Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/0Lqrm9jGnQe2UBFHVD33QnCjOiE.mft
File: 0Lqrm9jGnQe2UBFHVD33QnCjOiE.mft (raw, json)
Hash identifier: mG33vhiWl9x57q5r5mrll8PvExw9R6rHViJusm2u+7E=
Subject key identifier: D9:CF:DE:A4:D7:D8:BE:13:BF:B7:A8:29:E7:F8:39:71:3D:FF:1B:C0
Authority key identifier: D0:BA:AB:9B:D8:C6:9D:07:B6:50:11:47:54:3D:F7:42:70:A3:3A:21
Certificate issuer: /CN=d0baab9bd8c69d07b6501147543df74270a33a21
Certificate serial: 019A71EEBBCE4A47FFE680D4EDDEF49B2F91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Lqrm9jGnQe2UBFHVD33QnCjOiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/0Lqrm9jGnQe2UBFHVD33QnCjOiE.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 08:01:02 +0000
Manifest this update: Tue 11 Nov 2025 08:01:02 +0000
Manifest next update: Wed 12 Nov 2025 08:01:02 +0000
Files and hashes: 1: 0Lqrm9jGnQe2UBFHVD33QnCjOiE.crl (hash: ffWuuzgd8PelNQ91gBjkvGPWnH2Dmd+J09P/jfvuVyY=)
2: juIbMy-ZOag5FvgvGV0o5yTeEN8.roa (hash: +hUGE34YMtW1+houvKxGq1sllVhVFyMUSU1KkXLa0fI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/0Lqrm9jGnQe2UBFHVD33QnCjOiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/0Lqrm9jGnQe2UBFHVD33QnCjOiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Lqrm9jGnQe2UBFHVD33QnCjOiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:bb:ce:4a:47:ff:e6:80:d4:ed:de:f4:9b:2f:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0baab9bd8c69d07b6501147543df74270a33a21
Validity
Not Before: Nov 11 08:01:02 2025 GMT
Not After : Nov 12 08:01:02 2025 GMT
Subject: CN=d9cfdea4d7d8be13bfb7a829e7f839713dff1bc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4d:82:8a:1a:2b:89:50:0f:95:48:41:80:86:
81:28:50:0d:3b:6a:da:78:a6:da:af:63:3a:0a:88:
2d:e4:1e:85:52:f4:58:df:2c:55:45:48:f3:c3:77:
6c:f2:92:f7:d6:f4:03:6e:74:4f:91:9b:78:8f:07:
71:29:74:ab:32:af:0f:ca:65:0a:04:e7:77:66:d5:
ea:5e:55:a1:d5:21:fa:8d:ae:33:ba:b9:6e:56:de:
db:f1:59:c0:8a:3d:12:2b:ed:9e:f1:02:cc:ed:86:
79:a8:0e:78:ac:81:17:6b:a2:27:4f:31:f3:32:c8:
5b:49:af:e8:d8:4d:67:ba:97:f7:c5:25:46:98:79:
4c:ee:e9:d9:d5:10:e9:88:fc:62:a3:21:ba:00:d9:
82:9c:f1:3e:88:73:9d:9d:ec:da:8b:c4:dc:7e:ee:
43:53:e6:98:8b:ce:02:91:27:87:ab:ac:0b:2a:33:
f4:9b:70:5e:2d:ec:9a:bf:80:75:0d:87:44:32:68:
10:92:fd:a9:2d:57:ad:35:cf:50:25:fc:8c:cb:90:
f2:b6:cd:d0:94:29:0c:ff:a9:28:9a:7f:1b:1a:fe:
96:25:71:4c:8c:2a:9d:9e:49:37:52:d9:6d:13:93:
c5:7d:42:92:0c:17:0c:78:4f:61:72:c8:48:a3:dc:
c3:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:CF:DE:A4:D7:D8:BE:13:BF:B7:A8:29:E7:F8:39:71:3D:FF:1B:C0
X509v3 Authority Key Identifier:
keyid:D0:BA:AB:9B:D8:C6:9D:07:B6:50:11:47:54:3D:F7:42:70:A3:3A:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Lqrm9jGnQe2UBFHVD33QnCjOiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/0Lqrm9jGnQe2UBFHVD33QnCjOiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/0Lqrm9jGnQe2UBFHVD33QnCjOiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:0b:f5:42:06:0c:63:39:82:7f:8a:e0:42:8e:e9:a7:37:b9:
46:c1:a4:ab:8e:fa:b7:1b:e8:8c:26:b2:50:f6:cf:ca:b5:6b:
3e:ec:ef:90:94:12:3e:5a:92:3c:2a:d8:b9:0e:05:15:8e:1a:
fa:dd:e1:bd:54:75:24:d3:62:19:3d:c9:7a:57:59:36:89:47:
bc:61:67:4e:fd:51:72:83:52:63:24:07:83:00:1c:3f:06:09:
83:91:0a:0e:bf:c8:f0:5c:50:48:86:60:af:a2:f9:8b:ad:bc:
27:1d:75:25:78:ed:b5:ef:82:e2:e3:0a:de:ee:6e:39:c2:3b:
63:e9:a4:08:5c:31:f0:05:fb:67:32:82:6f:e3:e3:34:71:86:
6d:60:0e:02:f2:4c:17:e0:f4:a8:62:fd:93:a3:6e:0c:ad:ea:
b0:9f:06:d9:25:f8:57:fb:08:cd:e4:5c:03:d0:80:e5:85:59:
84:36:18:ed:32:08:4f:24:f1:de:e1:72:fb:1c:65:e6:e9:4f:
5f:07:77:30:c2:95:3b:1d:a8:c1:aa:91:6d:75:1a:21:f8:2c:
ad:c3:ba:e5:73:5e:37:59:47:b9:42:1d:05:49:a7:88:59:22:
d4:ef:4a:cd:22:0d:d3:ef:f5:21:b9:c6:92:d2:6b:07:cb:b9:
be:3b:30:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpx7rvOSkf/5oDU7d70my+RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwYmFhYjliZDhjNjlkMDdiNjUwMTE0NzU0M2RmNzQyNzBh
MzNhMjEwHhcNMjUxMTExMDgwMTAyWhcNMjUxMTEyMDgwMTAyWjAzMTEwLwYDVQQD
EyhkOWNmZGVhNGQ3ZDhiZTEzYmZiN2E4MjllN2Y4Mzk3MTNkZmYxYmMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwE2CihoriVAPlUhBgIaBKFANO2ra
eKbar2M6Cogt5B6FUvRY3yxVRUjzw3ds8pL31vQDbnRPkZt4jwdxKXSrMq8PymUK
BOd3ZtXqXlWh1SH6ja4zurluVt7b8VnAij0SK+2e8QLM7YZ5qA54rIEXa6InTzHz
MshbSa/o2E1nupf3xSVGmHlM7unZ1RDpiPxioyG6ANmCnPE+iHOdnezai8Tcfu5D
U+aYi84CkSeHq6wLKjP0m3BeLeyav4B1DYdEMmgQkv2pLVetNc9QJfyMy5Dyts3Q
lCkM/6komn8bGv6WJXFMjCqdnkk3UtltE5PFfUKSDBcMeE9hcshIo9zDIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNnP3qTX2L4Tv7eoKef4OXE9/xvAMB8GA1UdIwQY
MBaAFNC6q5vYxp0HtlARR1Q990JwozohMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMExxcm05akduUWUyVUJGSFZEMzNRbkNqT2lFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi85MTk5ZWItZThlYi00MDRkLTg5NTUt
OWJkNWQ1MTM4MDU5LzEvMExxcm05akduUWUyVUJGSFZEMzNRbkNqT2lFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi85MTk5ZWItZThlYi00MDRkLTg5NTUtOWJkNWQ1MTM4MDU5
LzEvMExxcm05akduUWUyVUJGSFZEMzNRbkNqT2lFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAigv1QgYM
YzmCf4rgQo7ppze5RsGkq476txvojCayUPbPyrVrPuzvkJQSPlqSPCrYuQ4FFY4a
+t3hvVR1JNNiGT3JeldZNolHvGFnTv1RcoNSYyQHgwAcPwYJg5EKDr/I8FxQSIZg
r6L5i628Jx11JXjtte+C4uMK3u5uOcI7Y+mkCFwx8AX7ZzKCb+PjNHGGbWAOAvJM
F+D0qGL9k6NuDK3qsJ8G2SX4V/sIzeRcA9CA5YVZhDYY7TIITyTx3uFy+xxl5ulP
Xwd3MMKVOx2owaqRbXUaIfgsrcO65XNeN1lHuUIdBUmniFki1O9KzSIN0+/1IbnG
ktJrB8u5vjswcg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:16:53 2025 by rpki-client