Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/04982c-5ffc-42a8-9879-6e8b34f1976b/1/LAzrgevOhZ9Qko6O0-HwqFERUts.mft
File: LAzrgevOhZ9Qko6O0-HwqFERUts.mft (raw, json)
Hash identifier: QtURR4c3ExwV1ZVr2j+yPiWoIdm15tbnFaqVGPqUf0A=
Subject key identifier: B5:8B:6D:BD:12:99:17:0C:BD:44:AE:17:84:51:8F:B6:0A:16:84:76
Authority key identifier: 2C:0C:EB:81:EB:CE:85:9F:50:92:8E:8E:D3:E1:F0:A8:51:11:52:DB
Certificate issuer: /CN=2c0ceb81ebce859f50928e8ed3e1f0a8511152db
Certificate serial: 019A20D2121BDC5C64B9B1BCB82B889E41DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LAzrgevOhZ9Qko6O0-HwqFERUts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/04982c-5ffc-42a8-9879-6e8b34f1976b/1/LAzrgevOhZ9Qko6O0-HwqFERUts.mft
Manifest number: 0ADE
Signing time: Sun 26 Oct 2025 14:00:29 +0000
Manifest this update: Sun 26 Oct 2025 14:00:29 +0000
Manifest next update: Mon 27 Oct 2025 14:00:29 +0000
Files and hashes: 1: LAzrgevOhZ9Qko6O0-HwqFERUts.crl (hash: QiINlhlvw22eIJu7dRnsFxJfTlYOOlY4NJyuodoPSD8=)
2: Nw-tf2Fdg1IBaL0ZaEM215Hb70k.roa (hash: D6voi0MuqX48csC8cycT9bMohcrVdXkjR0ufp2F3pwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/04982c-5ffc-42a8-9879-6e8b34f1976b/1/LAzrgevOhZ9Qko6O0-HwqFERUts.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/04982c-5ffc-42a8-9879-6e8b34f1976b/1/LAzrgevOhZ9Qko6O0-HwqFERUts.mft
rsync://rpki.ripe.net/repository/DEFAULT/LAzrgevOhZ9Qko6O0-HwqFERUts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:20:d2:12:1b:dc:5c:64:b9:b1:bc:b8:2b:88:9e:41:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c0ceb81ebce859f50928e8ed3e1f0a8511152db
Validity
Not Before: Oct 26 14:00:29 2025 GMT
Not After : Oct 27 14:00:29 2025 GMT
Subject: CN=b58b6dbd1299170cbd44ae1784518fb60a168476
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fa:87:78:b1:4d:e1:22:43:13:32:11:a5:9e:
bd:1a:b3:1d:31:07:ba:d1:b8:8e:52:4e:07:0b:fc:
69:0a:1b:9b:66:17:1b:f3:e0:10:70:55:7e:53:cc:
30:00:f1:02:8a:63:82:78:f4:05:12:ac:b1:55:90:
fa:dd:1c:32:b4:99:b7:39:9a:b1:b4:6c:e7:ff:b4:
0e:5b:1f:36:01:6e:a0:7c:41:12:82:b3:13:b6:d1:
01:56:96:82:6b:36:c2:2d:f4:58:08:dc:1f:fe:35:
88:ff:45:e3:ee:ab:1c:8f:e6:01:d9:d4:37:08:ef:
32:10:d3:5b:72:e2:a5:d0:c5:12:9e:42:90:a0:d8:
af:98:8a:42:ac:1b:7e:aa:7b:08:c2:31:05:dd:c9:
f3:cb:1b:4b:a9:3d:2b:22:25:5e:11:c6:72:38:dd:
64:c1:fd:5b:86:77:c5:d5:a8:fa:09:a9:ad:60:7a:
1e:46:0d:37:3e:7b:e1:a7:24:9f:c9:f2:14:a5:87:
b2:f1:4c:2f:a7:e8:5d:c8:69:e1:68:6a:01:71:37:
81:7a:cd:cd:24:7e:d8:16:3d:5a:c9:1a:1c:bd:44:
f5:72:b1:5a:36:8a:48:cf:18:9e:b9:1c:94:32:a8:
9f:01:a6:08:be:ec:bb:85:3e:d1:71:b0:40:23:5e:
bf:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:8B:6D:BD:12:99:17:0C:BD:44:AE:17:84:51:8F:B6:0A:16:84:76
X509v3 Authority Key Identifier:
keyid:2C:0C:EB:81:EB:CE:85:9F:50:92:8E:8E:D3:E1:F0:A8:51:11:52:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LAzrgevOhZ9Qko6O0-HwqFERUts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/04982c-5ffc-42a8-9879-6e8b34f1976b/1/LAzrgevOhZ9Qko6O0-HwqFERUts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/04982c-5ffc-42a8-9879-6e8b34f1976b/1/LAzrgevOhZ9Qko6O0-HwqFERUts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:0d:36:7e:3e:09:ec:c9:63:80:67:78:07:dd:08:5f:52:5e:
92:2c:c2:52:1d:33:16:c1:1e:62:80:4e:fd:f2:01:bb:33:04:
d0:04:a8:d8:7b:cd:7c:bf:63:3e:0a:13:6c:e8:0f:92:8f:1f:
be:21:a6:ed:4a:7a:42:fe:81:7e:16:5b:32:3c:15:54:36:d7:
d5:96:4e:b6:2d:3f:b0:83:d1:4e:ba:31:fc:e5:1a:dc:0b:0d:
7d:38:1f:5d:4d:ff:bc:de:19:60:ef:87:bd:91:1f:59:e5:97:
65:bc:b2:d4:fa:9f:f4:f4:f1:a2:2c:23:6b:a3:1a:05:09:66:
91:d6:38:8d:b9:ee:3e:f2:53:58:95:b5:50:75:d8:06:32:66:
da:16:b2:ee:e5:36:09:9b:3c:21:ed:10:50:3a:30:5a:fa:9e:
6d:30:c5:86:ea:5a:d7:e8:82:4c:7b:f4:04:13:c7:27:9c:5c:
aa:75:d0:57:ce:66:09:bf:50:c5:03:ac:cb:7d:2d:0b:78:27:
ea:f0:33:ec:19:55:e4:b6:3d:92:43:fe:7b:3f:0a:71:5a:b5:
7e:b9:a5:ad:30:80:09:a2:ce:6d:aa:1b:46:a4:9b:2f:75:04:
35:85:93:1e:40:93:f4:78:49:08:d6:01:66:3d:da:b0:78:e3:
4e:4b:7e:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZog0hIb3FxkubG8uCuInkHdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjMGNlYjgxZWJjZTg1OWY1MDkyOGU4ZWQzZTFmMGE4NTEx
MTUyZGIwHhcNMjUxMDI2MTQwMDI5WhcNMjUxMDI3MTQwMDI5WjAzMTEwLwYDVQQD
EyhiNThiNmRiZDEyOTkxNzBjYmQ0NGFlMTc4NDUxOGZiNjBhMTY4NDc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPqHeLFN4SJDEzIRpZ69GrMdMQe6
0biOUk4HC/xpChubZhcb8+AQcFV+U8wwAPECimOCePQFEqyxVZD63RwytJm3OZqx
tGzn/7QOWx82AW6gfEESgrMTttEBVpaCazbCLfRYCNwf/jWI/0Xj7qscj+YB2dQ3
CO8yENNbcuKl0MUSnkKQoNivmIpCrBt+qnsIwjEF3cnzyxtLqT0rIiVeEcZyON1k
wf1bhnfF1aj6CamtYHoeRg03PnvhpySfyfIUpYey8Uwvp+hdyGnhaGoBcTeBes3N
JH7YFj1ayRocvUT1crFaNopIzxieuRyUMqifAaYIvuy7hT7RcbBAI16/QQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLWLbb0SmRcMvUSuF4RRj7YKFoR2MB8GA1UdIwQY
MBaAFCwM64HrzoWfUJKOjtPh8KhREVLbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTEF6cmdldk9oWjlRa282TzAtSHdxRkVSVXRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8wNDk4MmMtNWZmYy00MmE4LTk4Nzkt
NmU4YjM0ZjE5NzZiLzEvTEF6cmdldk9oWjlRa282TzAtSHdxRkVSVXRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC8wNDk4MmMtNWZmYy00MmE4LTk4NzktNmU4YjM0ZjE5NzZi
LzEvTEF6cmdldk9oWjlRa282TzAtSHdxRkVSVXRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjA02fj4J
7MljgGd4B90IX1JekizCUh0zFsEeYoBO/fIBuzME0ASo2HvNfL9jPgoTbOgPko8f
viGm7Up6Qv6BfhZbMjwVVDbX1ZZOti0/sIPRTrox/OUa3AsNfTgfXU3/vN4ZYO+H
vZEfWeWXZbyy1Pqf9PTxoiwja6MaBQlmkdY4jbnuPvJTWJW1UHXYBjJm2hay7uU2
CZs8Ie0QUDowWvqebTDFhupa1+iCTHv0BBPHJ5xcqnXQV85mCb9QxQOsy30tC3gn
6vAz7BlV5LY9kkP+ez8KcVq1frmlrTCACaLObaobRqSbL3UENYWTHkCT9HhJCNYB
Zj3asHjjTkt+yQ==
-----END CERTIFICATE-----
Generated at Sun Oct 26 20:31:47 2025 by rpki-client