
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/_lSrLUgc8WIqLFIYOrT1qTCkrkE.mft
File: _lSrLUgc8WIqLFIYOrT1qTCkrkE.mft (raw, json)
Hash identifier: wuiUCQHkX+AgLCraj0ylu2UnrclNTIXRaaJA+u83Jhs=
Subject key identifier: FF:F1:EF:D0:8C:9F:99:99:E2:7F:B9:BB:DA:C7:3F:77:7A:38:D7:18
Authority key identifier: FE:54:AB:2D:48:1C:F1:62:2A:2C:52:18:3A:B4:F5:A9:30:A4:AE:41
Certificate issuer: /CN=fe54ab2d481cf1622a2c52183ab4f5a930a4ae41
Certificate serial: 019A27E684B9DEADB7DCC5D3B5F5649F2AEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_lSrLUgc8WIqLFIYOrT1qTCkrkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/_lSrLUgc8WIqLFIYOrT1qTCkrkE.mft
Manifest number: 14B2
Signing time: Mon 27 Oct 2025 23:00:09 +0000
Manifest this update: Mon 27 Oct 2025 23:00:09 +0000
Manifest next update: Tue 28 Oct 2025 23:00:09 +0000
Files and hashes: 1: 7V5fsdWWO5ABihTMEZ7pWqmVEAg.roa (hash: sjf02gaMH9qnVq1MImDdr+8L+PTPlTd41f1Dyl1MZ4o=)
2: A65TnUmtXA-j8i8DxUwRZ8_asWk.roa (hash: p/RP3ssqQNnSyJpKYgAURBKI/osjrx7YvE9haXVstps=)
3: IEW1KRb6lmdmt9uvjKbJ7Vx4KOU.roa (hash: EE9BbonsKAKQ/4dVT210oiZKAUY97maNXHc53hj/8uw=)
4: _lSrLUgc8WIqLFIYOrT1qTCkrkE.crl (hash: ae0/snNCJlbFIzL5F3If+8KqSR3KSALbwP0wYLJM7B0=)
5: xHmxHeGysZQx87yc0H9cuc2SvMo.roa (hash: j+Tf8Fn3tMX9hr31g+uEJglcEihEnhqHnvGsVUVKf9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/_lSrLUgc8WIqLFIYOrT1qTCkrkE.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/_lSrLUgc8WIqLFIYOrT1qTCkrkE.mft
rsync://rpki.ripe.net/repository/DEFAULT/_lSrLUgc8WIqLFIYOrT1qTCkrkE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 23:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:27:e6:84:b9:de:ad:b7:dc:c5:d3:b5:f5:64:9f:2a:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe54ab2d481cf1622a2c52183ab4f5a930a4ae41
Validity
Not Before: Oct 27 23:00:09 2025 GMT
Not After : Oct 28 23:00:09 2025 GMT
Subject: CN=fff1efd08c9f9999e27fb9bbdac73f777a38d718
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d1:cd:fc:6f:e9:27:a3:a5:1f:8b:73:55:7a:
f0:ed:eb:39:db:a0:28:92:f6:ba:5f:84:c1:c2:82:
27:6d:b6:fc:72:52:02:fe:2e:a7:f6:08:95:14:c5:
c6:7f:93:81:d9:89:90:5c:2c:4e:f1:d9:f9:b6:4d:
f3:de:44:6f:c4:cc:2e:51:66:02:97:48:68:e5:ee:
dd:fa:0f:7f:1a:44:b5:ae:fc:47:63:be:1d:0c:fa:
c3:71:36:91:b2:ae:7a:7f:5e:7f:b6:58:33:21:78:
c3:b2:3a:28:f2:c5:a3:22:3e:7a:5c:ce:73:17:9e:
8c:ef:22:58:d8:e9:7f:83:2b:89:cf:c2:a8:a0:24:
2f:db:5e:36:41:23:37:15:53:b7:4a:41:38:00:f7:
f8:5a:9b:5e:b4:b2:2e:de:04:70:da:19:82:e5:e0:
dc:68:5d:74:ec:66:9f:47:3b:b1:b8:b7:ba:1f:35:
96:21:59:fe:49:6b:5e:59:7f:37:58:b8:67:1c:8e:
34:a6:04:26:4e:84:8e:02:d6:a9:22:01:dd:07:59:
6d:66:19:f0:98:ed:a1:79:c0:92:83:cf:da:30:a8:
2b:68:8b:67:ca:60:e3:2b:7e:81:30:63:b8:ad:d4:
0c:d1:a9:d6:de:b5:6e:65:2c:bc:73:7c:7a:bb:3d:
c7:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:F1:EF:D0:8C:9F:99:99:E2:7F:B9:BB:DA:C7:3F:77:7A:38:D7:18
X509v3 Authority Key Identifier:
keyid:FE:54:AB:2D:48:1C:F1:62:2A:2C:52:18:3A:B4:F5:A9:30:A4:AE:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_lSrLUgc8WIqLFIYOrT1qTCkrkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/_lSrLUgc8WIqLFIYOrT1qTCkrkE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/_lSrLUgc8WIqLFIYOrT1qTCkrkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:99:c1:27:bc:ab:0f:d3:db:1c:9c:ef:72:18:96:a2:d5:36:
8e:27:d2:69:a1:3f:a8:40:3a:ec:12:71:11:fa:2e:cb:3f:d4:
86:f7:8d:bd:74:1f:20:23:20:ad:84:a1:b4:39:76:c1:0d:82:
f1:5b:a5:4b:2b:90:6c:31:59:ec:6d:c2:2e:bb:00:d0:f7:3f:
fb:2f:9a:4b:d0:b7:4d:27:bc:47:db:eb:19:f3:12:ff:38:57:
c0:42:d2:87:76:54:df:eb:66:b9:92:92:3b:c6:dc:72:0b:e9:
05:52:ae:0b:7c:3f:4c:16:27:9c:64:c9:16:c4:82:d4:4d:82:
0b:a8:cc:6c:f8:84:6b:45:b3:70:c4:27:0f:a2:00:c8:c5:7c:
e6:4c:48:88:cc:ec:c0:2e:ff:ea:f1:d6:9a:09:76:e9:da:fd:
b3:77:04:54:83:ad:b7:e7:e0:93:a2:6d:b7:f8:c4:cf:7a:30:
eb:b5:5e:5c:d9:ea:04:1c:de:e4:15:f5:a8:5e:4e:4b:a3:d0:
77:bd:a7:26:46:0f:1e:9e:70:ae:86:a2:53:61:df:8d:91:14:
fe:8e:53:91:5d:ec:1e:00:0d:b5:48:d8:2b:d0:ef:fb:4d:d8:
98:32:7f:71:c5:77:c9:25:48:70:51:f4:88:0d:af:da:5e:0f:
f6:61:f3:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZon5oS53q233MXTtfVknyruMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlNTRhYjJkNDgxY2YxNjIyYTJjNTIxODNhYjRmNWE5MzBh
NGFlNDEwHhcNMjUxMDI3MjMwMDA5WhcNMjUxMDI4MjMwMDA5WjAzMTEwLwYDVQQD
EyhmZmYxZWZkMDhjOWY5OTk5ZTI3ZmI5YmJkYWM3M2Y3NzdhMzhkNzE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNHN/G/pJ6OlH4tzVXrw7es526Ao
kva6X4TBwoInbbb8clIC/i6n9giVFMXGf5OB2YmQXCxO8dn5tk3z3kRvxMwuUWYC
l0ho5e7d+g9/GkS1rvxHY74dDPrDcTaRsq56f15/tlgzIXjDsjoo8sWjIj56XM5z
F56M7yJY2Ol/gyuJz8KooCQv2142QSM3FVO3SkE4APf4WptetLIu3gRw2hmC5eDc
aF107GafRzuxuLe6HzWWIVn+SWteWX83WLhnHI40pgQmToSOAtapIgHdB1ltZhnw
mO2hecCSg8/aMKgraItnymDjK36BMGO4rdQM0anW3rVuZSy8c3x6uz3HeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP/x79CMn5mZ4n+5u9rHP3d6ONcYMB8GA1UdIwQY
MBaAFP5Uqy1IHPFiKixSGDq09akwpK5BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2xTckxVZ2M4V0lxTEZJWU9yVDFxVENrcmtFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC80ZDVlNGEtOGExNi00NTM3LWJlMWYt
MWIxMzYyYjliNmEyLzEvX2xTckxVZ2M4V0lxTEZJWU9yVDFxVENrcmtFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC80ZDVlNGEtOGExNi00NTM3LWJlMWYtMWIxMzYyYjliNmEy
LzEvX2xTckxVZ2M4V0lxTEZJWU9yVDFxVENrcmtFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAipnBJ7yr
D9PbHJzvchiWotU2jifSaaE/qEA67BJxEfouyz/UhveNvXQfICMgrYShtDl2wQ2C
8VulSyuQbDFZ7G3CLrsA0Pc/+y+aS9C3TSe8R9vrGfMS/zhXwELSh3ZU3+tmuZKS
O8bccgvpBVKuC3w/TBYnnGTJFsSC1E2CC6jMbPiEa0WzcMQnD6IAyMV85kxIiMzs
wC7/6vHWmgl26dr9s3cEVIOtt+fgk6Jtt/jEz3ow67VeXNnqBBze5BX1qF5OS6PQ
d72nJkYPHp5wroaiU2HfjZEU/o5TkV3sHgANtUjYK9Dv+03YmDJ/ccV3ySVIcFH0
iA2v2l4P9mHz7Q==
-----END CERTIFICATE-----
Generated at Tue Oct 28 04:18:37 2025 by rpki-client