Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.mft
File: l6qlVaMp7dhmBswOPilr1Hisc94.mft (raw, json)
Hash identifier: rZJhtL+WSYseaYw2fjKKDy60pARi00TgnZtn98BzfZQ=
Subject key identifier: 74:81:EC:E3:A4:A9:96:62:65:F8:52:C9:FC:FD:CB:BB:E6:EA:74:9F
Authority key identifier: 97:AA:A5:55:A3:29:ED:D8:66:06:CC:0E:3E:29:6B:D4:78:AC:73:DE
Certificate issuer: /CN=97aaa555a329edd86606cc0e3e296bd478ac73de
Certificate serial: 019A24AEBC2A1733D663F86A846DE3DF7E2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l6qlVaMp7dhmBswOPilr1Hisc94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.mft
Manifest number: 16F5
Signing time: Mon 27 Oct 2025 08:00:22 +0000
Manifest this update: Mon 27 Oct 2025 08:00:22 +0000
Manifest next update: Tue 28 Oct 2025 08:00:22 +0000
Files and hashes: 1: jNKVMMdFoTlq407WSxJG2wl397A.roa (hash: f7XfjeV34Q2856LzefHFdP3T+Gd6ci7hnd1cgyUQwpI=)
2: l6qlVaMp7dhmBswOPilr1Hisc94.crl (hash: LtVuBPhgOJGgIyAmfpgB+iLAyxTFigpY/QdQxG3TLhA=)
3: myck32eboJtl7s_ieX37W3eHO5I.roa (hash: lbaHeA4mwtN12nrUCJbm8VTH7h5JMLbryEGQgqFX+UY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.mft
rsync://rpki.ripe.net/repository/DEFAULT/l6qlVaMp7dhmBswOPilr1Hisc94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:ae:bc:2a:17:33:d6:63:f8:6a:84:6d:e3:df:7e:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97aaa555a329edd86606cc0e3e296bd478ac73de
Validity
Not Before: Oct 27 08:00:22 2025 GMT
Not After : Oct 28 08:00:22 2025 GMT
Subject: CN=7481ece3a4a9966265f852c9fcfdcbbbe6ea749f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:af:11:ef:62:f0:f9:f6:3c:13:4d:5a:99:30:
7b:07:58:3e:8d:f5:6c:7e:9e:82:62:68:84:45:75:
4f:9c:fe:bc:72:60:ad:6e:f8:45:23:5b:03:1d:64:
45:dc:67:db:3c:93:5f:51:04:d4:24:88:9f:98:c5:
70:c6:ca:98:29:cd:07:16:89:f1:ec:ec:82:42:56:
01:cb:9e:a0:26:2a:36:ec:50:a4:be:69:83:eb:17:
1b:5f:2a:63:a7:9a:0b:5d:b6:2a:be:45:91:4a:4b:
38:2e:4f:51:de:1b:10:7d:3d:d3:4e:d5:38:13:9b:
57:69:74:e9:b5:a1:22:22:6a:aa:15:3d:c9:b8:12:
2a:89:c3:fd:c3:e9:c2:86:7e:8e:85:35:3a:20:ae:
a7:d0:2c:20:9f:57:a5:2d:e1:a9:51:61:80:bf:8a:
6a:0c:ea:ab:6c:70:5a:f2:98:06:ee:67:69:20:c3:
16:4b:6c:ef:fb:3f:02:f4:e2:22:5f:c0:17:55:72:
2c:7e:a9:ff:0e:bd:10:91:61:e3:f5:2f:06:19:cf:
fc:0e:03:e1:01:2e:a6:cb:f5:ac:20:df:5d:ba:1d:
7a:a2:fa:12:fb:44:82:58:df:ca:1b:b1:81:3e:4c:
f7:de:af:e7:9e:53:51:0d:1b:3f:63:5f:dd:b3:4a:
ed:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:81:EC:E3:A4:A9:96:62:65:F8:52:C9:FC:FD:CB:BB:E6:EA:74:9F
X509v3 Authority Key Identifier:
keyid:97:AA:A5:55:A3:29:ED:D8:66:06:CC:0E:3E:29:6B:D4:78:AC:73:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l6qlVaMp7dhmBswOPilr1Hisc94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:05:d8:b8:68:b0:a2:25:c9:dd:c9:6c:19:3b:67:76:fe:e8:
c0:7a:de:6a:d1:62:43:f2:f7:85:67:f3:08:2f:22:71:4f:39:
d8:c6:3d:42:f5:96:35:36:56:92:25:1d:18:40:87:38:46:60:
94:a0:38:86:30:07:e9:c2:94:cf:56:d5:54:7d:4d:7e:01:32:
28:42:73:32:0a:63:91:55:5f:d0:0d:1b:df:de:5b:3f:96:fb:
4e:5c:55:56:19:6c:26:15:bd:13:2c:52:86:c5:3e:62:fb:08:
52:34:c6:36:c1:c3:cc:a6:37:79:18:ee:d0:11:d9:e6:7a:a4:
14:dd:42:97:5d:4d:46:63:d5:0e:4e:3e:de:8e:cf:21:6a:b6:
05:5a:b6:2c:d4:2e:67:f2:10:c3:02:b1:19:b9:bd:cd:c6:19:
01:18:55:20:1c:1a:5a:6b:bc:52:ab:c7:40:af:9a:a4:73:72:
cc:49:e5:15:5e:23:b4:1a:35:c1:70:01:1f:7e:ef:db:ba:1f:
b2:69:04:66:3c:06:80:b4:38:66:6c:bd:d4:9c:db:cb:f8:2e:
46:d8:06:ae:7c:63:42:c4:e2:bd:e4:9e:ac:9b:fa:46:3a:06:
09:c3:01:01:84:58:ec:1d:5c:a8:d0:72:21:c9:a4:97:de:58:
ae:c6:34:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZokrrwqFzPWY/hqhG3j334uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3YWFhNTU1YTMyOWVkZDg2NjA2Y2MwZTNlMjk2YmQ0Nzhh
YzczZGUwHhcNMjUxMDI3MDgwMDIyWhcNMjUxMDI4MDgwMDIyWjAzMTEwLwYDVQQD
Eyg3NDgxZWNlM2E0YTk5NjYyNjVmODUyYzlmY2ZkY2JiYmU2ZWE3NDlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArK8R72Lw+fY8E01amTB7B1g+jfVs
fp6CYmiERXVPnP68cmCtbvhFI1sDHWRF3GfbPJNfUQTUJIifmMVwxsqYKc0HFonx
7OyCQlYBy56gJio27FCkvmmD6xcbXypjp5oLXbYqvkWRSks4Lk9R3hsQfT3TTtU4
E5tXaXTptaEiImqqFT3JuBIqicP9w+nChn6OhTU6IK6n0Cwgn1elLeGpUWGAv4pq
DOqrbHBa8pgG7mdpIMMWS2zv+z8C9OIiX8AXVXIsfqn/Dr0QkWHj9S8GGc/8DgPh
AS6my/WsIN9duh16ovoS+0SCWN/KG7GBPkz33q/nnlNRDRs/Y1/ds0rtOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHSB7OOkqZZiZfhSyfz9y7vm6nSfMB8GA1UdIwQY
MBaAFJeqpVWjKe3YZgbMDj4pa9R4rHPeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDZxbFZhTXA3ZGhtQnN3T1BpbHIxSGlzYzk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8xMTk1YWItZWQ0MS00NTJmLWJjMjIt
N2ZkMGRlYWUzMmM1LzEvbDZxbFZhTXA3ZGhtQnN3T1BpbHIxSGlzYzk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS8xMTk1YWItZWQ0MS00NTJmLWJjMjItN2ZkMGRlYWUzMmM1
LzEvbDZxbFZhTXA3ZGhtQnN3T1BpbHIxSGlzYzk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqQXYuGiw
oiXJ3clsGTtndv7owHreatFiQ/L3hWfzCC8icU852MY9QvWWNTZWkiUdGECHOEZg
lKA4hjAH6cKUz1bVVH1NfgEyKEJzMgpjkVVf0A0b395bP5b7TlxVVhlsJhW9EyxS
hsU+YvsIUjTGNsHDzKY3eRju0BHZ5nqkFN1Cl11NRmPVDk4+3o7PIWq2BVq2LNQu
Z/IQwwKxGbm9zcYZARhVIBwaWmu8UqvHQK+apHNyzEnlFV4jtBo1wXABH37v27of
smkEZjwGgLQ4Zmy91Jzby/guRtgGrnxjQsTiveSerJv6RjoGCcMBAYRY7B1cqNBy
Icmkl95YrsY0kw==
-----END CERTIFICATE-----
Generated at Mon Oct 27 12:05:26 2025 by rpki-client