Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/0c5265-32af-48f2-906d-b652c85556bb/1/lt2IX_TTiauqvQOlF10JdBrLpg0.mft
File: lt2IX_TTiauqvQOlF10JdBrLpg0.mft (raw, json)
Hash identifier: xH2bwY9oiNvWUpxkh2dhuuHakB6ByIhO/9CG/haZLh0=
Subject key identifier: 72:2B:4C:87:9E:C7:48:BE:C8:3B:6C:A3:9C:97:C7:F8:84:25:75:33
Authority key identifier: 96:DD:88:5F:F4:D3:89:AB:AA:BD:03:A5:17:5D:09:74:1A:CB:A6:0D
Certificate issuer: /CN=96dd885ff4d389abaabd03a5175d09741acba60d
Certificate serial: 019A26678F9AC6E03D470322816FAB97BF11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lt2IX_TTiauqvQOlF10JdBrLpg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/0c5265-32af-48f2-906d-b652c85556bb/1/lt2IX_TTiauqvQOlF10JdBrLpg0.mft
Manifest number: 0150
Signing time: Mon 27 Oct 2025 16:01:52 +0000
Manifest this update: Mon 27 Oct 2025 16:01:52 +0000
Manifest next update: Tue 28 Oct 2025 16:01:52 +0000
Files and hashes: 1: hdbgy59MRssZX30bGqV8gIYXM48.roa (hash: g1IyZ0aHYMFjjiI9SIYZwd4GtNo/PD9i0KvcrdPt5KQ=)
2: lt2IX_TTiauqvQOlF10JdBrLpg0.crl (hash: /24lq+rCtoNlTECW3tLrKkxf/9VYIk6KTQflEmbIpkE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/0c5265-32af-48f2-906d-b652c85556bb/1/lt2IX_TTiauqvQOlF10JdBrLpg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/0c5265-32af-48f2-906d-b652c85556bb/1/lt2IX_TTiauqvQOlF10JdBrLpg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lt2IX_TTiauqvQOlF10JdBrLpg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 15:57:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:26:67:8f:9a:c6:e0:3d:47:03:22:81:6f:ab:97:bf:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96dd885ff4d389abaabd03a5175d09741acba60d
Validity
Not Before: Oct 27 16:01:52 2025 GMT
Not After : Oct 28 16:01:52 2025 GMT
Subject: CN=722b4c879ec748bec83b6ca39c97c7f884257533
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:77:25:75:d6:37:9d:47:f2:a2:c2:47:00:97:
02:39:44:da:73:33:c4:6e:a8:13:12:ec:06:ee:6f:
e0:be:fb:a8:92:8f:67:e5:4e:55:c6:39:ee:ab:dc:
9f:cb:06:65:02:8f:84:17:89:f8:c6:40:88:b8:ae:
ba:b5:31:ce:2e:94:5a:79:8a:42:e2:38:ed:dc:c8:
ca:d0:03:e1:0e:56:fb:d2:4f:1c:8f:4c:46:44:d1:
9c:88:8e:eb:b6:95:79:db:93:77:10:ad:27:db:88:
e5:e0:48:04:d0:f5:83:0a:eb:ad:d0:b3:46:ac:16:
d7:2c:d2:bf:76:5a:09:7d:a0:b5:34:ed:8d:ba:b4:
50:5d:e8:74:c1:07:bf:9a:5d:5d:3a:27:73:ee:b0:
f2:9b:7f:7f:ab:39:03:d4:a3:fe:04:d6:b9:db:90:
5d:ee:e5:40:9e:b6:74:ab:bc:f5:76:c6:f3:6e:2f:
36:59:65:57:f6:d9:ea:6a:d4:3b:f7:6d:39:de:ee:
a8:b2:cc:7e:04:98:d2:68:42:66:fa:7e:37:23:40:
95:20:61:74:2c:a9:d4:bf:d9:af:f4:82:26:6d:ab:
ec:cd:a3:65:37:41:17:c6:47:50:d1:e2:74:19:2c:
fd:dc:b2:97:0c:67:c7:c6:3b:19:63:6c:57:8a:10:
e8:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:2B:4C:87:9E:C7:48:BE:C8:3B:6C:A3:9C:97:C7:F8:84:25:75:33
X509v3 Authority Key Identifier:
keyid:96:DD:88:5F:F4:D3:89:AB:AA:BD:03:A5:17:5D:09:74:1A:CB:A6:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lt2IX_TTiauqvQOlF10JdBrLpg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/0c5265-32af-48f2-906d-b652c85556bb/1/lt2IX_TTiauqvQOlF10JdBrLpg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/0c5265-32af-48f2-906d-b652c85556bb/1/lt2IX_TTiauqvQOlF10JdBrLpg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:66:de:35:01:a8:27:2a:d7:30:bc:c9:1b:12:9a:00:29:77:
e3:a2:47:be:2b:57:d4:81:c2:07:6b:d2:b4:b3:cf:05:41:18:
df:bf:cd:c5:78:57:a6:86:8e:b0:04:42:e8:20:9a:d4:e9:42:
31:bb:00:a7:3f:b8:e9:73:6b:32:8b:3e:49:f3:80:b1:17:dd:
6b:8f:96:ba:ee:d3:4c:ad:a3:41:20:08:03:44:2c:89:f0:8e:
85:72:06:06:1a:ec:15:c7:84:02:b5:32:a5:3b:d0:f2:26:28:
82:6c:e4:b7:8e:13:9e:1c:c6:42:18:85:83:78:18:9e:f9:15:
46:a7:b5:09:e5:9c:66:f4:7d:69:7d:4c:af:61:71:75:ce:97:
57:4e:6e:c3:ea:52:70:a7:b6:d5:63:99:d4:e9:28:af:38:e5:
c3:eb:0d:9d:99:92:30:97:16:45:c1:0c:a9:8d:99:d1:fb:d6:
15:71:da:ea:31:63:53:d8:2d:8b:2d:06:8d:a4:ea:37:c1:b6:
25:a0:54:c5:bb:95:96:dd:9a:e1:0c:b5:0b:7d:fa:6e:e5:40:
09:27:71:57:c9:f4:8e:30:25:70:42:f4:9b:e6:42:be:63:73:
25:f5:77:8a:f2:73:9f:c6:a5:d3:a2:1c:c0:61:5e:69:b0:2c:
4c:dd:bf:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZomZ4+axuA9RwMigW+rl78RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2ZGQ4ODVmZjRkMzg5YWJhYWJkMDNhNTE3NWQwOTc0MWFj
YmE2MGQwHhcNMjUxMDI3MTYwMTUyWhcNMjUxMDI4MTYwMTUyWjAzMTEwLwYDVQQD
Eyg3MjJiNGM4NzllYzc0OGJlYzgzYjZjYTM5Yzk3YzdmODg0MjU3NTMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHclddY3nUfyosJHAJcCOUTaczPE
bqgTEuwG7m/gvvuoko9n5U5Vxjnuq9yfywZlAo+EF4n4xkCIuK66tTHOLpRaeYpC
4jjt3MjK0APhDlb70k8cj0xGRNGciI7rtpV525N3EK0n24jl4EgE0PWDCuut0LNG
rBbXLNK/dloJfaC1NO2NurRQXeh0wQe/ml1dOidz7rDym39/qzkD1KP+BNa525Bd
7uVAnrZ0q7z1dsbzbi82WWVX9tnqatQ792053u6ossx+BJjSaEJm+n43I0CVIGF0
LKnUv9mv9IImbavszaNlN0EXxkdQ0eJ0GSz93LKXDGfHxjsZY2xXihDo9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHIrTIeex0i+yDtso5yXx/iEJXUzMB8GA1UdIwQY
MBaAFJbdiF/004mrqr0DpRddCXQay6YNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHQySVhfVFRpYXVxdlFPbEYxMEpkQnJMcGcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi8wYzUyNjUtMzJhZi00OGYyLTkwNmQt
YjY1MmM4NTU1NmJiLzEvbHQySVhfVFRpYXVxdlFPbEYxMEpkQnJMcGcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi8wYzUyNjUtMzJhZi00OGYyLTkwNmQtYjY1MmM4NTU1NmJi
LzEvbHQySVhfVFRpYXVxdlFPbEYxMEpkQnJMcGcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKGbeNQGo
JyrXMLzJGxKaACl346JHvitX1IHCB2vStLPPBUEY37/NxXhXpoaOsARC6CCa1OlC
MbsApz+46XNrMos+SfOAsRfda4+Wuu7TTK2jQSAIA0QsifCOhXIGBhrsFceEArUy
pTvQ8iYogmzkt44TnhzGQhiFg3gYnvkVRqe1CeWcZvR9aX1Mr2Fxdc6XV05uw+pS
cKe21WOZ1Okorzjlw+sNnZmSMJcWRcEMqY2Z0fvWFXHa6jFjU9gtiy0GjaTqN8G2
JaBUxbuVlt2a4Qy1C336buVACSdxV8n0jjAlcEL0m+ZCvmNzJfV3ivJzn8al06Ic
wGFeabAsTN2/CQ==
-----END CERTIFICATE-----
Generated at Mon Oct 27 20:06:41 2025 by rpki-client