Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.mft
File: lCKVhDGvU0e_2A41UD3bSOcc9NY.mft (raw, json)
Hash identifier: p0ApTb6zKolruM8iuAz6fHkOdeSCx/oNPM8KJ1a88G0=
Subject key identifier: 27:EC:DB:45:0D:7B:0D:B5:4F:2A:DE:6D:11:15:0B:99:5A:83:14:E4
Authority key identifier: 94:22:95:84:31:AF:53:47:BF:D8:0E:35:50:3D:DB:48:E7:1C:F4:D6
Certificate issuer: /CN=9422958431af5347bfd80e35503ddb48e71cf4d6
Certificate serial: 019A4F98DDF63606D722B1159E0708C4241E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lCKVhDGvU0e_2A41UD3bSOcc9NY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.mft
Manifest number: 0641
Signing time: Tue 04 Nov 2025 16:00:09 +0000
Manifest this update: Tue 04 Nov 2025 16:00:09 +0000
Manifest next update: Wed 05 Nov 2025 16:00:09 +0000
Files and hashes: 1: KVI3XedSS3nRQY078sbR6ptPKy0.roa (hash: qBfhwooNDQvXG7IohPemvhH6YU7EvDDYNTu49at8Abg=)
2: lCKVhDGvU0e_2A41UD3bSOcc9NY.crl (hash: 0QpDuzMN3DsQUVLyHODrcUFxzMvwA4+2kKe+xzaAfiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lCKVhDGvU0e_2A41UD3bSOcc9NY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:98:dd:f6:36:06:d7:22:b1:15:9e:07:08:c4:24:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9422958431af5347bfd80e35503ddb48e71cf4d6
Validity
Not Before: Nov 4 16:00:09 2025 GMT
Not After : Nov 5 16:00:09 2025 GMT
Subject: CN=27ecdb450d7b0db54f2ade6d11150b995a8314e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ed:1a:8a:e6:70:3f:30:2e:ab:d3:8d:32:a5:
8b:b2:f8:5e:85:2d:53:6b:80:f5:d3:f5:95:08:dd:
7d:7e:13:68:45:a4:1e:b4:68:1f:ba:5c:2f:a8:51:
ff:d8:72:74:21:fc:93:5b:ac:2b:a6:34:04:ed:6c:
2a:97:1b:82:07:5f:ca:fe:dd:98:20:d2:80:68:6b:
a9:e8:8f:41:a6:f3:78:85:12:76:ef:d4:68:4f:59:
06:d5:91:e5:f4:44:24:7c:34:aa:21:14:88:55:0f:
0e:ef:a0:6c:40:af:35:d2:c2:47:d6:e9:c8:a3:9d:
56:c9:86:24:cf:ca:bb:dd:cf:4b:14:ae:31:d3:43:
e8:37:8b:3c:e4:3d:b9:20:89:28:d5:1e:f2:34:73:
db:18:63:ce:b7:66:d6:25:f0:ba:d9:5a:47:7d:33:
38:5e:3a:56:de:33:61:68:09:7f:a0:d6:92:af:16:
1b:42:d3:1b:61:86:0a:24:b7:e0:78:6a:01:32:bf:
fc:ae:46:be:c8:98:21:b4:b1:e7:7f:d3:bf:bb:6d:
27:35:c2:b4:ff:78:d6:ff:df:fb:4e:24:60:ea:de:
cc:c7:8c:40:fd:d7:5c:13:21:46:61:08:55:e0:9a:
2c:ec:97:8c:e4:8d:5c:e2:9a:60:e3:04:8b:3f:a8:
31:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:EC:DB:45:0D:7B:0D:B5:4F:2A:DE:6D:11:15:0B:99:5A:83:14:E4
X509v3 Authority Key Identifier:
keyid:94:22:95:84:31:AF:53:47:BF:D8:0E:35:50:3D:DB:48:E7:1C:F4:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lCKVhDGvU0e_2A41UD3bSOcc9NY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:15:02:9c:a9:85:fc:e3:92:6f:4a:1a:19:2d:0b:53:d3:83:
ed:23:eb:5d:e2:93:ed:4e:c1:28:74:dc:08:7c:c0:23:45:74:
af:93:16:ad:10:62:13:ee:bc:43:1d:87:78:0c:5a:a5:26:d2:
bb:c6:18:39:04:8c:b6:cf:c1:b0:a5:18:b9:e6:56:10:dc:55:
b2:0e:ca:29:16:04:e5:4a:0f:c2:97:e1:6f:85:8e:d1:9b:50:
61:6a:5e:26:4e:7b:b4:21:65:3d:f0:76:aa:98:09:0f:c2:2b:
52:2d:76:90:6f:4c:fb:ef:ab:50:99:6a:d6:44:0a:f0:da:2d:
a6:2d:bd:84:00:5c:e0:48:95:d5:4a:b8:7b:a8:5e:de:b5:0b:
b2:f1:8c:21:c5:79:ec:a0:3f:0e:4a:25:dd:fa:47:19:68:90:
4c:4e:c9:7b:e0:7c:8a:fc:43:c5:63:22:42:d4:e6:5b:45:d7:
98:bc:7e:7a:ed:7b:cb:a2:6f:a4:52:6d:3b:83:6f:65:e1:6e:
9a:98:4b:d5:14:74:f0:2a:d8:df:39:29:3c:52:7a:f6:8a:7b:
f6:fa:5f:f3:b1:75:7c:6b:1f:e7:93:94:5d:77:82:ec:be:d6:
48:3e:1b:da:d2:95:86:ac:58:35:0f:43:59:8c:0b:db:01:6d:
56:3c:1d:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPmN32NgbXIrEVngcIxCQeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0MjI5NTg0MzFhZjUzNDdiZmQ4MGUzNTUwM2RkYjQ4ZTcx
Y2Y0ZDYwHhcNMjUxMTA0MTYwMDA5WhcNMjUxMTA1MTYwMDA5WjAzMTEwLwYDVQQD
EygyN2VjZGI0NTBkN2IwZGI1NGYyYWRlNmQxMTE1MGI5OTVhODMxNGU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAse0aiuZwPzAuq9ONMqWLsvhehS1T
a4D10/WVCN19fhNoRaQetGgfulwvqFH/2HJ0IfyTW6wrpjQE7WwqlxuCB1/K/t2Y
INKAaGup6I9BpvN4hRJ279RoT1kG1ZHl9EQkfDSqIRSIVQ8O76BsQK810sJH1unI
o51WyYYkz8q73c9LFK4x00PoN4s85D25IIko1R7yNHPbGGPOt2bWJfC62VpHfTM4
XjpW3jNhaAl/oNaSrxYbQtMbYYYKJLfgeGoBMr/8rka+yJghtLHnf9O/u20nNcK0
/3jW/9/7TiRg6t7Mx4xA/ddcEyFGYQhV4Jos7JeM5I1c4ppg4wSLP6gxWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCfs20UNew21TyrebREVC5lagxTkMB8GA1UdIwQY
MBaAFJQilYQxr1NHv9gONVA920jnHPTWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbENLVmhER3ZVMGVfMkE0MVVEM2JTT2NjOU5ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi83NTU0NjgtMmFjYy00ZTliLWE1ZWEt
ZThhMDgzZjU2YWNlLzEvbENLVmhER3ZVMGVfMkE0MVVEM2JTT2NjOU5ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi83NTU0NjgtMmFjYy00ZTliLWE1ZWEtZThhMDgzZjU2YWNl
LzEvbENLVmhER3ZVMGVfMkE0MVVEM2JTT2NjOU5ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjBUCnKmF
/OOSb0oaGS0LU9OD7SPrXeKT7U7BKHTcCHzAI0V0r5MWrRBiE+68Qx2HeAxapSbS
u8YYOQSMts/BsKUYueZWENxVsg7KKRYE5UoPwpfhb4WO0ZtQYWpeJk57tCFlPfB2
qpgJD8IrUi12kG9M+++rUJlq1kQK8Notpi29hABc4EiV1Uq4e6he3rULsvGMIcV5
7KA/Dkol3fpHGWiQTE7Je+B8ivxDxWMiQtTmW0XXmLx+eu17y6JvpFJtO4NvZeFu
mphL1RR08CrY3zkpPFJ69op79vpf87F1fGsf55OUXXeC7L7WSD4b2tKVhqxYNQ9D
WYwL2wFtVjwdnQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 01:16:46 2025 by rpki-client