Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/e1f09a-b49f-4f69-8eb9-5cac94b836b6/1/818_Lr-Ax3ZpJQp1m-HlyR44hDU.mft
File: 818_Lr-Ax3ZpJQp1m-HlyR44hDU.mft (raw, json)
Hash identifier: sADoB9S9Z8zYk+ofz4s6VYoy6r8qhzl/M1S2ODSIHMg=
Subject key identifier: A9:04:AD:85:8F:1A:D4:2B:12:9D:0B:5B:44:DA:7E:F6:61:2D:15:46
Authority key identifier: F3:5F:3F:2E:BF:80:C7:76:69:25:0A:75:9B:E1:E5:C9:1E:38:84:35
Certificate issuer: /CN=f35f3f2ebf80c77669250a759be1e5c91e388435
Certificate serial: 019A7112D49A78886A7DABB78A9DE98E887E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/818_Lr-Ax3ZpJQp1m-HlyR44hDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/e1f09a-b49f-4f69-8eb9-5cac94b836b6/1/818_Lr-Ax3ZpJQp1m-HlyR44hDU.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 04:00:50 +0000
Manifest this update: Tue 11 Nov 2025 04:00:50 +0000
Manifest next update: Wed 12 Nov 2025 04:00:50 +0000
Files and hashes: 1: 818_Lr-Ax3ZpJQp1m-HlyR44hDU.crl (hash: ZMk5iqV4K207W11lNU0TagPAGqkBF71D8deAgMaJnGI=)
2: POD0rcdBSvDIH2xQjNK7FTsBiSU.roa (hash: qqDcVkaCep5jyj7VmzlXWQJNTWjPppQG+dngjp5gRWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/e1f09a-b49f-4f69-8eb9-5cac94b836b6/1/818_Lr-Ax3ZpJQp1m-HlyR44hDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/e1f09a-b49f-4f69-8eb9-5cac94b836b6/1/818_Lr-Ax3ZpJQp1m-HlyR44hDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/818_Lr-Ax3ZpJQp1m-HlyR44hDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:d4:9a:78:88:6a:7d:ab:b7:8a:9d:e9:8e:88:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f35f3f2ebf80c77669250a759be1e5c91e388435
Validity
Not Before: Nov 11 04:00:50 2025 GMT
Not After : Nov 12 04:00:50 2025 GMT
Subject: CN=a904ad858f1ad42b129d0b5b44da7ef6612d1546
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8d:29:b4:8c:2e:9f:3e:a1:13:06:0c:5d:ac:
ed:f3:7b:1d:cd:ad:94:3a:07:ad:03:49:e7:0e:df:
e5:f9:3d:ef:8a:a6:73:ac:ed:05:20:d0:48:f8:7d:
11:10:34:27:22:b9:10:88:16:e5:51:a5:91:d8:a4:
f0:8c:db:6a:e1:35:3b:69:10:10:c2:04:f3:39:48:
e8:41:eb:ba:30:94:77:ed:19:eb:95:26:f2:c6:46:
29:e0:2d:38:ba:6b:89:66:27:3a:99:ac:6a:06:21:
76:16:68:4a:dd:55:23:b6:5d:fe:20:1e:20:29:76:
6b:47:02:34:4f:c9:54:c8:21:5f:0c:d1:47:2d:05:
ae:3b:66:79:d3:db:6f:29:12:7e:24:f1:f5:1c:b9:
ff:8a:6c:6d:dc:54:ce:8e:c3:c2:12:9e:e1:e4:8e:
c4:ab:23:eb:b8:19:04:38:0e:c5:a5:3b:4b:c1:a0:
ac:b1:32:14:4b:b1:f1:dd:24:cc:1f:bc:8b:42:b0:
19:ea:0e:03:24:20:67:9a:22:be:b6:fd:22:fa:09:
2d:24:8c:02:70:a2:b0:5d:a8:f8:3a:e0:f4:fe:a7:
82:24:fc:f5:3a:12:bd:76:5c:ca:27:86:9b:a7:13:
4a:9e:b0:bf:e6:bc:b1:64:bb:33:08:e6:c7:9d:89:
e0:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:04:AD:85:8F:1A:D4:2B:12:9D:0B:5B:44:DA:7E:F6:61:2D:15:46
X509v3 Authority Key Identifier:
keyid:F3:5F:3F:2E:BF:80:C7:76:69:25:0A:75:9B:E1:E5:C9:1E:38:84:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/818_Lr-Ax3ZpJQp1m-HlyR44hDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e1f09a-b49f-4f69-8eb9-5cac94b836b6/1/818_Lr-Ax3ZpJQp1m-HlyR44hDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e1f09a-b49f-4f69-8eb9-5cac94b836b6/1/818_Lr-Ax3ZpJQp1m-HlyR44hDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:01:1d:bc:a9:b3:5d:72:fe:1e:76:df:74:b4:5b:8d:89:2b:
47:24:7d:65:ef:b5:1c:12:91:56:a1:ff:1e:af:9d:8a:cc:bb:
19:3a:e8:6b:07:86:36:3d:62:bf:2b:47:a0:42:f3:3f:41:cd:
1d:5c:84:c4:87:62:ae:3c:c6:1c:67:f3:8a:4c:cd:f5:11:de:
d8:67:af:e3:06:3b:00:dc:de:07:d8:e2:42:3a:50:d0:10:01:
cb:0a:23:10:cc:c5:6b:08:19:42:9b:05:40:c2:d1:62:c4:03:
01:dc:66:21:5c:c9:04:53:b8:44:e0:7e:e5:c1:06:c6:ed:13:
87:3b:ab:d1:61:0b:3b:02:70:28:8a:34:94:38:fa:08:87:f9:
72:79:d9:9f:07:de:23:c4:ba:fc:fd:7b:c9:9f:75:6f:14:cb:
d0:6f:46:40:7a:57:d6:d1:67:ff:8c:89:93:44:f9:17:bf:bb:
47:af:0d:c9:65:a6:5b:aa:99:c9:35:64:c2:36:9b:33:cc:64:
70:36:10:9a:07:ba:4e:5f:a7:1f:0c:c0:ad:00:42:55:ce:06:
e6:00:11:98:7a:96:3b:35:3e:83:75:62:5f:8a:87:f8:c2:fe:
6c:46:85:7e:92:21:fa:8d:13:8a:cb:02:62:cb:71:4d:0a:0f:
f0:7a:75:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxEtSaeIhqfau3ip3pjoh+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzNWYzZjJlYmY4MGM3NzY2OTI1MGE3NTliZTFlNWM5MWUz
ODg0MzUwHhcNMjUxMTExMDQwMDUwWhcNMjUxMTEyMDQwMDUwWjAzMTEwLwYDVQQD
EyhhOTA0YWQ4NThmMWFkNDJiMTI5ZDBiNWI0NGRhN2VmNjYxMmQxNTQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv40ptIwunz6hEwYMXazt83sdza2U
OgetA0nnDt/l+T3viqZzrO0FINBI+H0REDQnIrkQiBblUaWR2KTwjNtq4TU7aRAQ
wgTzOUjoQeu6MJR37RnrlSbyxkYp4C04umuJZic6maxqBiF2FmhK3VUjtl3+IB4g
KXZrRwI0T8lUyCFfDNFHLQWuO2Z509tvKRJ+JPH1HLn/imxt3FTOjsPCEp7h5I7E
qyPruBkEOA7FpTtLwaCssTIUS7Hx3STMH7yLQrAZ6g4DJCBnmiK+tv0i+gktJIwC
cKKwXaj4OuD0/qeCJPz1OhK9dlzKJ4abpxNKnrC/5ryxZLszCObHnYnghQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKkErYWPGtQrEp0LW0TafvZhLRVGMB8GA1UdIwQY
MBaAFPNfPy6/gMd2aSUKdZvh5ckeOIQ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODE4X0xyLUF4M1pwSlFwMW0tSGx5UjQ0aERVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9lMWYwOWEtYjQ5Zi00ZjY5LThlYjkt
NWNhYzk0YjgzNmI2LzEvODE4X0xyLUF4M1pwSlFwMW0tSGx5UjQ0aERVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS9lMWYwOWEtYjQ5Zi00ZjY5LThlYjktNWNhYzk0YjgzNmI2
LzEvODE4X0xyLUF4M1pwSlFwMW0tSGx5UjQ0aERVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUQEdvKmz
XXL+HnbfdLRbjYkrRyR9Ze+1HBKRVqH/Hq+disy7GTroaweGNj1ivytHoELzP0HN
HVyExIdirjzGHGfzikzN9RHe2Gev4wY7ANzeB9jiQjpQ0BABywojEMzFawgZQpsF
QMLRYsQDAdxmIVzJBFO4ROB+5cEGxu0Thzur0WELOwJwKIo0lDj6CIf5cnnZnwfe
I8S6/P17yZ91bxTL0G9GQHpX1tFn/4yJk0T5F7+7R68NyWWmW6qZyTVkwjabM8xk
cDYQmge6Tl+nHwzArQBCVc4G5gARmHqWOzU+g3ViX4qH+ML+bEaFfpIh+o0TissC
YstxTQoP8Hp1/Q==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:29 2025 by rpki-client