Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft
File: lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft (raw, json)
Hash identifier: C2SW6HJ58sOYJnv/v5Aut1tzr13QzqxUJIXfsGz3R/g=
Subject key identifier: 3C:2A:62:03:DE:32:BF:B3:BA:F9:11:14:41:3A:CD:F3:9E:EF:D3:0B
Authority key identifier: 94:94:8E:5F:2F:A0:4B:22:2A:6E:96:88:3B:84:0F:71:24:53:15:56
Certificate issuer: /CN=94948e5f2fa04b222a6e96883b840f7124531556
Certificate serial: 019A4F2B442C0CCC3AE032FBFE40F171296F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJSOXy-gSyIqbpaIO4QPcSRTFVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft
Manifest number: 171B
Signing time: Tue 04 Nov 2025 14:00:26 +0000
Manifest this update: Tue 04 Nov 2025 14:00:26 +0000
Manifest next update: Wed 05 Nov 2025 14:00:26 +0000
Files and hashes: 1: 6M8HqKSI22ar6eaAcnn8ev1P9AQ.roa (hash: nVlGdB/dQUdpvwsW+Z7Kxz9y2rH9JWzBWwfpv9z8khM=)
2: PKCcLn7gw6Ub1teeDxDVaIyuinc.roa (hash: XdK6goNbx5CXhLqA/axUAjiyoFFcbKjnqngpuHtnyls=)
3: Ttwr_AOmuAJNU7xfvE7vQ7yxn68.roa (hash: DAsTgoaDez+skEZJSCYeQvPGbwIh0OkqI0SchCswLSA=)
4: lJSOXy-gSyIqbpaIO4QPcSRTFVY.crl (hash: pUliYz1fynaBhbmv3hjFvbGiNhbq1LFHp5eSq5vfl9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lJSOXy-gSyIqbpaIO4QPcSRTFVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:44:2c:0c:cc:3a:e0:32:fb:fe:40:f1:71:29:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94948e5f2fa04b222a6e96883b840f7124531556
Validity
Not Before: Nov 4 14:00:26 2025 GMT
Not After : Nov 5 14:00:26 2025 GMT
Subject: CN=3c2a6203de32bfb3baf91114413acdf39eefd30b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:73:a7:6c:c3:9f:e9:90:01:64:6e:67:73:4b:
e2:48:38:02:cb:c6:05:0e:49:45:52:e8:e4:64:c5:
2f:eb:4d:c3:6e:68:af:01:b3:1f:b4:23:e9:e5:29:
ca:78:6e:34:c0:37:af:f5:62:9c:5b:2d:5f:e4:ff:
12:94:17:58:02:bf:e3:ad:c8:68:7c:81:ed:5d:f9:
6d:70:9b:e3:62:10:09:02:ad:64:34:a2:8c:f6:41:
e2:e0:55:ca:d1:51:8b:89:41:87:7e:72:9b:6f:e4:
d8:37:33:3f:48:92:99:54:4a:be:83:1d:84:f9:c8:
95:2d:10:9f:f0:c2:84:b3:91:fc:24:b8:a2:04:a9:
a2:45:60:d1:79:32:8b:30:09:ed:e6:ca:39:34:d6:
72:3a:38:d0:71:2c:1f:c7:9a:64:20:cd:62:40:48:
45:7a:d1:18:e8:d3:24:09:e6:4f:c8:1a:7a:a8:e6:
a9:0a:84:c3:07:b6:ca:0c:1e:01:04:71:6b:3f:20:
aa:90:09:26:0b:9d:5a:f2:c4:4c:32:d7:06:e2:74:
12:53:73:b0:36:82:89:39:1e:c5:2e:17:c3:9a:ae:
de:e9:5e:1a:d8:90:21:5e:64:1e:36:b3:50:04:01:
f7:ab:15:7c:2d:bc:07:e3:1e:f8:c3:70:05:3a:9b:
76:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:2A:62:03:DE:32:BF:B3:BA:F9:11:14:41:3A:CD:F3:9E:EF:D3:0B
X509v3 Authority Key Identifier:
keyid:94:94:8E:5F:2F:A0:4B:22:2A:6E:96:88:3B:84:0F:71:24:53:15:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJSOXy-gSyIqbpaIO4QPcSRTFVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:fd:63:be:09:88:ac:0b:f3:2f:be:73:5b:9b:d2:9b:ee:14:
17:6f:26:63:70:09:28:59:83:9a:cf:ab:55:e1:49:ba:2b:a6:
44:88:69:ab:b3:0b:68:6c:a1:f8:29:13:4f:63:5b:81:94:25:
08:51:f9:fe:9d:26:63:a3:4d:e1:b6:0a:70:51:23:41:5e:1a:
78:c4:80:d7:08:1e:f4:4e:d2:6f:fb:f7:16:54:f3:21:8c:18:
f4:00:e1:55:98:32:65:86:b4:e5:8b:10:89:21:72:46:cf:5e:
43:d3:47:6e:c4:aa:5c:0a:c0:77:57:c6:a0:df:42:c6:b0:91:
4a:2b:2e:6d:58:f8:be:21:11:d2:c4:25:fb:ea:90:ef:3b:ce:
d4:99:df:49:eb:ff:85:dc:ef:fc:26:64:38:54:a8:7e:ee:b3:
ec:65:c0:b0:a4:b7:b0:c2:3e:45:c1:0d:89:0c:ae:07:dc:be:
f0:22:ae:54:e2:38:98:3d:45:db:00:a8:56:56:43:76:f7:80:
a1:bd:19:75:42:98:d6:4a:38:e5:42:c0:be:6b:21:8a:b0:ca:
fa:f0:84:74:39:92:58:d7:18:e5:ff:5a:e2:27:ac:4e:f3:79:
83:50:62:fe:87:e4:e5:31:65:c7:76:a6:bf:dc:bb:c2:95:82:
02:ef:90:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPK0QsDMw64DL7/kDxcSlvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0OTQ4ZTVmMmZhMDRiMjIyYTZlOTY4ODNiODQwZjcxMjQ1
MzE1NTYwHhcNMjUxMTA0MTQwMDI2WhcNMjUxMTA1MTQwMDI2WjAzMTEwLwYDVQQD
EygzYzJhNjIwM2RlMzJiZmIzYmFmOTExMTQ0MTNhY2RmMzllZWZkMzBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunOnbMOf6ZABZG5nc0viSDgCy8YF
DklFUujkZMUv603DbmivAbMftCPp5SnKeG40wDev9WKcWy1f5P8SlBdYAr/jrcho
fIHtXfltcJvjYhAJAq1kNKKM9kHi4FXK0VGLiUGHfnKbb+TYNzM/SJKZVEq+gx2E
+ciVLRCf8MKEs5H8JLiiBKmiRWDReTKLMAnt5so5NNZyOjjQcSwfx5pkIM1iQEhF
etEY6NMkCeZPyBp6qOapCoTDB7bKDB4BBHFrPyCqkAkmC51a8sRMMtcG4nQSU3Ow
NoKJOR7FLhfDmq7e6V4a2JAhXmQeNrNQBAH3qxV8LbwH4x74w3AFOpt27QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDwqYgPeMr+zuvkRFEE6zfOe79MLMB8GA1UdIwQY
MBaAFJSUjl8voEsiKm6WiDuED3EkUxVWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEpTT1h5LWdTeUlxYnBhSU80UVBjU1JURlZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9lYzQ4YmUtOTI1MC00ZjdjLTljODct
NjQxYjhlNjBkM2UyLzEvbEpTT1h5LWdTeUlxYnBhSU80UVBjU1JURlZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9lYzQ4YmUtOTI1MC00ZjdjLTljODctNjQxYjhlNjBkM2Uy
LzEvbEpTT1h5LWdTeUlxYnBhSU80UVBjU1JURlZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANf1jvgmI
rAvzL75zW5vSm+4UF28mY3AJKFmDms+rVeFJuiumRIhpq7MLaGyh+CkTT2NbgZQl
CFH5/p0mY6NN4bYKcFEjQV4aeMSA1wge9E7Sb/v3FlTzIYwY9ADhVZgyZYa05YsQ
iSFyRs9eQ9NHbsSqXArAd1fGoN9CxrCRSisubVj4viER0sQl++qQ7zvO1JnfSev/
hdzv/CZkOFSofu6z7GXAsKS3sMI+RcENiQyuB9y+8CKuVOI4mD1F2wCoVlZDdveA
ob0ZdUKY1ko45ULAvmshirDK+vCEdDmSWNcY5f9a4iesTvN5g1Bi/ofk5TFlx3am
v9y7wpWCAu+QIA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:45:49 2025 by rpki-client