Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.mft
File: l4jeG3V-qqtedrGW4Xi2C15sJAw.mft (raw, json)
Hash identifier: rwU5ITFXvG8Cj1X152UdgjtmmypPKsY/k+qdd0XTQ9Q=
Subject key identifier: 28:26:7A:B4:A2:99:4D:E4:EC:8D:72:15:9F:32:B4:95:FE:B8:ED:E8
Authority key identifier: 97:88:DE:1B:75:7E:AA:AB:5E:76:B1:96:E1:78:B6:0B:5E:6C:24:0C
Certificate issuer: /CN=9788de1b757eaaab5e76b196e178b60b5e6c240c
Certificate serial: 019A522CDCA52A5DA8AC9F7FF9EFD048BC9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l4jeG3V-qqtedrGW4Xi2C15sJAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.mft
Manifest number: 05E8
Signing time: Wed 05 Nov 2025 04:01:02 +0000
Manifest this update: Wed 05 Nov 2025 04:01:02 +0000
Manifest next update: Thu 06 Nov 2025 04:01:02 +0000
Files and hashes: 1: 0u5MB7MHn7bL2gqyo5sqX2hHnxg.roa (hash: dTLKNW3bqLmuZGafffFw/K7jFyKobZ/sSRa/waRYTh4=)
2: V2RodRkZh7eC6bXk6s50iKPnz20.roa (hash: flwyJ5HDdlUN6kAnMIhAje5bgLCjv6WkxqxL4dovgJw=)
3: l4jeG3V-qqtedrGW4Xi2C15sJAw.crl (hash: 2v0BJWkk8NlnUo5xjfjZri9wQ2WkEcpEB8To/Os40kA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/l4jeG3V-qqtedrGW4Xi2C15sJAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:dc:a5:2a:5d:a8:ac:9f:7f:f9:ef:d0:48:bc:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9788de1b757eaaab5e76b196e178b60b5e6c240c
Validity
Not Before: Nov 5 04:01:02 2025 GMT
Not After : Nov 6 04:01:02 2025 GMT
Subject: CN=28267ab4a2994de4ec8d72159f32b495feb8ede8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ea:54:ce:9a:ba:27:c9:3e:68:b3:16:e0:10:
74:54:d4:71:a0:10:47:de:fb:4d:e3:be:e9:b1:cd:
04:0c:8a:17:2e:13:54:6e:c7:30:5b:d0:17:08:61:
9e:2d:6b:1a:fe:d2:ca:d9:c9:99:d4:c7:18:8a:06:
69:b6:ab:e0:84:86:7c:99:c8:eb:db:ed:32:7d:08:
77:4e:f6:6a:0a:88:47:0e:12:db:2f:0d:3e:68:2e:
5b:ea:ab:69:7c:5b:61:a9:39:de:94:81:8b:4f:42:
43:bf:65:55:1f:02:73:4b:48:ce:81:6c:3e:78:e5:
21:4f:a4:bf:ad:b5:5d:f9:d7:ba:5b:81:c5:94:ff:
bb:ab:8e:2f:d2:8e:73:23:a3:8e:2a:c1:4c:64:55:
0c:c7:3c:d6:06:94:8d:6c:7a:cc:3c:94:7a:7c:1e:
1d:48:d5:09:f6:b5:c6:75:8d:56:e6:18:26:89:4f:
3e:4b:38:e8:3e:87:09:2d:05:f0:d0:8f:65:fa:e0:
6c:f2:f3:b1:01:36:01:44:cc:6e:1d:ed:06:b4:ee:
49:a7:9f:ae:e2:03:ca:59:9a:2b:1e:09:b9:14:aa:
5b:27:d8:1e:03:ae:8d:01:61:67:ee:b9:48:fa:d1:
26:5c:39:28:1a:b4:3f:8d:ad:01:5b:76:d3:23:c3:
af:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:26:7A:B4:A2:99:4D:E4:EC:8D:72:15:9F:32:B4:95:FE:B8:ED:E8
X509v3 Authority Key Identifier:
keyid:97:88:DE:1B:75:7E:AA:AB:5E:76:B1:96:E1:78:B6:0B:5E:6C:24:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4jeG3V-qqtedrGW4Xi2C15sJAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:b7:eb:52:5e:37:79:68:8f:d8:73:77:00:47:23:41:91:3a:
03:aa:e8:b9:22:d5:54:24:3e:fb:ee:1a:ad:80:be:19:92:db:
eb:93:f5:60:d4:ba:b2:07:1a:db:d3:63:d1:46:fc:2f:ce:a1:
37:08:a0:e6:ea:4c:f4:a8:16:49:52:15:8c:0b:32:65:e5:7c:
ef:3e:8c:54:01:20:3e:71:54:87:76:18:7c:2c:f2:e0:6b:93:
2f:7d:72:6a:a3:02:a5:61:ca:70:fd:4d:bb:ec:87:a8:7b:10:
d0:fc:39:73:a2:42:23:d5:59:89:9c:21:52:88:60:08:d7:ce:
50:54:77:97:c3:4b:00:2d:71:2d:b4:76:8a:af:5c:13:7c:16:
b2:50:c4:63:50:0b:3c:37:30:45:f2:c9:bc:07:d5:7b:1b:11:
1f:ab:55:b4:9b:3d:26:f5:e0:f5:da:d5:08:8e:92:21:cb:73:
a1:24:c9:e3:8e:11:5a:7d:38:5b:40:8e:de:a0:9e:8f:2d:9d:
1c:5d:63:ce:28:e1:44:65:67:02:54:6b:45:ba:0b:6f:07:4f:
4e:10:c8:a8:e6:a9:ae:c2:0d:48:1b:97:a5:ce:96:f1:8d:43:
46:ff:89:d6:cf:60:8c:40:94:1c:c3:c9:9a:63:c9:8d:88:52:
a1:7d:7c:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpSLNylKl2orJ9/+e/QSLycMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3ODhkZTFiNzU3ZWFhYWI1ZTc2YjE5NmUxNzhiNjBiNWU2
YzI0MGMwHhcNMjUxMTA1MDQwMTAyWhcNMjUxMTA2MDQwMTAyWjAzMTEwLwYDVQQD
EygyODI2N2FiNGEyOTk0ZGU0ZWM4ZDcyMTU5ZjMyYjQ5NWZlYjhlZGU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApupUzpq6J8k+aLMW4BB0VNRxoBBH
3vtN477psc0EDIoXLhNUbscwW9AXCGGeLWsa/tLK2cmZ1McYigZptqvghIZ8mcjr
2+0yfQh3TvZqCohHDhLbLw0+aC5b6qtpfFthqTnelIGLT0JDv2VVHwJzS0jOgWw+
eOUhT6S/rbVd+de6W4HFlP+7q44v0o5zI6OOKsFMZFUMxzzWBpSNbHrMPJR6fB4d
SNUJ9rXGdY1W5hgmiU8+SzjoPocJLQXw0I9l+uBs8vOxATYBRMxuHe0GtO5Jp5+u
4gPKWZorHgm5FKpbJ9geA66NAWFn7rlI+tEmXDkoGrQ/ja0BW3bTI8OvRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCgmerSimU3k7I1yFZ8ytJX+uO3oMB8GA1UdIwQY
MBaAFJeI3ht1fqqrXnaxluF4tgtebCQMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDRqZUczVi1xcXRlZHJHVzRYaTJDMTVzSkF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy83M2NhNTctNGVlZS00YzI5LTgxNGEt
ODE3OTBmNjFlNzk0LzEvbDRqZUczVi1xcXRlZHJHVzRYaTJDMTVzSkF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy83M2NhNTctNGVlZS00YzI5LTgxNGEtODE3OTBmNjFlNzk0
LzEvbDRqZUczVi1xcXRlZHJHVzRYaTJDMTVzSkF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFrfrUl43
eWiP2HN3AEcjQZE6A6rouSLVVCQ+++4arYC+GZLb65P1YNS6sgca29Nj0Ub8L86h
Nwig5upM9KgWSVIVjAsyZeV87z6MVAEgPnFUh3YYfCzy4GuTL31yaqMCpWHKcP1N
u+yHqHsQ0Pw5c6JCI9VZiZwhUohgCNfOUFR3l8NLAC1xLbR2iq9cE3wWslDEY1AL
PDcwRfLJvAfVexsRH6tVtJs9JvXg9drVCI6SIctzoSTJ444RWn04W0CO3qCejy2d
HF1jzijhRGVnAlRrRboLbwdPThDIqOaprsINSBuXpc6W8Y1DRv+J1s9gjECUHMPJ
mmPJjYhSoX18zQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 12:45:57 2025 by rpki-client