Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.mft
File: LWmLr5_z7uvmYoSIn79onU5oPIE.mft (raw, json)
Hash identifier: jBDk0JH2hDMEZFFw9eYVsEFRnEzbw0+RIt1Tjj1vPBA=
Subject key identifier: 7B:E8:A1:29:67:78:37:41:2E:22:27:EB:91:2C:9A:E3:36:78:1E:8E
Authority key identifier: 2D:69:8B:AF:9F:F3:EE:EB:E6:62:84:88:9F:BF:68:9D:4E:68:3C:81
Certificate issuer: /CN=2d698baf9ff3eeebe66284889fbf689d4e683c81
Certificate serial: 019A202D4FA7A3D99848F0F8709A00BC1C0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LWmLr5_z7uvmYoSIn79onU5oPIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.mft
Manifest number: 0F7E
Signing time: Sun 26 Oct 2025 11:00:31 +0000
Manifest this update: Sun 26 Oct 2025 11:00:31 +0000
Manifest next update: Mon 27 Oct 2025 11:00:31 +0000
Files and hashes: 1: LWmLr5_z7uvmYoSIn79onU5oPIE.crl (hash: Vqzd6EWEo0saNmjJGNIMu+nYV3TQUPLA9H3Lq5BsVG8=)
2: k4aTxBF_DmBio83fOwNHIHkeyiA.roa (hash: IVVbmDsKyhVLGaHbxiyIMsj1K/TNy+QiBpkicXXI0O8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LWmLr5_z7uvmYoSIn79onU5oPIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 03:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:20:2d:4f:a7:a3:d9:98:48:f0:f8:70:9a:00:bc:1c:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d698baf9ff3eeebe66284889fbf689d4e683c81
Validity
Not Before: Oct 26 11:00:31 2025 GMT
Not After : Oct 27 11:00:31 2025 GMT
Subject: CN=7be8a129677837412e2227eb912c9ae336781e8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8a:97:a5:92:cd:3e:5a:ad:07:3f:cd:55:98:
68:96:72:f0:dc:91:46:a6:e5:36:8c:ee:4f:86:0c:
31:79:4f:69:31:2f:e6:c6:f8:4d:a2:22:ff:c3:9c:
e1:1a:50:6a:31:cc:d9:a3:56:8e:e9:fe:83:c7:d3:
b9:5d:7b:c3:be:08:bb:cf:d8:86:44:c2:05:2b:1e:
f7:22:b1:5c:d2:2d:17:19:4d:09:2b:dd:e3:78:18:
ea:67:64:47:aa:cd:d9:c5:6d:0b:0a:0f:da:5b:db:
b6:79:b8:5b:0e:7a:26:e5:9a:14:39:57:0d:72:55:
58:9c:33:4c:3f:82:02:e1:b6:8f:7b:51:05:78:3c:
ff:ae:1a:9c:a4:e1:93:45:47:98:2d:01:58:da:8b:
23:f1:b3:8e:18:d8:be:b3:52:9d:c1:44:18:43:da:
67:79:ba:df:fc:12:b9:83:c8:52:7a:ed:42:84:01:
52:fb:8f:0d:d0:20:56:23:66:50:d8:1e:62:ab:30:
61:e6:90:97:c8:14:5a:23:3b:81:20:9e:6c:36:fe:
37:b2:d8:43:f9:b5:d9:35:f9:7e:db:6f:db:44:59:
8e:b5:94:32:0c:f7:4d:cb:44:52:82:0a:f6:7b:ca:
49:7d:e5:32:5a:13:e8:d0:47:c0:ed:f3:d0:76:88:
ec:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:E8:A1:29:67:78:37:41:2E:22:27:EB:91:2C:9A:E3:36:78:1E:8E
X509v3 Authority Key Identifier:
keyid:2D:69:8B:AF:9F:F3:EE:EB:E6:62:84:88:9F:BF:68:9D:4E:68:3C:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LWmLr5_z7uvmYoSIn79onU5oPIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:f4:4f:b0:28:0b:1b:27:3a:fe:b4:e2:40:b9:34:cd:26:a0:
29:60:09:43:1c:fe:c3:15:c7:2b:11:6f:10:b7:53:9f:82:45:
5f:38:fd:b5:11:80:8b:7c:3b:dc:cf:82:e7:ae:5a:93:3f:be:
78:26:32:f8:97:c8:ff:cf:81:27:17:ff:74:cf:91:51:64:32:
00:a1:13:5a:32:73:76:3a:24:22:e2:a9:dd:27:3c:6b:fc:b8:
63:aa:92:fe:14:3d:f0:79:47:65:39:1b:25:c5:fb:59:77:72:
95:0b:d4:ff:33:8f:c6:15:05:c6:ff:50:f8:40:2a:bb:d1:92:
8b:5c:ec:eb:cf:a6:98:0d:cc:30:c5:e7:f6:8c:6e:0d:67:fc:
96:1d:99:9c:47:40:47:34:cc:b9:0f:57:81:f2:ac:60:20:06:
7b:68:74:61:f4:8f:d5:42:14:dd:f6:23:92:f5:57:03:a3:da:
3c:f2:90:88:3f:9b:44:25:cd:36:f1:72:f6:78:8f:4e:79:6e:
93:c4:6a:cb:2a:af:57:5b:d5:e5:0a:e0:d9:8d:21:9b:92:59:
97:85:33:e6:72:a8:a9:11:f7:51:14:a3:6f:43:4b:fd:f2:21:
e6:f6:bf:56:74:c0:52:f0:ec:93:e1:94:f9:84:81:5b:50:7b:
96:41:ba:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZogLU+no9mYSPD4cJoAvBwMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkNjk4YmFmOWZmM2VlZWJlNjYyODQ4ODlmYmY2ODlkNGU2
ODNjODEwHhcNMjUxMDI2MTEwMDMxWhcNMjUxMDI3MTEwMDMxWjAzMTEwLwYDVQQD
Eyg3YmU4YTEyOTY3NzgzNzQxMmUyMjI3ZWI5MTJjOWFlMzM2NzgxZThlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtoqXpZLNPlqtBz/NVZholnLw3JFG
puU2jO5PhgwxeU9pMS/mxvhNoiL/w5zhGlBqMczZo1aO6f6Dx9O5XXvDvgi7z9iG
RMIFKx73IrFc0i0XGU0JK93jeBjqZ2RHqs3ZxW0LCg/aW9u2ebhbDnom5ZoUOVcN
clVYnDNMP4IC4baPe1EFeDz/rhqcpOGTRUeYLQFY2osj8bOOGNi+s1KdwUQYQ9pn
ebrf/BK5g8hSeu1ChAFS+48N0CBWI2ZQ2B5iqzBh5pCXyBRaIzuBIJ5sNv43sthD
+bXZNfl+22/bRFmOtZQyDPdNy0RSggr2e8pJfeUyWhPo0EfA7fPQdojstQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHvooSlneDdBLiIn65EsmuM2eB6OMB8GA1UdIwQY
MBaAFC1pi6+f8+7r5mKEiJ+/aJ1OaDyBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFdtTHI1X3o3dXZtWW9TSW43OW9uVTVvUElFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS81NzJhOTgtM2JiNy00Mjc2LTlkMzkt
ZGZmNWEwOWE4MmNiLzEvTFdtTHI1X3o3dXZtWW9TSW43OW9uVTVvUElFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS81NzJhOTgtM2JiNy00Mjc2LTlkMzktZGZmNWEwOWE4MmNi
LzEvTFdtTHI1X3o3dXZtWW9TSW43OW9uVTVvUElFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp/RPsCgL
Gyc6/rTiQLk0zSagKWAJQxz+wxXHKxFvELdTn4JFXzj9tRGAi3w73M+C565akz++
eCYy+JfI/8+BJxf/dM+RUWQyAKETWjJzdjokIuKp3Sc8a/y4Y6qS/hQ98HlHZTkb
JcX7WXdylQvU/zOPxhUFxv9Q+EAqu9GSi1zs68+mmA3MMMXn9oxuDWf8lh2ZnEdA
RzTMuQ9XgfKsYCAGe2h0YfSP1UIU3fYjkvVXA6PaPPKQiD+bRCXNNvFy9niPTnlu
k8RqyyqvV1vV5Qrg2Y0hm5JZl4Uz5nKoqRH3URSjb0NL/fIh5va/VnTAUvDsk+GU
+YSBW1B7lkG61w==
-----END CERTIFICATE-----
Generated at Sun Oct 26 13:58:22 2025 by rpki-client