Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.mft
File: lXc0XfzJNHjF_yIdSC7kyYSD-Qg.mft (raw, json)
Hash identifier: rcV+f66yH1g4464HTRTD1FLKnTqGwcBQi7sxISuKB4c=
Subject key identifier: 3B:2F:0E:35:F5:95:17:B4:91:2F:43:D1:6D:9F:AC:72:99:8B:3A:68
Authority key identifier: 95:77:34:5D:FC:C9:34:78:C5:FF:22:1D:48:2E:E4:C9:84:83:F9:08
Certificate issuer: /CN=9577345dfcc93478c5ff221d482ee4c98483f908
Certificate serial: 019A71EE6BD708FD6250B62471D2EA640410
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.mft
Manifest number: 0231
Signing time: Tue 11 Nov 2025 08:00:41 +0000
Manifest this update: Tue 11 Nov 2025 08:00:41 +0000
Manifest next update: Wed 12 Nov 2025 08:00:41 +0000
Files and hashes: 1: 6Uqj3qB__xu3P3uEygfv-bB5aGM.roa (hash: DA+xFEu9e7gbATHhCec3WbWJPfAhFTSBmNWKRbMDyro=)
2: lXc0XfzJNHjF_yIdSC7kyYSD-Qg.crl (hash: 031mXIHDgKx/VcVTZZpDnn5vimbPXkn5pbMytTJOemc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:6b:d7:08:fd:62:50:b6:24:71:d2:ea:64:04:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9577345dfcc93478c5ff221d482ee4c98483f908
Validity
Not Before: Nov 11 08:00:41 2025 GMT
Not After : Nov 12 08:00:41 2025 GMT
Subject: CN=3b2f0e35f59517b4912f43d16d9fac72998b3a68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:17:d2:c7:1c:c6:aa:37:00:68:c5:68:a4:69:
3a:fd:74:45:58:a0:81:6e:bc:9d:67:60:e1:a1:57:
7c:62:df:f4:c8:95:5b:34:43:91:f4:41:c4:3c:2d:
89:e6:1e:35:20:f4:c8:37:69:f6:65:85:b7:8f:27:
79:fb:ad:9b:47:7f:f0:0d:5d:f7:d2:f7:50:74:09:
59:dc:42:84:1b:30:ad:63:2b:06:33:1e:e3:00:e4:
55:dc:68:da:70:cc:1d:7a:78:31:41:00:53:70:e9:
78:0a:e8:8d:06:b5:ce:ae:ed:ec:ca:ad:14:aa:8c:
b7:b9:ea:3b:1a:f6:5a:8b:52:2d:01:60:90:78:c3:
94:3e:8e:d3:bd:c4:d8:0c:f7:58:3a:5e:f2:85:31:
02:f4:0e:fe:b4:88:d6:cd:19:25:9c:b6:76:18:dd:
56:a4:05:08:32:6d:f5:28:4a:7a:2d:f6:15:2f:fc:
e0:17:9b:7e:23:22:ad:46:ad:0b:a2:4d:53:ac:88:
0d:17:5c:26:cd:29:68:98:2d:03:f0:b8:e1:b1:1f:
90:d9:dc:cb:8b:7c:0a:72:b8:54:88:18:ca:ac:73:
7d:4b:66:29:6d:f4:95:26:cb:b3:99:29:df:f2:b8:
f6:af:77:8c:4f:bd:de:b5:67:ab:d6:92:86:f3:3b:
38:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:2F:0E:35:F5:95:17:B4:91:2F:43:D1:6D:9F:AC:72:99:8B:3A:68
X509v3 Authority Key Identifier:
keyid:95:77:34:5D:FC:C9:34:78:C5:FF:22:1D:48:2E:E4:C9:84:83:F9:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:7c:34:c1:54:ff:23:b6:4b:d2:c8:17:95:b4:11:c4:04:a9:
9d:04:f3:78:27:1f:af:84:05:cf:7a:4e:7a:90:c1:1f:3f:9d:
47:58:22:fe:78:c0:bb:57:78:ce:c9:53:75:91:5e:db:2c:06:
75:4d:28:a1:f3:c7:78:f3:f7:f7:15:f6:bd:4a:8d:32:e8:9a:
29:a4:85:3c:86:32:3e:7d:25:a3:68:ba:b8:82:c0:f9:3d:80:
68:cf:b7:99:af:5b:1c:b4:69:13:5f:fd:97:c4:0a:f1:b8:69:
80:2e:24:23:1f:ee:c7:63:3e:e2:2d:b6:46:a5:d6:66:75:61:
d0:1b:12:b9:78:64:a6:8b:41:60:4d:92:78:1d:8d:20:b3:07:
08:ec:e4:d9:e6:6b:84:14:f3:1e:f0:52:f9:f6:0d:fb:6f:10:
8c:6c:27:df:70:66:1e:3c:63:b0:9e:e9:77:12:13:0b:fb:55:
02:8f:80:84:a6:7d:13:52:7a:05:29:e8:23:ec:c4:7b:d4:b9:
c3:2a:cf:58:7a:27:07:0f:28:b9:30:53:fd:e6:62:e1:31:c1:
eb:bb:7e:de:98:cd:ed:3b:de:11:7c:28:34:93:c0:3b:fe:8a:
53:09:36:70:6d:36:df:b5:54:a6:80:4d:8c:f7:85:f4:73:85:
2d:dd:dd:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpx7mvXCP1iULYkcdLqZAQQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1NzczNDVkZmNjOTM0NzhjNWZmMjIxZDQ4MmVlNGM5ODQ4
M2Y5MDgwHhcNMjUxMTExMDgwMDQxWhcNMjUxMTEyMDgwMDQxWjAzMTEwLwYDVQQD
EygzYjJmMGUzNWY1OTUxN2I0OTEyZjQzZDE2ZDlmYWM3Mjk5OGIzYTY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3RfSxxzGqjcAaMVopGk6/XRFWKCB
brydZ2DhoVd8Yt/0yJVbNEOR9EHEPC2J5h41IPTIN2n2ZYW3jyd5+62bR3/wDV33
0vdQdAlZ3EKEGzCtYysGMx7jAORV3GjacMwdengxQQBTcOl4CuiNBrXOru3syq0U
qoy3ueo7GvZai1ItAWCQeMOUPo7TvcTYDPdYOl7yhTEC9A7+tIjWzRklnLZ2GN1W
pAUIMm31KEp6LfYVL/zgF5t+IyKtRq0Lok1TrIgNF1wmzSlomC0D8LjhsR+Q2dzL
i3wKcrhUiBjKrHN9S2YpbfSVJsuzmSnf8rj2r3eMT73etWer1pKG8zs4pQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDsvDjX1lRe0kS9D0W2frHKZizpoMB8GA1UdIwQY
MBaAFJV3NF38yTR4xf8iHUgu5MmEg/kIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFhjMFhmekpOSGpGX3lJZFNDN2t5WVNELVFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9iMTZmNjYtMmFmNC00NjNlLTk3ODUt
NDMzZjVmYTRmOTAxLzEvbFhjMFhmekpOSGpGX3lJZFNDN2t5WVNELVFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS9iMTZmNjYtMmFmNC00NjNlLTk3ODUtNDMzZjVmYTRmOTAx
LzEvbFhjMFhmekpOSGpGX3lJZFNDN2t5WVNELVFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgnw0wVT/
I7ZL0sgXlbQRxASpnQTzeCcfr4QFz3pOepDBHz+dR1gi/njAu1d4zslTdZFe2ywG
dU0oofPHePP39xX2vUqNMuiaKaSFPIYyPn0lo2i6uILA+T2AaM+3ma9bHLRpE1/9
l8QK8bhpgC4kIx/ux2M+4i22RqXWZnVh0BsSuXhkpotBYE2SeB2NILMHCOzk2eZr
hBTzHvBS+fYN+28QjGwn33BmHjxjsJ7pdxITC/tVAo+AhKZ9E1J6BSnoI+zEe9S5
wyrPWHonBw8ouTBT/eZi4THB67t+3pjN7TveEXwoNJPAO/6KUwk2cG0237VUpoBN
jPeF9HOFLd3d9A==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:55 2025 by rpki-client