Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.mft
File: lirjRjk4sm-Dt28MTfgd-rsVpOs.mft (raw, json)
Hash identifier: pUjkOZH8vkj00uhKB8oCOjfICLCLHBWBiTmxpHOH7eM=
Subject key identifier: 6E:59:C0:89:AD:DC:A4:C4:8F:D3:B0:E3:5F:39:AA:86:04:34:35:00
Authority key identifier: 96:2A:E3:46:39:38:B2:6F:83:B7:6F:0C:4D:F8:1D:FA:BB:15:A4:EB
Certificate issuer: /CN=962ae3463938b26f83b76f0c4df81dfabb15a4eb
Certificate serial: 019A0CA64A94842B45C13F0749A149BB5CED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lirjRjk4sm-Dt28MTfgd-rsVpOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.mft
Manifest number: 16F4
Signing time: Wed 22 Oct 2025 16:00:15 +0000
Manifest this update: Wed 22 Oct 2025 16:00:15 +0000
Manifest next update: Thu 23 Oct 2025 16:00:15 +0000
Files and hashes: 1: LF7l95kGKNm3QeT2Qx4rsVG6q2c.roa (hash: jKT9RAPhg+2vhp/aPlK2AWW9oSPYGTYBnXz2ZpVTPS4=)
2: lirjRjk4sm-Dt28MTfgd-rsVpOs.crl (hash: n/7xH4WKH8AJ4rRcRGFJJA0jWBL3MI3hGwvKn/mrs5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/lirjRjk4sm-Dt28MTfgd-rsVpOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 16:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0c:a6:4a:94:84:2b:45:c1:3f:07:49:a1:49:bb:5c:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=962ae3463938b26f83b76f0c4df81dfabb15a4eb
Validity
Not Before: Oct 22 16:00:15 2025 GMT
Not After : Oct 23 16:00:15 2025 GMT
Subject: CN=6e59c089addca4c48fd3b0e35f39aa8604343500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:e0:04:c8:b4:59:ab:52:78:99:28:98:92:aa:
2a:4c:73:99:89:ea:c6:3f:42:77:4b:ff:75:b1:3f:
5d:e8:4f:5d:f7:e5:f6:7b:8a:6f:31:96:6a:7e:c5:
cb:a2:b6:9c:57:f0:e9:5d:47:8a:df:b4:60:8a:ed:
85:f6:51:2a:12:2a:aa:fb:28:7d:0f:7b:66:57:6b:
e9:0f:73:28:30:5c:93:47:bf:fa:08:5a:50:a8:49:
aa:c4:bb:67:7c:cf:59:2d:24:1b:a7:d9:13:c8:67:
ae:dc:78:ce:21:3e:13:e8:47:71:fd:6b:2f:62:a3:
74:04:d3:c4:c0:93:fc:a2:b7:34:56:9d:8a:ea:05:
31:fc:e5:89:a7:1a:af:fc:0e:86:d7:ec:fb:a1:19:
dc:4e:91:d7:0c:52:7e:0a:5a:11:75:a7:4f:18:9b:
3f:00:0b:92:66:9b:8b:43:42:34:c5:cc:7f:ad:c3:
36:a3:0b:cf:fb:db:b0:64:da:15:b3:aa:e4:2e:db:
d1:03:db:d5:31:3a:96:1c:47:42:a5:0f:fc:16:b2:
5c:26:b4:88:3c:51:12:e6:26:3f:b5:19:fe:4f:b8:
d9:0b:b1:62:5a:9b:97:8a:c9:5e:54:e1:54:c6:41:
6e:0b:a4:fd:a2:6e:b7:01:b4:ec:fb:22:d4:f7:a8:
2a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:59:C0:89:AD:DC:A4:C4:8F:D3:B0:E3:5F:39:AA:86:04:34:35:00
X509v3 Authority Key Identifier:
keyid:96:2A:E3:46:39:38:B2:6F:83:B7:6F:0C:4D:F8:1D:FA:BB:15:A4:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lirjRjk4sm-Dt28MTfgd-rsVpOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:6a:7d:ae:cb:ab:3a:41:13:79:96:34:35:d9:e2:98:79:49:
84:51:2d:bf:1d:df:23:76:ae:bb:63:1a:0f:c8:4d:ff:0c:27:
8b:73:44:17:50:64:21:d6:05:86:c7:1a:0f:66:4b:4a:00:46:
75:08:d3:56:ee:f9:83:66:f0:d9:e1:c1:f3:9a:dc:b3:bf:41:
2d:08:70:fc:93:0d:91:1c:ed:e5:74:70:dd:c3:5f:21:04:94:
0f:93:d9:ba:35:27:35:2e:13:6d:15:01:ac:f7:df:f8:b3:2f:
3c:75:8d:9c:f0:1c:6f:60:e9:34:17:ee:86:9b:fd:8b:22:46:
e7:fc:c1:57:09:f1:c1:f8:d6:32:90:f8:e1:e5:0b:f1:01:4d:
57:9e:37:c1:e6:da:d8:d2:8b:16:e0:2f:7d:91:75:bc:fe:7a:
6c:d2:27:68:ed:8b:aa:8b:8a:df:15:e4:13:d6:b3:4e:00:30:
60:ae:29:3c:a6:f7:06:39:85:c9:37:62:72:df:04:9c:45:bc:
95:8f:f4:db:c7:d4:5a:40:d0:26:1a:f1:9d:b4:b9:8b:20:cf:
a6:ee:1b:9d:94:95:0e:8b:ca:63:88:92:1c:a8:71:e9:9f:bf:
eb:9e:df:85:79:4f:8e:ba:9c:c9:89:2a:91:78:d4:0e:e9:6b:
7b:8e:3e:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoMpkqUhCtFwT8HSaFJu1ztMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2MmFlMzQ2MzkzOGIyNmY4M2I3NmYwYzRkZjgxZGZhYmIx
NWE0ZWIwHhcNMjUxMDIyMTYwMDE1WhcNMjUxMDIzMTYwMDE1WjAzMTEwLwYDVQQD
Eyg2ZTU5YzA4OWFkZGNhNGM0OGZkM2IwZTM1ZjM5YWE4NjA0MzQzNTAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjuAEyLRZq1J4mSiYkqoqTHOZierG
P0J3S/91sT9d6E9d9+X2e4pvMZZqfsXLoracV/DpXUeK37Rgiu2F9lEqEiqq+yh9
D3tmV2vpD3MoMFyTR7/6CFpQqEmqxLtnfM9ZLSQbp9kTyGeu3HjOIT4T6Edx/Wsv
YqN0BNPEwJP8orc0Vp2K6gUx/OWJpxqv/A6G1+z7oRncTpHXDFJ+CloRdadPGJs/
AAuSZpuLQ0I0xcx/rcM2owvP+9uwZNoVs6rkLtvRA9vVMTqWHEdCpQ/8FrJcJrSI
PFES5iY/tRn+T7jZC7FiWpuXisleVOFUxkFuC6T9om63AbTs+yLU96gqgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG5ZwImt3KTEj9Ow4185qoYENDUAMB8GA1UdIwQY
MBaAFJYq40Y5OLJvg7dvDE34Hfq7FaTrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGlyalJqazRzbS1EdDI4TVRmZ2QtcnNWcE9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9iYjBmYzMtZDVmOS00YmY1LTk2ODMt
OWVkZjBkMTdmYjkxLzEvbGlyalJqazRzbS1EdDI4TVRmZ2QtcnNWcE9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9iYjBmYzMtZDVmOS00YmY1LTk2ODMtOWVkZjBkMTdmYjkx
LzEvbGlyalJqazRzbS1EdDI4TVRmZ2QtcnNWcE9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKGp9rsur
OkETeZY0NdnimHlJhFEtvx3fI3auu2MaD8hN/wwni3NEF1BkIdYFhscaD2ZLSgBG
dQjTVu75g2bw2eHB85rcs79BLQhw/JMNkRzt5XRw3cNfIQSUD5PZujUnNS4TbRUB
rPff+LMvPHWNnPAcb2DpNBfuhpv9iyJG5/zBVwnxwfjWMpD44eUL8QFNV543weba
2NKLFuAvfZF1vP56bNInaO2LqouK3xXkE9azTgAwYK4pPKb3BjmFyTdict8EnEW8
lY/028fUWkDQJhrxnbS5iyDPpu4bnZSVDovKY4iSHKhx6Z+/657fhXlPjrqcyYkq
kXjUDulre44+FQ==
-----END CERTIFICATE-----
Generated at Thu Oct 23 00:40:00 2025 by rpki-client