Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/8f4a2b-492c-4331-84f8-026e0a4ccaaa/1/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.mft
File: lcsYx-zmvdyVcPN_94ZgtY5sIEQ.mft (raw, json)
Hash identifier: HFKStB1Sa/FHSzcDI74SHH6mwG1b4fH0QN5hpdtOkO4=
Subject key identifier: 05:17:F7:10:3C:E5:DE:C0:DC:4F:27:9B:26:33:B5:B5:35:55:FB:B9
Authority key identifier: 95:CB:18:C7:EC:E6:BD:DC:95:70:F3:7F:F7:86:60:B5:8E:6C:20:44
Certificate issuer: /CN=95cb18c7ece6bddc9570f37ff78660b58e6c2044
Certificate serial: 019A522C35BC94091E6AF994731892380198
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/8f4a2b-492c-4331-84f8-026e0a4ccaaa/1/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.mft
Manifest number: 0427
Signing time: Wed 05 Nov 2025 04:00:20 +0000
Manifest this update: Wed 05 Nov 2025 04:00:20 +0000
Manifest next update: Thu 06 Nov 2025 04:00:20 +0000
Files and hashes: 1: 4d05APiOYCmE2eSMktC6x0oiOVY.roa (hash: 4uLCDeXqKEU2GmyDcCV44Z6CSoTvWfkLJ1BLXOmGGm4=)
2: lcsYx-zmvdyVcPN_94ZgtY5sIEQ.crl (hash: dzLpBQBr1uxYYUAU6gDbk5thzD9Cd1p2q7KNb7HaKP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/8f4a2b-492c-4331-84f8-026e0a4ccaaa/1/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/8f4a2b-492c-4331-84f8-026e0a4ccaaa/1/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:35:bc:94:09:1e:6a:f9:94:73:18:92:38:01:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95cb18c7ece6bddc9570f37ff78660b58e6c2044
Validity
Not Before: Nov 5 04:00:20 2025 GMT
Not After : Nov 6 04:00:20 2025 GMT
Subject: CN=0517f7103ce5dec0dc4f279b2633b5b53555fbb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e0:c2:9f:3a:d6:98:89:45:68:ed:e7:c8:0c:
2d:5f:44:56:51:6f:68:30:6d:95:67:e0:21:84:d9:
e9:a5:16:94:9a:14:f0:22:1a:e6:d7:e3:9b:4f:1c:
83:2d:97:f9:e5:d8:5f:31:b9:4b:82:4b:a4:35:eb:
30:86:b2:68:17:88:e9:e9:c7:28:37:f2:9f:ae:48:
e9:ff:27:14:a3:07:e2:2d:a3:00:f8:29:b0:ab:1e:
bb:87:1c:da:67:12:24:78:d9:55:a7:27:c2:91:41:
a5:fd:be:25:b0:b0:32:c9:2a:be:31:06:aa:9d:33:
c6:d8:34:9c:42:b8:21:a6:6c:f9:0d:cc:3d:ec:f0:
22:d6:dc:1b:1f:bd:59:68:3b:8d:f4:03:be:cd:e3:
41:6a:95:12:f3:0c:74:4f:85:99:f8:8a:1d:6f:d5:
65:dd:dd:36:bf:18:88:86:aa:7b:13:b5:1d:8d:d1:
4e:80:de:8a:73:29:e4:6c:80:72:2e:60:cb:95:c7:
50:91:8d:55:7f:de:18:2f:e5:71:a3:d5:79:e7:1c:
03:ba:b4:8b:24:7d:78:1f:89:24:a7:5b:e2:06:cf:
a7:cf:ef:8a:94:66:0d:45:e9:f3:57:f9:6e:95:62:
9a:aa:2a:9a:e8:2f:2c:8e:bc:3b:56:2c:93:38:b6:
73:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:17:F7:10:3C:E5:DE:C0:DC:4F:27:9B:26:33:B5:B5:35:55:FB:B9
X509v3 Authority Key Identifier:
keyid:95:CB:18:C7:EC:E6:BD:DC:95:70:F3:7F:F7:86:60:B5:8E:6C:20:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8f4a2b-492c-4331-84f8-026e0a4ccaaa/1/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8f4a2b-492c-4331-84f8-026e0a4ccaaa/1/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:8a:48:fb:97:8f:b2:53:43:4d:d5:f6:0f:41:f0:43:c1:c3:
53:77:60:74:06:72:11:11:ec:26:0f:7d:1c:05:48:31:6f:3e:
0a:b1:af:62:2d:9a:55:12:31:cf:9a:13:ae:5a:51:5e:e5:bc:
ee:e2:d5:3f:33:40:df:2f:35:8a:84:bc:84:e9:c2:f5:c5:ef:
47:ec:b7:56:35:e4:ff:15:0e:ff:6e:77:f3:7f:0a:b8:ec:f0:
2f:94:99:7e:ef:ca:45:44:06:a0:03:3c:d9:19:ce:dc:b9:a1:
99:b2:4b:75:ce:a5:c9:1e:ab:d9:02:b7:43:1c:fc:66:d9:dd:
46:80:9f:d4:64:34:00:c8:8f:41:7c:8e:52:e6:de:c5:df:c1:
18:a3:7a:11:c5:4a:19:36:7f:dd:5e:a7:f9:dd:db:25:ea:6f:
c5:a6:98:16:c0:20:c6:5d:02:08:97:37:7e:c8:58:ed:0a:5c:
8c:71:82:1c:9c:01:20:d9:16:80:30:0e:e3:b6:e1:dc:9a:3d:
6f:9c:46:c9:c9:8c:fc:5e:f3:a8:e3:ee:25:04:94:02:90:96:
c8:df:ed:7d:f2:28:9d:8d:48:c5:9a:c8:22:00:dd:fc:c2:c9:
1c:56:e2:84:0e:94:ad:70:7d:36:f8:bd:b1:26:0b:8c:de:2f:
3f:fc:1f:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpSLDW8lAkeavmUcxiSOAGYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1Y2IxOGM3ZWNlNmJkZGM5NTcwZjM3ZmY3ODY2MGI1OGU2
YzIwNDQwHhcNMjUxMTA1MDQwMDIwWhcNMjUxMTA2MDQwMDIwWjAzMTEwLwYDVQQD
EygwNTE3ZjcxMDNjZTVkZWMwZGM0ZjI3OWIyNjMzYjViNTM1NTVmYmI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+DCnzrWmIlFaO3nyAwtX0RWUW9o
MG2VZ+AhhNnppRaUmhTwIhrm1+ObTxyDLZf55dhfMblLgkukNeswhrJoF4jp6cco
N/Kfrkjp/ycUowfiLaMA+Cmwqx67hxzaZxIkeNlVpyfCkUGl/b4lsLAyySq+MQaq
nTPG2DScQrghpmz5Dcw97PAi1twbH71ZaDuN9AO+zeNBapUS8wx0T4WZ+Iodb9Vl
3d02vxiIhqp7E7UdjdFOgN6KcynkbIByLmDLlcdQkY1Vf94YL+Vxo9V55xwDurSL
JH14H4kkp1viBs+nz++KlGYNRenzV/lulWKaqiqa6C8sjrw7ViyTOLZziwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAUX9xA85d7A3E8nmyYztbU1Vfu5MB8GA1UdIwQY
MBaAFJXLGMfs5r3clXDzf/eGYLWObCBEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGNzWXgtem12ZHlWY1BOXzk0Wmd0WTVzSUVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi84ZjRhMmItNDkyYy00MzMxLTg0Zjgt
MDI2ZTBhNGNjYWFhLzEvbGNzWXgtem12ZHlWY1BOXzk0Wmd0WTVzSUVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi84ZjRhMmItNDkyYy00MzMxLTg0ZjgtMDI2ZTBhNGNjYWFh
LzEvbGNzWXgtem12ZHlWY1BOXzk0Wmd0WTVzSUVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqYpI+5eP
slNDTdX2D0HwQ8HDU3dgdAZyERHsJg99HAVIMW8+CrGvYi2aVRIxz5oTrlpRXuW8
7uLVPzNA3y81ioS8hOnC9cXvR+y3VjXk/xUO/253838KuOzwL5SZfu/KRUQGoAM8
2RnO3LmhmbJLdc6lyR6r2QK3Qxz8ZtndRoCf1GQ0AMiPQXyOUubexd/BGKN6EcVK
GTZ/3V6n+d3bJepvxaaYFsAgxl0CCJc3fshY7QpcjHGCHJwBINkWgDAO47bh3Jo9
b5xGycmM/F7zqOPuJQSUApCWyN/tffIonY1IxZrIIgDd/MLJHFbihA6UrXB9Nvi9
sSYLjN4vP/wfIA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 14:31:36 2025 by rpki-client