Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft
File: LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft (raw, json)
Hash identifier: sdB4iDNiXuCzjFc08Ddcq33wHiXFhxcV0dxwmTeT46s=
Subject key identifier: A2:B2:A9:07:D8:32:A9:15:52:26:93:A3:28:1D:7C:3B:03:B7:E8:66
Authority key identifier: 2C:D4:1B:CC:3C:D7:3E:0D:C7:F7:E9:5B:5D:0D:CA:6D:68:57:BE:DC
Certificate issuer: /CN=2cd41bcc3cd73e0dc7f7e95b5d0dca6d6857bedc
Certificate serial: 019A4FD02AD21A16DA474B97075AF752DBAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft
Manifest number: 1707
Signing time: Tue 04 Nov 2025 17:00:33 +0000
Manifest this update: Tue 04 Nov 2025 17:00:33 +0000
Manifest next update: Wed 05 Nov 2025 17:00:33 +0000
Files and hashes: 1: LNQbzDzXPg3H9-lbXQ3KbWhXvtw.crl (hash: 7GA5sAlipecUVa5B2Z1PJIV0p9DtOa7Dyxwxd2aLDwI=)
2: k9ESiOC05FAL5OZXSx8n68sQwKU.roa (hash: x3z9I2/sycjs0uOQJeLYl+8lQLkZ9uNIg5/ImA60dEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:2a:d2:1a:16:da:47:4b:97:07:5a:f7:52:db:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cd41bcc3cd73e0dc7f7e95b5d0dca6d6857bedc
Validity
Not Before: Nov 4 17:00:33 2025 GMT
Not After : Nov 5 17:00:33 2025 GMT
Subject: CN=a2b2a907d832a915522693a3281d7c3b03b7e866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7b:57:72:bc:92:6b:ce:c8:df:60:08:24:b0:
9a:de:4e:d6:25:91:2c:f1:7a:78:e0:63:8e:90:57:
14:83:ca:cc:df:2b:e8:4f:e2:9c:f2:ac:e2:14:50:
14:77:27:76:a9:df:8e:53:ff:fd:fa:b6:35:b1:42:
2b:7e:44:cc:36:fd:e4:46:8b:b2:4d:9a:5a:82:7f:
a8:23:b0:b6:cf:56:c9:0b:b6:de:b5:b8:01:c7:45:
fa:6f:ae:fd:6a:3e:cc:2f:76:e3:5c:a4:df:81:f3:
49:85:a5:17:ff:d5:5f:b4:88:69:54:90:06:0f:31:
7c:e2:08:dd:b4:f2:85:f5:1e:f9:7c:b9:2b:0f:02:
48:a7:af:6c:86:7a:61:65:ba:e3:6a:11:16:15:83:
b2:1a:90:3a:5c:83:5f:2a:c8:b3:63:14:5f:0f:3e:
a9:2b:8c:45:06:e3:a3:9c:7b:88:1c:4f:2e:33:5b:
57:9a:12:5a:74:fd:ee:ec:cf:8d:cd:06:ea:fc:40:
cc:bf:cf:27:00:4b:b5:48:19:ac:6a:d1:80:a4:50:
e8:22:8d:ef:eb:0e:ac:56:8d:49:5e:6f:a8:b8:c0:
ea:7b:f2:93:7b:5a:0f:44:c0:99:79:1d:42:b7:19:
70:80:86:85:11:98:aa:32:69:40:c3:ba:de:c2:96:
00:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:B2:A9:07:D8:32:A9:15:52:26:93:A3:28:1D:7C:3B:03:B7:E8:66
X509v3 Authority Key Identifier:
keyid:2C:D4:1B:CC:3C:D7:3E:0D:C7:F7:E9:5B:5D:0D:CA:6D:68:57:BE:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:e5:05:a8:4b:e2:78:bd:38:23:f4:5f:2f:01:25:d6:ce:27:
3c:b7:a2:37:0d:4e:1d:83:78:84:ae:75:45:c3:f6:1f:f6:50:
cf:43:7d:a7:f2:a5:9a:74:51:51:6f:d0:53:c8:e3:0d:f0:aa:
f2:b9:f5:de:69:eb:33:ae:0b:c3:b8:40:42:d3:52:5a:ef:e1:
c8:7c:95:10:9d:3a:91:24:cc:6c:94:34:be:a9:19:6f:3c:1f:
74:a5:21:9b:3d:18:e1:aa:e0:37:e8:51:0a:40:d7:7b:91:3a:
15:b8:f8:9f:33:14:56:06:b3:e2:1d:e5:fb:9a:47:3b:a8:99:
00:09:e0:98:5c:59:08:4c:73:d8:85:58:dd:4c:87:3d:b7:53:
df:60:9c:45:65:a4:da:cc:26:17:b1:93:7d:8f:80:11:9a:2d:
68:3a:62:06:92:a6:4c:76:4f:97:b2:f1:4c:37:27:0c:85:1a:
31:b9:1b:e8:6f:4f:cd:f7:8b:80:96:3f:f8:7a:2e:f4:07:fd:
37:cc:4d:15:be:da:f6:4b:ee:1b:1c:cb:21:01:66:dc:99:cf:
af:dc:ad:ea:ea:bf:b1:49:8d:90:ea:d5:55:fb:ab:86:c5:a4:
2e:c7:f0:90:0e:31:42:a1:da:84:ce:c7:80:68:3a:69:36:63:
e2:64:f2:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpP0CrSGhbaR0uXB1r3UtuuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjZDQxYmNjM2NkNzNlMGRjN2Y3ZTk1YjVkMGRjYTZkNjg1
N2JlZGMwHhcNMjUxMTA0MTcwMDMzWhcNMjUxMTA1MTcwMDMzWjAzMTEwLwYDVQQD
EyhhMmIyYTkwN2Q4MzJhOTE1NTIyNjkzYTMyODFkN2MzYjAzYjdlODY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHtXcrySa87I32AIJLCa3k7WJZEs
8Xp44GOOkFcUg8rM3yvoT+Kc8qziFFAUdyd2qd+OU//9+rY1sUIrfkTMNv3kRouy
TZpagn+oI7C2z1bJC7betbgBx0X6b679aj7ML3bjXKTfgfNJhaUX/9VftIhpVJAG
DzF84gjdtPKF9R75fLkrDwJIp69shnphZbrjahEWFYOyGpA6XINfKsizYxRfDz6p
K4xFBuOjnHuIHE8uM1tXmhJadP3u7M+NzQbq/EDMv88nAEu1SBmsatGApFDoIo3v
6w6sVo1JXm+ouMDqe/KTe1oPRMCZeR1CtxlwgIaFEZiqMmlAw7rewpYANQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKKyqQfYMqkVUiaToygdfDsDt+hmMB8GA1UdIwQY
MBaAFCzUG8w81z4Nx/fpW10Nym1oV77cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTE5RYnpEelhQZzNIOS1sYlhRM0tiV2hYdnR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC8xYWQ5YmYtMDMyMi00NTM0LWIwMDkt
ZTZlOTFiZjA1MmZlLzEvTE5RYnpEelhQZzNIOS1sYlhRM0tiV2hYdnR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC8xYWQ5YmYtMDMyMi00NTM0LWIwMDktZTZlOTFiZjA1MmZl
LzEvTE5RYnpEelhQZzNIOS1sYlhRM0tiV2hYdnR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYeUFqEvi
eL04I/RfLwEl1s4nPLeiNw1OHYN4hK51RcP2H/ZQz0N9p/KlmnRRUW/QU8jjDfCq
8rn13mnrM64Lw7hAQtNSWu/hyHyVEJ06kSTMbJQ0vqkZbzwfdKUhmz0Y4argN+hR
CkDXe5E6Fbj4nzMUVgaz4h3l+5pHO6iZAAngmFxZCExz2IVY3UyHPbdT32CcRWWk
2swmF7GTfY+AEZotaDpiBpKmTHZPl7LxTDcnDIUaMbkb6G9PzfeLgJY/+Hou9Af9
N8xNFb7a9kvuGxzLIQFm3JnPr9yt6uq/sUmNkOrVVfurhsWkLsfwkA4xQqHahM7H
gGg6aTZj4mTy3w==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:21:47 2025 by rpki-client