Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/lkdopthwizYxQ6qIEeXZdoJk718.mft
File: lkdopthwizYxQ6qIEeXZdoJk718.mft (raw, json)
Hash identifier: QxFJ5ttJ8S7LM3QPZ7Tk04b0utMXYSrrYYFbKvqjHVk=
Subject key identifier: AE:94:4D:BF:42:8C:D6:1E:32:36:37:BF:5D:20:EF:74:14:7B:CD:56
Authority key identifier: 96:47:68:A6:D8:70:8B:36:31:43:AA:88:11:E5:D9:76:82:64:EF:5F
Certificate issuer: /CN=964768a6d8708b363143aa8811e5d9768264ef5f
Certificate serial: 019A2E8D84D855AFD3A6A681E0B915899A35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lkdopthwizYxQ6qIEeXZdoJk718.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/lkdopthwizYxQ6qIEeXZdoJk718.mft
Manifest number: 16FB
Signing time: Wed 29 Oct 2025 06:00:17 +0000
Manifest this update: Wed 29 Oct 2025 06:00:17 +0000
Manifest next update: Thu 30 Oct 2025 06:00:17 +0000
Files and hashes: 1: Y_M-V8EEZggpxHGYY_EMcxsEtBk.roa (hash: 6Rgj1vHtvv9h08odpQgGP8Qj63U3c9jYSW+di7UNAlU=)
2: lkdopthwizYxQ6qIEeXZdoJk718.crl (hash: vgHEOK/KKJKzl+GbryphFO6F6ijfCPGQEqLirNxsDeE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/lkdopthwizYxQ6qIEeXZdoJk718.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/lkdopthwizYxQ6qIEeXZdoJk718.mft
rsync://rpki.ripe.net/repository/DEFAULT/lkdopthwizYxQ6qIEeXZdoJk718.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2e:8d:84:d8:55:af:d3:a6:a6:81:e0:b9:15:89:9a:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=964768a6d8708b363143aa8811e5d9768264ef5f
Validity
Not Before: Oct 29 06:00:17 2025 GMT
Not After : Oct 30 06:00:17 2025 GMT
Subject: CN=ae944dbf428cd61e323637bf5d20ef74147bcd56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:41:77:b5:db:2d:16:3a:48:b6:ae:dc:57:42:
d7:e7:b1:87:5b:e0:a3:26:9c:42:37:20:e5:9a:b8:
c6:b2:ea:2a:41:a3:4b:8d:be:ee:83:53:24:de:cc:
b2:d0:16:18:16:9d:08:08:cb:ea:35:be:94:7c:80:
96:0a:0c:6a:7c:dc:50:71:65:38:53:1d:b9:8e:e1:
f7:2f:4c:0e:6a:20:20:02:6b:ef:42:01:f7:83:cc:
7d:7e:78:37:5d:26:79:4c:36:ad:04:b3:34:37:49:
c6:f2:39:53:11:45:64:86:6a:57:2d:b0:34:2a:72:
78:62:bd:8f:45:5f:34:c1:7a:f7:84:6a:b8:8f:12:
91:47:6b:f2:36:6f:12:b4:a4:ec:04:99:6b:76:1d:
7f:1a:24:7a:7a:e5:0d:a1:b5:d5:bc:f9:e9:dc:39:
5c:e5:bb:bf:f0:58:30:bb:5a:f0:1b:f3:03:fb:ed:
3b:d7:62:b9:4f:3a:af:a5:cb:43:7c:51:ab:d5:92:
58:8c:5c:c3:7e:c4:ae:16:55:d1:63:9b:17:55:52:
00:22:9b:44:89:d7:3c:03:ff:d5:38:45:ff:39:ff:
36:98:6a:99:fb:ea:f1:f8:6a:5e:d1:86:d3:dc:3a:
21:3c:10:cd:5a:43:26:25:33:73:62:ab:2a:5f:3f:
bf:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:94:4D:BF:42:8C:D6:1E:32:36:37:BF:5D:20:EF:74:14:7B:CD:56
X509v3 Authority Key Identifier:
keyid:96:47:68:A6:D8:70:8B:36:31:43:AA:88:11:E5:D9:76:82:64:EF:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lkdopthwizYxQ6qIEeXZdoJk718.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/lkdopthwizYxQ6qIEeXZdoJk718.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/lkdopthwizYxQ6qIEeXZdoJk718.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:d7:f8:6c:77:48:60:8b:e7:7e:47:d9:2b:72:6b:3b:e0:d5:
dc:ae:80:d3:5d:20:1d:ff:95:48:e7:76:03:cb:f8:36:5e:67:
b8:c6:24:8c:8c:95:d3:1a:0f:57:2f:b2:55:f8:78:1b:ed:73:
37:f6:34:b7:d5:9e:7b:fc:82:3c:54:ab:79:e1:25:3b:fb:86:
7a:16:95:bb:5d:9f:a7:7c:f9:72:98:75:f7:1a:97:05:a5:3c:
3b:ba:45:d5:28:d4:af:e9:01:a3:72:7d:99:29:7b:0a:ae:93:
ac:b8:08:8c:2b:fc:db:54:b3:8d:b5:b2:ac:8e:2f:07:ae:f2:
8c:02:dd:9d:61:f4:7c:df:39:43:e3:bb:5a:67:53:7e:b6:ba:
dc:14:0f:ab:17:06:00:b1:e6:22:10:b9:cd:61:83:33:6c:47:
ba:19:cb:71:be:63:9e:18:6e:2c:1b:f3:9d:e9:d8:d6:42:9a:
b9:70:93:ed:ee:14:6d:2f:c3:b0:c5:18:d7:aa:93:77:40:d3:
dc:8d:22:b7:03:07:2b:5f:1f:33:3f:7f:20:da:70:9a:39:72:
3e:fa:cf:b9:e2:8a:e9:d7:eb:63:ec:75:c3:c0:48:4c:2e:64:
0a:dd:c7:b0:2e:0d:2a:ad:38:b9:32:b4:e0:aa:60:d2:25:fd:
4b:d6:db:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoujYTYVa/TpqaB4LkViZo1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2NDc2OGE2ZDg3MDhiMzYzMTQzYWE4ODExZTVkOTc2ODI2
NGVmNWYwHhcNMjUxMDI5MDYwMDE3WhcNMjUxMDMwMDYwMDE3WjAzMTEwLwYDVQQD
EyhhZTk0NGRiZjQyOGNkNjFlMzIzNjM3YmY1ZDIwZWY3NDE0N2JjZDU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3EF3tdstFjpItq7cV0LX57GHW+Cj
JpxCNyDlmrjGsuoqQaNLjb7ug1Mk3syy0BYYFp0ICMvqNb6UfICWCgxqfNxQcWU4
Ux25juH3L0wOaiAgAmvvQgH3g8x9fng3XSZ5TDatBLM0N0nG8jlTEUVkhmpXLbA0
KnJ4Yr2PRV80wXr3hGq4jxKRR2vyNm8StKTsBJlrdh1/GiR6euUNobXVvPnp3Dlc
5bu/8Fgwu1rwG/MD++0712K5TzqvpctDfFGr1ZJYjFzDfsSuFlXRY5sXVVIAIptE
idc8A//VOEX/Of82mGqZ++rx+Gpe0YbT3DohPBDNWkMmJTNzYqsqXz+/+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK6UTb9CjNYeMjY3v10g73QUe81WMB8GA1UdIwQY
MBaAFJZHaKbYcIs2MUOqiBHl2XaCZO9fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGtkb3B0aHdpell4UTZxSUVlWFpkb0prNzE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC81ZWE0MjUtYWYxYS00ZTMwLThiYjAt
YmZhNjM2ODc3ZTkwLzEvbGtkb3B0aHdpell4UTZxSUVlWFpkb0prNzE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC81ZWE0MjUtYWYxYS00ZTMwLThiYjAtYmZhNjM2ODc3ZTkw
LzEvbGtkb3B0aHdpell4UTZxSUVlWFpkb0prNzE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq9f4bHdI
YIvnfkfZK3JrO+DV3K6A010gHf+VSOd2A8v4Nl5nuMYkjIyV0xoPVy+yVfh4G+1z
N/Y0t9Wee/yCPFSreeElO/uGehaVu12fp3z5cph19xqXBaU8O7pF1SjUr+kBo3J9
mSl7Cq6TrLgIjCv821SzjbWyrI4vB67yjALdnWH0fN85Q+O7WmdTfra63BQPqxcG
ALHmIhC5zWGDM2xHuhnLcb5jnhhuLBvznenY1kKauXCT7e4UbS/DsMUY16qTd0DT
3I0itwMHK18fMz9/INpwmjlyPvrPueKK6dfrY+x1w8BITC5kCt3HsC4NKq04uTK0
4Kpg0iX9S9bbYw==
-----END CERTIFICATE-----
Generated at Wed Oct 29 15:41:21 2025 by rpki-client