Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.mft
File: LsEh4VRd8-W7hukYjygl-tdHf3U.mft (raw, json)
Hash identifier: Z1rEewEv/n9KY6+UsGOPN5pDRsTLIqRCxUnGuY4JmcY=
Subject key identifier: D5:BE:4D:39:9A:BF:52:51:58:D3:70:3C:A4:27:ED:1E:5D:67:7D:9B
Authority key identifier: 2E:C1:21:E1:54:5D:F3:E5:BB:86:E9:18:8F:28:25:FA:D7:47:7F:75
Certificate issuer: /CN=2ec121e1545df3e5bb86e9188f2825fad7477f75
Certificate serial: 019A21093C4C19DB631AA9A2371EEE437974
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LsEh4VRd8-W7hukYjygl-tdHf3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.mft
Manifest number: 16F7
Signing time: Sun 26 Oct 2025 15:00:44 +0000
Manifest this update: Sun 26 Oct 2025 15:00:44 +0000
Manifest next update: Mon 27 Oct 2025 15:00:44 +0000
Files and hashes: 1: 0IG7CMPC-7SDKCTiz8anhD3c0zs.roa (hash: fOnGjT4Xyjjotwa9/pecYw3cI1uzEt3+li8tB/lSTXY=)
2: BU0Pzn4hZS4sQu5v8Q1Qbbhp9vM.roa (hash: 9kbaESAN0/YNybQyxy7LooDJN3A5I92At9aUcKOvy/s=)
3: IwlbmFExD2G5c49HgZqQSHA1wZk.roa (hash: 45pPUt5QNz8dN0ylQGV0BCVZpBwOOv2uaieuY/tEzHc=)
4: JH5Q15rYm3yauoa5O0AtnaEF5T8.roa (hash: P8bh12UacYgaXKXWnxHFtSknccP/NWYvpFtt4o+MFnQ=)
5: L1Jr9Ntwc8rL0VyBMGBPBeMOSbU.roa (hash: 2Po6H5pjnfZQ8LGkU3TaUi4GHx7DH6w6vtm+1KWoyVI=)
6: LsEh4VRd8-W7hukYjygl-tdHf3U.crl (hash: tfNvpCSRZvWK5fw98U++QcZ58wZ2S5n+Oimm8CndSEI=)
7: X1X4I6xtC4Tyzz9jxci5NVZVFuk.roa (hash: Y7rSJ5Le7s/lA/Q7YQ3ZJcSkf2udL6S8lMTSgJ0RabQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/LsEh4VRd8-W7hukYjygl-tdHf3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:09:3c:4c:19:db:63:1a:a9:a2:37:1e:ee:43:79:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ec121e1545df3e5bb86e9188f2825fad7477f75
Validity
Not Before: Oct 26 15:00:44 2025 GMT
Not After : Oct 27 15:00:44 2025 GMT
Subject: CN=d5be4d399abf525158d3703ca427ed1e5d677d9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:49:fd:1b:87:43:91:c1:31:8f:84:ad:f2:76:
96:c5:f7:79:d7:5a:7a:ca:d1:54:da:5a:07:a4:3a:
fb:e0:cf:44:45:52:20:ee:03:af:76:0a:23:9f:cf:
4f:86:8c:aa:2a:29:dd:32:8c:b4:75:40:16:d2:ba:
8c:29:b1:9d:68:da:02:7d:b5:aa:ee:3c:a3:a5:75:
b0:80:d9:22:d6:b0:c6:c2:06:7d:1f:41:12:da:c1:
1d:4e:c5:55:f1:72:6c:0e:de:ae:6a:b5:f9:0f:5e:
f9:74:ce:53:79:43:21:35:5a:c2:12:89:8a:32:6b:
c8:eb:d3:2b:2a:3a:05:74:9b:88:71:77:62:d9:f9:
ac:a6:4d:63:1d:4d:99:80:f6:0e:f1:88:86:bc:98:
d7:e0:02:d9:d9:e1:69:8b:a3:08:11:64:78:eb:7b:
c2:f9:06:ec:b5:e8:be:90:ce:1a:98:f5:b7:22:57:
6a:de:0d:20:4f:0d:1d:13:7d:dd:6a:f9:af:14:51:
70:15:51:04:75:25:66:77:33:3d:1b:95:88:07:9f:
a7:ff:51:e3:2a:a5:4a:65:d1:db:1c:53:67:27:d4:
fe:9d:ea:c8:8b:61:d3:3d:88:3c:7a:a7:cd:a7:ef:
80:1f:a0:7f:c0:67:22:a1:66:fb:eb:b7:95:7a:8f:
33:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:BE:4D:39:9A:BF:52:51:58:D3:70:3C:A4:27:ED:1E:5D:67:7D:9B
X509v3 Authority Key Identifier:
keyid:2E:C1:21:E1:54:5D:F3:E5:BB:86:E9:18:8F:28:25:FA:D7:47:7F:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LsEh4VRd8-W7hukYjygl-tdHf3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:95:f0:61:c0:49:21:96:63:a9:6c:e8:63:8c:80:1b:34:e0:
a2:08:ce:1f:6c:82:1c:f2:00:21:8b:9a:aa:e8:92:db:bc:c0:
44:13:76:16:6d:df:23:fa:32:53:a0:2b:6c:fa:2c:25:f6:3c:
4a:50:0d:cb:56:07:91:03:81:73:20:06:5a:91:ac:d2:ed:83:
ca:fe:5b:0e:19:cf:67:c4:24:31:5e:c9:cf:4d:07:27:16:4e:
9a:dd:98:df:11:36:9d:3a:60:4d:db:09:aa:6a:69:d7:e1:17:
68:a9:f0:6d:95:2a:31:cc:40:e7:1e:95:a9:5e:7a:42:bf:51:
1b:36:91:94:84:e9:82:40:87:4e:75:00:d3:ad:35:13:98:9e:
10:2c:f3:96:46:4a:fd:dc:aa:87:db:65:c6:f2:8b:ed:1b:25:
30:bf:ca:0e:a0:1f:82:9c:48:93:b0:e4:4f:9e:c9:0a:5e:07:
71:77:08:63:fc:47:8a:25:c0:bc:f1:96:3d:39:31:9a:e8:b9:
7d:e3:85:f7:21:7a:d1:6a:64:fd:31:03:41:9a:82:b0:6c:1a:
94:68:3d:93:f3:d4:a6:ad:b5:3a:45:fc:f4:f9:25:2d:33:d6:
b6:9e:d0:b4:c9:5b:22:d1:ed:07:30:5f:40:bb:2c:67:00:48:
4f:70:e7:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZohCTxMGdtjGqmiNx7uQ3l0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlYzEyMWUxNTQ1ZGYzZTViYjg2ZTkxODhmMjgyNWZhZDc0
NzdmNzUwHhcNMjUxMDI2MTUwMDQ0WhcNMjUxMDI3MTUwMDQ0WjAzMTEwLwYDVQQD
EyhkNWJlNGQzOTlhYmY1MjUxNThkMzcwM2NhNDI3ZWQxZTVkNjc3ZDliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6kn9G4dDkcExj4St8naWxfd511p6
ytFU2loHpDr74M9ERVIg7gOvdgojn89PhoyqKindMoy0dUAW0rqMKbGdaNoCfbWq
7jyjpXWwgNki1rDGwgZ9H0ES2sEdTsVV8XJsDt6uarX5D175dM5TeUMhNVrCEomK
MmvI69MrKjoFdJuIcXdi2fmspk1jHU2ZgPYO8YiGvJjX4ALZ2eFpi6MIEWR463vC
+Qbstei+kM4amPW3Ildq3g0gTw0dE33davmvFFFwFVEEdSVmdzM9G5WIB5+n/1Hj
KqVKZdHbHFNnJ9T+nerIi2HTPYg8eqfNp++AH6B/wGcioWb767eVeo8zIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNW+TTmav1JRWNNwPKQn7R5dZ32bMB8GA1UdIwQY
MBaAFC7BIeFUXfPlu4bpGI8oJfrXR391MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHNFaDRWUmQ4LVc3aHVrWWp5Z2wtdGRIZjNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC8xZWQyN2MtMmQ4Yy00MDgwLWE0NTgt
OWY1MjJhMjg0NTk1LzEvTHNFaDRWUmQ4LVc3aHVrWWp5Z2wtdGRIZjNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC8xZWQyN2MtMmQ4Yy00MDgwLWE0NTgtOWY1MjJhMjg0NTk1
LzEvTHNFaDRWUmQ4LVc3aHVrWWp5Z2wtdGRIZjNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT5XwYcBJ
IZZjqWzoY4yAGzTgogjOH2yCHPIAIYuaquiS27zARBN2Fm3fI/oyU6ArbPosJfY8
SlANy1YHkQOBcyAGWpGs0u2Dyv5bDhnPZ8QkMV7Jz00HJxZOmt2Y3xE2nTpgTdsJ
qmpp1+EXaKnwbZUqMcxA5x6VqV56Qr9RGzaRlITpgkCHTnUA0601E5ieECzzlkZK
/dyqh9tlxvKL7RslML/KDqAfgpxIk7DkT57JCl4HcXcIY/xHiiXAvPGWPTkxmui5
feOF9yF60Wpk/TEDQZqCsGwalGg9k/PUpq21OkX89PklLTPWtp7QtMlbItHtBzBf
QLssZwBIT3DnIg==
-----END CERTIFICATE-----
Generated at Sun Oct 26 20:34:34 2025 by rpki-client