Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/6c4c26-e34a-4336-90c8-f90ae9966428/1/lH4-X564CJtcqU845lF8-8WyAGM.mft
File: lH4-X564CJtcqU845lF8-8WyAGM.mft (raw, json)
Hash identifier: yYngfwUVQaBUGU2Qmm79Cd/6z+cetCnt3KEqksCdL6g=
Subject key identifier: D8:27:E2:A7:C9:B7:C2:ED:98:5B:13:E4:4C:26:F2:E2:9E:99:AD:EF
Authority key identifier: 94:7E:3E:5F:9E:B8:08:9B:5C:A9:4F:38:E6:51:7C:FB:C5:B2:00:63
Certificate issuer: /CN=947e3e5f9eb8089b5ca94f38e6517cfbc5b20063
Certificate serial: 019A725CCCB36186F6FD42918577CE4F08AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lH4-X564CJtcqU845lF8-8WyAGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4c26-e34a-4336-90c8-f90ae9966428/1/lH4-X564CJtcqU845lF8-8WyAGM.mft
Manifest number: 05AE
Signing time: Tue 11 Nov 2025 10:01:15 +0000
Manifest this update: Tue 11 Nov 2025 10:01:15 +0000
Manifest next update: Wed 12 Nov 2025 10:01:15 +0000
Files and hashes: 1: 8JJmvRAktSEG3OdLUZKBNwR6ws0.roa (hash: TC8WkMj5LqYLotUQsIJXNU0W5IJEuyjKyKXTJdzLmbM=)
2: lH4-X564CJtcqU845lF8-8WyAGM.crl (hash: YXOd4Vgwz2aJJgpHKU0pq2zpZeaBSXZOWIIK7qTHkg8=)
3: zozOOHZMPpO8TU7R7OlzFjX6nTU.roa (hash: DO9vuDN/M4q7UhQA8k+ziHqB7tX/m/+CIduSaenQLlY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4c26-e34a-4336-90c8-f90ae9966428/1/lH4-X564CJtcqU845lF8-8WyAGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4c26-e34a-4336-90c8-f90ae9966428/1/lH4-X564CJtcqU845lF8-8WyAGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lH4-X564CJtcqU845lF8-8WyAGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:cc:b3:61:86:f6:fd:42:91:85:77:ce:4f:08:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=947e3e5f9eb8089b5ca94f38e6517cfbc5b20063
Validity
Not Before: Nov 11 10:01:15 2025 GMT
Not After : Nov 12 10:01:15 2025 GMT
Subject: CN=d827e2a7c9b7c2ed985b13e44c26f2e29e99adef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:95:d2:d3:f3:27:f9:dc:2d:25:a7:86:92:7d:
12:2d:0f:2b:86:0d:1a:c2:d2:0c:f4:61:af:79:f8:
95:a4:0d:a1:a2:4d:0b:82:18:4c:b0:ba:54:f7:5d:
db:1a:b3:ee:ed:15:11:61:1c:b1:0a:a4:eb:d0:6c:
44:b4:69:90:ea:43:22:a3:27:c6:c1:d4:23:c9:6b:
ea:d8:a8:a4:38:31:e5:1c:ba:57:6c:2d:fa:92:9b:
37:d5:54:f7:9e:a0:94:96:f8:98:b7:cf:d0:20:53:
01:f6:7a:cc:02:77:31:09:87:ad:a5:56:b4:3b:81:
47:3c:ce:dc:65:8f:98:3e:d4:32:9a:b0:f4:e4:db:
6f:6c:6b:0f:0b:ab:44:06:d0:36:3a:27:41:03:a8:
d0:5a:4a:6f:63:73:f3:b3:ca:c4:9f:2e:a3:c1:8b:
62:cd:f9:81:f5:6d:74:e7:09:1e:ec:92:f0:bc:0d:
e7:2d:4a:2e:16:4f:a9:ae:9a:d7:9f:36:db:1e:cf:
8e:35:d9:f7:2e:c7:91:2e:30:74:9e:9d:73:22:8f:
70:e4:e2:ef:9c:f9:f7:fa:0b:da:20:c4:93:b6:c7:
be:f7:df:25:5a:df:b7:8d:70:92:98:8e:06:34:66:
dd:e4:d1:49:cb:d3:d6:48:91:ca:da:a6:9c:b5:41:
40:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:27:E2:A7:C9:B7:C2:ED:98:5B:13:E4:4C:26:F2:E2:9E:99:AD:EF
X509v3 Authority Key Identifier:
keyid:94:7E:3E:5F:9E:B8:08:9B:5C:A9:4F:38:E6:51:7C:FB:C5:B2:00:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lH4-X564CJtcqU845lF8-8WyAGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4c26-e34a-4336-90c8-f90ae9966428/1/lH4-X564CJtcqU845lF8-8WyAGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4c26-e34a-4336-90c8-f90ae9966428/1/lH4-X564CJtcqU845lF8-8WyAGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:2c:9a:69:58:d5:68:bb:a0:65:9a:73:e8:17:bd:0a:72:9b:
53:c9:84:d2:ad:f1:c0:27:20:6b:3e:a5:8e:37:b8:3f:52:27:
01:d4:a1:b7:b4:55:01:50:a1:be:41:b6:d1:b6:75:4a:e0:5a:
04:f6:88:ad:d8:1c:9d:8a:61:c5:15:4f:3b:b8:31:e2:00:85:
d3:bb:54:62:01:5d:74:b7:83:52:8c:14:8c:60:25:60:99:4f:
45:d9:55:83:08:ff:68:df:96:14:3a:8c:e6:de:09:c4:41:77:
e5:6c:97:db:c3:c0:d2:65:8e:2c:cd:18:6a:f8:03:1d:3a:f7:
fd:6e:57:1c:16:10:af:36:9b:bb:94:ac:cd:3b:2c:e0:d9:7e:
8c:43:40:37:f0:ca:6e:54:90:94:54:ec:ad:24:a1:86:74:ef:
bc:41:c9:38:92:26:c2:45:76:41:66:ce:fb:b2:c0:da:77:0e:
b0:87:81:4d:0c:4c:96:08:14:d0:20:48:44:f8:be:b8:8d:61:
21:ec:c3:64:70:20:b9:fd:2b:3e:7c:43:0e:65:0d:cf:2b:7b:
a8:89:7d:45:3a:64:cc:53:63:e8:0d:b1:17:eb:0c:59:cb:ac:
68:0b:6a:98:94:c6:06:2a:23:a0:0e:cb:cc:7f:41:1f:fe:4e:
c4:39:0a:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyXMyzYYb2/UKRhXfOTwitMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0N2UzZTVmOWViODA4OWI1Y2E5NGYzOGU2NTE3Y2ZiYzVi
MjAwNjMwHhcNMjUxMTExMTAwMTE1WhcNMjUxMTEyMTAwMTE1WjAzMTEwLwYDVQQD
EyhkODI3ZTJhN2M5YjdjMmVkOTg1YjEzZTQ0YzI2ZjJlMjllOTlhZGVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJXS0/Mn+dwtJaeGkn0SLQ8rhg0a
wtIM9GGvefiVpA2hok0LghhMsLpU913bGrPu7RURYRyxCqTr0GxEtGmQ6kMioyfG
wdQjyWvq2KikODHlHLpXbC36kps31VT3nqCUlviYt8/QIFMB9nrMAncxCYetpVa0
O4FHPM7cZY+YPtQymrD05NtvbGsPC6tEBtA2OidBA6jQWkpvY3Pzs8rEny6jwYti
zfmB9W105wke7JLwvA3nLUouFk+prprXnzbbHs+ONdn3LseRLjB0np1zIo9w5OLv
nPn3+gvaIMSTtse+998lWt+3jXCSmI4GNGbd5NFJy9PWSJHK2qactUFAhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNgn4qfJt8LtmFsT5Ewm8uKema3vMB8GA1UdIwQY
MBaAFJR+Pl+euAibXKlPOOZRfPvFsgBjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEg0LVg1NjRDSnRjcVU4NDVsRjgtOFd5QUdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC82YzRjMjYtZTM0YS00MzM2LTkwYzgt
ZjkwYWU5OTY2NDI4LzEvbEg0LVg1NjRDSnRjcVU4NDVsRjgtOFd5QUdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC82YzRjMjYtZTM0YS00MzM2LTkwYzgtZjkwYWU5OTY2NDI4
LzEvbEg0LVg1NjRDSnRjcVU4NDVsRjgtOFd5QUdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoCyaaVjV
aLugZZpz6Be9CnKbU8mE0q3xwCcgaz6ljje4P1InAdSht7RVAVChvkG20bZ1SuBa
BPaIrdgcnYphxRVPO7gx4gCF07tUYgFddLeDUowUjGAlYJlPRdlVgwj/aN+WFDqM
5t4JxEF35WyX28PA0mWOLM0YavgDHTr3/W5XHBYQrzabu5SszTss4Nl+jENAN/DK
blSQlFTsrSShhnTvvEHJOJImwkV2QWbO+7LA2ncOsIeBTQxMlggU0CBIRPi+uI1h
IezDZHAguf0rPnxDDmUNzyt7qIl9RTpkzFNj6A2xF+sMWcusaAtqmJTGBiojoA7L
zH9BH/5OxDkK/w==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:47:38 2025 by rpki-client