Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/600b38-be3d-4a35-8180-d6307e2da9f7/1/lsA1vI-_Z2PIiNs0TSq0rmKUZmU.mft
File: lsA1vI-_Z2PIiNs0TSq0rmKUZmU.mft (raw, json)
Hash identifier: NXD1PUfuDu9dQtdrUwTGYW+rkW0O8zUF8EIFsLzLhps=
Subject key identifier: 40:0B:FD:65:66:23:A5:DF:7F:C3:17:56:1E:B4:AD:F8:01:34:FB:A3
Authority key identifier: 96:C0:35:BC:8F:BF:67:63:C8:88:DB:34:4D:2A:B4:AE:62:94:66:65
Certificate issuer: /CN=96c035bc8fbf6763c888db344d2ab4ae62946665
Certificate serial: 019A70DBFE5C5041700ED53D93F42DF48EC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lsA1vI-_Z2PIiNs0TSq0rmKUZmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/600b38-be3d-4a35-8180-d6307e2da9f7/1/lsA1vI-_Z2PIiNs0TSq0rmKUZmU.mft
Manifest number: 0309
Signing time: Tue 11 Nov 2025 03:00:56 +0000
Manifest this update: Tue 11 Nov 2025 03:00:56 +0000
Manifest next update: Wed 12 Nov 2025 03:00:56 +0000
Files and hashes: 1: l8QB-PHUK_LEuNNWFKARbwIaMRU.roa (hash: W02KjqYvETrR9gAMAORKt4swyV9tqxzh/G6YzbTzQpY=)
2: lsA1vI-_Z2PIiNs0TSq0rmKUZmU.crl (hash: +ixsK98MFO7U217QfJw/YvqZCzPeVblJ34fvwJyqW4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/600b38-be3d-4a35-8180-d6307e2da9f7/1/lsA1vI-_Z2PIiNs0TSq0rmKUZmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/600b38-be3d-4a35-8180-d6307e2da9f7/1/lsA1vI-_Z2PIiNs0TSq0rmKUZmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/lsA1vI-_Z2PIiNs0TSq0rmKUZmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:db:fe:5c:50:41:70:0e:d5:3d:93:f4:2d:f4:8e:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96c035bc8fbf6763c888db344d2ab4ae62946665
Validity
Not Before: Nov 11 03:00:56 2025 GMT
Not After : Nov 12 03:00:56 2025 GMT
Subject: CN=400bfd656623a5df7fc317561eb4adf80134fba3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:38:fd:02:14:af:49:db:18:7a:e6:2f:1e:c7:
57:fc:b7:90:26:36:6c:86:75:a0:70:3b:9a:32:b3:
b9:3d:31:05:8e:ff:24:54:f6:ee:2e:3a:20:b8:f5:
e2:62:e8:93:8e:e4:df:8a:05:7c:09:3e:4c:5e:ac:
f3:34:dd:15:88:9d:7f:5f:4e:e9:77:98:ea:ab:a0:
28:7f:80:7c:a2:5b:7e:97:6f:ee:d1:61:23:e8:8e:
99:ec:19:11:0a:21:df:d2:f0:52:ac:44:a1:f3:4d:
52:bf:3f:60:a3:31:96:65:24:c0:ca:61:5a:a5:00:
f6:de:97:0a:57:83:d3:51:e9:ae:79:8c:6c:16:b6:
3b:ba:dc:da:e0:e3:fb:01:51:fc:63:47:99:15:0f:
8a:1c:9c:6b:27:58:86:f0:f2:af:20:3b:2c:ac:de:
f5:a0:d9:e5:74:dc:49:0a:39:8c:d6:e1:b9:de:e8:
2b:a5:1f:f8:06:20:af:7b:1f:be:f0:c7:a3:cf:18:
bf:e7:fa:50:df:d8:17:49:1e:b5:25:30:6d:c6:9b:
91:0f:d7:45:29:50:9c:79:2e:6b:1c:06:e2:99:ff:
66:63:79:1f:8e:05:87:90:43:51:f7:07:9d:22:fa:
40:c6:2a:9f:a0:43:dd:91:89:21:6b:8c:d3:24:8f:
58:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:0B:FD:65:66:23:A5:DF:7F:C3:17:56:1E:B4:AD:F8:01:34:FB:A3
X509v3 Authority Key Identifier:
keyid:96:C0:35:BC:8F:BF:67:63:C8:88:DB:34:4D:2A:B4:AE:62:94:66:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lsA1vI-_Z2PIiNs0TSq0rmKUZmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/600b38-be3d-4a35-8180-d6307e2da9f7/1/lsA1vI-_Z2PIiNs0TSq0rmKUZmU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/600b38-be3d-4a35-8180-d6307e2da9f7/1/lsA1vI-_Z2PIiNs0TSq0rmKUZmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:5c:63:46:bc:90:a9:2c:17:b9:10:6e:de:2d:25:68:3a:44:
c1:15:26:b3:3e:2d:08:20:c9:56:7c:d7:f2:13:a3:a9:e9:d0:
2e:29:97:88:e3:b7:2a:eb:29:e9:11:44:4c:b8:ad:f1:a5:c3:
10:67:8c:05:ed:f4:54:aa:07:dd:4e:b0:7b:d4:3b:b4:5b:8a:
b9:ca:7e:db:92:11:50:6e:cf:98:ee:fc:2b:4b:f0:24:e8:2d:
1f:70:12:98:24:07:b0:74:42:5e:22:29:c1:e0:6f:43:6a:29:
59:62:b4:de:4a:d0:a4:14:87:4a:2f:6e:39:76:62:57:e1:c3:
7a:3b:72:4f:ca:ac:11:1f:af:b3:d3:b1:de:58:9b:38:f3:54:
35:9e:76:ea:71:79:eb:ff:b7:b2:74:90:7e:f5:84:8d:9f:89:
29:67:9b:90:93:0f:ab:61:9b:6a:d6:34:72:83:f3:9d:89:83:
73:a2:04:9f:33:60:b7:74:6e:17:b8:ac:8f:e7:8b:27:c7:72:
11:c0:f3:88:af:bd:e4:8c:88:f1:52:7c:a2:0b:a6:5e:f1:5e:
68:13:14:a0:50:0f:69:da:7a:05:43:74:b1:8c:79:2d:85:dd:
6e:2a:df:fb:6a:9d:b6:af:a8:e9:25:c1:dd:03:c0:e9:0d:5a:
c9:a8:e3:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpw2/5cUEFwDtU9k/Qt9I7FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2YzAzNWJjOGZiZjY3NjNjODg4ZGIzNDRkMmFiNGFlNjI5
NDY2NjUwHhcNMjUxMTExMDMwMDU2WhcNMjUxMTEyMDMwMDU2WjAzMTEwLwYDVQQD
Eyg0MDBiZmQ2NTY2MjNhNWRmN2ZjMzE3NTYxZWI0YWRmODAxMzRmYmEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzj9AhSvSdsYeuYvHsdX/LeQJjZs
hnWgcDuaMrO5PTEFjv8kVPbuLjoguPXiYuiTjuTfigV8CT5MXqzzNN0ViJ1/X07p
d5jqq6Aof4B8olt+l2/u0WEj6I6Z7BkRCiHf0vBSrESh801Svz9gozGWZSTAymFa
pQD23pcKV4PTUemueYxsFrY7utza4OP7AVH8Y0eZFQ+KHJxrJ1iG8PKvIDssrN71
oNnldNxJCjmM1uG53ugrpR/4BiCvex++8Mejzxi/5/pQ39gXSR61JTBtxpuRD9dF
KVCceS5rHAbimf9mY3kfjgWHkENR9wedIvpAxiqfoEPdkYkha4zTJI9YbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEAL/WVmI6Xff8MXVh60rfgBNPujMB8GA1UdIwQY
MBaAFJbANbyPv2djyIjbNE0qtK5ilGZlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHNBMXZJLV9aMlBJaU5zMFRTcTBybUtVWm1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC82MDBiMzgtYmUzZC00YTM1LTgxODAt
ZDYzMDdlMmRhOWY3LzEvbHNBMXZJLV9aMlBJaU5zMFRTcTBybUtVWm1VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC82MDBiMzgtYmUzZC00YTM1LTgxODAtZDYzMDdlMmRhOWY3
LzEvbHNBMXZJLV9aMlBJaU5zMFRTcTBybUtVWm1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADVxjRryQ
qSwXuRBu3i0laDpEwRUmsz4tCCDJVnzX8hOjqenQLimXiOO3Kusp6RFETLit8aXD
EGeMBe30VKoH3U6we9Q7tFuKucp+25IRUG7PmO78K0vwJOgtH3ASmCQHsHRCXiIp
weBvQ2opWWK03krQpBSHSi9uOXZiV+HDejtyT8qsER+vs9Ox3libOPNUNZ526nF5
6/+3snSQfvWEjZ+JKWebkJMPq2GbatY0coPznYmDc6IEnzNgt3RuF7isj+eLJ8dy
EcDziK+95IyI8VJ8ogumXvFeaBMUoFAPadp6BUN0sYx5LYXdbirf+2qdtq+o6SXB
3QPA6Q1ayajjHQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:02:40 2025 by rpki-client