Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/6a2aa9-0ea1-40d6-b8a7-651b717f8a9a/1/lqKMzDCRW1xzEoCowcpn_mAJVO4.mft
File: lqKMzDCRW1xzEoCowcpn_mAJVO4.mft (raw, json)
Hash identifier: bS2KXs1kM+ozPMrkmJ84p2zlHaoiTZnEDHZ2/GpLe4U=
Subject key identifier: AE:74:A8:D3:EF:18:EB:B2:55:22:52:57:8E:48:A9:A9:FB:6A:85:E3
Authority key identifier: 96:A2:8C:CC:30:91:5B:5C:73:12:80:A8:C1:CA:67:FE:60:09:54:EE
Certificate issuer: /CN=96a28ccc30915b5c731280a8c1ca67fe600954ee
Certificate serial: 019A72264BBC36665BED7C8F08B7E5A9441E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lqKMzDCRW1xzEoCowcpn_mAJVO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/6a2aa9-0ea1-40d6-b8a7-651b717f8a9a/1/lqKMzDCRW1xzEoCowcpn_mAJVO4.mft
Manifest number: 079B
Signing time: Tue 11 Nov 2025 09:01:43 +0000
Manifest this update: Tue 11 Nov 2025 09:01:43 +0000
Manifest next update: Wed 12 Nov 2025 09:01:43 +0000
Files and hashes: 1: P0vR8NFOqzUM0n5-PTdZVFTAC8Q.roa (hash: A8zEAcViYD9RWk/au7+yPQfR19Sh9DoooPV1RyNftPE=)
2: lqKMzDCRW1xzEoCowcpn_mAJVO4.crl (hash: lDkd3MSvb+G+7wcJbNjMRU88ZlVJCF0zNpgNuXeWSCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/6a2aa9-0ea1-40d6-b8a7-651b717f8a9a/1/lqKMzDCRW1xzEoCowcpn_mAJVO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/6a2aa9-0ea1-40d6-b8a7-651b717f8a9a/1/lqKMzDCRW1xzEoCowcpn_mAJVO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lqKMzDCRW1xzEoCowcpn_mAJVO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:4b:bc:36:66:5b:ed:7c:8f:08:b7:e5:a9:44:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96a28ccc30915b5c731280a8c1ca67fe600954ee
Validity
Not Before: Nov 11 09:01:43 2025 GMT
Not After : Nov 12 09:01:43 2025 GMT
Subject: CN=ae74a8d3ef18ebb2552252578e48a9a9fb6a85e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:37:d1:91:44:6a:f1:12:6a:e3:b9:46:ce:30:
2f:31:bc:73:5d:0a:12:ef:0f:39:d9:42:96:0f:39:
af:8c:a4:5f:39:5d:24:5a:f6:a0:22:2a:6a:e2:2c:
cd:1d:81:b0:ce:5d:05:87:fb:b1:94:a4:d6:2e:bc:
70:43:47:f1:80:a2:66:87:db:e7:54:53:e4:59:d2:
68:36:67:e1:de:33:46:e3:23:f6:44:c3:df:f3:0f:
14:df:92:c3:cd:17:ab:9b:c7:10:2b:39:8f:1f:9b:
bd:23:6f:c7:79:29:8f:bb:f9:05:57:48:70:ca:b8:
7a:7d:c7:2e:38:0b:5b:0a:ad:2f:58:ca:da:06:13:
55:12:ce:e8:84:b8:0d:76:50:77:34:c2:dd:22:20:
3f:6e:3b:80:db:e0:26:f9:34:ba:0a:08:45:74:4f:
ac:b5:e0:bf:4e:af:b0:99:c4:30:a0:d1:ea:49:14:
b0:0f:a6:13:17:47:5e:cb:ab:f5:d0:b0:7e:05:bb:
8c:5c:d7:94:66:1c:c3:67:22:f5:43:19:b4:04:6d:
ba:e5:ff:6f:69:1c:aa:9d:e3:28:73:a4:43:8b:42:
06:bd:aa:3e:1b:f4:1a:76:79:f4:51:2d:2a:75:81:
cd:4f:3a:4e:c2:6a:94:6d:64:d8:d1:21:15:10:4e:
6e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:74:A8:D3:EF:18:EB:B2:55:22:52:57:8E:48:A9:A9:FB:6A:85:E3
X509v3 Authority Key Identifier:
keyid:96:A2:8C:CC:30:91:5B:5C:73:12:80:A8:C1:CA:67:FE:60:09:54:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lqKMzDCRW1xzEoCowcpn_mAJVO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6a2aa9-0ea1-40d6-b8a7-651b717f8a9a/1/lqKMzDCRW1xzEoCowcpn_mAJVO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6a2aa9-0ea1-40d6-b8a7-651b717f8a9a/1/lqKMzDCRW1xzEoCowcpn_mAJVO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:cd:e9:62:2f:35:48:0d:88:98:aa:61:d5:48:ab:a4:74:04:
12:2d:bd:8d:9b:74:e6:a1:ec:fa:55:37:89:d2:34:cd:62:12:
04:9b:15:c5:24:09:e1:6b:7a:8a:9c:70:4e:5d:4c:99:19:fe:
35:c0:4f:5c:4b:c2:60:cd:8d:26:cd:50:0f:58:ec:5d:99:a7:
0b:4a:e0:0f:36:e8:f8:44:87:2e:a1:19:be:fb:a5:e7:30:74:
63:73:79:a6:4c:59:27:52:6a:31:7e:49:82:27:9d:35:f1:2e:
9a:5a:40:3d:56:49:8d:13:44:c3:b4:14:27:80:22:85:73:18:
54:5a:f9:fc:ce:d9:a5:37:c2:8b:9b:d8:fd:41:91:df:3a:54:
4f:7c:6e:17:49:be:d2:bb:6f:12:20:57:e4:52:84:ea:13:41:
9d:90:64:1f:de:ec:a4:53:fd:49:6c:6d:99:1e:67:ba:34:e5:
d3:03:ea:85:df:e7:1a:e2:78:4e:c4:e0:56:59:5d:d4:bd:ca:
02:a5:06:32:12:57:15:5d:ae:d7:63:8c:23:7a:91:fc:83:5f:
8f:c2:0d:21:b6:2b:f5:b7:24:74:f9:82:49:3e:32:61:f2:5b:
4e:c8:27:fa:ee:7c:f8:c3:c6:2f:f4:14:59:72:33:1d:c1:a2:
e8:d1:fa:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJku8NmZb7XyPCLflqUQeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2YTI4Y2NjMzA5MTViNWM3MzEyODBhOGMxY2E2N2ZlNjAw
OTU0ZWUwHhcNMjUxMTExMDkwMTQzWhcNMjUxMTEyMDkwMTQzWjAzMTEwLwYDVQQD
EyhhZTc0YThkM2VmMThlYmIyNTUyMjUyNTc4ZTQ4YTlhOWZiNmE4NWUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTfRkURq8RJq47lGzjAvMbxzXQoS
7w852UKWDzmvjKRfOV0kWvagIipq4izNHYGwzl0Fh/uxlKTWLrxwQ0fxgKJmh9vn
VFPkWdJoNmfh3jNG4yP2RMPf8w8U35LDzRerm8cQKzmPH5u9I2/HeSmPu/kFV0hw
yrh6fccuOAtbCq0vWMraBhNVEs7ohLgNdlB3NMLdIiA/bjuA2+Am+TS6CghFdE+s
teC/Tq+wmcQwoNHqSRSwD6YTF0dey6v10LB+BbuMXNeUZhzDZyL1Qxm0BG265f9v
aRyqneMoc6RDi0IGvao+G/Qadnn0US0qdYHNTzpOwmqUbWTY0SEVEE5uQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK50qNPvGOuyVSJSV45Iqan7aoXjMB8GA1UdIwQY
MBaAFJaijMwwkVtccxKAqMHKZ/5gCVTuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHFLTXpEQ1JXMXh6RW9Db3djcG5fbUFKVk80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS82YTJhYTktMGVhMS00MGQ2LWI4YTct
NjUxYjcxN2Y4YTlhLzEvbHFLTXpEQ1JXMXh6RW9Db3djcG5fbUFKVk80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS82YTJhYTktMGVhMS00MGQ2LWI4YTctNjUxYjcxN2Y4YTlh
LzEvbHFLTXpEQ1JXMXh6RW9Db3djcG5fbUFKVk80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm83pYi81
SA2ImKph1UirpHQEEi29jZt05qHs+lU3idI0zWISBJsVxSQJ4Wt6ipxwTl1MmRn+
NcBPXEvCYM2NJs1QD1jsXZmnC0rgDzbo+ESHLqEZvvul5zB0Y3N5pkxZJ1JqMX5J
giedNfEumlpAPVZJjRNEw7QUJ4AihXMYVFr5/M7ZpTfCi5vY/UGR3zpUT3xuF0m+
0rtvEiBX5FKE6hNBnZBkH97spFP9SWxtmR5nujTl0wPqhd/nGuJ4TsTgVlld1L3K
AqUGMhJXFV2u12OMI3qR/INfj8INIbYr9bckdPmCST4yYfJbTsgn+u58+MPGL/QU
WXIzHcGi6NH6+Q==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:48 2025 by rpki-client