Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/e477bd-ac8b-455d-bc7f-eddac0c7a1f2/1/LtxXg3JdWVAZYqostbWQxCtX314.mft
File: LtxXg3JdWVAZYqostbWQxCtX314.mft (raw, json)
Hash identifier: eE4SVHzg3l+NKhAE9WJ5DZQWoNFyqSCDM5cZVl7aqSM=
Subject key identifier: 90:81:F0:FA:FE:C5:44:C8:40:0E:DC:76:E2:B8:83:06:C7:56:3F:D3
Authority key identifier: 2E:DC:57:83:72:5D:59:50:19:62:AA:2C:B5:B5:90:C4:2B:57:DF:5E
Certificate issuer: /CN=2edc5783725d59501962aa2cb5b590c42b57df5e
Certificate serial: 019A70DC8020C3B79BAFA628FF1D754FF1C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LtxXg3JdWVAZYqostbWQxCtX314.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/e477bd-ac8b-455d-bc7f-eddac0c7a1f2/1/LtxXg3JdWVAZYqostbWQxCtX314.mft
Manifest number: 1469
Signing time: Tue 11 Nov 2025 03:01:30 +0000
Manifest this update: Tue 11 Nov 2025 03:01:30 +0000
Manifest next update: Wed 12 Nov 2025 03:01:30 +0000
Files and hashes: 1: LtxXg3JdWVAZYqostbWQxCtX314.crl (hash: /3PUPvLRe0NyiXCfFmaUL676aiwKVTbG9GBu4tUvmKY=)
2: r9FlEVdK2kxGPhNPo_-PFZXz5Hg.roa (hash: /9b7HSJW7nIal7/NVxztFoZrvte6gjhfTeD0u5Uqs6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/e477bd-ac8b-455d-bc7f-eddac0c7a1f2/1/LtxXg3JdWVAZYqostbWQxCtX314.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/e477bd-ac8b-455d-bc7f-eddac0c7a1f2/1/LtxXg3JdWVAZYqostbWQxCtX314.mft
rsync://rpki.ripe.net/repository/DEFAULT/LtxXg3JdWVAZYqostbWQxCtX314.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:80:20:c3:b7:9b:af:a6:28:ff:1d:75:4f:f1:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2edc5783725d59501962aa2cb5b590c42b57df5e
Validity
Not Before: Nov 11 03:01:30 2025 GMT
Not After : Nov 12 03:01:30 2025 GMT
Subject: CN=9081f0fafec544c8400edc76e2b88306c7563fd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:64:a7:d7:ed:f7:1b:c9:23:d4:f6:a0:02:a8:
2b:22:95:e7:23:86:17:49:ea:22:6b:42:3a:b6:4e:
ce:69:f4:5e:95:d5:53:1f:95:83:5b:31:bf:4d:af:
43:8c:97:60:26:51:ae:f6:77:5d:66:94:b7:06:0a:
1a:8a:0d:c9:1d:32:7d:99:fc:e9:3f:65:e5:d1:7e:
91:00:0d:23:da:de:e2:47:3c:52:55:63:d5:9d:5c:
97:cf:a7:3d:13:01:84:91:a8:73:00:3f:f6:21:29:
76:7d:dc:c9:26:c6:40:97:c4:41:6d:18:37:68:9b:
d9:2c:6c:a2:7c:b9:0a:65:02:4b:05:ce:80:b9:93:
1d:d8:e0:fc:3f:7d:ba:c3:cc:9b:6c:97:83:9e:21:
2a:51:b6:4c:83:08:d5:73:16:55:5b:9d:a0:55:8f:
bd:56:34:01:c3:09:03:1a:15:b7:30:b0:0f:4e:bd:
fe:99:14:19:4a:f2:8b:d4:43:a3:98:44:7a:1c:1b:
90:f5:82:4b:34:cf:5e:a0:a6:f0:2d:44:1c:e9:88:
ba:aa:1b:72:8d:71:31:fa:2c:65:7b:fb:81:ea:1e:
92:1a:fe:3b:8e:ed:25:78:aa:9b:c1:4f:57:c4:c2:
87:ba:00:86:93:5c:b2:36:7f:75:e6:78:27:6e:dc:
22:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:81:F0:FA:FE:C5:44:C8:40:0E:DC:76:E2:B8:83:06:C7:56:3F:D3
X509v3 Authority Key Identifier:
keyid:2E:DC:57:83:72:5D:59:50:19:62:AA:2C:B5:B5:90:C4:2B:57:DF:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LtxXg3JdWVAZYqostbWQxCtX314.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e477bd-ac8b-455d-bc7f-eddac0c7a1f2/1/LtxXg3JdWVAZYqostbWQxCtX314.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e477bd-ac8b-455d-bc7f-eddac0c7a1f2/1/LtxXg3JdWVAZYqostbWQxCtX314.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:f7:ac:4b:8b:bf:5b:29:9f:30:98:a9:5c:cd:15:9b:c5:8c:
11:07:e7:56:92:cb:32:98:5a:f4:5d:e8:6a:ea:bf:39:a0:ed:
25:02:a5:aa:a3:43:19:54:6c:7a:9a:aa:23:c1:4f:cb:a3:35:
ac:b4:47:78:e7:9b:a7:b3:0f:92:c6:4d:4c:e5:47:00:e2:d8:
73:b6:0c:ca:b1:38:44:fe:16:2e:1c:d6:e8:21:26:42:4f:4a:
08:07:f0:f7:c1:6c:70:0d:f2:2a:d5:ac:fb:18:3e:37:78:32:
ff:d8:0f:2a:a4:b9:15:07:13:18:d8:9c:a6:c2:9c:d2:5f:43:
d6:73:bb:bc:04:bf:b4:6f:fc:de:03:09:5e:cb:35:df:5e:a9:
ab:9a:2b:44:7a:68:47:2e:5c:cc:75:24:fa:a6:e4:a1:4d:57:
2e:16:81:3e:81:aa:91:3b:3c:29:d7:cb:d6:ca:aa:31:08:9c:
10:29:04:0e:45:4a:37:8f:80:26:db:65:25:aa:73:d8:54:22:
b2:f5:bb:5a:39:da:c2:6e:7e:f6:3b:41:7c:76:23:fc:d4:20:
e2:a3:65:5c:57:88:14:36:e3:c6:72:e2:1c:13:2b:6b:88:fe:
3e:79:5e:14:cb:b9:19:23:74:70:d2:8a:8a:25:c1:a5:cf:5c:
c3:fa:71:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpw3IAgw7ebr6Yo/x11T/HGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlZGM1NzgzNzI1ZDU5NTAxOTYyYWEyY2I1YjU5MGM0MmI1
N2RmNWUwHhcNMjUxMTExMDMwMTMwWhcNMjUxMTEyMDMwMTMwWjAzMTEwLwYDVQQD
Eyg5MDgxZjBmYWZlYzU0NGM4NDAwZWRjNzZlMmI4ODMwNmM3NTYzZmQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2Sn1+33G8kj1PagAqgrIpXnI4YX
Seoia0I6tk7OafReldVTH5WDWzG/Ta9DjJdgJlGu9nddZpS3Bgoaig3JHTJ9mfzp
P2Xl0X6RAA0j2t7iRzxSVWPVnVyXz6c9EwGEkahzAD/2ISl2fdzJJsZAl8RBbRg3
aJvZLGyifLkKZQJLBc6AuZMd2OD8P326w8ybbJeDniEqUbZMgwjVcxZVW52gVY+9
VjQBwwkDGhW3MLAPTr3+mRQZSvKL1EOjmER6HBuQ9YJLNM9eoKbwLUQc6Yi6qhty
jXEx+ixle/uB6h6SGv47ju0leKqbwU9XxMKHugCGk1yyNn915ngnbtwiQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJCB8Pr+xUTIQA7cduK4gwbHVj/TMB8GA1UdIwQY
MBaAFC7cV4NyXVlQGWKqLLW1kMQrV99eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHR4WGczSmRXVkFaWXFvc3RiV1F4Q3RYMzE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9lNDc3YmQtYWM4Yi00NTVkLWJjN2Yt
ZWRkYWMwYzdhMWYyLzEvTHR4WGczSmRXVkFaWXFvc3RiV1F4Q3RYMzE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9lNDc3YmQtYWM4Yi00NTVkLWJjN2YtZWRkYWMwYzdhMWYy
LzEvTHR4WGczSmRXVkFaWXFvc3RiV1F4Q3RYMzE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf/esS4u/
WymfMJipXM0Vm8WMEQfnVpLLMpha9F3oauq/OaDtJQKlqqNDGVRsepqqI8FPy6M1
rLRHeOebp7MPksZNTOVHAOLYc7YMyrE4RP4WLhzW6CEmQk9KCAfw98FscA3yKtWs
+xg+N3gy/9gPKqS5FQcTGNicpsKc0l9D1nO7vAS/tG/83gMJXss1316pq5orRHpo
Ry5czHUk+qbkoU1XLhaBPoGqkTs8KdfL1sqqMQicECkEDkVKN4+AJttlJapz2FQi
svW7Wjnawm5+9jtBfHYj/NQg4qNlXFeIFDbjxnLiHBMra4j+PnleFMu5GSN0cNKK
iiXBpc9cw/pxFA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:57 2025 by rpki-client