Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.mft
File: LWX13HhD9bdmifNquRag2ZS5l5w.mft (raw, json)
Hash identifier: q3n18y0j1+50gZP+XeIiSOKJtC8JYMuCOL1hgPrcbE4=
Subject key identifier: 8B:90:CE:1A:CB:26:C9:CA:2D:7A:AC:88:26:6D:12:7F:DF:CE:4C:51
Authority key identifier: 2D:65:F5:DC:78:43:F5:B7:66:89:F3:6A:B9:16:A0:D9:94:B9:97:9C
Certificate issuer: /CN=2d65f5dc7843f5b76689f36ab916a0d994b9979c
Certificate serial: 019A70A581437268DAE69313636F58DD0758
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LWX13HhD9bdmifNquRag2ZS5l5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.mft
Manifest number: 0523
Signing time: Tue 11 Nov 2025 02:01:25 +0000
Manifest this update: Tue 11 Nov 2025 02:01:25 +0000
Manifest next update: Wed 12 Nov 2025 02:01:25 +0000
Files and hashes: 1: LWX13HhD9bdmifNquRag2ZS5l5w.crl (hash: fOI+FTIcqP2scv2Sj0njox5Jmj7afRZ6drXWxS8Woqo=)
2: XEqexKJb2LrlBy7JmazWnnfRrCw.roa (hash: dfO0SxZnhpUVd2vYpZFuzNRZkTkzryjnbxAehzWWsGM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/LWX13HhD9bdmifNquRag2ZS5l5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:81:43:72:68:da:e6:93:13:63:6f:58:dd:07:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d65f5dc7843f5b76689f36ab916a0d994b9979c
Validity
Not Before: Nov 11 02:01:25 2025 GMT
Not After : Nov 12 02:01:25 2025 GMT
Subject: CN=8b90ce1acb26c9ca2d7aac88266d127fdfce4c51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a0:57:9c:e7:0a:51:cf:92:b4:7e:e8:40:90:
72:ff:de:fc:c4:b0:02:46:e2:4e:98:f4:f2:d3:52:
3e:f1:40:f7:cb:48:11:0a:19:8e:2a:f2:e1:80:16:
c7:9e:9a:14:3f:8f:c2:fc:4a:4e:05:3d:be:9e:70:
bf:27:dc:a0:f2:0c:5f:27:79:ac:60:b4:0b:33:bd:
76:4c:13:82:e3:5c:32:ab:46:74:41:80:41:9a:15:
67:3c:b3:05:95:ec:d7:ee:e1:4f:05:ac:1b:67:46:
a3:9c:40:2a:bd:73:ea:1f:81:e2:a0:c1:1d:66:5f:
74:9a:6d:28:20:12:b4:8b:3e:cd:4c:b5:ce:13:f5:
24:3c:da:9f:08:89:a9:b1:08:d2:bc:45:4b:d1:32:
4c:6a:97:ac:29:35:ea:8b:74:e9:c2:86:ef:e6:5d:
32:6e:03:a4:f6:fd:d3:e0:56:f7:5e:c6:3d:cc:c2:
27:3b:af:1c:16:61:5a:0e:b2:d0:d4:b1:c1:e4:99:
7a:1f:d1:ea:b3:d7:db:71:44:b6:ca:d7:04:d7:ce:
03:b4:ed:c4:9f:fc:df:3a:b0:5d:2a:9c:32:e2:3d:
a1:b8:e7:8c:10:f2:62:3a:69:89:62:28:f3:8f:9a:
29:3d:57:b9:ac:7f:6d:e6:33:4a:a7:3d:f7:fe:f2:
53:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:90:CE:1A:CB:26:C9:CA:2D:7A:AC:88:26:6D:12:7F:DF:CE:4C:51
X509v3 Authority Key Identifier:
keyid:2D:65:F5:DC:78:43:F5:B7:66:89:F3:6A:B9:16:A0:D9:94:B9:97:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LWX13HhD9bdmifNquRag2ZS5l5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:bb:e8:10:61:ba:ad:8a:f1:33:30:71:34:7f:53:ca:00:59:
a1:3d:28:b1:3d:30:ed:66:1c:56:78:ab:10:d2:03:cc:46:be:
62:e7:d4:84:6f:e7:6d:9c:39:94:0e:5a:db:4e:12:c5:b0:73:
04:89:fa:25:97:8c:db:89:d5:cf:2c:3d:de:01:1f:e4:cf:83:
ab:26:f2:f0:39:ab:ef:b7:3c:73:88:b9:78:c7:d9:45:e6:d3:
54:42:dc:33:b0:89:dc:cc:e2:8d:94:bb:0c:a1:2b:f4:9c:19:
1c:34:95:20:85:f0:24:84:8c:6a:c5:bd:32:5d:18:4b:f6:37:
88:98:15:1f:fa:12:6f:12:5e:b9:be:6e:46:94:e2:33:71:f7:
8f:49:5b:c8:8e:c8:be:ef:ac:84:a6:7c:2b:21:23:19:76:d9:
e9:d8:87:6e:c2:cd:01:ed:53:d1:72:03:5a:78:2e:53:6f:17:
30:17:29:1f:57:ff:91:28:78:df:15:ae:ca:f2:3f:ce:d0:25:
af:45:76:06:5f:c0:ed:bb:58:47:c8:1a:67:ce:ff:0d:8c:80:
75:4a:15:26:c6:01:40:d4:44:fb:69:4f:65:36:56:b7:e7:96:
55:ba:93:98:a8:fc:3d:76:c0:ce:cd:1c:9f:f7:32:ac:81:7b:
92:c1:57:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpwpYFDcmja5pMTY29Y3QdYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkNjVmNWRjNzg0M2Y1Yjc2Njg5ZjM2YWI5MTZhMGQ5OTRi
OTk3OWMwHhcNMjUxMTExMDIwMTI1WhcNMjUxMTEyMDIwMTI1WjAzMTEwLwYDVQQD
Eyg4YjkwY2UxYWNiMjZjOWNhMmQ3YWFjODgyNjZkMTI3ZmRmY2U0YzUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqBXnOcKUc+StH7oQJBy/978xLAC
RuJOmPTy01I+8UD3y0gRChmOKvLhgBbHnpoUP4/C/EpOBT2+nnC/J9yg8gxfJ3ms
YLQLM712TBOC41wyq0Z0QYBBmhVnPLMFlezX7uFPBawbZ0ajnEAqvXPqH4HioMEd
Zl90mm0oIBK0iz7NTLXOE/UkPNqfCImpsQjSvEVL0TJMapesKTXqi3Tpwobv5l0y
bgOk9v3T4Fb3XsY9zMInO68cFmFaDrLQ1LHB5Jl6H9Hqs9fbcUS2ytcE184DtO3E
n/zfOrBdKpwy4j2huOeMEPJiOmmJYijzj5opPVe5rH9t5jNKpz33/vJTQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIuQzhrLJsnKLXqsiCZtEn/fzkxRMB8GA1UdIwQY
MBaAFC1l9dx4Q/W3ZonzarkWoNmUuZecMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFdYMTNIaEQ5YmRtaWZOcXVSYWcyWlM1bDV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni84NTBhZjgtNDhkNS00Mjk3LTlkYmUt
OGU2MzNlMGYwNzlkLzEvTFdYMTNIaEQ5YmRtaWZOcXVSYWcyWlM1bDV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni84NTBhZjgtNDhkNS00Mjk3LTlkYmUtOGU2MzNlMGYwNzlk
LzEvTFdYMTNIaEQ5YmRtaWZOcXVSYWcyWlM1bDV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq7voEGG6
rYrxMzBxNH9TygBZoT0osT0w7WYcVnirENIDzEa+YufUhG/nbZw5lA5a204SxbBz
BIn6JZeM24nVzyw93gEf5M+Dqyby8Dmr77c8c4i5eMfZRebTVELcM7CJ3MzijZS7
DKEr9JwZHDSVIIXwJISMasW9Ml0YS/Y3iJgVH/oSbxJeub5uRpTiM3H3j0lbyI7I
vu+shKZ8KyEjGXbZ6diHbsLNAe1T0XIDWnguU28XMBcpH1f/kSh43xWuyvI/ztAl
r0V2Bl/A7btYR8gaZ87/DYyAdUoVJsYBQNRE+2lPZTZWt+eWVbqTmKj8PXbAzs0c
n/cyrIF7ksFXLQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:08 2025 by rpki-client