Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/6c7b28-f2ce-445f-8f90-0f5d3797a325/1/lv9F5t5Iv8A5faytg6hIMdt5UtE.mft
File: lv9F5t5Iv8A5faytg6hIMdt5UtE.mft (raw, json)
Hash identifier: It9DK5+BxRX5+CflOWyGmMbdV74LLH+I9v8bolBSWGQ=
Subject key identifier: 55:3B:DA:3F:A1:22:F0:4E:5A:E3:2E:0B:5B:A2:6F:DA:92:0A:0F:38
Authority key identifier: 96:FF:45:E6:DE:48:BF:C0:39:7D:AC:AD:83:A8:48:31:DB:79:52:D1
Certificate issuer: /CN=96ff45e6de48bfc0397dacad83a84831db7952d1
Certificate serial: 019A4EF563402228129461AD2DC2C676D87A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lv9F5t5Iv8A5faytg6hIMdt5UtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/6c7b28-f2ce-445f-8f90-0f5d3797a325/1/lv9F5t5Iv8A5faytg6hIMdt5UtE.mft
Manifest number: 0E56
Signing time: Tue 04 Nov 2025 13:01:35 +0000
Manifest this update: Tue 04 Nov 2025 13:01:35 +0000
Manifest next update: Wed 05 Nov 2025 13:01:35 +0000
Files and hashes: 1: BtyxmQt-yF5Itrxy7RzgES75cCE.roa (hash: j8jLpS73B8XEvRgoeYut2S/JGAmztzXRK1Z6kg/eRK4=)
2: abefSJyNsQ4kIHg_JbBrvyMZNs0.roa (hash: R4sEc9WgkQp8S9L0gh+lAeV2TR1f+UNjjiBWxu0UkWE=)
3: guRmkEKKRi3yIA2ms7Lm_Uw6LLU.roa (hash: GzLvOZNBYSJ/eLCppkRql6pMeRHG+UlZlmhw3iYs8mo=)
4: lv9F5t5Iv8A5faytg6hIMdt5UtE.crl (hash: 8/NVGlQv1rusXVmtrnp02BVW2k+04LW9bftKGpZbd18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/6c7b28-f2ce-445f-8f90-0f5d3797a325/1/lv9F5t5Iv8A5faytg6hIMdt5UtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/6c7b28-f2ce-445f-8f90-0f5d3797a325/1/lv9F5t5Iv8A5faytg6hIMdt5UtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lv9F5t5Iv8A5faytg6hIMdt5UtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:63:40:22:28:12:94:61:ad:2d:c2:c6:76:d8:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96ff45e6de48bfc0397dacad83a84831db7952d1
Validity
Not Before: Nov 4 13:01:35 2025 GMT
Not After : Nov 5 13:01:35 2025 GMT
Subject: CN=553bda3fa122f04e5ae32e0b5ba26fda920a0f38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:44:0f:84:37:f6:12:01:a8:55:ce:56:51:bd:
40:5e:23:b6:d6:c5:81:4a:48:72:86:fb:c2:4f:12:
21:b5:30:3c:5a:d0:d9:4c:38:62:a0:f0:6c:ac:5d:
b5:00:e5:10:4f:b4:3d:c8:7e:0e:1b:e9:d9:fc:56:
04:68:76:c7:93:10:02:84:af:10:ed:d1:03:d2:2a:
73:bc:2c:cc:40:63:ed:f9:76:d6:00:ba:ce:e1:3a:
ae:ff:c9:b2:ea:57:4a:41:8f:1f:87:14:44:d3:b3:
e1:57:dd:b8:01:04:a6:62:26:6b:54:ff:90:b3:28:
23:34:3d:da:bd:ab:c9:5f:d3:b9:c8:b3:86:69:81:
22:f0:7c:cf:f2:21:44:b8:37:e1:7f:9a:3d:5e:65:
f2:bc:73:e4:35:2b:d1:42:d0:c8:b1:d6:69:c0:12:
b7:bf:70:30:78:34:bd:16:60:99:bb:a5:72:57:12:
66:ae:3e:f0:d0:6e:7a:f6:6a:4c:9b:e9:0f:e9:27:
53:64:7f:c2:d4:3f:08:f5:3e:81:77:61:46:30:5f:
92:8d:89:fe:29:de:c6:dd:cf:21:4b:3e:c7:09:a9:
59:3e:d9:bf:fb:96:51:86:db:31:2b:17:fa:39:c4:
6b:d8:a7:93:49:71:32:9b:70:59:91:e3:80:aa:6f:
7a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:3B:DA:3F:A1:22:F0:4E:5A:E3:2E:0B:5B:A2:6F:DA:92:0A:0F:38
X509v3 Authority Key Identifier:
keyid:96:FF:45:E6:DE:48:BF:C0:39:7D:AC:AD:83:A8:48:31:DB:79:52:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lv9F5t5Iv8A5faytg6hIMdt5UtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/6c7b28-f2ce-445f-8f90-0f5d3797a325/1/lv9F5t5Iv8A5faytg6hIMdt5UtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/6c7b28-f2ce-445f-8f90-0f5d3797a325/1/lv9F5t5Iv8A5faytg6hIMdt5UtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:0c:9d:6c:c8:a9:a0:ec:ed:9a:ee:a7:58:a7:03:fb:3f:cf:
37:b1:a9:19:68:b1:53:45:cd:f2:ad:31:6b:0f:dd:38:2a:3c:
98:f0:1f:40:27:4e:35:62:45:e2:80:b3:1c:6a:d8:47:18:38:
8c:57:d9:83:42:11:dc:89:9f:73:0c:38:7f:da:bc:19:71:d2:
c0:cb:6a:6c:f6:f6:f6:60:70:48:32:33:d3:78:ff:50:98:1b:
c4:02:2a:85:4a:9b:60:13:9f:e4:7f:46:39:b7:68:73:ed:56:
12:15:7e:03:0a:81:f1:41:57:f0:cc:e1:6c:d5:64:f2:0f:57:
b2:44:eb:ba:9a:94:11:ff:4e:7c:db:03:c9:5a:ec:a4:d4:ff:
d0:c5:2f:d3:0a:6d:a3:1a:e4:b0:30:de:99:ad:6f:66:15:a9:
1b:2b:74:3e:a6:f7:ff:4b:67:1b:d4:18:09:14:f3:3b:26:84:
75:54:7e:dd:5e:c0:dd:2b:0c:39:89:66:24:e4:03:cd:a8:82:
d4:05:7b:84:e5:d3:36:a7:f9:b3:37:ee:3e:ea:69:7a:74:10:
9f:3f:18:3d:33:f0:6f:1f:51:02:07:1b:59:71:18:b0:f6:15:
ca:2d:08:b6:8c:d1:32:fd:1b:de:3d:cb:9f:d0:39:7d:17:d1:
3e:6e:25:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9WNAIigSlGGtLcLGdth6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2ZmY0NWU2ZGU0OGJmYzAzOTdkYWNhZDgzYTg0ODMxZGI3
OTUyZDEwHhcNMjUxMTA0MTMwMTM1WhcNMjUxMTA1MTMwMTM1WjAzMTEwLwYDVQQD
Eyg1NTNiZGEzZmExMjJmMDRlNWFlMzJlMGI1YmEyNmZkYTkyMGEwZjM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkQPhDf2EgGoVc5WUb1AXiO21sWB
SkhyhvvCTxIhtTA8WtDZTDhioPBsrF21AOUQT7Q9yH4OG+nZ/FYEaHbHkxAChK8Q
7dED0ipzvCzMQGPt+XbWALrO4Tqu/8my6ldKQY8fhxRE07PhV924AQSmYiZrVP+Q
sygjND3avavJX9O5yLOGaYEi8HzP8iFEuDfhf5o9XmXyvHPkNSvRQtDIsdZpwBK3
v3AweDS9FmCZu6VyVxJmrj7w0G569mpMm+kP6SdTZH/C1D8I9T6Bd2FGMF+SjYn+
Kd7G3c8hSz7HCalZPtm/+5ZRhtsxKxf6OcRr2KeTSXEym3BZkeOAqm96QwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFU72j+hIvBOWuMuC1uib9qSCg84MB8GA1UdIwQY
MBaAFJb/RebeSL/AOX2srYOoSDHbeVLRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHY5RjV0NUl2OEE1ZmF5dGc2aElNZHQ1VXRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS82YzdiMjgtZjJjZS00NDVmLThmOTAt
MGY1ZDM3OTdhMzI1LzEvbHY5RjV0NUl2OEE1ZmF5dGc2aElNZHQ1VXRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS82YzdiMjgtZjJjZS00NDVmLThmOTAtMGY1ZDM3OTdhMzI1
LzEvbHY5RjV0NUl2OEE1ZmF5dGc2aElNZHQ1VXRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlQydbMip
oOztmu6nWKcD+z/PN7GpGWixU0XN8q0xaw/dOCo8mPAfQCdONWJF4oCzHGrYRxg4
jFfZg0IR3Imfcww4f9q8GXHSwMtqbPb29mBwSDIz03j/UJgbxAIqhUqbYBOf5H9G
Obdoc+1WEhV+AwqB8UFX8MzhbNVk8g9XskTrupqUEf9OfNsDyVrspNT/0MUv0wpt
oxrksDDema1vZhWpGyt0Pqb3/0tnG9QYCRTzOyaEdVR+3V7A3SsMOYlmJOQDzaiC
1AV7hOXTNqf5szfuPuppenQQnz8YPTPwbx9RAgcbWXEYsPYVyi0ItozRMv0b3j3L
n9A5fRfRPm4llw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:40:32 2025 by rpki-client