Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/930caf-76ee-456c-afe0-a25255329dc0/1/l0UG8_IC2GhJu03Vx1OdIrTfUYI.mft
File: l0UG8_IC2GhJu03Vx1OdIrTfUYI.mft (raw, json)
Hash identifier: gkrdGKFfWoGf+D+zVKhWLs35B5x8EK6qsYfaskM1ptM=
Subject key identifier: 72:A2:8E:85:0D:5E:AB:AE:D1:E4:09:81:76:54:28:58:A8:FA:90:C9
Authority key identifier: 97:45:06:F3:F2:02:D8:68:49:BB:4D:D5:C7:53:9D:22:B4:DF:51:82
Certificate issuer: /CN=974506f3f202d86849bb4dd5c7539d22b4df5182
Certificate serial: 019A72CA5C47EE7B4088741E5EDA5372D79B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l0UG8_IC2GhJu03Vx1OdIrTfUYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/930caf-76ee-456c-afe0-a25255329dc0/1/l0UG8_IC2GhJu03Vx1OdIrTfUYI.mft
Manifest number: 09AD
Signing time: Tue 11 Nov 2025 12:00:55 +0000
Manifest this update: Tue 11 Nov 2025 12:00:55 +0000
Manifest next update: Wed 12 Nov 2025 12:00:55 +0000
Files and hashes: 1: Dlst4zdGN0XEjaRKAVG2aUW3Zys.roa (hash: JUWMAM2lZQg8cUdPcrThF2mh7HbwsAT1N8ME9RsjW/U=)
2: l0UG8_IC2GhJu03Vx1OdIrTfUYI.crl (hash: 6nZvn+rgs+/S979bJG/GQaG3xcz+QvhZRPaupD9kPEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/930caf-76ee-456c-afe0-a25255329dc0/1/l0UG8_IC2GhJu03Vx1OdIrTfUYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/930caf-76ee-456c-afe0-a25255329dc0/1/l0UG8_IC2GhJu03Vx1OdIrTfUYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/l0UG8_IC2GhJu03Vx1OdIrTfUYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:5c:47:ee:7b:40:88:74:1e:5e:da:53:72:d7:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=974506f3f202d86849bb4dd5c7539d22b4df5182
Validity
Not Before: Nov 11 12:00:55 2025 GMT
Not After : Nov 12 12:00:55 2025 GMT
Subject: CN=72a28e850d5eabaed1e4098176542858a8fa90c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:3b:bd:bb:27:58:e1:be:3b:6c:de:1d:73:f5:
18:fc:63:41:1d:45:9e:21:66:de:1d:51:db:0d:29:
2d:28:8e:19:83:3e:de:4a:90:0f:f0:0c:34:dd:b2:
5d:02:a2:0e:42:5a:79:c2:33:b0:b4:bd:5f:78:b6:
a4:f3:ff:c7:8f:1a:64:9d:93:2b:6b:3c:17:24:a0:
40:4c:71:67:4c:1e:c1:5e:2c:5d:16:b2:96:3b:84:
98:4a:84:24:66:c7:fb:a8:a5:9f:ac:93:e0:18:ef:
7f:04:d9:68:a7:8c:44:a4:1a:75:45:b5:b0:5e:1d:
48:ca:04:7d:2e:ca:44:25:89:13:c4:4a:d9:d4:4e:
71:d2:09:1b:fc:81:5f:59:15:40:e9:d6:74:04:3a:
e1:52:00:de:2a:a5:dd:e1:9e:aa:e3:29:9a:ca:35:
ae:03:35:51:dc:7f:db:81:23:6d:bd:9b:c0:25:61:
88:c0:71:4b:f7:bb:d5:8b:68:3f:cd:ef:1f:b6:19:
28:68:eb:16:31:c4:73:c8:d4:73:64:2a:62:72:99:
e5:10:35:04:d1:9e:b4:a3:f9:d1:1e:c5:e5:68:e8:
91:f5:16:67:86:99:99:dd:de:d0:e2:cf:2b:c6:8a:
54:58:82:33:fb:f7:92:f0:aa:0d:9c:a3:60:b7:b6:
d6:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:A2:8E:85:0D:5E:AB:AE:D1:E4:09:81:76:54:28:58:A8:FA:90:C9
X509v3 Authority Key Identifier:
keyid:97:45:06:F3:F2:02:D8:68:49:BB:4D:D5:C7:53:9D:22:B4:DF:51:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0UG8_IC2GhJu03Vx1OdIrTfUYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/930caf-76ee-456c-afe0-a25255329dc0/1/l0UG8_IC2GhJu03Vx1OdIrTfUYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/930caf-76ee-456c-afe0-a25255329dc0/1/l0UG8_IC2GhJu03Vx1OdIrTfUYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:45:2d:89:49:2f:8f:ee:96:db:74:6f:70:0f:6b:d6:cf:3b:
d9:0d:97:c2:35:9c:11:d5:2c:2c:f5:09:b7:d1:f2:cc:80:54:
c0:2d:96:0e:9a:61:54:ee:66:32:a7:d0:5f:f8:85:64:5b:ff:
4a:82:55:85:4d:d1:d5:a5:63:a1:eb:a5:8e:48:17:91:1a:e5:
44:7d:16:40:23:ac:af:fc:c9:3d:02:a2:94:7f:e3:b6:cc:11:
b5:a6:9e:01:4c:25:9b:49:89:25:52:da:f8:65:3c:c6:db:b3:
4b:40:b7:10:19:37:95:1a:e7:31:0c:7c:29:1e:1f:34:32:e3:
ff:03:6a:14:d4:6e:e8:72:67:c3:9d:2e:bb:11:63:59:c6:44:
ce:aa:e7:ce:21:70:47:da:87:76:3a:e7:10:af:fe:5b:3c:af:
0e:cf:60:f3:7f:cb:2b:10:d7:8c:1c:b5:22:39:af:fc:bf:da:
38:64:73:1d:45:6c:5f:bd:b7:bb:ca:1d:f7:b0:ad:c8:f6:78:
88:85:fa:13:06:bc:d8:38:19:74:62:b4:58:9d:7e:af:10:bc:
19:2f:95:c8:e6:f2:17:92:e9:19:c0:28:7e:3d:0e:c1:2d:ac:
da:c2:4d:2f:26:06:81:b0:1d:b0:32:7b:c1:eb:72:56:ca:cc:
2b:cb:54:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyylxH7ntAiHQeXtpTctebMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3NDUwNmYzZjIwMmQ4Njg0OWJiNGRkNWM3NTM5ZDIyYjRk
ZjUxODIwHhcNMjUxMTExMTIwMDU1WhcNMjUxMTEyMTIwMDU1WjAzMTEwLwYDVQQD
Eyg3MmEyOGU4NTBkNWVhYmFlZDFlNDA5ODE3NjU0Mjg1OGE4ZmE5MGM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTu9uydY4b47bN4dc/UY/GNBHUWe
IWbeHVHbDSktKI4Zgz7eSpAP8Aw03bJdAqIOQlp5wjOwtL1feLak8//HjxpknZMr
azwXJKBATHFnTB7BXixdFrKWO4SYSoQkZsf7qKWfrJPgGO9/BNlop4xEpBp1RbWw
Xh1IygR9LspEJYkTxErZ1E5x0gkb/IFfWRVA6dZ0BDrhUgDeKqXd4Z6q4ymayjWu
AzVR3H/bgSNtvZvAJWGIwHFL97vVi2g/ze8fthkoaOsWMcRzyNRzZCpicpnlEDUE
0Z60o/nRHsXlaOiR9RZnhpmZ3d7Q4s8rxopUWIIz+/eS8KoNnKNgt7bWywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHKijoUNXquu0eQJgXZUKFio+pDJMB8GA1UdIwQY
MBaAFJdFBvPyAthoSbtN1cdTnSK031GCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDBVRzhfSUMyR2hKdTAzVngxT2RJclRmVVlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi85MzBjYWYtNzZlZS00NTZjLWFmZTAt
YTI1MjU1MzI5ZGMwLzEvbDBVRzhfSUMyR2hKdTAzVngxT2RJclRmVVlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi85MzBjYWYtNzZlZS00NTZjLWFmZTAtYTI1MjU1MzI5ZGMw
LzEvbDBVRzhfSUMyR2hKdTAzVngxT2RJclRmVVlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGkUtiUkv
j+6W23RvcA9r1s872Q2XwjWcEdUsLPUJt9HyzIBUwC2WDpphVO5mMqfQX/iFZFv/
SoJVhU3R1aVjoeuljkgXkRrlRH0WQCOsr/zJPQKilH/jtswRtaaeAUwlm0mJJVLa
+GU8xtuzS0C3EBk3lRrnMQx8KR4fNDLj/wNqFNRu6HJnw50uuxFjWcZEzqrnziFw
R9qHdjrnEK/+WzyvDs9g83/LKxDXjBy1Ijmv/L/aOGRzHUVsX723u8od97CtyPZ4
iIX6Ewa82DgZdGK0WJ1+rxC8GS+VyObyF5LpGcAofj0OwS2s2sJNLyYGgbAdsDJ7
wetyVsrMK8tUZw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:10:17 2025 by rpki-client