Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/3e9e3e-9416-42c8-a35d-6f4f031eeae2/1/rLICUNTN02Zxm5adb0EjAcE-uQE.mft
File: rLICUNTN02Zxm5adb0EjAcE-uQE.mft (raw, json)
Hash identifier: GCDh+X4fsZI8gta+m6Bk8dQ0p5IAhJLlkiHN3WectoA=
Subject key identifier: 68:FC:8F:DF:DB:74:49:F7:81:95:E6:B6:CA:11:47:CA:DA:45:B9:3E
Authority key identifier: AC:B2:02:50:D4:CD:D3:66:71:9B:96:9D:6F:41:23:01:C1:3E:B9:01
Certificate issuer: /CN=acb20250d4cdd366719b969d6f412301c13eb901
Certificate serial: 019A71B8883D919E237BC5B3C6C688A65C81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rLICUNTN02Zxm5adb0EjAcE-uQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/3e9e3e-9416-42c8-a35d-6f4f031eeae2/1/rLICUNTN02Zxm5adb0EjAcE-uQE.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 07:01:50 +0000
Manifest this update: Tue 11 Nov 2025 07:01:50 +0000
Manifest next update: Wed 12 Nov 2025 07:01:50 +0000
Files and hashes: 1: 5n7dgIWemJ_305TpiU3O_0-YbeA.roa (hash: LdWHm24O7+fxQTfSmSb6FS6jzu11KxxrVzOXyxJmUuE=)
2: rLICUNTN02Zxm5adb0EjAcE-uQE.crl (hash: O1CB55wbcqbY9EUM6aATxBW5avewB1wKLwpgYIiioIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/3e9e3e-9416-42c8-a35d-6f4f031eeae2/1/rLICUNTN02Zxm5adb0EjAcE-uQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/3e9e3e-9416-42c8-a35d-6f4f031eeae2/1/rLICUNTN02Zxm5adb0EjAcE-uQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/rLICUNTN02Zxm5adb0EjAcE-uQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:88:3d:91:9e:23:7b:c5:b3:c6:c6:88:a6:5c:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acb20250d4cdd366719b969d6f412301c13eb901
Validity
Not Before: Nov 11 07:01:50 2025 GMT
Not After : Nov 12 07:01:50 2025 GMT
Subject: CN=68fc8fdfdb7449f78195e6b6ca1147cada45b93e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0d:e3:1e:99:e6:84:da:ab:f0:ac:09:d2:d5:
b1:a7:2e:84:59:a9:b2:46:a9:42:3c:12:f9:2a:60:
05:0d:53:84:7b:59:11:98:9e:c8:56:a5:46:2d:32:
1a:ee:11:4a:2d:1a:9c:aa:d6:d1:6a:7c:d0:6b:63:
19:a6:35:7f:da:86:0e:86:f8:6f:60:1b:d0:20:04:
ca:7c:82:e0:4a:79:40:84:ee:ca:e2:f0:75:9e:9d:
21:aa:64:c6:54:ed:bf:58:57:3b:9d:10:d4:d9:a5:
2f:74:f0:7d:62:35:67:66:47:16:40:21:f4:6e:d3:
48:a1:26:94:8c:75:79:e6:23:fe:7a:ab:75:06:83:
71:80:79:e8:e1:d0:9e:98:7c:12:cd:65:ab:51:e1:
ad:17:7e:62:ff:4e:75:67:e5:ba:d4:56:75:15:75:
b1:20:e4:e9:96:1d:88:cd:15:42:8a:49:f1:b8:e4:
fb:4a:1a:51:6c:1d:63:90:2b:d2:86:76:56:e1:f5:
38:54:76:fa:40:ec:52:fb:95:d6:0f:ed:7c:96:43:
29:96:a5:12:ec:8c:85:06:86:09:42:60:93:fe:90:
f5:dd:f0:03:f5:c7:9c:13:a7:8b:17:ca:26:c8:f7:
90:0e:d3:4d:d5:73:f8:71:cc:87:dc:3f:e0:64:e7:
7f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:FC:8F:DF:DB:74:49:F7:81:95:E6:B6:CA:11:47:CA:DA:45:B9:3E
X509v3 Authority Key Identifier:
keyid:AC:B2:02:50:D4:CD:D3:66:71:9B:96:9D:6F:41:23:01:C1:3E:B9:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rLICUNTN02Zxm5adb0EjAcE-uQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/3e9e3e-9416-42c8-a35d-6f4f031eeae2/1/rLICUNTN02Zxm5adb0EjAcE-uQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/3e9e3e-9416-42c8-a35d-6f4f031eeae2/1/rLICUNTN02Zxm5adb0EjAcE-uQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:01:6b:3a:58:7a:ee:28:c2:4c:81:d6:2c:ee:c4:df:3d:fd:
7c:23:f4:d9:05:c7:14:8b:7e:65:87:22:d7:e2:0d:6d:33:c8:
bb:a3:ca:43:86:1e:d4:db:5f:8c:4d:22:2e:b3:58:08:6a:c0:
11:55:3e:c4:f2:35:8c:b2:f5:2a:07:fb:ed:2f:a5:b7:a2:7d:
da:ea:72:42:94:0a:bd:cb:da:ba:d9:f0:3a:a5:b8:a1:d0:2e:
b8:8c:f9:49:f6:b7:a2:0e:31:f9:9f:5d:41:40:10:be:7d:1b:
62:22:f2:3b:2f:3e:30:44:51:fd:ba:ee:11:1c:a0:16:ae:e6:
9d:0a:a5:4b:7b:90:2c:e8:8c:e9:88:27:96:1f:12:cd:64:f5:
b4:1d:2b:60:97:ac:2f:cf:9a:06:b8:6c:f1:b6:ec:27:d8:b4:
48:75:ea:b6:e7:e5:54:a7:b4:4f:6d:b4:94:58:1a:63:8b:25:
22:9f:c0:b8:e0:2d:c8:4d:78:f7:4a:3d:a9:f3:c8:a8:ee:11:
9f:ad:cc:5c:bf:00:05:40:b2:76:bb:82:ec:2d:dc:8b:df:f1:
40:b2:e6:0f:4a:a9:9e:cf:6e:c1:69:09:21:98:a1:8c:8f:b3:
c7:d0:b5:1b:d2:28:90:59:fc:8d:28:1d:98:e3:54:7d:3a:8e:
33:83:9a:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuIg9kZ4je8WzxsaIplyBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjYjIwMjUwZDRjZGQzNjY3MTliOTY5ZDZmNDEyMzAxYzEz
ZWI5MDEwHhcNMjUxMTExMDcwMTUwWhcNMjUxMTEyMDcwMTUwWjAzMTEwLwYDVQQD
Eyg2OGZjOGZkZmRiNzQ0OWY3ODE5NWU2YjZjYTExNDdjYWRhNDViOTNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArg3jHpnmhNqr8KwJ0tWxpy6EWamy
RqlCPBL5KmAFDVOEe1kRmJ7IVqVGLTIa7hFKLRqcqtbRanzQa2MZpjV/2oYOhvhv
YBvQIATKfILgSnlAhO7K4vB1np0hqmTGVO2/WFc7nRDU2aUvdPB9YjVnZkcWQCH0
btNIoSaUjHV55iP+eqt1BoNxgHno4dCemHwSzWWrUeGtF35i/051Z+W61FZ1FXWx
IOTplh2IzRVCiknxuOT7ShpRbB1jkCvShnZW4fU4VHb6QOxS+5XWD+18lkMplqUS
7IyFBoYJQmCT/pD13fAD9cecE6eLF8omyPeQDtNN1XP4ccyH3D/gZOd/rQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGj8j9/bdEn3gZXmtsoRR8raRbk+MB8GA1UdIwQY
MBaAFKyyAlDUzdNmcZuWnW9BIwHBPrkBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckxJQ1VOVE4wMlp4bTVhZGIwRWpBY0UtdVFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy8zZTllM2UtOTQxNi00MmM4LWEzNWQt
NmY0ZjAzMWVlYWUyLzEvckxJQ1VOVE4wMlp4bTVhZGIwRWpBY0UtdVFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy8zZTllM2UtOTQxNi00MmM4LWEzNWQtNmY0ZjAzMWVlYWUy
LzEvckxJQ1VOVE4wMlp4bTVhZGIwRWpBY0UtdVFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALwFrOlh6
7ijCTIHWLO7E3z39fCP02QXHFIt+ZYci1+INbTPIu6PKQ4Ye1NtfjE0iLrNYCGrA
EVU+xPI1jLL1Kgf77S+lt6J92upyQpQKvcvautnwOqW4odAuuIz5Sfa3og4x+Z9d
QUAQvn0bYiLyOy8+MERR/bruERygFq7mnQqlS3uQLOiM6Ygnlh8SzWT1tB0rYJes
L8+aBrhs8bbsJ9i0SHXqtuflVKe0T220lFgaY4slIp/AuOAtyE1490o9qfPIqO4R
n63MXL8ABUCydruC7C3ci9/xQLLmD0qpns9uwWkJIZihjI+zx9C1G9IokFn8jSgd
mONUfTqOM4OaKQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:11:18 2025 by rpki-client