Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.mft
File: IpLZbftmyxgGnYvRXJ6QzZEk8AM.mft (raw, json)
Hash identifier: LEUwJGvm8C33XSsUpsgR7baYpR2nHZ3tNHW2nCca4ok=
Subject key identifier: 52:1D:97:CB:D6:E6:7C:7D:B9:91:FC:C7:9D:E6:6F:27:C1:13:43:D1
Authority key identifier: 22:92:D9:6D:FB:66:CB:18:06:9D:8B:D1:5C:9E:90:CD:91:24:F0:03
Certificate issuer: /CN=2292d96dfb66cb18069d8bd15c9e90cd9124f003
Certificate serial: 019A1BAB861DACFE8A983C03442AC810ECD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IpLZbftmyxgGnYvRXJ6QzZEk8AM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.mft
Manifest number: 0B89
Signing time: Sat 25 Oct 2025 14:00:16 +0000
Manifest this update: Sat 25 Oct 2025 14:00:16 +0000
Manifest next update: Sun 26 Oct 2025 14:00:16 +0000
Files and hashes: 1: 7cHudsbhVZHbppHTF_ntQT5LGaE.roa (hash: gjOnvh/cfHW6KLD8KAndHZd6PiXGNmxJ/xbLzRraSmM=)
2: IpLZbftmyxgGnYvRXJ6QzZEk8AM.crl (hash: 3myYxNLdBUb1EHJ485BO5wDbYL2V8mA0bMkOkZz8+lo=)
3: neE4dadyN9p4toZpyZnUy5go7zI.roa (hash: BEYi4+FYJNnVHeQxMI/DXO867YZPToyRNjfQJzdzItc=)
4: tJRtFloSVUB88lTkNS55R53-hwU.roa (hash: 9EHkjNm0yl8lkpw4/hLkTGb/95FKLGbpXVqh6rQ6OQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.mft
rsync://rpki.ripe.net/repository/DEFAULT/IpLZbftmyxgGnYvRXJ6QzZEk8AM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 11:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1b:ab:86:1d:ac:fe:8a:98:3c:03:44:2a:c8:10:ec:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2292d96dfb66cb18069d8bd15c9e90cd9124f003
Validity
Not Before: Oct 25 14:00:16 2025 GMT
Not After : Oct 26 14:00:16 2025 GMT
Subject: CN=521d97cbd6e67c7db991fcc79de66f27c11343d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:11:a5:53:90:1d:16:2e:58:f4:45:58:d7:54:
01:0b:bc:66:53:62:51:a3:9a:11:3f:83:5a:ba:36:
66:6b:6b:ab:60:e4:00:08:0d:c6:43:0d:b6:ca:c2:
9e:9d:6b:b8:80:97:3d:b0:4f:86:32:ff:7f:a2:33:
0d:b6:8d:04:70:b7:43:c6:80:83:ac:c6:43:27:db:
92:7a:be:6d:3f:d3:10:d7:22:5b:ba:52:62:1d:cf:
aa:2e:ac:9f:8c:a6:c4:93:21:7f:72:99:56:81:bc:
e9:65:ac:57:6a:a6:9c:7b:ed:7c:33:5e:49:58:9e:
bc:bf:af:f1:bc:a7:5c:e7:72:e0:6e:3f:43:8a:0e:
30:01:f7:c0:3b:b0:f3:60:39:39:2c:ec:65:c9:0d:
50:7c:b4:a2:d1:80:eb:7f:eb:38:d6:d9:56:18:2f:
c7:14:92:4b:7d:14:65:7f:e8:39:20:12:74:2a:05:
9a:78:73:36:71:46:92:68:5e:6d:87:4a:d5:70:07:
41:b5:56:64:0c:45:f4:ad:a6:30:53:cc:45:8b:62:
ca:d9:9f:ee:04:ae:26:64:65:dd:c6:4f:b7:17:52:
22:a3:d1:e4:f9:3e:c4:b3:8c:40:73:0a:38:62:fe:
1d:fe:27:bc:b5:5a:00:de:6d:4e:58:86:2e:67:c1:
c7:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:1D:97:CB:D6:E6:7C:7D:B9:91:FC:C7:9D:E6:6F:27:C1:13:43:D1
X509v3 Authority Key Identifier:
keyid:22:92:D9:6D:FB:66:CB:18:06:9D:8B:D1:5C:9E:90:CD:91:24:F0:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IpLZbftmyxgGnYvRXJ6QzZEk8AM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:65:03:81:73:b9:fb:43:8b:9b:09:3c:32:87:1a:af:fc:58:
6e:f0:cc:91:cd:bc:11:9f:44:b8:19:b2:53:03:65:e5:e1:99:
e7:b3:1d:74:00:72:94:22:9b:61:b6:06:1f:4c:a2:a7:a4:c8:
14:a2:8f:b7:56:e9:b8:aa:1f:ab:e6:c4:31:54:87:61:c1:e0:
38:b6:97:77:77:e0:9a:38:64:05:47:b9:a5:17:1d:10:29:60:
bc:4a:e9:6b:9d:25:d0:77:19:89:43:cf:5f:48:ca:c3:7a:f1:
48:c0:e5:e9:65:4c:fa:27:ff:e8:44:6f:01:d5:c6:51:47:bd:
da:8a:5d:c5:03:53:f5:4a:e5:16:06:e3:ef:6f:e4:66:5d:2d:
78:b9:87:ce:89:19:54:81:4a:7d:9f:05:fc:4a:e5:44:8b:d2:
10:19:74:f8:76:91:72:eb:c9:e8:61:2a:a1:28:e1:a0:0a:90:
4b:19:f4:35:6f:40:90:e7:74:8b:cc:49:91:5d:67:76:3d:b7:
db:0f:68:00:eb:e4:b5:23:46:e1:f9:66:c1:14:ea:db:c6:34:
9f:75:c1:b7:c6:45:63:63:e1:60:45:07:ae:f6:da:49:0e:0b:
fe:ea:33:e2:54:03:51:02:f8:d4:be:cd:b7:2e:2e:26:79:d1:
3e:17:13:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZobq4YdrP6KmDwDRCrIEOzYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyOTJkOTZkZmI2NmNiMTgwNjlkOGJkMTVjOWU5MGNkOTEy
NGYwMDMwHhcNMjUxMDI1MTQwMDE2WhcNMjUxMDI2MTQwMDE2WjAzMTEwLwYDVQQD
Eyg1MjFkOTdjYmQ2ZTY3YzdkYjk5MWZjYzc5ZGU2NmYyN2MxMTM0M2QxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzBGlU5AdFi5Y9EVY11QBC7xmU2JR
o5oRP4NaujZma2urYOQACA3GQw22ysKenWu4gJc9sE+GMv9/ojMNto0EcLdDxoCD
rMZDJ9uSer5tP9MQ1yJbulJiHc+qLqyfjKbEkyF/cplWgbzpZaxXaqace+18M15J
WJ68v6/xvKdc53Lgbj9Dig4wAffAO7DzYDk5LOxlyQ1QfLSi0YDrf+s41tlWGC/H
FJJLfRRlf+g5IBJ0KgWaeHM2cUaSaF5th0rVcAdBtVZkDEX0raYwU8xFi2LK2Z/u
BK4mZGXdxk+3F1Iio9Hk+T7Es4xAcwo4Yv4d/ie8tVoA3m1OWIYuZ8HH3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFIdl8vW5nx9uZH8x53mbyfBE0PRMB8GA1UdIwQY
MBaAFCKS2W37ZssYBp2L0VyekM2RJPADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXBMWmJmdG15eGdHbll2UlhKNlF6WkVrOEFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9lNzc0MTItYjBkNy00MTA0LTkyNmEt
OTllZTYxNmNhODViLzEvSXBMWmJmdG15eGdHbll2UlhKNlF6WkVrOEFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9lNzc0MTItYjBkNy00MTA0LTkyNmEtOTllZTYxNmNhODVi
LzEvSXBMWmJmdG15eGdHbll2UlhKNlF6WkVrOEFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt2UDgXO5
+0OLmwk8Mocar/xYbvDMkc28EZ9EuBmyUwNl5eGZ57MddABylCKbYbYGH0yip6TI
FKKPt1bpuKofq+bEMVSHYcHgOLaXd3fgmjhkBUe5pRcdEClgvErpa50l0HcZiUPP
X0jKw3rxSMDl6WVM+if/6ERvAdXGUUe92opdxQNT9UrlFgbj72/kZl0teLmHzokZ
VIFKfZ8F/ErlRIvSEBl0+HaRcuvJ6GEqoSjhoAqQSxn0NW9AkOd0i8xJkV1ndj23
2w9oAOvktSNG4flmwRTq28Y0n3XBt8ZFY2PhYEUHrvbaSQ4L/uoz4lQDUQL41L7N
ty4uJnnRPhcTjw==
-----END CERTIFICATE-----
Generated at Sat Oct 25 20:00:16 2025 by rpki-client