Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/5b4426-a266-43ce-a9e6-b0e6058d4dd7/1/ltZpZv_aCl0OEx0TSnnZMgXIxVA.mft
File: ltZpZv_aCl0OEx0TSnnZMgXIxVA.mft (raw, json)
Hash identifier: 08z3qkUn5GpN97B75Z0n88lu6n22t/T6Ug2HdHkpBQY=
Subject key identifier: 39:61:CB:5D:FF:2D:CE:24:5C:48:6F:57:52:B8:C7:37:76:32:B5:39
Authority key identifier: 96:D6:69:66:FF:DA:0A:5D:0E:13:1D:13:4A:79:D9:32:05:C8:C5:50
Certificate issuer: /CN=96d66966ffda0a5d0e131d134a79d93205c8c550
Certificate serial: 019A16F32ED1BE4707EC3865367685138549
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ltZpZv_aCl0OEx0TSnnZMgXIxVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/5b4426-a266-43ce-a9e6-b0e6058d4dd7/1/ltZpZv_aCl0OEx0TSnnZMgXIxVA.mft
Manifest number: 016D
Signing time: Fri 24 Oct 2025 16:00:27 +0000
Manifest this update: Fri 24 Oct 2025 16:00:27 +0000
Manifest next update: Sat 25 Oct 2025 16:00:27 +0000
Files and hashes: 1: 3xmsWGneySA3DC-ZXguOS63wWJg.roa (hash: /EUgaqeX+JqBSV8zpMIdPwMfgqWhg29j69UOVD+BYMY=)
2: DqpKurVtsDb39HbxRups2MxtLKc.roa (hash: 7+pcI79ZSotmmRkvmUhbaO+Q2eAfUcTThw6Xq6zn5k4=)
3: ltZpZv_aCl0OEx0TSnnZMgXIxVA.crl (hash: QqOWrnow6crnOH8CKNnZTOklrVKTh9yHV5Zzu0FWBw4=)
4: r8VcOkeggmMRyiGEk0aUS6Ie5Z8.roa (hash: ajFyLHUwhvdifaKddAb9Tcm5mXQRQ+OBh6JdPXJygzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/5b4426-a266-43ce-a9e6-b0e6058d4dd7/1/ltZpZv_aCl0OEx0TSnnZMgXIxVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/5b4426-a266-43ce-a9e6-b0e6058d4dd7/1/ltZpZv_aCl0OEx0TSnnZMgXIxVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ltZpZv_aCl0OEx0TSnnZMgXIxVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 15:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:16:f3:2e:d1:be:47:07:ec:38:65:36:76:85:13:85:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96d66966ffda0a5d0e131d134a79d93205c8c550
Validity
Not Before: Oct 24 16:00:27 2025 GMT
Not After : Oct 25 16:00:27 2025 GMT
Subject: CN=3961cb5dff2dce245c486f5752b8c7377632b539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:f7:c3:db:be:94:d2:3b:d1:30:28:3e:3b:bf:
9d:11:e8:68:2e:40:5a:a9:b9:7b:bd:a3:91:fd:2b:
9c:1e:8d:be:ba:b8:0c:a8:9b:d0:6c:6a:16:99:58:
97:32:0a:98:fe:b8:dc:3a:5b:8b:ca:d8:b9:5d:82:
49:38:c5:0e:14:05:08:4b:ee:f8:64:5d:af:fc:48:
80:85:cf:59:d1:f6:3c:5a:81:b1:28:7d:98:ee:c1:
22:a5:8d:67:11:11:51:73:0d:e3:3c:19:02:0d:64:
e6:b1:7d:31:67:17:14:96:50:99:0b:74:70:3a:90:
dd:32:45:07:b6:99:19:0a:84:97:0c:28:88:92:3f:
e5:54:74:f9:1d:43:ff:24:a2:77:b6:cd:dd:76:07:
35:9b:cc:7a:50:fe:b3:24:68:42:e1:92:cc:fc:9c:
cb:f1:73:e4:22:c2:2f:6f:48:86:8d:30:af:4c:9c:
26:a8:b8:8a:4f:23:11:00:08:ec:23:05:06:4c:b7:
3e:f8:02:fd:46:b2:ac:23:9d:66:0a:2f:62:db:d5:
67:89:88:91:2a:03:99:10:6e:27:e1:23:0b:36:a4:
58:ac:64:2e:61:fe:d7:81:1a:b5:5f:b3:b5:f8:02:
f9:81:fd:91:68:9e:b5:4a:29:07:5e:f1:b8:da:33:
20:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:61:CB:5D:FF:2D:CE:24:5C:48:6F:57:52:B8:C7:37:76:32:B5:39
X509v3 Authority Key Identifier:
keyid:96:D6:69:66:FF:DA:0A:5D:0E:13:1D:13:4A:79:D9:32:05:C8:C5:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ltZpZv_aCl0OEx0TSnnZMgXIxVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/5b4426-a266-43ce-a9e6-b0e6058d4dd7/1/ltZpZv_aCl0OEx0TSnnZMgXIxVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/5b4426-a266-43ce-a9e6-b0e6058d4dd7/1/ltZpZv_aCl0OEx0TSnnZMgXIxVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:76:61:1b:06:b9:13:99:70:64:19:25:5b:2e:3f:92:3f:05:
f4:c7:eb:8f:18:ec:5c:48:ef:59:11:76:20:4f:f5:eb:82:98:
42:53:78:29:82:9c:8a:74:5b:7a:8e:d4:08:83:1e:da:9f:f9:
03:93:0a:95:ed:0c:e1:21:11:15:4c:bc:8c:f5:7d:cc:ed:df:
e8:d6:a4:5b:a4:1e:49:15:44:e9:d0:f3:76:86:0a:8d:8e:5d:
1f:41:6f:c2:33:62:fa:98:bb:8f:0f:13:29:80:37:b3:ed:fe:
d1:15:ba:0c:b6:15:4a:5f:16:5b:a0:c2:95:8c:73:55:a6:93:
d1:8f:04:ae:e6:99:24:73:53:96:e7:0e:dd:a9:40:c4:13:8e:
61:78:c8:ce:97:8f:71:4d:47:e4:51:a9:be:5c:cd:6f:e3:c4:
bc:1b:ad:06:5d:f3:33:d4:43:eb:0c:24:fc:e2:e6:ae:37:dc:
8b:8c:71:70:52:b8:66:01:eb:44:c5:7c:4c:15:59:a3:5d:9b:
20:7a:bd:0f:44:3e:d0:4c:7e:15:7a:6d:10:81:81:3b:e5:bb:
31:6c:22:90:ec:78:d8:d4:a5:83:31:96:17:37:0c:79:52:0e:
65:f1:38:98:60:f8:dd:53:36:b4:2a:14:20:53:aa:81:84:12:
0c:e4:13:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoW8y7RvkcH7DhlNnaFE4VJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2ZDY2OTY2ZmZkYTBhNWQwZTEzMWQxMzRhNzlkOTMyMDVj
OGM1NTAwHhcNMjUxMDI0MTYwMDI3WhcNMjUxMDI1MTYwMDI3WjAzMTEwLwYDVQQD
EygzOTYxY2I1ZGZmMmRjZTI0NWM0ODZmNTc1MmI4YzczNzc2MzJiNTM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiffD276U0jvRMCg+O7+dEehoLkBa
qbl7vaOR/SucHo2+urgMqJvQbGoWmViXMgqY/rjcOluLyti5XYJJOMUOFAUIS+74
ZF2v/EiAhc9Z0fY8WoGxKH2Y7sEipY1nERFRcw3jPBkCDWTmsX0xZxcUllCZC3Rw
OpDdMkUHtpkZCoSXDCiIkj/lVHT5HUP/JKJ3ts3ddgc1m8x6UP6zJGhC4ZLM/JzL
8XPkIsIvb0iGjTCvTJwmqLiKTyMRAAjsIwUGTLc++AL9RrKsI51mCi9i29VniYiR
KgOZEG4n4SMLNqRYrGQuYf7XgRq1X7O1+AL5gf2RaJ61SikHXvG42jMg8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDlhy13/Lc4kXEhvV1K4xzd2MrU5MB8GA1UdIwQY
MBaAFJbWaWb/2gpdDhMdE0p52TIFyMVQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHRacFp2X2FDbDBPRXgwVFNublpNZ1hJeFZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi81YjQ0MjYtYTI2Ni00M2NlLWE5ZTYt
YjBlNjA1OGQ0ZGQ3LzEvbHRacFp2X2FDbDBPRXgwVFNublpNZ1hJeFZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi81YjQ0MjYtYTI2Ni00M2NlLWE5ZTYtYjBlNjA1OGQ0ZGQ3
LzEvbHRacFp2X2FDbDBPRXgwVFNublpNZ1hJeFZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALnZhGwa5
E5lwZBklWy4/kj8F9MfrjxjsXEjvWRF2IE/164KYQlN4KYKcinRbeo7UCIMe2p/5
A5MKle0M4SERFUy8jPV9zO3f6NakW6QeSRVE6dDzdoYKjY5dH0FvwjNi+pi7jw8T
KYA3s+3+0RW6DLYVSl8WW6DClYxzVaaT0Y8EruaZJHNTlucO3alAxBOOYXjIzpeP
cU1H5FGpvlzNb+PEvButBl3zM9RD6wwk/OLmrjfci4xxcFK4ZgHrRMV8TBVZo12b
IHq9D0Q+0Ex+FXptEIGBO+W7MWwikOx42NSlgzGWFzcMeVIOZfE4mGD43VM2tCoU
IFOqgYQSDOQTMQ==
-----END CERTIFICATE-----
Generated at Fri Oct 24 19:00:43 2025 by rpki-client