Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/a537c0-fd4b-43b6-8891-d57373bf5162/1/ljUcRzoWujj6tNUXBZIl4PEzyL8.mft
File: ljUcRzoWujj6tNUXBZIl4PEzyL8.mft (raw, json)
Hash identifier: y+UFUrk2wOUes33MwRqUGDMGa0BCCLO34bwlFvAxRHs=
Subject key identifier: E4:03:2B:C5:65:0D:0A:92:43:2B:E5:A2:06:5D:5A:BE:F7:E3:5E:9B
Authority key identifier: 96:35:1C:47:3A:16:BA:38:FA:B4:D5:17:05:92:25:E0:F1:33:C8:BF
Certificate issuer: /CN=96351c473a16ba38fab4d517059225e0f133c8bf
Certificate serial: 019A4EF49494FEA3D90911AB2F7E25EEB399
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ljUcRzoWujj6tNUXBZIl4PEzyL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/a537c0-fd4b-43b6-8891-d57373bf5162/1/ljUcRzoWujj6tNUXBZIl4PEzyL8.mft
Manifest number: 1699
Signing time: Tue 04 Nov 2025 13:00:42 +0000
Manifest this update: Tue 04 Nov 2025 13:00:42 +0000
Manifest next update: Wed 05 Nov 2025 13:00:42 +0000
Files and hashes: 1: 9ePFbgefAOZuTmJLiFLvd1beyls.roa (hash: RIcriqMlU4ZWl7joZj4XClpYJLpavsjnCJfKx3wYXhA=)
2: HVOOHQPc-5Eu7cwWFhbNRCpA9A0.roa (hash: x9bBQ84HsMACBPfPIx9csANOJkhCAtUu4np9OsZI7x4=)
3: KSjUnukZG8WOY9QNez7ybTNOls4.roa (hash: swbthPAwvXge6wDssbFVck74lGidoJQL+o3507ng0tk=)
4: ljUcRzoWujj6tNUXBZIl4PEzyL8.crl (hash: XlVArvUUfvse4BBYOPmdRkRi+fDjdehKJObQl0Q26lk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/a537c0-fd4b-43b6-8891-d57373bf5162/1/ljUcRzoWujj6tNUXBZIl4PEzyL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/a537c0-fd4b-43b6-8891-d57373bf5162/1/ljUcRzoWujj6tNUXBZIl4PEzyL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ljUcRzoWujj6tNUXBZIl4PEzyL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:94:94:fe:a3:d9:09:11:ab:2f:7e:25:ee:b3:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96351c473a16ba38fab4d517059225e0f133c8bf
Validity
Not Before: Nov 4 13:00:42 2025 GMT
Not After : Nov 5 13:00:42 2025 GMT
Subject: CN=e4032bc5650d0a92432be5a2065d5abef7e35e9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:21:14:6b:0e:97:6c:bd:e8:cd:e7:60:75:6a:
11:92:5a:52:c1:34:55:16:fe:55:c5:f2:85:91:96:
6c:0a:50:83:db:cd:cc:ac:ae:65:75:71:89:83:55:
b4:f4:bf:bc:9b:21:c2:80:a1:e8:a0:de:79:35:7a:
a7:fa:31:0d:2d:89:c6:80:77:ea:9d:46:93:c0:db:
ad:07:03:14:85:8c:42:a9:14:e1:47:bb:64:a6:dc:
f0:9f:3d:54:90:d5:52:c1:26:d5:4b:fb:61:2b:62:
f1:79:0b:6c:49:fd:ab:fb:27:3e:1e:2f:75:0d:a5:
d3:43:fb:82:91:9a:b1:a6:35:2d:6f:3c:05:38:4f:
bc:e9:1b:58:a9:c5:90:cc:a7:e9:fc:8d:1e:3f:cc:
d2:ef:90:e3:4a:f1:78:82:6f:f5:f3:3e:69:06:96:
05:2d:98:33:77:16:98:82:47:d1:2b:c3:b1:34:9d:
ae:3d:db:ea:99:b3:a2:c6:f3:55:65:1f:5a:2e:c8:
2b:72:ae:fc:1a:36:58:7a:fb:12:28:07:90:8b:66:
c1:da:c4:71:37:48:bd:cc:80:b6:04:d6:e8:9c:fd:
89:15:bf:c8:03:87:83:6f:0b:0e:d2:ef:04:de:b0:
88:69:75:50:53:e3:5c:5a:2f:26:b3:be:ee:1e:d2:
be:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:03:2B:C5:65:0D:0A:92:43:2B:E5:A2:06:5D:5A:BE:F7:E3:5E:9B
X509v3 Authority Key Identifier:
keyid:96:35:1C:47:3A:16:BA:38:FA:B4:D5:17:05:92:25:E0:F1:33:C8:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ljUcRzoWujj6tNUXBZIl4PEzyL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a537c0-fd4b-43b6-8891-d57373bf5162/1/ljUcRzoWujj6tNUXBZIl4PEzyL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a537c0-fd4b-43b6-8891-d57373bf5162/1/ljUcRzoWujj6tNUXBZIl4PEzyL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:18:7f:63:5e:98:7a:06:a7:b9:85:6e:ae:93:0b:22:71:5c:
11:67:5b:a5:b8:a8:fd:da:fa:2f:6d:6a:a2:e6:f3:1e:30:0d:
ff:a1:1c:35:33:3b:a1:88:7f:52:fd:cb:af:01:87:b7:40:7e:
99:fe:bb:fc:e5:83:8d:8a:c4:36:b0:46:20:91:6f:1b:87:e8:
eb:63:17:55:90:76:08:dd:55:64:70:94:80:cc:34:4a:d5:76:
e2:3b:f1:4d:c0:e8:e7:b5:e9:48:56:74:92:5c:c4:02:aa:75:
ce:6c:9b:39:d8:c2:a8:de:d6:b8:c4:1b:6e:76:0b:69:a8:f6:
cc:5f:3d:d1:c6:12:48:e3:54:3a:5b:27:cf:2f:ea:29:87:11:
60:96:7b:14:d5:38:33:41:28:43:e1:2f:4d:30:e2:fa:9a:82:
1d:b8:ee:03:c7:a0:13:48:27:5a:5a:43:d4:bb:f3:bc:33:a9:
d3:7c:bf:e7:e6:fa:e5:9a:ce:0d:e9:2e:c1:45:7d:84:7f:50:
ed:26:8c:80:ab:51:ba:b7:da:39:89:55:a0:3c:13:1e:4b:1c:
d9:20:48:36:7d:10:2c:e0:e9:33:9c:86:14:d9:bc:ee:35:7b:
d6:3d:2b:cd:65:f8:6f:61:f8:4d:b0:5e:97:b0:ea:1a:51:36:
34:4f:9a:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9JSU/qPZCRGrL34l7rOZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2MzUxYzQ3M2ExNmJhMzhmYWI0ZDUxNzA1OTIyNWUwZjEz
M2M4YmYwHhcNMjUxMTA0MTMwMDQyWhcNMjUxMTA1MTMwMDQyWjAzMTEwLwYDVQQD
EyhlNDAzMmJjNTY1MGQwYTkyNDMyYmU1YTIwNjVkNWFiZWY3ZTM1ZTliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0SEUaw6XbL3ozedgdWoRklpSwTRV
Fv5VxfKFkZZsClCD283MrK5ldXGJg1W09L+8myHCgKHooN55NXqn+jENLYnGgHfq
nUaTwNutBwMUhYxCqRThR7tkptzwnz1UkNVSwSbVS/thK2LxeQtsSf2r+yc+Hi91
DaXTQ/uCkZqxpjUtbzwFOE+86RtYqcWQzKfp/I0eP8zS75DjSvF4gm/18z5pBpYF
LZgzdxaYgkfRK8OxNJ2uPdvqmbOixvNVZR9aLsgrcq78GjZYevsSKAeQi2bB2sRx
N0i9zIC2BNbonP2JFb/IA4eDbwsO0u8E3rCIaXVQU+NcWi8ms77uHtK+KwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOQDK8VlDQqSQyvlogZdWr73416bMB8GA1UdIwQY
MBaAFJY1HEc6Fro4+rTVFwWSJeDxM8i/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGpVY1J6b1d1amo2dE5VWEJaSWw0UEV6eUw4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9hNTM3YzAtZmQ0Yi00M2I2LTg4OTEt
ZDU3MzczYmY1MTYyLzEvbGpVY1J6b1d1amo2dE5VWEJaSWw0UEV6eUw4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy9hNTM3YzAtZmQ0Yi00M2I2LTg4OTEtZDU3MzczYmY1MTYy
LzEvbGpVY1J6b1d1amo2dE5VWEJaSWw0UEV6eUw4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFBh/Y16Y
eganuYVurpMLInFcEWdbpbio/dr6L21qoubzHjAN/6EcNTM7oYh/Uv3LrwGHt0B+
mf67/OWDjYrENrBGIJFvG4fo62MXVZB2CN1VZHCUgMw0StV24jvxTcDo57XpSFZ0
klzEAqp1zmybOdjCqN7WuMQbbnYLaaj2zF890cYSSONUOlsnzy/qKYcRYJZ7FNU4
M0EoQ+EvTTDi+pqCHbjuA8egE0gnWlpD1LvzvDOp03y/5+b65ZrODekuwUV9hH9Q
7SaMgKtRurfaOYlVoDwTHksc2SBINn0QLODpM5yGFNm87jV71j0rzWX4b2H4TbBe
l7DqGlE2NE+a2w==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:50:52 2025 by rpki-client