Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/c9f7ab-3fa0-471f-bb95-00b4fbb3849d/1/_ltNUIvcIUFbR1LuvESNSqrGNdk.mft
File: _ltNUIvcIUFbR1LuvESNSqrGNdk.mft (raw, json)
Hash identifier: o98TXkltM5l+da3sZtsV18/vCsvs2LAkQ6jbb1lkZWU=
Subject key identifier: 93:6D:05:BD:8E:83:02:B4:93:57:8E:F8:02:81:49:5E:66:E5:73:46
Authority key identifier: FE:5B:4D:50:8B:DC:21:41:5B:47:52:EE:BC:44:8D:4A:AA:C6:35:D9
Certificate issuer: /CN=fe5b4d508bdc21415b4752eebc448d4aaac635d9
Certificate serial: 019A714A0B423FDCA894C3977DE4029A7F2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ltNUIvcIUFbR1LuvESNSqrGNdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/c9f7ab-3fa0-471f-bb95-00b4fbb3849d/1/_ltNUIvcIUFbR1LuvESNSqrGNdk.mft
Manifest number: 019B
Signing time: Tue 11 Nov 2025 05:01:09 +0000
Manifest this update: Tue 11 Nov 2025 05:01:09 +0000
Manifest next update: Wed 12 Nov 2025 05:01:09 +0000
Files and hashes: 1: _ltNUIvcIUFbR1LuvESNSqrGNdk.crl (hash: 7ifOCzWmGA8A5jVeghq4RSGf87RkYulv4QDzM6A6770=)
2: l_Z1ah4Z6CUki_cHx_5BaEWiOxE.roa (hash: fwZNajA2NrVuCxC49gzHtXDb0A0DV7JtszLe3wSG/eE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/c9f7ab-3fa0-471f-bb95-00b4fbb3849d/1/_ltNUIvcIUFbR1LuvESNSqrGNdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/c9f7ab-3fa0-471f-bb95-00b4fbb3849d/1/_ltNUIvcIUFbR1LuvESNSqrGNdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_ltNUIvcIUFbR1LuvESNSqrGNdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:4a:0b:42:3f:dc:a8:94:c3:97:7d:e4:02:9a:7f:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe5b4d508bdc21415b4752eebc448d4aaac635d9
Validity
Not Before: Nov 11 05:01:09 2025 GMT
Not After : Nov 12 05:01:09 2025 GMT
Subject: CN=936d05bd8e8302b493578ef80281495e66e57346
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:98:e3:f3:1e:5b:9b:29:1e:68:b1:cf:7e:f5:
fa:60:57:4d:7b:b9:c5:b9:8f:cb:81:b1:f0:2c:aa:
74:a5:04:0a:00:86:2b:77:2a:86:54:87:67:fc:f5:
ce:90:57:e7:8f:14:8c:93:27:ec:53:89:90:b0:75:
55:47:b8:50:fe:3f:cc:0f:02:95:1b:e3:d6:1c:d5:
90:03:69:bd:e8:5e:8e:03:3f:e7:9d:11:6f:a7:b3:
9e:1e:85:f6:88:4e:49:e7:53:da:34:28:96:7d:f7:
ca:03:f6:b8:86:ab:be:77:c6:02:ba:80:9e:39:a5:
43:ee:b3:c0:80:46:72:b2:4f:da:49:72:fc:39:2b:
c2:6e:6f:93:c3:cc:57:c3:c9:96:00:3e:a8:22:8a:
78:e7:c5:26:e9:12:50:f5:59:65:35:2d:8d:0a:d9:
44:ba:e3:02:04:09:4c:8a:6b:88:4e:ac:de:91:3e:
cb:bd:dd:1d:91:cb:58:c9:f7:29:8d:6a:ca:4f:dd:
e1:58:92:b5:4c:a5:9a:43:3f:c0:81:71:6e:24:46:
b3:78:18:0f:95:86:03:12:9d:04:1c:94:e8:ce:96:
cf:b7:a3:7c:67:e1:e8:b1:69:bb:9d:8a:aa:02:aa:
aa:77:69:da:2e:5a:76:97:13:5a:32:4f:cf:7b:60:
0c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:6D:05:BD:8E:83:02:B4:93:57:8E:F8:02:81:49:5E:66:E5:73:46
X509v3 Authority Key Identifier:
keyid:FE:5B:4D:50:8B:DC:21:41:5B:47:52:EE:BC:44:8D:4A:AA:C6:35:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ltNUIvcIUFbR1LuvESNSqrGNdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c9f7ab-3fa0-471f-bb95-00b4fbb3849d/1/_ltNUIvcIUFbR1LuvESNSqrGNdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c9f7ab-3fa0-471f-bb95-00b4fbb3849d/1/_ltNUIvcIUFbR1LuvESNSqrGNdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:05:f3:b5:39:4a:4e:16:bf:ec:33:fc:c8:05:77:43:f6:a7:
3a:3d:01:5f:c0:02:4e:ce:d3:c2:da:c7:10:f8:c2:73:6b:48:
d8:ae:dd:1c:c0:fb:76:31:f1:f6:69:2a:0d:7b:f4:e3:21:68:
4a:c2:66:d7:37:a7:42:85:e5:d7:22:47:15:34:09:84:46:a8:
30:fd:c4:58:60:1e:4d:6a:2d:7c:fe:9b:67:46:03:f5:ae:d8:
23:52:b0:46:6b:78:bd:32:fb:82:2d:1f:8b:cc:9f:a0:d9:10:
c3:52:db:7a:cd:21:11:31:83:75:05:10:46:39:23:78:70:df:
98:14:1c:4b:09:69:f3:a7:b9:5d:66:5b:b9:97:ea:16:c9:98:
81:99:9c:80:5c:54:84:57:a2:ae:e6:22:89:6a:7e:7a:fc:a9:
9c:e6:88:4f:73:35:f0:f2:f5:bf:1d:8b:87:f9:71:9c:2e:aa:
1a:f9:a1:ea:22:ac:ec:51:a0:50:0c:77:3d:0d:18:63:39:59:
cc:be:60:27:a4:18:ba:ee:29:4f:80:f0:ce:2a:c4:9f:c4:95:
bc:c1:6f:06:47:0e:d6:4f:ad:ce:14:5e:d0:2e:bd:e9:b3:1f:
5c:b0:60:41:bc:63:86:a8:28:d0:ca:70:8f:e8:f4:bf:b3:20:
6d:fc:0c:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxSgtCP9yolMOXfeQCmn8vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlNWI0ZDUwOGJkYzIxNDE1YjQ3NTJlZWJjNDQ4ZDRhYWFj
NjM1ZDkwHhcNMjUxMTExMDUwMTA5WhcNMjUxMTEyMDUwMTA5WjAzMTEwLwYDVQQD
Eyg5MzZkMDViZDhlODMwMmI0OTM1NzhlZjgwMjgxNDk1ZTY2ZTU3MzQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5jj8x5bmykeaLHPfvX6YFdNe7nF
uY/LgbHwLKp0pQQKAIYrdyqGVIdn/PXOkFfnjxSMkyfsU4mQsHVVR7hQ/j/MDwKV
G+PWHNWQA2m96F6OAz/nnRFvp7OeHoX2iE5J51PaNCiWfffKA/a4hqu+d8YCuoCe
OaVD7rPAgEZysk/aSXL8OSvCbm+Tw8xXw8mWAD6oIop458Um6RJQ9VllNS2NCtlE
uuMCBAlMimuITqzekT7Lvd0dkctYyfcpjWrKT93hWJK1TKWaQz/AgXFuJEazeBgP
lYYDEp0EHJTozpbPt6N8Z+HosWm7nYqqAqqqd2naLlp2lxNaMk/Pe2AMGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJNtBb2OgwK0k1eO+AKBSV5m5XNGMB8GA1UdIwQY
MBaAFP5bTVCL3CFBW0dS7rxEjUqqxjXZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2x0TlVJdmNJVUZiUjFMdXZFU05TcXJHTmRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9jOWY3YWItM2ZhMC00NzFmLWJiOTUt
MDBiNGZiYjM4NDlkLzEvX2x0TlVJdmNJVUZiUjFMdXZFU05TcXJHTmRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS9jOWY3YWItM2ZhMC00NzFmLWJiOTUtMDBiNGZiYjM4NDlk
LzEvX2x0TlVJdmNJVUZiUjFMdXZFU05TcXJHTmRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOwXztTlK
Tha/7DP8yAV3Q/anOj0BX8ACTs7TwtrHEPjCc2tI2K7dHMD7djHx9mkqDXv04yFo
SsJm1zenQoXl1yJHFTQJhEaoMP3EWGAeTWotfP6bZ0YD9a7YI1KwRmt4vTL7gi0f
i8yfoNkQw1Lbes0hETGDdQUQRjkjeHDfmBQcSwlp86e5XWZbuZfqFsmYgZmcgFxU
hFeiruYiiWp+evypnOaIT3M18PL1vx2Lh/lxnC6qGvmh6iKs7FGgUAx3PQ0YYzlZ
zL5gJ6QYuu4pT4DwzirEn8SVvMFvBkcO1k+tzhRe0C696bMfXLBgQbxjhqgo0Mpw
j+j0v7MgbfwMLQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:38:46 2025 by rpki-client