Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.mft
File: lzvsM65zjJiViBnGwTuzNe40q0w.mft (raw, json)
Hash identifier: d5+CnotKIvCrpa3DDrsk7YO6HWao7KptnTL3aGT7aVk=
Subject key identifier: 72:1C:F9:0F:7C:EE:8A:65:88:D4:D2:CE:33:FF:D3:14:7E:9D:62:73
Authority key identifier: 97:3B:EC:33:AE:73:8C:98:95:88:19:C6:C1:3B:B3:35:EE:34:AB:4C
Certificate issuer: /CN=973bec33ae738c98958819c6c13bb335ee34ab4c
Certificate serial: 019A4D3CC7B63A708EE514A13E40023ADDE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lzvsM65zjJiViBnGwTuzNe40q0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.mft
Manifest number: 0DB3
Signing time: Tue 04 Nov 2025 05:00:20 +0000
Manifest this update: Tue 04 Nov 2025 05:00:20 +0000
Manifest next update: Wed 05 Nov 2025 05:00:20 +0000
Files and hashes: 1: 04AAIWN8CdjN6G01O3D_l5i-Jvk.roa (hash: Mv4GpM35beFDVPlXDkHbY9A9imQnPo9JK9qNbOoM+YU=)
2: 9-T9tTEpFFagDxBNkX4Bbf2UnDM.roa (hash: G5P+io7+nluFSPyZaIxd4Qa6X2iCyWaqgj9ylJYiWn8=)
3: lzvsM65zjJiViBnGwTuzNe40q0w.crl (hash: giEfgK5cJRT8d3DqwRXAmEE6ja+qebjzA9QSx9uGXYw=)
4: tuawZTEX7vHBTQMJyQg0WD-oypg.roa (hash: IFKGL2W7O7px/Tqsp660BBZcbUWDZWgLugycTaSmqvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/lzvsM65zjJiViBnGwTuzNe40q0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3c:c7:b6:3a:70:8e:e5:14:a1:3e:40:02:3a:dd:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=973bec33ae738c98958819c6c13bb335ee34ab4c
Validity
Not Before: Nov 4 05:00:20 2025 GMT
Not After : Nov 5 05:00:20 2025 GMT
Subject: CN=721cf90f7cee8a6588d4d2ce33ffd3147e9d6273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:8b:1d:01:cb:3f:fb:6f:bd:3b:2c:a2:1e:68:
b3:42:78:a6:b9:2e:24:a1:72:0a:62:ee:88:8c:97:
15:cf:1b:ca:35:15:6a:7a:58:c4:ff:bc:b5:d8:cc:
ec:8f:25:cd:11:3c:7e:70:11:6e:3d:e2:61:3c:02:
87:4a:21:42:5c:2c:cb:31:5c:1e:21:f4:6a:65:08:
bc:ed:54:d2:58:57:70:c5:f2:1e:ae:af:e2:ce:0f:
8e:24:1b:3d:48:d8:1f:50:2a:e2:a5:43:ce:3f:87:
66:f4:40:1e:02:d2:2b:65:47:a1:bc:01:6d:f9:a5:
d8:31:d7:f1:49:7f:5e:69:65:8e:99:79:ee:ef:99:
92:f5:fc:24:6d:f0:61:10:fc:6a:18:f6:df:71:50:
d5:67:6e:32:f2:a5:84:a9:b3:8a:51:2b:d0:90:cd:
55:4a:e6:ea:0c:2d:b9:f2:f1:20:99:4c:b5:ad:5e:
31:ad:c1:94:49:8d:fa:03:aa:8f:eb:aa:4b:3e:f3:
e4:70:69:f8:3c:e5:5d:9a:d2:e9:5e:f0:3d:6a:7a:
3d:73:8f:cd:33:3d:d2:25:fa:2e:6f:38:12:90:82:
bd:fe:f3:59:72:60:57:94:5b:a8:40:d3:b0:d5:0a:
ae:ac:98:f6:22:8f:88:a0:f6:59:f5:d1:2e:b7:48:
8f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:1C:F9:0F:7C:EE:8A:65:88:D4:D2:CE:33:FF:D3:14:7E:9D:62:73
X509v3 Authority Key Identifier:
keyid:97:3B:EC:33:AE:73:8C:98:95:88:19:C6:C1:3B:B3:35:EE:34:AB:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lzvsM65zjJiViBnGwTuzNe40q0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:24:f6:a4:bb:fd:f5:b3:07:22:e8:96:74:3a:69:32:69:9c:
94:c9:32:8a:a4:56:98:6c:6e:33:3d:70:af:af:14:9f:a4:d0:
19:ca:d4:9c:d1:d2:8d:7e:85:3a:2d:e5:01:20:c0:33:93:66:
c4:18:e9:9e:36:9f:6e:6c:66:7f:09:3f:a4:d1:81:59:97:21:
5e:f5:57:51:98:a5:c6:06:68:b6:71:ed:e3:24:d7:53:a2:96:
62:d9:6e:a1:fd:fe:da:ff:65:37:1a:d8:25:6d:ce:8c:2f:ee:
8f:6c:1b:7b:95:f1:bb:a1:b4:e3:1f:7f:95:56:8d:84:06:2f:
fe:83:0e:df:57:1a:22:52:89:70:ea:3a:e5:52:ea:dd:0a:5e:
c9:5c:97:af:f2:dc:ec:b6:20:58:c4:6b:21:98:64:fa:c2:ad:
2c:ec:fb:49:dc:de:5e:a2:b7:ca:72:c1:b4:2e:90:58:b0:a9:
58:d4:ee:f6:f9:e9:7f:2e:eb:f6:92:71:1a:be:85:73:2f:1a:
27:2f:c7:f9:68:26:5a:f7:de:61:d9:f1:ee:5e:26:cd:5a:e2:
bd:32:f5:9c:9d:73:be:8e:54:8d:62:ba:96:f4:78:20:f8:d9:
61:42:fe:6a:3e:fd:23:f6:b2:98:dd:0f:48:72:14:12:c0:0b:
ea:52:6f:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNPMe2OnCO5RShPkACOt3kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3M2JlYzMzYWU3MzhjOTg5NTg4MTljNmMxM2JiMzM1ZWUz
NGFiNGMwHhcNMjUxMTA0MDUwMDIwWhcNMjUxMTA1MDUwMDIwWjAzMTEwLwYDVQQD
Eyg3MjFjZjkwZjdjZWU4YTY1ODhkNGQyY2UzM2ZmZDMxNDdlOWQ2MjczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4sdAcs/+2+9OyyiHmizQnimuS4k
oXIKYu6IjJcVzxvKNRVqeljE/7y12MzsjyXNETx+cBFuPeJhPAKHSiFCXCzLMVwe
IfRqZQi87VTSWFdwxfIerq/izg+OJBs9SNgfUCripUPOP4dm9EAeAtIrZUehvAFt
+aXYMdfxSX9eaWWOmXnu75mS9fwkbfBhEPxqGPbfcVDVZ24y8qWEqbOKUSvQkM1V
SubqDC258vEgmUy1rV4xrcGUSY36A6qP66pLPvPkcGn4POVdmtLpXvA9ano9c4/N
Mz3SJfoubzgSkIK9/vNZcmBXlFuoQNOw1QqurJj2Io+IoPZZ9dEut0iPTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHIc+Q987opliNTSzjP/0xR+nWJzMB8GA1UdIwQY
MBaAFJc77DOuc4yYlYgZxsE7szXuNKtMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHp2c002NXpqSmlWaUJuR3dUdXpOZTQwcTB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8yZjQ2MDUtMzU2YS00YWY2LWIxNWQt
YzQyZjlhYmYxNDc3LzEvbHp2c002NXpqSmlWaUJuR3dUdXpOZTQwcTB3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS8yZjQ2MDUtMzU2YS00YWY2LWIxNWQtYzQyZjlhYmYxNDc3
LzEvbHp2c002NXpqSmlWaUJuR3dUdXpOZTQwcTB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADST2pLv9
9bMHIuiWdDppMmmclMkyiqRWmGxuMz1wr68Un6TQGcrUnNHSjX6FOi3lASDAM5Nm
xBjpnjafbmxmfwk/pNGBWZchXvVXUZilxgZotnHt4yTXU6KWYtluof3+2v9lNxrY
JW3OjC/uj2wbe5Xxu6G04x9/lVaNhAYv/oMO31caIlKJcOo65VLq3QpeyVyXr/Lc
7LYgWMRrIZhk+sKtLOz7SdzeXqK3ynLBtC6QWLCpWNTu9vnpfy7r9pJxGr6Fcy8a
Jy/H+WgmWvfeYdnx7l4mzVrivTL1nJ1zvo5UjWK6lvR4IPjZYUL+aj79I/aymN0P
SHIUEsAL6lJvjQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:52:52 2025 by rpki-client