Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.mft
File: lxru6oeY927JpDTnVjfs2IEJLsI.mft (raw, json)
Hash identifier: GHK7izPcgfFnI916GyAxxYfpDYqILZtspXIdTJFkDHY=
Subject key identifier: 1C:FC:41:05:14:4B:C4:B0:E2:BC:B2:90:A2:7C:F4:F9:F3:2F:5E:18
Authority key identifier: 97:1A:EE:EA:87:98:F7:6E:C9:A4:34:E7:56:37:EC:D8:81:09:2E:C2
Certificate issuer: /CN=971aeeea8798f76ec9a434e75637ecd881092ec2
Certificate serial: 019A4DAA865531D22A445E19D9840213A6DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxru6oeY927JpDTnVjfs2IEJLsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 07:00:12 +0000
Manifest this update: Tue 04 Nov 2025 07:00:12 +0000
Manifest next update: Wed 05 Nov 2025 07:00:12 +0000
Files and hashes: 1: Ai3_NgCb2mwvHHHWVo7OjI6Wj04.roa (hash: mxmvKEH6k3H+fHWxr8AaesSD9p5zVNhT7qFX1XU+vIQ=)
2: EZLjMnt3YY1uGOfZ3nimgNl-yLU.roa (hash: Ko07ZGo7IwS8NL/yJPyHpJ9m0iW9ngaJs3DqWmHrpi0=)
3: RIQPOEjptB8udCiUyrk1eA7kGsQ.roa (hash: iUSixJ9qOvizzSlye8GPbxagX4TAp65dTuqFovVtZ00=)
4: lxru6oeY927JpDTnVjfs2IEJLsI.crl (hash: +icSx3h9wYt9fIyuDaYqwUIvPoKGgh3zq09sgOSjHcw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lxru6oeY927JpDTnVjfs2IEJLsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:86:55:31:d2:2a:44:5e:19:d9:84:02:13:a6:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=971aeeea8798f76ec9a434e75637ecd881092ec2
Validity
Not Before: Nov 4 07:00:12 2025 GMT
Not After : Nov 5 07:00:12 2025 GMT
Subject: CN=1cfc4105144bc4b0e2bcb290a27cf4f9f32f5e18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1c:65:4b:2f:50:cb:1b:63:09:65:aa:e2:ec:
54:50:48:41:f3:9b:ff:eb:fd:25:2c:cb:f9:c5:80:
21:9b:50:56:6c:23:df:23:a8:28:eb:99:fd:00:05:
e7:74:aa:a4:09:e7:2a:34:e4:70:fc:0e:d0:2b:5b:
39:57:60:68:ef:b1:e3:1a:f3:1c:15:12:f4:3a:f7:
ab:53:3a:f5:05:50:ba:91:d2:43:ce:67:e0:6e:37:
c6:9d:00:d7:a7:72:d4:8a:23:9b:f6:4c:c9:4e:40:
9e:91:19:96:6e:a6:2d:83:dd:3a:3a:80:8c:b9:68:
b9:71:c3:d1:ae:22:83:f5:54:03:92:19:69:23:02:
95:bc:2a:fe:2c:23:2c:06:ef:84:38:11:cd:7f:db:
c3:d7:24:fb:ac:26:b9:d3:a4:fd:f4:11:10:2f:49:
66:19:53:04:23:b6:cf:d5:26:f0:90:95:34:79:f1:
27:bb:70:3d:01:37:12:74:62:f7:1f:cf:6c:41:4a:
47:84:d0:99:4b:da:82:d7:d4:ee:e0:69:c6:d7:ba:
2a:46:69:23:36:c6:32:07:fc:6b:02:37:0e:de:fa:
87:9c:70:98:ed:f7:e6:f4:c9:aa:2a:7f:9f:5b:7e:
db:1e:cd:58:7a:f2:2b:39:1c:9e:c9:47:3b:20:71:
d2:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:FC:41:05:14:4B:C4:B0:E2:BC:B2:90:A2:7C:F4:F9:F3:2F:5E:18
X509v3 Authority Key Identifier:
keyid:97:1A:EE:EA:87:98:F7:6E:C9:A4:34:E7:56:37:EC:D8:81:09:2E:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxru6oeY927JpDTnVjfs2IEJLsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:81:ed:87:96:e0:6b:cf:59:fc:5e:ab:cb:bf:d9:a1:a2:e3:
47:aa:87:9f:89:32:96:b2:65:5f:c7:d4:42:c4:02:ad:be:c5:
2a:e5:3b:47:56:c4:78:d1:cf:72:1f:0e:1a:ed:b1:98:46:4c:
88:ae:0e:55:0f:03:23:06:52:fd:4d:a0:61:8a:2e:e2:8b:ef:
67:74:a9:bf:25:44:d3:b5:94:5a:28:40:9f:98:00:7b:0f:02:
ff:dd:2b:38:4b:6a:ed:24:e2:12:f4:cf:12:65:e6:3d:1c:d3:
41:97:39:f3:3b:60:68:35:15:8f:0f:a8:ca:43:d2:12:f2:ff:
e4:ce:1f:a2:d3:19:d3:00:c1:a2:db:a4:b9:ed:55:3f:8b:91:
24:2e:59:82:21:81:ca:90:fc:ad:81:db:b3:f5:62:70:f9:42:
c2:83:c7:74:f5:44:55:b5:1b:e1:f7:ae:40:7a:e4:74:cb:f9:
c0:6c:fb:10:32:4a:bd:18:98:9e:00:4b:d9:81:80:cf:2a:33:
87:b4:fe:09:c8:4e:fd:03:ff:de:d1:aa:ef:e2:38:6c:be:3d:
83:0c:25:3c:7e:26:7a:f4:f7:90:25:f4:88:16:bb:1e:24:3c:
b5:f8:35:39:5f:90:48:4c:21:ba:22:f1:f5:26:be:46:c7:6b:
99:f8:31:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNqoZVMdIqRF4Z2YQCE6baMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3MWFlZWVhODc5OGY3NmVjOWE0MzRlNzU2MzdlY2Q4ODEw
OTJlYzIwHhcNMjUxMTA0MDcwMDEyWhcNMjUxMTA1MDcwMDEyWjAzMTEwLwYDVQQD
EygxY2ZjNDEwNTE0NGJjNGIwZTJiY2IyOTBhMjdjZjRmOWYzMmY1ZTE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphxlSy9QyxtjCWWq4uxUUEhB85v/
6/0lLMv5xYAhm1BWbCPfI6go65n9AAXndKqkCecqNORw/A7QK1s5V2Bo77HjGvMc
FRL0OverUzr1BVC6kdJDzmfgbjfGnQDXp3LUiiOb9kzJTkCekRmWbqYtg906OoCM
uWi5ccPRriKD9VQDkhlpIwKVvCr+LCMsBu+EOBHNf9vD1yT7rCa506T99BEQL0lm
GVMEI7bP1SbwkJU0efEnu3A9ATcSdGL3H89sQUpHhNCZS9qC19Tu4GnG17oqRmkj
NsYyB/xrAjcO3vqHnHCY7ffm9MmqKn+fW37bHs1YevIrORyeyUc7IHHS8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBz8QQUUS8Sw4ryykKJ89PnzL14YMB8GA1UdIwQY
MBaAFJca7uqHmPduyaQ051Y37NiBCS7CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHhydTZvZVk5MjdKcERUblZqZnMySUVKTHNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi8xNjY5MzMtZjY4Yy00OWEwLTg4Njkt
YmRmNTVkYjRhOTBhLzEvbHhydTZvZVk5MjdKcERUblZqZnMySUVKTHNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi8xNjY5MzMtZjY4Yy00OWEwLTg4NjktYmRmNTVkYjRhOTBh
LzEvbHhydTZvZVk5MjdKcERUblZqZnMySUVKTHNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASoHth5bg
a89Z/F6ry7/ZoaLjR6qHn4kylrJlX8fUQsQCrb7FKuU7R1bEeNHPch8OGu2xmEZM
iK4OVQ8DIwZS/U2gYYou4ovvZ3SpvyVE07WUWihAn5gAew8C/90rOEtq7STiEvTP
EmXmPRzTQZc58ztgaDUVjw+oykPSEvL/5M4fotMZ0wDBotukue1VP4uRJC5ZgiGB
ypD8rYHbs/VicPlCwoPHdPVEVbUb4feuQHrkdMv5wGz7EDJKvRiYngBL2YGAzyoz
h7T+CchO/QP/3tGq7+I4bL49gwwlPH4mevT3kCX0iBa7HiQ8tfg1OV+QSEwhuiLx
9Sa+RsdrmfgxpA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:46:52 2025 by rpki-client