Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/accde8-f46f-4ef9-94af-8dd81e4b3e33/1/LmszQT-qXl4dJ5oqJf-B2NFTJd8.mft
File: LmszQT-qXl4dJ5oqJf-B2NFTJd8.mft (raw, json)
Hash identifier: VDF6YYfhlP44GCouvDgD5cEXAdbT5I8SuOW14JKrY34=
Subject key identifier: 0B:45:D3:B8:C4:1C:A7:21:EF:54:21:B3:1F:30:46:3D:B1:0C:FF:5F
Authority key identifier: 2E:6B:33:41:3F:AA:5E:5E:1D:27:9A:2A:25:FF:81:D8:D1:53:25:DF
Certificate issuer: /CN=2e6b33413faa5e5e1d279a2a25ff81d8d15325df
Certificate serial: 019A4E4FFB67117586DE0C7E83551CD04D21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmszQT-qXl4dJ5oqJf-B2NFTJd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/accde8-f46f-4ef9-94af-8dd81e4b3e33/1/LmszQT-qXl4dJ5oqJf-B2NFTJd8.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 10:00:55 +0000
Manifest this update: Tue 04 Nov 2025 10:00:55 +0000
Manifest next update: Wed 05 Nov 2025 10:00:55 +0000
Files and hashes: 1: 1-rQwqNKly6aenIYeWSDOecvE9Dg.roa (hash: xyKaPv0UlzvDAkK4ZPQkPqyXzd2d32Ec3cQVPGFT2Lk=)
2: 53x_LlMR9wDfhoH_h-dm_2o9cfc.roa (hash: hpGqRuP4r/d0ndxhvimQvb9wKXUShtDAOOkpu0Or3Uk=)
3: LmszQT-qXl4dJ5oqJf-B2NFTJd8.crl (hash: kMWaWeoZ5pi2tLPQCWRdS7BhIoIxPgBve1qRjtHGwCY=)
4: sCdHa8GDoglI_mdXJ5Cs8c0F3ts.roa (hash: MzLxzWRZS24YmZa+mNMBCsFOGmjiB2b/WusU+bbqWL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/accde8-f46f-4ef9-94af-8dd81e4b3e33/1/LmszQT-qXl4dJ5oqJf-B2NFTJd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/accde8-f46f-4ef9-94af-8dd81e4b3e33/1/LmszQT-qXl4dJ5oqJf-B2NFTJd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/LmszQT-qXl4dJ5oqJf-B2NFTJd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:fb:67:11:75:86:de:0c:7e:83:55:1c:d0:4d:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6b33413faa5e5e1d279a2a25ff81d8d15325df
Validity
Not Before: Nov 4 10:00:55 2025 GMT
Not After : Nov 5 10:00:55 2025 GMT
Subject: CN=0b45d3b8c41ca721ef5421b31f30463db10cff5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:0e:15:8a:62:32:1d:b8:96:79:a0:48:7d:fb:
d7:00:6b:7e:ee:5f:73:43:c0:33:d4:36:36:69:14:
3e:c7:f6:ee:77:43:ff:91:b9:46:3e:c9:b6:06:d5:
2b:7c:e3:0c:a7:28:1b:3f:c0:20:be:12:de:7b:1f:
4c:3c:6d:ea:33:29:8d:f4:ef:2b:25:6c:5b:59:66:
c7:95:75:d2:91:1e:74:cd:2b:47:ea:00:70:1b:62:
c9:91:5c:d4:53:1d:cb:9a:e9:7b:b4:34:1b:cc:f8:
9d:bf:f8:7f:e5:cf:a4:d8:c1:c9:68:a6:13:97:50:
93:fe:65:ff:7f:d0:64:f7:0e:23:4a:ff:ee:ff:a5:
74:94:e5:c5:71:f2:51:8f:84:bc:ab:ba:16:b5:c0:
8c:f2:1a:45:59:7a:24:6d:38:5f:fb:74:d1:69:fd:
87:95:c2:6d:bf:3f:68:14:a9:5e:cc:ee:20:3c:63:
b6:2b:08:49:15:5b:74:64:62:55:ad:47:b2:98:ac:
03:09:fd:a7:dd:30:e8:4f:68:cd:64:5d:0b:3d:c7:
ee:5d:60:f6:96:dd:06:63:c8:96:01:d3:d6:af:34:
a0:48:87:89:5c:9a:bc:1e:43:34:61:a5:ca:2d:26:
7f:c0:39:76:ed:b8:9f:71:53:6a:08:ea:4d:0d:18:
6a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:45:D3:B8:C4:1C:A7:21:EF:54:21:B3:1F:30:46:3D:B1:0C:FF:5F
X509v3 Authority Key Identifier:
keyid:2E:6B:33:41:3F:AA:5E:5E:1D:27:9A:2A:25:FF:81:D8:D1:53:25:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmszQT-qXl4dJ5oqJf-B2NFTJd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/accde8-f46f-4ef9-94af-8dd81e4b3e33/1/LmszQT-qXl4dJ5oqJf-B2NFTJd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/accde8-f46f-4ef9-94af-8dd81e4b3e33/1/LmszQT-qXl4dJ5oqJf-B2NFTJd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:bd:22:0b:af:eb:2e:eb:b8:a4:9a:a9:8f:68:e4:e2:e1:da:
72:a2:e1:f0:db:77:27:f7:26:5a:19:c4:02:2f:bd:24:c5:8a:
6b:47:30:46:b8:4a:2b:90:94:54:15:63:bf:25:ae:19:7f:12:
29:5c:eb:a6:b3:48:d5:39:17:f5:99:1b:cc:39:08:d8:f1:03:
da:01:62:89:0c:3e:6c:0d:b1:91:33:2c:27:94:dd:cb:f8:ed:
c9:e0:a4:14:21:b9:85:7d:28:b0:9f:c5:60:d7:31:02:00:a7:
0b:d8:8e:9a:a6:fa:9d:38:55:ca:1c:29:96:62:bc:73:df:39:
19:5a:45:16:57:3d:40:b5:5b:0c:91:d8:08:ca:a1:07:7a:96:
17:04:ac:05:b4:c5:72:71:c7:1e:27:79:74:65:f7:e9:e2:e0:
88:89:80:f6:b1:b2:ff:b8:0e:8c:72:20:17:f2:9d:31:c5:60:
b4:87:65:e2:20:7b:e0:bf:a2:53:ca:bf:09:e7:95:5d:07:a6:
ef:ca:52:2e:ba:9a:46:7f:93:8e:44:15:74:84:43:a4:ba:b0:
e7:e8:a8:38:71:06:6d:27:44:e1:f0:f2:5d:73:91:c1:1f:62:
30:e0:2c:b5:1f:d9:5b:85:a4:17:07:d0:0e:3c:c1:a0:a5:ec:
ed:5e:24:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOT/tnEXWG3gx+g1Uc0E0hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlNmIzMzQxM2ZhYTVlNWUxZDI3OWEyYTI1ZmY4MWQ4ZDE1
MzI1ZGYwHhcNMjUxMTA0MTAwMDU1WhcNMjUxMTA1MTAwMDU1WjAzMTEwLwYDVQQD
EygwYjQ1ZDNiOGM0MWNhNzIxZWY1NDIxYjMxZjMwNDYzZGIxMGNmZjVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAng4VimIyHbiWeaBIffvXAGt+7l9z
Q8Az1DY2aRQ+x/bud0P/kblGPsm2BtUrfOMMpygbP8AgvhLeex9MPG3qMymN9O8r
JWxbWWbHlXXSkR50zStH6gBwG2LJkVzUUx3Lmul7tDQbzPidv/h/5c+k2MHJaKYT
l1CT/mX/f9Bk9w4jSv/u/6V0lOXFcfJRj4S8q7oWtcCM8hpFWXokbThf+3TRaf2H
lcJtvz9oFKlezO4gPGO2KwhJFVt0ZGJVrUeymKwDCf2n3TDoT2jNZF0LPcfuXWD2
lt0GY8iWAdPWrzSgSIeJXJq8HkM0YaXKLSZ/wDl27bifcVNqCOpNDRhqawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAtF07jEHKch71Qhsx8wRj2xDP9fMB8GA1UdIwQY
MBaAFC5rM0E/ql5eHSeaKiX/gdjRUyXfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTG1zelFULXFYbDRkSjVvcUpmLUIyTkZUSmQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9hY2NkZTgtZjQ2Zi00ZWY5LTk0YWYt
OGRkODFlNGIzZTMzLzEvTG1zelFULXFYbDRkSjVvcUpmLUIyTkZUSmQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi9hY2NkZTgtZjQ2Zi00ZWY5LTk0YWYtOGRkODFlNGIzZTMz
LzEvTG1zelFULXFYbDRkSjVvcUpmLUIyTkZUSmQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAML0iC6/r
Luu4pJqpj2jk4uHacqLh8Nt3J/cmWhnEAi+9JMWKa0cwRrhKK5CUVBVjvyWuGX8S
KVzrprNI1TkX9ZkbzDkI2PED2gFiiQw+bA2xkTMsJ5Tdy/jtyeCkFCG5hX0osJ/F
YNcxAgCnC9iOmqb6nThVyhwplmK8c985GVpFFlc9QLVbDJHYCMqhB3qWFwSsBbTF
cnHHHid5dGX36eLgiImA9rGy/7gOjHIgF/KdMcVgtIdl4iB74L+iU8q/CeeVXQem
78pSLrqaRn+TjkQVdIRDpLqw5+ioOHEGbSdE4fDyXXORwR9iMOAstR/ZW4WkFwfQ
DjzBoKXs7V4kVA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:49:23 2025 by rpki-client