Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.mft
File: LRjYfouf6XS-3wl_iJSDmIYaxH4.mft (raw, json)
Hash identifier: na3JTYakEqYeE+ng2pgupbuQkvMuLU+ngk++4qxyO4c=
Subject key identifier: 85:A9:09:29:8B:DF:42:25:9A:CD:92:67:63:5B:1C:82:F3:E9:A7:94
Authority key identifier: 2D:18:D8:7E:8B:9F:E9:74:BE:DF:09:7F:88:94:83:98:86:1A:C4:7E
Certificate issuer: /CN=2d18d87e8b9fe974bedf097f88948398861ac47e
Certificate serial: 019A4EF4228E23301C43BA5D97A33200F021
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRjYfouf6XS-3wl_iJSDmIYaxH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.mft
Manifest number: 0FBB
Signing time: Tue 04 Nov 2025 13:00:13 +0000
Manifest this update: Tue 04 Nov 2025 13:00:13 +0000
Manifest next update: Wed 05 Nov 2025 13:00:13 +0000
Files and hashes: 1: D0SM7svQIwgtTWtBXQRfVaYEWCM.roa (hash: 0gzyVGki8KAciWCmOf7f1a5tlOgoH/nOkPBzCHojuSo=)
2: LRjYfouf6XS-3wl_iJSDmIYaxH4.crl (hash: x7BoUmcIVEe1ty9U/43edzmwbvjHSS1MQChXN0ajXlw=)
3: _IXLnCzw_zVB3dV_MJacG4jX80Y.roa (hash: Gt8+0DW6xRdgGsnmBSXKglilyEwDNEUME1kVSSFIiv8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LRjYfouf6XS-3wl_iJSDmIYaxH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:22:8e:23:30:1c:43:ba:5d:97:a3:32:00:f0:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d18d87e8b9fe974bedf097f88948398861ac47e
Validity
Not Before: Nov 4 13:00:13 2025 GMT
Not After : Nov 5 13:00:13 2025 GMT
Subject: CN=85a909298bdf42259acd9267635b1c82f3e9a794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:37:1b:a0:bf:d9:99:6e:b3:17:97:74:0e:c5:
92:3f:09:38:8c:69:6f:b3:42:00:26:31:c4:df:f9:
06:fb:63:b3:b1:39:4b:5e:22:5e:4a:6e:0f:f7:43:
01:a9:b9:4c:00:28:a7:39:a9:04:f1:71:7d:09:5d:
41:1d:bb:32:04:97:06:44:ae:62:06:f3:b7:6d:eb:
d5:48:a3:64:a9:0e:94:b0:ea:65:74:9d:04:6c:9b:
2d:81:fe:95:9c:67:17:63:74:f2:ec:04:09:d8:c0:
d8:70:e7:dd:46:5a:b8:17:d1:4c:32:54:1f:f8:d2:
f9:fa:08:3a:47:0d:ba:82:58:b8:0e:ea:92:b0:cd:
02:79:87:a4:43:b8:46:d6:8d:16:09:a6:14:9b:da:
77:18:91:fc:81:e0:05:81:86:fe:51:ec:dc:c8:4b:
1f:8c:00:aa:b8:19:90:a8:7a:c3:9b:17:e4:d0:e8:
f5:c8:03:ca:2b:0f:e1:ea:9d:1e:0d:01:45:d7:1b:
66:09:7c:3c:43:fc:a8:d1:33:89:46:77:24:0d:ed:
33:93:31:2a:6d:62:9f:3a:6d:4c:e0:09:88:3f:9b:
71:97:39:fc:d1:ef:6c:d3:56:60:60:93:2a:08:dc:
b7:a2:d7:27:52:0a:01:c8:64:29:54:ba:40:0e:e7:
e1:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:A9:09:29:8B:DF:42:25:9A:CD:92:67:63:5B:1C:82:F3:E9:A7:94
X509v3 Authority Key Identifier:
keyid:2D:18:D8:7E:8B:9F:E9:74:BE:DF:09:7F:88:94:83:98:86:1A:C4:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRjYfouf6XS-3wl_iJSDmIYaxH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:e2:f5:c1:05:08:43:39:04:e0:f1:7c:81:76:a7:2e:cf:83:
91:76:d6:1c:5e:73:ac:c9:89:e0:a6:bd:34:57:e6:e9:66:68:
b1:5c:58:7e:ff:3f:b4:f0:7c:f3:eb:bb:9a:c1:d9:ed:25:d9:
4c:23:ca:69:d3:17:a8:8f:27:8b:38:bb:71:fc:2e:70:57:b8:
63:2b:10:fe:c3:43:69:22:c8:7a:56:0f:0c:9c:48:93:e5:57:
d1:ab:51:7f:7f:18:7a:fa:18:65:79:42:40:d4:ee:6a:29:f1:
d1:9d:e5:23:79:e9:8d:02:1f:78:ea:26:48:09:a1:26:c2:a5:
1a:74:76:7e:37:3f:87:74:e1:61:29:b9:60:78:ee:de:5f:c9:
d9:09:c9:1c:c0:9b:ad:ab:ee:0e:8f:0f:02:2b:e7:e8:bb:0f:
fd:bc:30:71:a1:29:3e:19:73:8f:73:f0:69:f2:4d:5f:82:1e:
54:31:02:40:7b:cf:c8:bf:3f:9c:f9:dd:09:79:42:a1:21:70:
c4:db:28:7c:e4:e7:b8:8f:d5:33:74:b0:9e:6f:44:16:31:23:
4b:5d:c1:4a:9e:9e:06:f4:95:ee:aa:12:8e:35:d0:49:96:b5:
2d:fb:6b:c3:55:84:83:d8:65:5c:21:ac:35:8e:27:82:86:85:
63:0e:f4:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9CKOIzAcQ7pdl6MyAPAhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkMThkODdlOGI5ZmU5NzRiZWRmMDk3Zjg4OTQ4Mzk4ODYx
YWM0N2UwHhcNMjUxMTA0MTMwMDEzWhcNMjUxMTA1MTMwMDEzWjAzMTEwLwYDVQQD
Eyg4NWE5MDkyOThiZGY0MjI1OWFjZDkyNjc2MzViMWM4MmYzZTlhNzk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2DcboL/ZmW6zF5d0DsWSPwk4jGlv
s0IAJjHE3/kG+2OzsTlLXiJeSm4P90MBqblMACinOakE8XF9CV1BHbsyBJcGRK5i
BvO3bevVSKNkqQ6UsOpldJ0EbJstgf6VnGcXY3Ty7AQJ2MDYcOfdRlq4F9FMMlQf
+NL5+gg6Rw26gli4DuqSsM0CeYekQ7hG1o0WCaYUm9p3GJH8geAFgYb+UezcyEsf
jACquBmQqHrDmxfk0Oj1yAPKKw/h6p0eDQFF1xtmCXw8Q/yo0TOJRnckDe0zkzEq
bWKfOm1M4AmIP5txlzn80e9s01ZgYJMqCNy3otcnUgoByGQpVLpADufhFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIWpCSmL30Ilms2SZ2NbHILz6aeUMB8GA1UdIwQY
MBaAFC0Y2H6Ln+l0vt8Jf4iUg5iGGsR+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFJqWWZvdWY2WFMtM3dsX2lKU0RtSVlheEg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9lYzg1ZjUtN2Y2NS00OWYyLTk4Yjkt
Y2YwOTA3MTMzMjQxLzEvTFJqWWZvdWY2WFMtM3dsX2lKU0RtSVlheEg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9lYzg1ZjUtN2Y2NS00OWYyLTk4YjktY2YwOTA3MTMzMjQx
LzEvTFJqWWZvdWY2WFMtM3dsX2lKU0RtSVlheEg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyeL1wQUI
QzkE4PF8gXanLs+DkXbWHF5zrMmJ4Ka9NFfm6WZosVxYfv8/tPB88+u7msHZ7SXZ
TCPKadMXqI8nizi7cfwucFe4YysQ/sNDaSLIelYPDJxIk+VX0atRf38YevoYZXlC
QNTuainx0Z3lI3npjQIfeOomSAmhJsKlGnR2fjc/h3ThYSm5YHju3l/J2QnJHMCb
ravuDo8PAivn6LsP/bwwcaEpPhlzj3PwafJNX4IeVDECQHvPyL8/nPndCXlCoSFw
xNsofOTnuI/VM3Swnm9EFjEjS13BSp6eBvSV7qoSjjXQSZa1Lftrw1WEg9hlXCGs
NY4ngoaFYw708Q==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:17:13 2025 by rpki-client