee:ab:69:2d:e9:
9d:d0:7b:73:57:97:4c:43:53:f2:74:b2:ec:d2:b4:5a:e8:6e:
6c:4d:8c:a7:22:21:23:73:af:70:4a:35:60:ad:c8:b3:3e:e0:
3e:b1:03:89:fa:d1:3c:37:a8:db:a5:21:92:35:83:ba:82:da:
49:cb:b0:d6:fd:a5:9b:3e:c6:14:a9:23:dd:6c:9b:12:ee:0a:
68:df:81:3c:75:b9:eb:87:e8:20:9f:cd:2e:e6:cd:9e:f5:e1:
44:57:98:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOhj/k4ERg0BcHjPxKrNnqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkNjk4YmFmOWZmM2VlZWJlNjYyODQ4ODlmYmY2ODlkNGU2
ODNjODEwHhcNMjUxMTA0MTEwMDEyWhcNMjUxMTA1MTEwMDEyWjAzMTEwLwYDVQQD
Eyg4M2UwZjA0NWUyNzQ2ZTIyMjQ1MjdkNTM4Mzc1NjZiODg0NmIzMDdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtgD9/KR3yZKVOoBf6BH+DhCYQOV
+Gen6lV2mBCTaK52UbfNgwkCncJqqVCidqXuOyt0PXW2qdRfp44hQTZY7dydaCvr
PZwgvkUvsZHap4fWgUuFdC4Qbnrs2S3amp7BLYbhIh8Tz2r4j2sOCjRAeKwBkEGp
esg/qTtaU5grcf0/OjqenAJYfmD/vlLuNf3czLnbJKzA/v+9ZYPy4nD2fU+JGsQs
tgUuVgZRPDriOyYck8yptPgGBmc7oT4AxPyHaGn8fe2em+pWRgeoHkXdUgtZLRa5
mfZBA36SPzMsGvRXHB7CGBKiQZ0iIGC62EkdMxGJB/RzdLR2clNTcQfUdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIPg8EXidG4iJFJ9U4N1ZriEazB+MB8GA1UdIwQY
MBaAFC1pi6+f8+7r5mKEiJ+/aJ1OaDyBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFdtTHI1X3o3dXZtWW9TSW43OW9uVTVvUElFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS81NzJhOTgtM2JiNy00Mjc2LTlkMzkt
ZGZmNWEwOWE4MmNiLzEvTFdtTHI1X3o3dXZtWW9TSW43OW9uVTVvUElFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS81NzJhOTgtM2JiNy00Mjc2LTlkMzktZGZmNWEwOWE4MmNi
LzEvTFdtTHI1X3o3dXZtWW9TSW43OW9uVTVvUElFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPNVb4pk2
YjqSbgybXNehN+mb5+JzscZJ2i6wLO61s5GEAfwecG3k7gsotNm2Nayo/uFemRXr
SsWQA2ssxH0f816Co6V1W4U2rdns8FDOwvM7ZDuMURk0kq8+5OyXm98QrTp4CTb9
/R2C7iDCovQ1FMI2HkKRZIdOTKQashe7jDOzfANPa04gGRt7OxTkZX5phbgsbQmS
Gm41OxLPOu6raS3pndB7c1eXTENT8nSy7NK0WuhubE2MpyIhI3OvcEo1YK3Isz7g
PrEDifrRPDeo26UhkjWDuoLaScuw1v2lmz7GFKkj3WybEu4KaN+BPHW564foIJ/N
LubNnvXhRFeYBw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:38:40 2025 by rpki-client