Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.mft
File: lSGiYvUHXiSys8m2nIr0DimIoeQ.mft (raw, json)
Hash identifier: kISAv4AhApwTeZSgev5tSavnLkkbCAu8uDkN3kXAVDo=
Subject key identifier: AB:04:08:87:A5:7B:EA:48:69:72:66:90:5F:BD:1C:D0:B0:4C:E6:59
Authority key identifier: 95:21:A2:62:F5:07:5E:24:B2:B3:C9:B6:9C:8A:F4:0E:29:88:A1:E4
Certificate issuer: /CN=9521a262f5075e24b2b3c9b69c8af40e2988a1e4
Certificate serial: 019A3157D9A7A2B28EE01539B8380E0FC4EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSGiYvUHXiSys8m2nIr0DimIoeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.mft
Manifest number: 041E
Signing time: Wed 29 Oct 2025 19:00:32 +0000
Manifest this update: Wed 29 Oct 2025 19:00:32 +0000
Manifest next update: Thu 30 Oct 2025 19:00:32 +0000
Files and hashes: 1: Lpcsk8pQMiEPT6ApZhOXx9JAafQ.roa (hash: UQY6sisXum2gKK35fkWx14SykCBKN5d6dEz3tT5FKwk=)
2: lSGiYvUHXiSys8m2nIr0DimIoeQ.crl (hash: UZRWpTwWuyuxeK9UGBh4FAPS2wspaLp/Ojroffuz3MA=)
3: mRm5Pcaeh7ARiuQSZaTaFIQzlV4.roa (hash: SRjDoFDtCZGIa81wKDyuCO8n9PzLXPSishWYuw7XCOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lSGiYvUHXiSys8m2nIr0DimIoeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 17:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:31:57:d9:a7:a2:b2:8e:e0:15:39:b8:38:0e:0f:c4:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9521a262f5075e24b2b3c9b69c8af40e2988a1e4
Validity
Not Before: Oct 29 19:00:32 2025 GMT
Not After : Oct 30 19:00:32 2025 GMT
Subject: CN=ab040887a57bea48697266905fbd1cd0b04ce659
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:bc:7a:f1:c4:53:e8:85:32:9c:4e:6b:52:91:
ae:a8:38:cb:ea:0e:81:a1:29:91:aa:7f:fa:ab:d7:
31:4b:b7:87:b4:43:dc:b6:73:32:db:f2:2d:8e:6b:
66:5d:c1:d0:ff:1c:3a:19:10:f6:e0:b9:de:04:bc:
e6:df:20:87:4c:4a:9e:39:39:87:b3:29:fb:44:8f:
91:04:d4:5b:6c:f0:d0:b7:4b:c1:61:ed:88:6c:04:
5c:18:d3:1e:1f:44:6e:eb:f1:1c:2c:41:83:6d:8e:
8b:34:6b:9a:05:36:d9:66:95:05:f8:c9:98:9d:e2:
40:f1:7c:21:92:6f:ae:d3:ba:55:82:4e:29:a1:a2:
93:49:06:e5:4b:4b:fa:1f:b9:99:0b:35:3e:a9:c2:
aa:26:6d:c0:7e:ca:5d:76:b4:ed:f6:9e:af:0d:62:
cb:4e:d0:a5:d2:11:f1:13:35:23:fe:81:3b:0d:47:
c0:03:df:14:fd:f1:97:15:77:d9:51:34:de:e2:f7:
b1:94:89:01:b1:12:ce:45:ac:52:78:86:4a:53:5c:
c1:09:4a:74:2d:f9:2a:13:71:4e:25:8d:0e:b6:96:
55:15:93:00:2a:93:a8:fc:a2:2e:a9:2b:49:cd:c1:
1d:7e:66:c7:e1:d3:f8:4c:c3:54:89:6b:f7:ca:4b:
fd:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:04:08:87:A5:7B:EA:48:69:72:66:90:5F:BD:1C:D0:B0:4C:E6:59
X509v3 Authority Key Identifier:
keyid:95:21:A2:62:F5:07:5E:24:B2:B3:C9:B6:9C:8A:F4:0E:29:88:A1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSGiYvUHXiSys8m2nIr0DimIoeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:06:29:34:fb:dc:ec:c9:aa:04:22:41:3d:33:d6:e0:06:8b:
cd:8a:f8:4b:9e:89:f7:f7:80:31:53:de:38:4e:24:27:98:4b:
44:b7:80:1d:50:27:f9:50:af:e5:1d:d7:cb:bf:ee:4c:3c:1b:
75:bd:7f:be:c1:2e:6b:88:8c:83:fa:4f:51:9b:64:dd:0b:6d:
fe:61:4a:4e:44:d0:8a:58:17:cd:d2:29:47:bc:99:b2:b6:99:
47:df:e8:b4:bf:96:95:10:4a:2c:12:53:68:1c:f4:f6:1c:37:
d9:af:c9:9c:4d:35:e3:5b:a0:7a:17:da:d9:4f:82:6f:7d:01:
6b:17:25:88:a8:85:6e:a8:92:9a:10:ea:b7:dd:fe:f2:3f:5e:
5b:3f:bc:ac:4d:f4:5c:a9:7c:91:32:16:f0:6f:48:d1:16:20:
ca:37:ee:ae:0a:45:a1:bd:26:2e:ff:a6:71:13:3a:ef:c3:72:
3c:95:20:f9:fc:66:9c:4d:42:e2:7f:17:14:8e:05:78:33:60:
01:5a:94:85:aa:bc:71:8a:ca:f9:24:40:66:0a:c1:f6:7e:b1:
57:d9:74:49:6a:ec:6c:78:7b:23:dc:db:a1:2d:5d:94:af:4a:
18:59:fb:08:0a:05:f6:e8:4b:3e:2c:2f:cd:de:2e:1d:9b:5f:
0f:b8:28:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoxV9mnorKO4BU5uDgOD8TqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1MjFhMjYyZjUwNzVlMjRiMmIzYzliNjljOGFmNDBlMjk4
OGExZTQwHhcNMjUxMDI5MTkwMDMyWhcNMjUxMDMwMTkwMDMyWjAzMTEwLwYDVQQD
EyhhYjA0MDg4N2E1N2JlYTQ4Njk3MjY2OTA1ZmJkMWNkMGIwNGNlNjU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrx68cRT6IUynE5rUpGuqDjL6g6B
oSmRqn/6q9cxS7eHtEPctnMy2/ItjmtmXcHQ/xw6GRD24LneBLzm3yCHTEqeOTmH
syn7RI+RBNRbbPDQt0vBYe2IbARcGNMeH0Ru6/EcLEGDbY6LNGuaBTbZZpUF+MmY
neJA8Xwhkm+u07pVgk4poaKTSQblS0v6H7mZCzU+qcKqJm3AfspddrTt9p6vDWLL
TtCl0hHxEzUj/oE7DUfAA98U/fGXFXfZUTTe4vexlIkBsRLORaxSeIZKU1zBCUp0
LfkqE3FOJY0OtpZVFZMAKpOo/KIuqStJzcEdfmbH4dP4TMNUiWv3ykv9+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKsECIele+pIaXJmkF+9HNCwTOZZMB8GA1UdIwQY
MBaAFJUhomL1B14ksrPJtpyK9A4piKHkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFNHaVl2VUhYaVN5czhtMm5JcjBEaW1Jb2VRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9jMWYyMGUtZDk0Zi00M2M1LWJiOGQt
YWQzNjI5YjIwMmMwLzEvbFNHaVl2VUhYaVN5czhtMm5JcjBEaW1Jb2VRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi9jMWYyMGUtZDk0Zi00M2M1LWJiOGQtYWQzNjI5YjIwMmMw
LzEvbFNHaVl2VUhYaVN5czhtMm5JcjBEaW1Jb2VRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVAYpNPvc
7MmqBCJBPTPW4AaLzYr4S56J9/eAMVPeOE4kJ5hLRLeAHVAn+VCv5R3Xy7/uTDwb
db1/vsEua4iMg/pPUZtk3Qtt/mFKTkTQilgXzdIpR7yZsraZR9/otL+WlRBKLBJT
aBz09hw32a/JnE0141ugehfa2U+Cb30BaxcliKiFbqiSmhDqt93+8j9eWz+8rE30
XKl8kTIW8G9I0RYgyjfurgpFob0mLv+mcRM678NyPJUg+fxmnE1C4n8XFI4FeDNg
AVqUhaq8cYrK+SRAZgrB9n6xV9l0SWrsbHh7I9zboS1dlK9KGFn7CAoF9uhLPiwv
zd4uHZtfD7goqg==
-----END CERTIFICATE-----
Generated at Wed Oct 29 21:02:36 2025 by rpki-client