Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.mft
File: lB8grdISwODmjj8a6OoqeWSfT0w.mft (raw, json)
Hash identifier: RuWqXm6g95GU7QF7ic8xzuA3SPFdwnR2sy5uryU43r4=
Subject key identifier: 17:FE:5B:E6:19:96:60:EE:48:FA:9D:82:1E:DD:DC:14:91:E1:91:4C
Authority key identifier: 94:1F:20:AD:D2:12:C0:E0:E6:8E:3F:1A:E8:EA:2A:79:64:9F:4F:4C
Certificate issuer: /CN=941f20add212c0e0e68e3f1ae8ea2a79649f4f4c
Certificate serial: 019A4D743D9CA189087AB327FF90944C59FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lB8grdISwODmjj8a6OoqeWSfT0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.mft
Manifest number: 169C
Signing time: Tue 04 Nov 2025 06:00:54 +0000
Manifest this update: Tue 04 Nov 2025 06:00:54 +0000
Manifest next update: Wed 05 Nov 2025 06:00:54 +0000
Files and hashes: 1: Kvab69Fm55apwC6CNn_puTpqnco.roa (hash: SXQsTZgWdcQi8ndza2+PpabIjMyNvdIkKjFoA2OkVbo=)
2: lB8grdISwODmjj8a6OoqeWSfT0w.crl (hash: WVrqHndQiFmToMtbi7kHLDx4widXqq4AE1YpEC7k2P8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/lB8grdISwODmjj8a6OoqeWSfT0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:3d:9c:a1:89:08:7a:b3:27:ff:90:94:4c:59:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=941f20add212c0e0e68e3f1ae8ea2a79649f4f4c
Validity
Not Before: Nov 4 06:00:54 2025 GMT
Not After : Nov 5 06:00:54 2025 GMT
Subject: CN=17fe5be6199660ee48fa9d821edddc1491e1914c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d6:45:43:64:d4:fc:c5:df:41:dd:d8:1e:44:
b8:4b:7e:e2:70:0d:fe:4e:dd:63:5c:92:9e:22:87:
07:d5:11:35:2e:12:6b:09:7d:14:0d:de:19:78:6a:
54:6b:e9:15:db:f7:16:80:fe:2c:02:97:eb:e1:ce:
f7:98:a3:1e:4d:c8:b0:17:23:47:04:a3:d5:ee:88:
58:75:cd:6c:d1:b9:49:44:b3:01:2c:ec:53:1d:6d:
91:f4:02:13:b4:9c:d0:a1:33:fd:f3:86:aa:0f:0b:
63:96:3d:63:40:a0:8b:a4:8e:66:26:37:0b:6e:0e:
73:76:2a:72:e1:3a:87:1c:72:a2:b4:93:e7:e6:a7:
1d:73:cf:26:58:e5:4d:68:44:c9:a7:8e:f3:78:c2:
01:e0:7a:7b:91:1a:a0:c4:1f:1f:a9:1b:5d:95:cf:
10:8d:dd:62:28:e9:1e:bb:2d:a4:aa:ad:b3:83:6e:
6b:3c:0f:8e:4e:25:ce:5d:25:4a:87:73:88:d8:b6:
32:b9:62:29:7f:a3:2a:5a:5f:84:c8:91:46:e0:24:
c4:b0:9f:54:c9:37:1f:c9:09:28:be:ef:03:b8:13:
fd:ec:0c:45:1f:a5:f7:4e:02:e2:ed:ad:38:0e:2f:
75:89:5e:b3:b6:bc:50:83:ba:6b:51:8b:a3:a9:d9:
4f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:FE:5B:E6:19:96:60:EE:48:FA:9D:82:1E:DD:DC:14:91:E1:91:4C
X509v3 Authority Key Identifier:
keyid:94:1F:20:AD:D2:12:C0:E0:E6:8E:3F:1A:E8:EA:2A:79:64:9F:4F:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lB8grdISwODmjj8a6OoqeWSfT0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:69:53:8e:0c:7a:a0:64:1d:c2:e2:b9:1d:f1:5d:14:be:29:
4d:32:80:3f:1c:36:e6:03:33:e1:d2:08:d0:90:ba:fd:85:a5:
3a:45:61:69:ac:66:02:39:11:5e:dc:1a:0c:db:a9:25:65:8c:
a9:be:a9:bf:05:11:52:21:d1:b5:7a:82:49:38:7c:c7:95:c7:
01:34:ff:af:38:da:39:c6:fd:74:98:e4:ff:b9:fd:c6:02:3f:
65:d8:37:68:5c:57:77:8b:5d:cf:14:9d:cd:2f:e6:35:e3:ef:
6d:a9:15:ec:e3:0d:1b:5d:83:83:cf:6d:4b:69:5c:51:b0:5c:
03:da:b8:79:17:96:1d:6c:1b:3b:48:83:dc:2f:97:eb:4f:57:
c9:41:c6:e3:ab:6e:1e:59:fd:97:6a:38:0a:dd:8d:17:9c:ee:
ce:8f:d1:8e:2f:31:05:e3:8f:77:04:ba:bd:81:2f:bd:e9:b9:
11:c2:5e:62:23:77:1c:dc:66:e1:b5:a4:58:7a:50:cd:78:8a:
e9:a1:06:51:1b:8e:db:ea:99:a0:8a:2b:84:13:20:7e:30:e2:
09:11:e0:e6:e5:2e:e8:ab:b2:f7:fd:46:ca:42:73:56:e4:e3:
c6:a4:a7:2f:9d:8d:c5:31:9b:78:c7:c0:38:da:9d:c3:cf:b6:
6c:a5:e0:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNdD2coYkIerMn/5CUTFn+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0MWYyMGFkZDIxMmMwZTBlNjhlM2YxYWU4ZWEyYTc5NjQ5
ZjRmNGMwHhcNMjUxMTA0MDYwMDU0WhcNMjUxMTA1MDYwMDU0WjAzMTEwLwYDVQQD
EygxN2ZlNWJlNjE5OTY2MGVlNDhmYTlkODIxZWRkZGMxNDkxZTE5MTRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtZFQ2TU/MXfQd3YHkS4S37icA3+
Tt1jXJKeIocH1RE1LhJrCX0UDd4ZeGpUa+kV2/cWgP4sApfr4c73mKMeTciwFyNH
BKPV7ohYdc1s0blJRLMBLOxTHW2R9AITtJzQoTP984aqDwtjlj1jQKCLpI5mJjcL
bg5zdipy4TqHHHKitJPn5qcdc88mWOVNaETJp47zeMIB4Hp7kRqgxB8fqRtdlc8Q
jd1iKOkeuy2kqq2zg25rPA+OTiXOXSVKh3OI2LYyuWIpf6MqWl+EyJFG4CTEsJ9U
yTcfyQkovu8DuBP97AxFH6X3TgLi7a04Di91iV6ztrxQg7prUYujqdlPpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBf+W+YZlmDuSPqdgh7d3BSR4ZFMMB8GA1UdIwQY
MBaAFJQfIK3SEsDg5o4/GujqKnlkn09MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEI4Z3JkSVN3T0Rtamo4YTZPb3FlV1NmVDB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8xOTJjNjctOTM1My00OWMzLThhMmYt
MzY1ZTEzZGE2MmVhLzEvbEI4Z3JkSVN3T0Rtamo4YTZPb3FlV1NmVDB3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC8xOTJjNjctOTM1My00OWMzLThhMmYtMzY1ZTEzZGE2MmVh
LzEvbEI4Z3JkSVN3T0Rtamo4YTZPb3FlV1NmVDB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAymlTjgx6
oGQdwuK5HfFdFL4pTTKAPxw25gMz4dII0JC6/YWlOkVhaaxmAjkRXtwaDNupJWWM
qb6pvwURUiHRtXqCSTh8x5XHATT/rzjaOcb9dJjk/7n9xgI/Zdg3aFxXd4tdzxSd
zS/mNePvbakV7OMNG12Dg89tS2lcUbBcA9q4eReWHWwbO0iD3C+X609XyUHG46tu
Hln9l2o4Ct2NF5zuzo/Rji8xBeOPdwS6vYEvvem5EcJeYiN3HNxm4bWkWHpQzXiK
6aEGURuO2+qZoIorhBMgfjDiCRHg5uUu6Kuy9/1GykJzVuTjxqSnL52NxTGbeMfA
ONqdw8+2bKXgNA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:42:04 2025 by rpki-client