Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/e0b67e-2690-4a88-9d16-22e98de26106/1/LuVtTXsdGgbOifdG95tlbHNIxSU.mft
File: LuVtTXsdGgbOifdG95tlbHNIxSU.mft (raw, json)
Hash identifier: +CLC5615D2z07rCaJNbKxLAVRfdN6sk9nD/6BMxxeDw=
Subject key identifier: A3:E0:23:F6:A5:F3:8D:50:BA:C6:53:54:CB:C1:5E:A9:F5:DA:9C:0A
Authority key identifier: 2E:E5:6D:4D:7B:1D:1A:06:CE:89:F7:46:F7:9B:65:6C:73:48:C5:25
Certificate issuer: /CN=2ee56d4d7b1d1a06ce89f746f79b656c7348c525
Certificate serial: 019A27E696B59BE8474E8D53FA892FA765F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LuVtTXsdGgbOifdG95tlbHNIxSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/e0b67e-2690-4a88-9d16-22e98de26106/1/LuVtTXsdGgbOifdG95tlbHNIxSU.mft
Manifest number: 16FC
Signing time: Mon 27 Oct 2025 23:00:14 +0000
Manifest this update: Mon 27 Oct 2025 23:00:14 +0000
Manifest next update: Tue 28 Oct 2025 23:00:14 +0000
Files and hashes: 1: 2aLxopPcHENcfLMPsouZcp1_F6M.roa (hash: h4R/reMNBt8uBqG3DatHK1fJyHrvX4LbUEuuPBCoJK8=)
2: LuVtTXsdGgbOifdG95tlbHNIxSU.crl (hash: DxSkTTB0q2kDz2wmyF0sSNRSr+QJXghf+PhCQfBTxy8=)
3: VUTE9O5_hq_bVZqW49cK8Uyj9bo.roa (hash: xI9AJIQruyMmhbpTp5z9YUSoSRn5ytxFSzSALijAUX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/e0b67e-2690-4a88-9d16-22e98de26106/1/LuVtTXsdGgbOifdG95tlbHNIxSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/e0b67e-2690-4a88-9d16-22e98de26106/1/LuVtTXsdGgbOifdG95tlbHNIxSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/LuVtTXsdGgbOifdG95tlbHNIxSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:27:e6:96:b5:9b:e8:47:4e:8d:53:fa:89:2f:a7:65:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ee56d4d7b1d1a06ce89f746f79b656c7348c525
Validity
Not Before: Oct 27 23:00:14 2025 GMT
Not After : Oct 28 23:00:14 2025 GMT
Subject: CN=a3e023f6a5f38d50bac65354cbc15ea9f5da9c0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b1:71:a8:24:27:12:37:cb:8c:b3:c4:b3:88:
38:0b:28:af:d0:0d:50:be:0e:56:e0:29:2e:d8:47:
a8:6f:b0:f2:c8:57:d7:0c:ae:54:da:a6:d4:82:9f:
a4:f7:70:01:05:d0:70:f9:0a:73:12:42:bf:2f:54:
dd:6c:9f:94:11:38:00:70:24:95:bf:2e:a5:8a:5c:
dd:57:30:7a:f3:c7:e0:4f:d5:94:35:e0:26:d0:2e:
ff:4c:94:a0:78:e7:b9:39:fe:eb:da:0f:b4:ad:2d:
6d:84:ef:37:64:b4:7c:fc:97:60:1e:4f:c5:5a:53:
4b:2c:55:10:7e:92:a4:57:f7:03:92:80:58:58:35:
38:a1:71:4b:8c:b1:64:bd:c7:f4:4e:44:b0:25:a7:
39:50:0b:39:8b:d9:a6:f2:4f:a3:03:2b:d2:88:68:
da:17:bb:2b:e0:47:c7:86:1d:70:00:ad:81:0f:23:
98:d0:dc:e1:fe:d3:25:67:c8:7e:84:07:dd:0c:2c:
53:36:e5:a0:88:9e:c4:0a:95:65:98:8d:35:af:e4:
8d:76:7d:06:18:6f:11:c6:a0:b1:8b:0b:3b:75:52:
5a:e8:93:e1:65:16:b0:ad:3f:5b:13:03:73:c3:1f:
5d:85:38:a4:5a:75:ed:3d:b4:6e:7e:77:fb:f8:30:
84:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:E0:23:F6:A5:F3:8D:50:BA:C6:53:54:CB:C1:5E:A9:F5:DA:9C:0A
X509v3 Authority Key Identifier:
keyid:2E:E5:6D:4D:7B:1D:1A:06:CE:89:F7:46:F7:9B:65:6C:73:48:C5:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LuVtTXsdGgbOifdG95tlbHNIxSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e0b67e-2690-4a88-9d16-22e98de26106/1/LuVtTXsdGgbOifdG95tlbHNIxSU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e0b67e-2690-4a88-9d16-22e98de26106/1/LuVtTXsdGgbOifdG95tlbHNIxSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:24:f4:82:14:91:51:d7:40:0b:24:f7:2e:cb:59:c6:ca:cf:
15:b9:9b:45:e6:c6:ac:4e:90:04:ad:c4:ea:d3:cb:c4:aa:61:
fd:25:27:5e:3a:62:71:90:11:d1:1d:58:b5:69:c3:e6:62:f8:
20:8d:63:c7:7b:87:d1:c7:8a:ed:80:10:f4:03:e0:92:f6:2a:
22:10:5c:b6:38:2e:30:0d:07:46:23:0c:33:73:76:8a:87:4e:
c2:6a:6f:ec:f2:f0:4f:cd:a3:8d:7f:44:a2:11:ee:f7:0e:aa:
7e:1a:fe:80:f2:14:21:ff:24:9f:bf:07:5f:03:87:88:36:76:
7d:8f:c2:00:d2:2c:6d:59:0b:2d:f9:bd:12:6d:45:74:3f:1a:
ca:86:43:74:f3:0d:fc:0d:56:3c:ea:17:31:29:dd:73:d0:11:
fa:57:d4:6f:97:db:c3:00:d0:55:de:62:fa:d1:67:59:de:ed:
04:fe:e5:c0:e7:8d:53:ae:64:48:83:cd:f1:d8:2a:a1:0b:4a:
16:53:f8:c3:e8:f4:97:0c:09:4a:7b:18:d2:b9:ae:ff:6d:e5:
e9:c7:ba:b5:2c:f3:6d:4b:21:c7:ec:00:ec:57:6d:2c:03:dc:
02:be:41:0b:8a:28:49:5c:05:4c:31:01:a9:26:bc:91:22:2b:
d0:c3:5a:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZon5pa1m+hHTo1T+okvp2X5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlZTU2ZDRkN2IxZDFhMDZjZTg5Zjc0NmY3OWI2NTZjNzM0
OGM1MjUwHhcNMjUxMDI3MjMwMDE0WhcNMjUxMDI4MjMwMDE0WjAzMTEwLwYDVQQD
EyhhM2UwMjNmNmE1ZjM4ZDUwYmFjNjUzNTRjYmMxNWVhOWY1ZGE5YzBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7FxqCQnEjfLjLPEs4g4Cyiv0A1Q
vg5W4Cku2Eeob7DyyFfXDK5U2qbUgp+k93ABBdBw+QpzEkK/L1TdbJ+UETgAcCSV
vy6lilzdVzB688fgT9WUNeAm0C7/TJSgeOe5Of7r2g+0rS1thO83ZLR8/JdgHk/F
WlNLLFUQfpKkV/cDkoBYWDU4oXFLjLFkvcf0TkSwJac5UAs5i9mm8k+jAyvSiGja
F7sr4EfHhh1wAK2BDyOY0Nzh/tMlZ8h+hAfdDCxTNuWgiJ7ECpVlmI01r+SNdn0G
GG8RxqCxiws7dVJa6JPhZRawrT9bEwNzwx9dhTikWnXtPbRufnf7+DCEOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKPgI/al841QusZTVMvBXqn12pwKMB8GA1UdIwQY
MBaAFC7lbU17HRoGzon3RvebZWxzSMUlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHVWdFRYc2RHZ2JPaWZkRzk1dGxiSE5JeFNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9lMGI2N2UtMjY5MC00YTg4LTlkMTYt
MjJlOThkZTI2MTA2LzEvTHVWdFRYc2RHZ2JPaWZkRzk1dGxiSE5JeFNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC9lMGI2N2UtMjY5MC00YTg4LTlkMTYtMjJlOThkZTI2MTA2
LzEvTHVWdFRYc2RHZ2JPaWZkRzk1dGxiSE5JeFNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQyT0ghSR
UddACyT3LstZxsrPFbmbRebGrE6QBK3E6tPLxKph/SUnXjpicZAR0R1YtWnD5mL4
II1jx3uH0ceK7YAQ9APgkvYqIhBctjguMA0HRiMMM3N2iodOwmpv7PLwT82jjX9E
ohHu9w6qfhr+gPIUIf8kn78HXwOHiDZ2fY/CANIsbVkLLfm9Em1FdD8ayoZDdPMN
/A1WPOoXMSndc9AR+lfUb5fbwwDQVd5i+tFnWd7tBP7lwOeNU65kSIPN8dgqoQtK
FlP4w+j0lwwJSnsY0rmu/23l6ce6tSzzbUshx+wA7FdtLAPcAr5BC4ooSVwFTDEB
qSa8kSIr0MNaZQ==
-----END CERTIFICATE-----
Generated at Tue Oct 28 06:48:23 2025 by rpki-client