Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.mft
File: L0B96kmdc9fr1OaIJRiGh1Wcsfk.mft (raw, json)
Hash identifier: 5AdmN5zSLMB3XB+v1W2f8BW5r8tlPGB6EDhw/Qoe9eU=
Subject key identifier: D2:4B:10:3C:84:F5:AF:D5:FE:25:55:58:8F:47:9C:49:F4:2A:B5:05
Authority key identifier: 2F:40:7D:EA:49:9D:73:D7:EB:D4:E6:88:25:18:86:87:55:9C:B1:F9
Certificate issuer: /CN=2f407dea499d73d7ebd4e68825188687559cb1f9
Certificate serial: 019A5375FFBFCED6B25ED2B21DDD13AD784F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L0B96kmdc9fr1OaIJRiGh1Wcsfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.mft
Manifest number: 16F5
Signing time: Wed 05 Nov 2025 10:00:33 +0000
Manifest this update: Wed 05 Nov 2025 10:00:33 +0000
Manifest next update: Thu 06 Nov 2025 10:00:33 +0000
Files and hashes: 1: 2y9heUGpm4IABGcsawt9m5ijUw8.roa (hash: 3R+JVKPGvS+pF/oreszpE7P3zqEvUvswY+6b0jSRI3s=)
2: L0B96kmdc9fr1OaIJRiGh1Wcsfk.crl (hash: Fe7rDDmEnXhZmOMwD23+ph/bUWGJb0OJJz4jcsz2JX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/L0B96kmdc9fr1OaIJRiGh1Wcsfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:75:ff:bf:ce:d6:b2:5e:d2:b2:1d:dd:13:ad:78:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f407dea499d73d7ebd4e68825188687559cb1f9
Validity
Not Before: Nov 5 10:00:33 2025 GMT
Not After : Nov 6 10:00:33 2025 GMT
Subject: CN=d24b103c84f5afd5fe2555588f479c49f42ab505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:02:e0:b7:c0:d3:38:8b:b0:cc:2e:a6:f1:d8:
f8:cc:0e:bd:2d:18:33:27:15:1e:ab:a5:f0:ba:7a:
eb:2c:b5:1e:7d:f3:03:6e:c7:5c:9f:e9:6d:db:c7:
e3:fc:ad:ab:b6:9d:88:cf:74:df:28:bf:e7:86:72:
62:21:68:96:75:f1:b7:ba:4d:ad:08:a1:01:81:7e:
c2:65:9e:02:95:0b:4a:f1:51:e7:8d:fe:be:ae:3a:
51:46:5a:7a:b4:23:49:a2:5b:8d:a8:4c:31:bf:c2:
3a:45:42:89:eb:3e:b4:c7:b0:7d:26:cd:77:76:50:
d4:22:f7:75:7a:c9:98:58:90:a8:aa:79:5e:2c:7d:
21:d8:2a:f0:69:27:6e:91:79:db:99:01:7e:44:a3:
88:a2:63:8d:7e:4f:4c:3e:e2:46:11:15:44:a0:76:
50:e8:85:cf:70:dc:90:79:82:d3:f9:2d:f2:ca:e3:
bc:7a:90:4f:d2:03:98:07:88:cd:13:67:55:95:99:
50:23:d7:4b:d4:68:80:2c:87:db:a2:67:34:3e:6c:
b6:c0:44:6f:12:0d:fb:76:34:74:48:de:71:69:f0:
52:f0:ae:c2:3f:63:60:5f:bb:e4:b9:20:5a:eb:01:
8e:d9:73:da:2e:37:0d:9a:db:0f:c8:60:8b:e3:d4:
16:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:4B:10:3C:84:F5:AF:D5:FE:25:55:58:8F:47:9C:49:F4:2A:B5:05
X509v3 Authority Key Identifier:
keyid:2F:40:7D:EA:49:9D:73:D7:EB:D4:E6:88:25:18:86:87:55:9C:B1:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L0B96kmdc9fr1OaIJRiGh1Wcsfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:08:70:3c:62:66:d2:1a:60:37:f7:01:6e:6e:51:cd:b8:93:
b3:0c:94:05:2c:c4:64:45:43:66:ab:58:21:0b:64:6c:67:07:
46:73:60:ba:43:14:74:0c:79:ef:cc:c1:42:51:d6:70:cf:a3:
09:17:9e:13:cd:61:4f:69:f1:c7:b2:b6:c5:ee:46:87:31:e6:
6b:6e:76:3c:36:7c:85:b5:68:ef:04:71:81:be:dd:21:7a:fb:
e0:c7:7a:0d:fa:e9:72:b9:53:28:69:db:ab:6c:84:74:36:3f:
54:68:df:e2:d3:88:ce:21:74:83:80:d7:56:02:ac:a4:3a:82:
e0:5e:a2:cf:35:17:f4:81:6a:2c:68:a0:3e:41:2c:29:df:1e:
75:57:7d:51:25:ad:10:9d:ed:c9:a7:6f:83:f8:0c:7b:1e:14:
6b:f8:93:c1:56:9f:2f:72:7e:b8:f3:bd:8c:e0:48:03:16:3b:
66:d8:2d:b8:e7:88:08:e9:6a:86:bf:ed:d1:9a:3b:d5:55:af:
b6:a4:55:58:ff:c9:ef:2a:03:a5:67:1d:56:75:9c:ca:db:d8:
e6:01:38:ce:c6:30:4b:22:1a:37:70:af:5d:26:c3:71:0a:c4:
95:d1:41:b2:28:7e:b7:58:2a:82:a0:95:ea:b2:f5:47:46:ca:
3d:ff:4e:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpTdf+/ztayXtKyHd0TrXhPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmNDA3ZGVhNDk5ZDczZDdlYmQ0ZTY4ODI1MTg4Njg3NTU5
Y2IxZjkwHhcNMjUxMTA1MTAwMDMzWhcNMjUxMTA2MTAwMDMzWjAzMTEwLwYDVQQD
EyhkMjRiMTAzYzg0ZjVhZmQ1ZmUyNTU1NTg4ZjQ3OWM0OWY0MmFiNTA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQLgt8DTOIuwzC6m8dj4zA69LRgz
JxUeq6XwunrrLLUeffMDbsdcn+lt28fj/K2rtp2Iz3TfKL/nhnJiIWiWdfG3uk2t
CKEBgX7CZZ4ClQtK8VHnjf6+rjpRRlp6tCNJoluNqEwxv8I6RUKJ6z60x7B9Js13
dlDUIvd1esmYWJCoqnleLH0h2CrwaSdukXnbmQF+RKOIomONfk9MPuJGERVEoHZQ
6IXPcNyQeYLT+S3yyuO8epBP0gOYB4jNE2dVlZlQI9dL1GiALIfbomc0Pmy2wERv
Eg37djR0SN5xafBS8K7CP2NgX7vkuSBa6wGO2XPaLjcNmtsPyGCL49QWQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNJLEDyE9a/V/iVVWI9HnEn0KrUFMB8GA1UdIwQY
MBaAFC9AfepJnXPX69TmiCUYhodVnLH5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDBCOTZrbWRjOWZyMU9hSUpSaUdoMVdjc2ZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9iOWE0YWMtYjY3MS00MTFiLWFjNDct
MTkwMDVjYjk4OTg5LzEvTDBCOTZrbWRjOWZyMU9hSUpSaUdoMVdjc2ZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9iOWE0YWMtYjY3MS00MTFiLWFjNDctMTkwMDVjYjk4OTg5
LzEvTDBCOTZrbWRjOWZyMU9hSUpSaUdoMVdjc2ZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOghwPGJm
0hpgN/cBbm5RzbiTswyUBSzEZEVDZqtYIQtkbGcHRnNgukMUdAx578zBQlHWcM+j
CReeE81hT2nxx7K2xe5GhzHma252PDZ8hbVo7wRxgb7dIXr74Md6DfrpcrlTKGnb
q2yEdDY/VGjf4tOIziF0g4DXVgKspDqC4F6izzUX9IFqLGigPkEsKd8edVd9USWt
EJ3tyadvg/gMex4Ua/iTwVafL3J+uPO9jOBIAxY7ZtgtuOeICOlqhr/t0Zo71VWv
tqRVWP/J7yoDpWcdVnWcytvY5gE4zsYwSyIaN3CvXSbDcQrEldFBsih+t1gqgqCV
6rL1R0bKPf9OcA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 13:28:11 2025 by rpki-client