Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/c48b4c-0221-4646-bb72-05cf9db430b3/1/lUZGXKW4bCWgLlLsvwTEz7wHZU0.mft
File: lUZGXKW4bCWgLlLsvwTEz7wHZU0.mft (raw, json)
Hash identifier: Gttrsmq2RPZumkZuUOqaB98IL4HQ3UN0TtGO/qr80fA=
Subject key identifier: D9:D9:69:67:D7:8E:8B:6C:95:3D:A6:96:E1:04:80:05:41:93:3C:43
Authority key identifier: 95:46:46:5C:A5:B8:6C:25:A0:2E:52:EC:BF:04:C4:CF:BC:07:65:4D
Certificate issuer: /CN=9546465ca5b86c25a02e52ecbf04c4cfbc07654d
Certificate serial: 019A4E4FF0B1E65AFC16BCCEAEB2160DA9C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lUZGXKW4bCWgLlLsvwTEz7wHZU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/c48b4c-0221-4646-bb72-05cf9db430b3/1/lUZGXKW4bCWgLlLsvwTEz7wHZU0.mft
Manifest number: 0557
Signing time: Tue 04 Nov 2025 10:00:53 +0000
Manifest this update: Tue 04 Nov 2025 10:00:53 +0000
Manifest next update: Wed 05 Nov 2025 10:00:53 +0000
Files and hashes: 1: NWUftztBrG96_y2EzypECwRaWiE.roa (hash: iB3abFntFNLTwV5YoQUMjYIpTV58Rd0ggjc38BexLcc=)
2: lUZGXKW4bCWgLlLsvwTEz7wHZU0.crl (hash: lDZk9FfGxt2wY3jy1t2vRVT5LqWctjQj7hRGzKgiJWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/c48b4c-0221-4646-bb72-05cf9db430b3/1/lUZGXKW4bCWgLlLsvwTEz7wHZU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/c48b4c-0221-4646-bb72-05cf9db430b3/1/lUZGXKW4bCWgLlLsvwTEz7wHZU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lUZGXKW4bCWgLlLsvwTEz7wHZU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:f0:b1:e6:5a:fc:16:bc:ce:ae:b2:16:0d:a9:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9546465ca5b86c25a02e52ecbf04c4cfbc07654d
Validity
Not Before: Nov 4 10:00:53 2025 GMT
Not After : Nov 5 10:00:53 2025 GMT
Subject: CN=d9d96967d78e8b6c953da696e104800541933c43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:86:a2:07:a9:83:1d:97:5e:0c:d9:7e:75:f4:
ce:21:1f:cb:af:fc:05:fc:2c:62:77:58:7b:e4:10:
a6:99:e1:f3:3b:d2:0f:1e:30:ad:fc:38:a9:90:1f:
08:70:07:6b:24:49:37:6e:94:38:1a:12:9b:ff:da:
60:8a:29:3c:53:93:c3:cf:d2:5c:87:77:f6:1c:f1:
d1:3c:6e:ef:53:cf:90:79:2b:0b:bc:85:4c:12:71:
f0:56:5d:d9:b9:8d:5e:81:43:65:3b:04:00:bc:5e:
6e:3d:4a:d1:ab:e5:7f:f0:15:2e:a4:de:43:66:f1:
42:10:9a:29:ca:68:07:4e:8e:f9:2c:ca:b6:ba:29:
62:56:69:a7:91:61:05:bb:68:e5:f5:6f:c6:a9:ca:
65:7e:18:4f:4f:c4:7c:e5:0b:60:22:4e:fd:f1:3b:
83:a7:0c:6e:64:3a:c0:c4:ae:20:77:ae:55:fe:f5:
2d:fb:72:77:3f:b1:29:ba:42:97:03:f2:1d:65:f0:
a3:0b:d4:22:ff:c3:70:04:b4:d6:6c:03:b7:30:2a:
85:cf:ec:09:0e:fe:60:11:ba:6e:f9:a8:97:04:a4:
f8:45:cd:7a:ef:19:14:4c:13:9e:d9:64:13:92:1a:
6b:19:42:c8:8d:88:ea:86:f1:fb:9f:68:52:85:05:
a8:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:D9:69:67:D7:8E:8B:6C:95:3D:A6:96:E1:04:80:05:41:93:3C:43
X509v3 Authority Key Identifier:
keyid:95:46:46:5C:A5:B8:6C:25:A0:2E:52:EC:BF:04:C4:CF:BC:07:65:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUZGXKW4bCWgLlLsvwTEz7wHZU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c48b4c-0221-4646-bb72-05cf9db430b3/1/lUZGXKW4bCWgLlLsvwTEz7wHZU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c48b4c-0221-4646-bb72-05cf9db430b3/1/lUZGXKW4bCWgLlLsvwTEz7wHZU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:7b:d4:04:f4:9f:53:e3:ba:0e:f1:38:a1:4a:7f:71:ea:fd:
e2:86:ab:82:78:01:61:78:eb:43:53:c1:54:4b:67:0c:45:cc:
a1:f6:98:33:39:1b:be:5c:c5:34:76:05:19:3b:6a:6c:18:c3:
27:0b:14:9c:aa:66:1f:0f:65:80:41:6f:0c:7b:7b:63:b7:b1:
60:2e:8e:ae:7a:55:96:7b:fc:54:9c:ac:83:40:6e:58:c3:3c:
7d:15:61:4f:04:6b:97:58:61:bd:73:8c:29:50:b5:55:2d:c9:
be:0a:f9:ff:35:62:3a:c1:63:6b:67:55:bc:77:a8:88:44:e2:
e6:ed:e9:3d:96:cc:b7:46:e6:91:39:90:c0:2f:c2:82:16:df:
70:30:34:3a:5a:d2:31:e9:5b:67:23:fb:aa:61:57:79:20:83:
81:5e:e7:f6:55:79:6a:f1:96:bc:f8:9e:a6:bb:c6:95:48:d6:
af:7e:2d:f0:3a:83:18:dd:50:9c:72:f1:ef:82:95:04:5c:02:
f1:91:ef:08:b9:8c:2b:04:4c:ff:86:50:d7:9d:4c:75:be:72:
8d:9f:39:a9:80:85:e4:99:59:b9:ed:a4:42:f3:ac:d5:6c:06:
49:bf:4c:21:36:07:99:e1:51:01:b1:0e:06:9b:fe:ea:df:9e:
0b:56:2d:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOT/Cx5lr8FrzOrrIWDanGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1NDY0NjVjYTViODZjMjVhMDJlNTJlY2JmMDRjNGNmYmMw
NzY1NGQwHhcNMjUxMTA0MTAwMDUzWhcNMjUxMTA1MTAwMDUzWjAzMTEwLwYDVQQD
EyhkOWQ5Njk2N2Q3OGU4YjZjOTUzZGE2OTZlMTA0ODAwNTQxOTMzYzQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1oaiB6mDHZdeDNl+dfTOIR/Lr/wF
/Cxid1h75BCmmeHzO9IPHjCt/DipkB8IcAdrJEk3bpQ4GhKb/9pgiik8U5PDz9Jc
h3f2HPHRPG7vU8+QeSsLvIVMEnHwVl3ZuY1egUNlOwQAvF5uPUrRq+V/8BUupN5D
ZvFCEJopymgHTo75LMq2uiliVmmnkWEFu2jl9W/GqcplfhhPT8R85QtgIk798TuD
pwxuZDrAxK4gd65V/vUt+3J3P7EpukKXA/IdZfCjC9Qi/8NwBLTWbAO3MCqFz+wJ
Dv5gEbpu+aiXBKT4Rc167xkUTBOe2WQTkhprGULIjYjqhvH7n2hShQWofwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNnZaWfXjotslT2mluEEgAVBkzxDMB8GA1UdIwQY
MBaAFJVGRlyluGwloC5S7L8ExM+8B2VNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFVaR1hLVzRiQ1dnTGxMc3Z3VEV6N3dIWlUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9jNDhiNGMtMDIyMS00NjQ2LWJiNzIt
MDVjZjlkYjQzMGIzLzEvbFVaR1hLVzRiQ1dnTGxMc3Z3VEV6N3dIWlUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9jNDhiNGMtMDIyMS00NjQ2LWJiNzItMDVjZjlkYjQzMGIz
LzEvbFVaR1hLVzRiQ1dnTGxMc3Z3VEV6N3dIWlUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfHvUBPSf
U+O6DvE4oUp/cer94oargngBYXjrQ1PBVEtnDEXMofaYMzkbvlzFNHYFGTtqbBjD
JwsUnKpmHw9lgEFvDHt7Y7exYC6OrnpVlnv8VJysg0BuWMM8fRVhTwRrl1hhvXOM
KVC1VS3Jvgr5/zViOsFja2dVvHeoiETi5u3pPZbMt0bmkTmQwC/CghbfcDA0OlrS
MelbZyP7qmFXeSCDgV7n9lV5avGWvPieprvGlUjWr34t8DqDGN1QnHLx74KVBFwC
8ZHvCLmMKwRM/4ZQ151Mdb5yjZ85qYCF5JlZue2kQvOs1WwGSb9MITYHmeFRAbEO
Bpv+6t+eC1YtGg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:54:41 2025 by rpki-client