Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.mft
File: L4Z1RXWU1-dAqu7y59fv0CI5xhc.mft (raw, json)
Hash identifier: p2tjx5x+GzPNRHi/bcuxKNwE3G3M+0EQyIoQq7PyuIQ=
Subject key identifier: A9:49:2B:7A:18:56:F1:E4:8F:FC:C7:45:19:3E:B9:DB:9D:87:FD:9D
Authority key identifier: 2F:86:75:45:75:94:D7:E7:40:AA:EE:F2:E7:D7:EF:D0:22:39:C6:17
Certificate issuer: /CN=2f8675457594d7e740aaeef2e7d7efd02239c617
Certificate serial: 019A0C3871073AC662818B512DC0D54CEAEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L4Z1RXWU1-dAqu7y59fv0CI5xhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.mft
Manifest number: 1700
Signing time: Wed 22 Oct 2025 14:00:16 +0000
Manifest this update: Wed 22 Oct 2025 14:00:16 +0000
Manifest next update: Thu 23 Oct 2025 14:00:16 +0000
Files and hashes: 1: L4Z1RXWU1-dAqu7y59fv0CI5xhc.crl (hash: E5ESfA5A2ZziNQe6IAQnHDiRsWjrFlCwhUyCUhICnOQ=)
2: bRCOse-YwXmlb0_TSMXc_qYW3rA.roa (hash: WyPtlgmhHmNvXP6MvNpXQnH3k3dVLs2cy4XeQO/f/1I=)
3: fAHDNBDkI_AF6qq1tyOEO6kTePQ.roa (hash: Z61YKLaWLdELIVxMnTFbl/EfpJa3Mw9qoqybZW0fjXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/L4Z1RXWU1-dAqu7y59fv0CI5xhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0c:38:71:07:3a:c6:62:81:8b:51:2d:c0:d5:4c:ea:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f8675457594d7e740aaeef2e7d7efd02239c617
Validity
Not Before: Oct 22 14:00:16 2025 GMT
Not After : Oct 23 14:00:16 2025 GMT
Subject: CN=a9492b7a1856f1e48ffcc745193eb9db9d87fd9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:48:c9:2b:04:a3:3c:aa:54:13:af:9c:25:34:
cb:32:88:b9:74:1b:2b:39:b2:ae:ca:62:9d:35:5e:
03:72:5a:e0:8f:44:9b:81:d5:a2:eb:e1:82:a2:de:
33:e9:de:b0:1e:67:c2:4d:97:76:79:36:bb:1a:02:
45:ee:65:43:f1:3c:b1:91:2f:67:fe:16:c6:8f:d5:
70:bc:38:1e:a6:9c:ac:c9:ed:82:67:31:2e:29:a3:
ce:cc:0b:2a:03:fd:fa:af:c5:5e:11:64:ad:a7:9f:
24:5f:c6:c4:1c:ce:7e:f2:65:1c:83:35:f7:20:81:
eb:6e:c6:03:06:b9:f4:7c:f3:e3:93:b0:3a:0d:22:
c6:a6:23:aa:40:60:7b:57:05:90:6b:77:b8:17:52:
82:16:68:c4:45:3a:e1:02:66:bb:cf:1e:81:f1:f0:
fc:77:11:2b:69:0f:53:e3:a8:b4:5d:6d:56:7d:18:
0c:a4:1b:d7:67:01:9e:fc:81:3b:7e:ab:97:f0:3a:
97:0e:17:88:5f:26:c8:cb:70:04:53:8b:b5:44:aa:
c0:39:76:a5:61:87:8c:d3:2b:a8:a2:76:9e:b7:b3:
e3:86:78:cf:c8:0c:86:d7:55:5d:9d:a4:c1:0d:e3:
37:bf:67:74:0f:4b:da:12:76:91:bd:68:86:85:74:
f5:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:49:2B:7A:18:56:F1:E4:8F:FC:C7:45:19:3E:B9:DB:9D:87:FD:9D
X509v3 Authority Key Identifier:
keyid:2F:86:75:45:75:94:D7:E7:40:AA:EE:F2:E7:D7:EF:D0:22:39:C6:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4Z1RXWU1-dAqu7y59fv0CI5xhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:9b:8c:85:d6:3d:14:e2:00:e2:52:e4:24:70:1b:4f:00:dd:
b2:a8:2c:85:87:ff:a6:42:ce:b0:0a:24:78:4b:57:37:15:ad:
44:ea:fc:76:92:1e:f9:9a:76:f2:0f:7c:93:5f:8d:55:96:87:
d0:19:1d:c4:a0:ba:79:8f:00:41:59:5b:44:91:0a:fc:47:22:
ec:cf:10:33:1d:92:aa:8a:b9:df:7f:97:18:3f:7d:94:9c:3f:
af:c0:52:77:8d:0e:06:5e:f0:4d:a9:7d:5d:c4:f7:55:e2:f1:
41:0e:f8:c2:9d:87:c0:ae:0a:d9:66:9b:b1:3e:1f:bf:6b:92:
c1:db:1a:8b:32:92:99:1c:c4:f1:0f:23:bc:72:b4:eb:27:13:
af:f7:b6:ab:32:5e:8f:4d:61:68:eb:ef:59:77:67:60:8a:cb:
4a:a6:c0:db:b9:9e:7e:a3:d2:a9:7a:4c:08:f3:7a:39:d5:68:
96:dc:c8:f0:60:0f:dd:90:53:33:ae:6b:fe:53:e0:87:bf:c4:
50:06:5c:ed:f4:37:dc:a9:b7:07:62:8d:6d:17:41:3e:a3:c3:
fb:fe:b8:e3:f2:1c:2e:dc:0e:83:ef:d8:33:d2:ce:eb:08:00:
a3:d5:e7:da:ea:bf:8f:e6:60:1c:f0:bd:28:04:2c:d4:44:28:
ca:79:43:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoMOHEHOsZigYtRLcDVTOrrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmODY3NTQ1NzU5NGQ3ZTc0MGFhZWVmMmU3ZDdlZmQwMjIz
OWM2MTcwHhcNMjUxMDIyMTQwMDE2WhcNMjUxMDIzMTQwMDE2WjAzMTEwLwYDVQQD
EyhhOTQ5MmI3YTE4NTZmMWU0OGZmY2M3NDUxOTNlYjlkYjlkODdmZDlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0jJKwSjPKpUE6+cJTTLMoi5dBsr
ObKuymKdNV4Dclrgj0SbgdWi6+GCot4z6d6wHmfCTZd2eTa7GgJF7mVD8TyxkS9n
/hbGj9VwvDgeppysye2CZzEuKaPOzAsqA/36r8VeEWStp58kX8bEHM5+8mUcgzX3
IIHrbsYDBrn0fPPjk7A6DSLGpiOqQGB7VwWQa3e4F1KCFmjERTrhAma7zx6B8fD8
dxEraQ9T46i0XW1WfRgMpBvXZwGe/IE7fquX8DqXDheIXybIy3AEU4u1RKrAOXal
YYeM0yuoonaet7PjhnjPyAyG11VdnaTBDeM3v2d0D0vaEnaRvWiGhXT1WwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKlJK3oYVvHkj/zHRRk+ududh/2dMB8GA1UdIwQY
MBaAFC+GdUV1lNfnQKru8ufX79AiOcYXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDRaMVJYV1UxLWRBcXU3eTU5ZnYwQ0k1eGhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS80Y2Q0Y2EtYzE5NS00YmM0LWJiOWYt
MTAzMWFlMWViMDMyLzEvTDRaMVJYV1UxLWRBcXU3eTU5ZnYwQ0k1eGhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS80Y2Q0Y2EtYzE5NS00YmM0LWJiOWYtMTAzMWFlMWViMDMy
LzEvTDRaMVJYV1UxLWRBcXU3eTU5ZnYwQ0k1eGhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuZuMhdY9
FOIA4lLkJHAbTwDdsqgshYf/pkLOsAokeEtXNxWtROr8dpIe+Zp28g98k1+NVZaH
0BkdxKC6eY8AQVlbRJEK/Eci7M8QMx2Sqoq533+XGD99lJw/r8BSd40OBl7wTal9
XcT3VeLxQQ74wp2HwK4K2WabsT4fv2uSwdsaizKSmRzE8Q8jvHK06ycTr/e2qzJe
j01haOvvWXdnYIrLSqbA27mefqPSqXpMCPN6OdVoltzI8GAP3ZBTM65r/lPgh7/E
UAZc7fQ33Km3B2KNbRdBPqPD+/644/IcLtwOg+/YM9LO6wgAo9Xn2uq/j+ZgHPC9
KAQs1EQoynlDOA==
-----END CERTIFICATE-----
Generated at Wed Oct 22 16:45:07 2025 by rpki-client