Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.mft
File: l59cqMM_E0w8FX1IucKuTpG2ML8.mft (raw, json)
Hash identifier: cv/O87Kog6kNQI+YTyUiOCCasrBoyixLAtXUZnR/J9E=
Subject key identifier: 12:E7:55:F1:3A:AC:1A:9E:92:D9:A1:39:E5:FC:7C:12:CA:2D:01:10
Authority key identifier: 97:9F:5C:A8:C3:3F:13:4C:3C:15:7D:48:B9:C2:AE:4E:91:B6:30:BF
Certificate issuer: /CN=979f5ca8c33f134c3c157d48b9c2ae4e91b630bf
Certificate serial: 019A20D22A750B4668C1E437B940BCE75A24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.mft
Manifest number: 14EA
Signing time: Sun 26 Oct 2025 14:00:35 +0000
Manifest this update: Sun 26 Oct 2025 14:00:35 +0000
Manifest next update: Mon 27 Oct 2025 14:00:35 +0000
Files and hashes: 1: 9fuYulUVxtgS2OdAoDqw73sL458.roa (hash: 4sliq0762rmQYCBsPA1iMqCrKBq5MvjcOahYDnYc2F8=)
2: GCT36J3n1OxX-WHPNyMOxT30V1I.roa (hash: a5Pszieg/F5+mp8skMSq3X98683NVjkxEMhhyfalK24=)
3: M3nuXRHV-HSVCrPsQchhdr5_x7Q.roa (hash: yixO/lM/jrXq6xFtI0OoJ7LnqzWDwB/3Pvi4UUX0Sqg=)
4: SMFHgAd465jvbKDW6YZwTehlmXs.roa (hash: mo74I69JinqweIsRPNZbaqL0YDRPxBEE9SrCUOt17NI=)
5: eMOtJLHyRS0nlVfkPs9ZYV2sfJs.roa (hash: bEXIrBrzj/GHJADmo6N/Mu/Sg4DT82z14P1KN6YbAzU=)
6: l59cqMM_E0w8FX1IucKuTpG2ML8.crl (hash: a0DMaQ+4ONDAyxRImFCy33T73RltmPYPrJPIviupqWo=)
7: p906kmkgY0qUYyVJw53cck20ZMc.roa (hash: RM2au0VYfH5622DYXzfGpU015sseQv18gBHvKAhN9Co=)
8: u_kbu4tkIYiihS4--NXiyToxNhs.roa (hash: txkFHVV6Yy9iysc9+92y5JAS1DKWEBihN2iYh4NZA9g=)
9: z-gzGRp6g46RfhDlKhHGqEoG68k.roa (hash: zEuoDm3Q5DkSIXVAGKauWFsGpEgi0zHMp7amnQaC+g0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.mft
rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:20:d2:2a:75:0b:46:68:c1:e4:37:b9:40:bc:e7:5a:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=979f5ca8c33f134c3c157d48b9c2ae4e91b630bf
Validity
Not Before: Oct 26 14:00:35 2025 GMT
Not After : Oct 27 14:00:35 2025 GMT
Subject: CN=12e755f13aac1a9e92d9a139e5fc7c12ca2d0110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:91:23:7d:7e:6e:d6:a3:e1:32:fa:f9:71:86:
f8:94:1b:ad:23:33:ab:f9:01:1f:5c:58:d2:a4:06:
42:26:e1:d3:d8:5a:c8:b2:99:20:0b:81:67:f9:e9:
ae:9a:20:34:07:e7:e7:62:c4:ff:35:86:d6:b2:92:
44:62:d1:e8:f3:bd:5a:87:80:42:98:53:0a:54:ca:
db:03:67:d5:ef:b2:43:ec:ae:61:99:41:f2:55:f5:
1e:37:19:72:84:db:68:33:81:4a:f2:fd:34:c9:a6:
ff:3a:ee:5f:e4:0a:bd:b0:91:42:b5:08:be:07:ed:
ff:ec:af:2a:15:5f:06:0c:7c:35:70:ae:d8:17:87:
32:2c:a7:f2:29:9b:a2:a2:b5:e1:ad:5e:81:24:6b:
06:11:67:30:06:01:9c:99:54:76:94:2d:8f:92:ac:
bc:3c:82:9d:8a:6a:bc:8b:4e:82:7d:43:04:9a:90:
7b:c2:01:b6:6b:a5:f6:c0:89:12:fd:13:e5:53:69:
33:20:89:3a:fb:18:a6:ac:3d:e5:97:7c:7d:40:f3:
85:46:16:3c:c7:cd:cf:aa:be:61:60:4f:6c:8b:74:
65:6a:94:4c:ef:15:65:f0:ef:93:0c:a3:c3:ef:ac:
22:94:b0:12:ab:a5:c4:e3:71:c4:3c:4e:aa:c6:4f:
ad:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:E7:55:F1:3A:AC:1A:9E:92:D9:A1:39:E5:FC:7C:12:CA:2D:01:10
X509v3 Authority Key Identifier:
keyid:97:9F:5C:A8:C3:3F:13:4C:3C:15:7D:48:B9:C2:AE:4E:91:B6:30:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:45:95:d1:b3:e8:9b:5a:d4:6b:53:22:a1:62:6c:cd:d2:3a:
d6:70:28:55:8a:a0:bf:03:c8:88:90:db:90:97:e2:2e:04:7c:
d7:49:79:30:7a:b7:40:a2:5b:a8:51:07:52:3d:74:fa:85:af:
00:c6:e3:52:08:d6:58:7d:c6:65:b0:f3:fc:9c:7f:3f:e5:8a:
7e:6d:e8:ff:a9:27:eb:cc:06:0f:d0:7e:2b:10:36:bc:02:a6:
2c:0e:ee:54:3a:44:1a:70:8f:8f:29:dd:a0:2e:92:fe:26:24:
05:14:0a:4a:9e:1e:9a:a3:40:06:f8:32:1f:c2:1b:ef:4f:fd:
39:3b:55:82:85:f4:12:6c:d4:91:d5:10:92:62:ec:69:15:5a:
91:6f:9a:62:c5:d5:aa:99:b1:a5:18:45:a4:be:6b:65:6d:7b:
ae:46:9d:ea:70:41:d5:f0:92:7d:b0:87:e8:c3:8c:d0:75:fd:
12:32:c7:48:95:9e:44:de:0b:58:cf:fa:62:2c:15:d8:6e:c8:
34:85:10:9a:17:ee:06:4e:c0:c2:1e:31:3b:c7:09:9c:0c:38:
d0:83:66:b0:c0:26:17:7c:21:25:56:f7:4b:63:9d:67:8b:0a:
b8:20:52:11:0a:81:a0:a3:ad:e1:e1:83:cf:2d:24:d3:90:20:
87:5a:1b:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZog0ip1C0ZoweQ3uUC851okMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3OWY1Y2E4YzMzZjEzNGMzYzE1N2Q0OGI5YzJhZTRlOTFi
NjMwYmYwHhcNMjUxMDI2MTQwMDM1WhcNMjUxMDI3MTQwMDM1WjAzMTEwLwYDVQQD
EygxMmU3NTVmMTNhYWMxYTllOTJkOWExMzllNWZjN2MxMmNhMmQwMTEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZEjfX5u1qPhMvr5cYb4lButIzOr
+QEfXFjSpAZCJuHT2FrIspkgC4Fn+emumiA0B+fnYsT/NYbWspJEYtHo871ah4BC
mFMKVMrbA2fV77JD7K5hmUHyVfUeNxlyhNtoM4FK8v00yab/Ou5f5Aq9sJFCtQi+
B+3/7K8qFV8GDHw1cK7YF4cyLKfyKZuiorXhrV6BJGsGEWcwBgGcmVR2lC2Pkqy8
PIKdimq8i06CfUMEmpB7wgG2a6X2wIkS/RPlU2kzIIk6+ximrD3ll3x9QPOFRhY8
x83Pqr5hYE9si3RlapRM7xVl8O+TDKPD76wilLASq6XE43HEPE6qxk+tTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBLnVfE6rBqektmhOeX8fBLKLQEQMB8GA1UdIwQY
MBaAFJefXKjDPxNMPBV9SLnCrk6RtjC/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDU5Y3FNTV9FMHc4RlgxSXVjS3VUcEcyTUw4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9mNjU2MTAtNTlmNi00YWQ2LWE5ZDgt
MTQ3MGFjMzY0ZGQyLzEvbDU5Y3FNTV9FMHc4RlgxSXVjS3VUcEcyTUw4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy9mNjU2MTAtNTlmNi00YWQ2LWE5ZDgtMTQ3MGFjMzY0ZGQy
LzEvbDU5Y3FNTV9FMHc4RlgxSXVjS3VUcEcyTUw4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqkWV0bPo
m1rUa1MioWJszdI61nAoVYqgvwPIiJDbkJfiLgR810l5MHq3QKJbqFEHUj10+oWv
AMbjUgjWWH3GZbDz/Jx/P+WKfm3o/6kn68wGD9B+KxA2vAKmLA7uVDpEGnCPjynd
oC6S/iYkBRQKSp4emqNABvgyH8Ib70/9OTtVgoX0EmzUkdUQkmLsaRVakW+aYsXV
qpmxpRhFpL5rZW17rkad6nBB1fCSfbCH6MOM0HX9EjLHSJWeRN4LWM/6YiwV2G7I
NIUQmhfuBk7Awh4xO8cJnAw40INmsMAmF3whJVb3S2OdZ4sKuCBSEQqBoKOt4eGD
zy0k05Agh1obcg==
-----END CERTIFICATE-----
Generated at Sun Oct 26 17:39:51 2025 by rpki-client