Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/LtQIejcn8EfglttpLgA9bAET8eI.mft
File: LtQIejcn8EfglttpLgA9bAET8eI.mft (raw, json)
Hash identifier: +G2mUb2X01wibEsowPhS5xHbCA3VytPBQRZGg+joopw=
Subject key identifier: C4:BE:08:B1:B6:22:F9:EC:F3:B5:EF:07:17:4D:5B:C7:15:9B:49:E7
Authority key identifier: 2E:D4:08:7A:37:27:F0:47:E0:96:DB:69:2E:00:3D:6C:01:13:F1:E2
Certificate issuer: /CN=2ed4087a3727f047e096db692e003d6c0113f1e2
Certificate serial: 019A51F54E2F1CE71D72336A231862FCAB4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LtQIejcn8EfglttpLgA9bAET8eI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/LtQIejcn8EfglttpLgA9bAET8eI.mft
Manifest number: AC
Signing time: Wed 05 Nov 2025 03:00:22 +0000
Manifest this update: Wed 05 Nov 2025 03:00:22 +0000
Manifest next update: Thu 06 Nov 2025 03:00:22 +0000
Files and hashes: 1: LtQIejcn8EfglttpLgA9bAET8eI.crl (hash: S3gwKgrauLPshePXJNCWcqO8MkTF6hRSDAohYfbuSr4=)
2: VNwylB5jzhJFsQw7XhMnpKhm9hM.roa (hash: PIi7FYjJvsTdIlhqRHGUehYSEppzu0jevMxOXzAs2Gs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/LtQIejcn8EfglttpLgA9bAET8eI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/LtQIejcn8EfglttpLgA9bAET8eI.mft
rsync://rpki.ripe.net/repository/DEFAULT/LtQIejcn8EfglttpLgA9bAET8eI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:4e:2f:1c:e7:1d:72:33:6a:23:18:62:fc:ab:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ed4087a3727f047e096db692e003d6c0113f1e2
Validity
Not Before: Nov 5 03:00:22 2025 GMT
Not After : Nov 6 03:00:22 2025 GMT
Subject: CN=c4be08b1b622f9ecf3b5ef07174d5bc7159b49e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d8:72:d9:6f:34:b1:b6:7a:5f:7f:c7:85:b2:
61:87:0f:9d:64:8c:4d:d2:cf:01:36:fd:9b:9e:48:
4d:4a:a9:d3:83:a2:6d:2d:2a:13:b0:ef:1e:62:ce:
8b:de:aa:f8:d4:96:6e:37:ad:58:6d:18:7d:c6:eb:
ef:26:f8:b3:bd:5e:08:0e:2f:62:84:56:4e:2e:f1:
e8:09:eb:62:35:1e:4a:d3:db:b8:c7:dd:1c:b1:23:
43:42:64:81:2d:cc:dd:8a:a0:cb:08:6d:0e:77:11:
7c:cd:66:61:97:e9:33:84:3f:b0:1d:da:7f:ad:63:
bc:35:8d:fd:c4:dc:c6:c7:3a:c5:ee:6d:b9:b7:42:
e9:a4:9e:13:66:c3:0f:72:e7:9c:4a:32:fb:35:77:
ea:6e:57:94:49:61:d4:35:6c:4b:2b:36:1d:5b:71:
4f:c6:f1:f8:b8:bd:74:5c:7a:5a:dd:a0:ce:32:89:
94:ad:12:eb:9f:b1:9e:35:71:b6:ee:9d:70:76:aa:
97:83:9e:12:90:74:22:33:4e:04:ce:6a:c3:a5:38:
9c:4a:b4:a8:dd:af:bb:bf:d8:1c:d1:8e:a0:12:33:
2d:72:28:2c:ef:ac:fa:d0:19:c5:6d:2d:23:02:97:
1f:2d:9c:1a:73:f8:c7:9c:5d:28:6a:1c:f3:9e:3a:
ed:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:BE:08:B1:B6:22:F9:EC:F3:B5:EF:07:17:4D:5B:C7:15:9B:49:E7
X509v3 Authority Key Identifier:
keyid:2E:D4:08:7A:37:27:F0:47:E0:96:DB:69:2E:00:3D:6C:01:13:F1:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LtQIejcn8EfglttpLgA9bAET8eI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/LtQIejcn8EfglttpLgA9bAET8eI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/LtQIejcn8EfglttpLgA9bAET8eI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:d3:f7:a5:45:52:d6:8f:26:70:f8:75:19:db:68:35:03:c8:
e2:4a:4e:e5:bf:b8:28:0f:42:12:f5:a5:c4:c5:75:c7:d0:1b:
d4:8a:75:f0:f6:fa:6e:2b:a5:68:25:80:db:78:74:f2:d6:85:
d4:4d:fc:f0:7f:cb:cb:75:89:84:12:13:1a:d9:20:25:10:54:
58:e8:5d:7a:61:de:50:5a:49:74:cb:fc:76:09:1c:6a:ab:82:
c7:bb:45:4e:a1:9b:d2:7e:11:c8:66:62:c4:21:a9:4b:61:d7:
b2:37:d3:23:96:67:ab:5b:cb:7a:14:76:65:bf:0a:7e:19:e2:
79:c8:3f:c2:7c:2c:84:09:b2:c2:0f:40:05:1d:87:2b:24:f8:
de:a2:a5:10:85:cd:ff:9c:3a:be:b6:8a:bc:02:7c:93:b3:aa:
8d:e7:53:8f:a8:01:05:ce:46:cc:9b:3b:20:ce:86:8f:0f:75:
36:91:c3:30:e2:03:c0:7b:21:e5:90:d3:42:55:bd:6c:db:fc:
a3:81:4a:84:94:7f:03:ac:55:a3:78:3f:d8:11:e1:49:bb:d7:
29:a1:e3:d1:08:d1:74:7d:47:bb:c6:dd:2d:36:50:d6:f1:d1:
96:4a:ce:13:12:13:ec:be:92:ef:9b:12:51:55:cd:f7:d4:23:
28:4a:0a:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpR9U4vHOcdcjNqIxhi/KtLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlZDQwODdhMzcyN2YwNDdlMDk2ZGI2OTJlMDAzZDZjMDEx
M2YxZTIwHhcNMjUxMTA1MDMwMDIyWhcNMjUxMTA2MDMwMDIyWjAzMTEwLwYDVQQD
EyhjNGJlMDhiMWI2MjJmOWVjZjNiNWVmMDcxNzRkNWJjNzE1OWI0OWU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNhy2W80sbZ6X3/HhbJhhw+dZIxN
0s8BNv2bnkhNSqnTg6JtLSoTsO8eYs6L3qr41JZuN61YbRh9xuvvJvizvV4IDi9i
hFZOLvHoCetiNR5K09u4x90csSNDQmSBLczdiqDLCG0OdxF8zWZhl+kzhD+wHdp/
rWO8NY39xNzGxzrF7m25t0LppJ4TZsMPcuecSjL7NXfqbleUSWHUNWxLKzYdW3FP
xvH4uL10XHpa3aDOMomUrRLrn7GeNXG27p1wdqqXg54SkHQiM04EzmrDpTicSrSo
3a+7v9gc0Y6gEjMtcigs76z60BnFbS0jApcfLZwac/jHnF0oahzznjrtIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMS+CLG2Ivns87XvBxdNW8cVm0nnMB8GA1UdIwQY
MBaAFC7UCHo3J/BH4JbbaS4APWwBE/HiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHRRSWVqY244RWZnbHR0cExnQTliQUVUOGVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC81MzlkZGItNTA3OC00ODFjLTliNzIt
Y2M4NGViNDJhYzM5LzEvTHRRSWVqY244RWZnbHR0cExnQTliQUVUOGVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC81MzlkZGItNTA3OC00ODFjLTliNzItY2M4NGViNDJhYzM5
LzEvTHRRSWVqY244RWZnbHR0cExnQTliQUVUOGVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArNP3pUVS
1o8mcPh1GdtoNQPI4kpO5b+4KA9CEvWlxMV1x9Ab1Ip18Pb6biulaCWA23h08taF
1E388H/Ly3WJhBITGtkgJRBUWOhdemHeUFpJdMv8dgkcaquCx7tFTqGb0n4RyGZi
xCGpS2HXsjfTI5Znq1vLehR2Zb8Kfhniecg/wnwshAmywg9ABR2HKyT43qKlEIXN
/5w6vraKvAJ8k7OqjedTj6gBBc5GzJs7IM6Gjw91NpHDMOIDwHsh5ZDTQlW9bNv8
o4FKhJR/A6xVo3g/2BHhSbvXKaHj0QjRdH1Hu8bdLTZQ1vHRlkrOExIT7L6S75sS
UVXN99QjKEoK6g==
-----END CERTIFICATE-----
Generated at Wed Nov 5 12:08:54 2025 by rpki-client