Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.mft
File: lPUZxOzxX1_B4G6qbgP5ywOVbKo.mft (raw, json)
Hash identifier: FTU6690yM3NFONMuA+jomUUdxvBcgAoTDxGqyYb0pEU=
Subject key identifier: DD:49:BA:AF:7B:DC:17:35:8B:2B:2B:A3:D0:E2:82:13:7C:51:7D:87
Authority key identifier: 94:F5:19:C4:EC:F1:5F:5F:C1:E0:6E:AA:6E:03:F9:CB:03:95:6C:AA
Certificate issuer: /CN=94f519c4ecf15f5fc1e06eaa6e03f9cb03956caa
Certificate serial: 019A71EECA36C86D98C1E47D1B64CEDAF5C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lPUZxOzxX1_B4G6qbgP5ywOVbKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.mft
Manifest number: 06D8
Signing time: Tue 11 Nov 2025 08:01:05 +0000
Manifest this update: Tue 11 Nov 2025 08:01:05 +0000
Manifest next update: Wed 12 Nov 2025 08:01:05 +0000
Files and hashes: 1: AlvpwmlHKsdZ888v6OW9e2qX7Cs.roa (hash: 0uWxwNIZbut6gct98ZOv80/LRPh9PRZxkpCS9vIEkzY=)
2: lPUZxOzxX1_B4G6qbgP5ywOVbKo.crl (hash: tFV06iqcw2fzFEIOEwLP+cE2uIX/balritXN4yrlqpI=)
3: mhy_PjfAH7Am8DYx1tO3WTSt-G0.roa (hash: I3P915hVSsXgQ5UO/istQ1xrxwtkn+jwbAOJufOB6ts=)
4: oGXIgL4XeGgFsoOzE_plr2AX24g.roa (hash: h9S8MEgqkl0Mx1T5bmYSQIXTjB58xAGkLJVMidxjJTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/lPUZxOzxX1_B4G6qbgP5ywOVbKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:ca:36:c8:6d:98:c1:e4:7d:1b:64:ce:da:f5:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94f519c4ecf15f5fc1e06eaa6e03f9cb03956caa
Validity
Not Before: Nov 11 08:01:05 2025 GMT
Not After : Nov 12 08:01:05 2025 GMT
Subject: CN=dd49baaf7bdc17358b2b2ba3d0e282137c517d87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3e:83:ad:dc:7d:5b:94:40:37:39:e2:90:0f:
95:01:37:13:8c:5d:23:d1:17:f7:b1:89:5c:82:6a:
69:13:35:33:23:b6:29:ea:dd:40:9d:d2:4d:e4:7e:
4f:53:4e:28:4c:59:12:b7:1d:1d:17:8f:13:14:fa:
4d:54:b1:36:3c:35:08:47:87:be:35:a3:6e:51:cb:
b9:55:80:5c:58:e5:f3:ca:8f:23:cf:58:d5:74:4c:
24:21:1e:52:96:d4:a5:35:c2:7d:74:d1:be:27:08:
f0:ed:0a:aa:a1:d2:9b:fd:dd:77:32:33:44:ba:9c:
9e:ea:78:ad:ff:9c:a7:b3:b6:4f:09:29:73:83:5d:
eb:77:17:09:f5:95:c6:a9:7b:db:9b:ef:3a:0b:bf:
8a:5f:72:de:0d:07:38:56:39:1f:be:31:f4:78:a6:
b7:c9:e6:c4:24:e4:bd:b8:67:08:e3:06:f2:1d:3d:
d2:ce:1a:d7:19:be:72:56:02:e2:aa:6f:f9:4c:cb:
3a:81:e0:82:26:db:83:b4:00:92:e3:c7:c6:9e:89:
38:26:56:6e:2b:d5:0d:1a:c2:1b:44:c5:2c:88:b5:
bc:91:49:80:23:c3:32:85:ac:20:47:c8:8b:77:41:
de:4c:f3:ed:41:f7:d9:d7:d9:1a:c2:43:aa:2e:13:
36:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:49:BA:AF:7B:DC:17:35:8B:2B:2B:A3:D0:E2:82:13:7C:51:7D:87
X509v3 Authority Key Identifier:
keyid:94:F5:19:C4:EC:F1:5F:5F:C1:E0:6E:AA:6E:03:F9:CB:03:95:6C:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lPUZxOzxX1_B4G6qbgP5ywOVbKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:0d:54:1b:b1:fd:af:40:61:80:09:aa:d4:e3:50:3a:7c:78:
d2:37:77:fb:a4:b4:27:76:9b:ba:bd:63:62:df:0c:02:6d:1c:
77:56:7a:e6:23:8b:0d:b2:07:f9:7a:6c:e6:70:a0:c2:3f:65:
32:99:85:10:c8:72:80:b4:9c:e7:d1:0a:20:76:28:e6:9a:b3:
fd:7d:a5:87:45:1e:b9:f7:f1:46:a7:88:d1:d3:d3:ed:63:60:
9c:49:c7:bd:4f:ff:81:04:34:49:d4:e8:cb:73:a4:e1:d0:81:
42:0a:9b:11:e9:96:d3:99:42:3c:69:68:38:f3:e7:6e:cb:29:
8d:4b:35:f1:b2:90:9b:84:a0:75:c3:c2:b4:de:5b:82:05:93:
ae:52:ba:b5:b6:aa:34:54:ae:dd:4d:db:f7:e8:8e:11:80:82:
58:04:97:ff:fe:67:e0:ec:3a:c4:fa:7f:8b:0e:2c:c0:78:d7:
34:35:86:c5:7a:e8:fe:a6:6c:51:56:ea:a8:36:2d:a5:48:a0:
09:ab:66:46:b0:dc:41:52:44:d1:9a:be:c4:7a:83:ba:25:68:
e2:6f:b9:e3:7d:87:16:82:92:c1:a0:04:6d:a3:89:54:5b:71:
cc:92:fa:8f:a3:01:c2:bf:6d:a0:3b:9d:78:af:8c:2b:e4:f9:
6a:a9:93:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpx7so2yG2YweR9G2TO2vXCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0ZjUxOWM0ZWNmMTVmNWZjMWUwNmVhYTZlMDNmOWNiMDM5
NTZjYWEwHhcNMjUxMTExMDgwMTA1WhcNMjUxMTEyMDgwMTA1WjAzMTEwLwYDVQQD
EyhkZDQ5YmFhZjdiZGMxNzM1OGIyYjJiYTNkMGUyODIxMzdjNTE3ZDg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqj6Drdx9W5RANznikA+VATcTjF0j
0Rf3sYlcgmppEzUzI7Yp6t1AndJN5H5PU04oTFkStx0dF48TFPpNVLE2PDUIR4e+
NaNuUcu5VYBcWOXzyo8jz1jVdEwkIR5SltSlNcJ9dNG+Jwjw7QqqodKb/d13MjNE
upye6nit/5yns7ZPCSlzg13rdxcJ9ZXGqXvbm+86C7+KX3LeDQc4VjkfvjH0eKa3
yebEJOS9uGcI4wbyHT3SzhrXGb5yVgLiqm/5TMs6geCCJtuDtACS48fGnok4JlZu
K9UNGsIbRMUsiLW8kUmAI8MyhawgR8iLd0HeTPPtQffZ19kawkOqLhM20wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN1Juq973Bc1iysro9DighN8UX2HMB8GA1UdIwQY
MBaAFJT1GcTs8V9fweBuqm4D+csDlWyqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFBVWnhPenhYMV9CNEc2cWJnUDV5d09WYktvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8xMDg5NjctNjg2YS00MzIyLTg1YjMt
NTE2ZWFjNDY5MDUzLzEvbFBVWnhPenhYMV9CNEc2cWJnUDV5d09WYktvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS8xMDg5NjctNjg2YS00MzIyLTg1YjMtNTE2ZWFjNDY5MDUz
LzEvbFBVWnhPenhYMV9CNEc2cWJnUDV5d09WYktvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXQ1UG7H9
r0BhgAmq1ONQOnx40jd3+6S0J3abur1jYt8MAm0cd1Z65iOLDbIH+Xps5nCgwj9l
MpmFEMhygLSc59EKIHYo5pqz/X2lh0UeuffxRqeI0dPT7WNgnEnHvU//gQQ0SdTo
y3Ok4dCBQgqbEemW05lCPGloOPPnbsspjUs18bKQm4SgdcPCtN5bggWTrlK6tbaq
NFSu3U3b9+iOEYCCWASX//5n4Ow6xPp/iw4swHjXNDWGxXro/qZsUVbqqDYtpUig
CatmRrDcQVJE0Zq+xHqDuiVo4m+5432HFoKSwaAEbaOJVFtxzJL6j6MBwr9toDud
eK+MK+T5aqmTlQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:51:23 2025 by rpki-client