Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/709fc9-68ef-411e-a1cc-e1e807ecd4df/1/LED81TmHsgn4rznKEhHycGCokC4.mft
File: LED81TmHsgn4rznKEhHycGCokC4.mft (raw, json)
Hash identifier: LMpwKyitqhA3p+Ayrd+cWO9Qnu/5F+GcXYk7MQAx5vc=
Subject key identifier: D4:41:E4:F5:E4:3D:2E:E0:8B:2A:C0:E4:84:B2:D6:17:44:53:75:15
Authority key identifier: 2C:40:FC:D5:39:87:B2:09:F8:AF:39:CA:12:11:F2:70:60:A8:90:2E
Certificate issuer: /CN=2c40fcd53987b209f8af39ca1211f27060a8902e
Certificate serial: 019A725CE74F6501C8F97527D968248FD226
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LED81TmHsgn4rznKEhHycGCokC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/709fc9-68ef-411e-a1cc-e1e807ecd4df/1/LED81TmHsgn4rznKEhHycGCokC4.mft
Manifest number: 11F3
Signing time: Tue 11 Nov 2025 10:01:22 +0000
Manifest this update: Tue 11 Nov 2025 10:01:22 +0000
Manifest next update: Wed 12 Nov 2025 10:01:22 +0000
Files and hashes: 1: 5xtV36wWP_bS1NEiRKe92fTVa2Y.roa (hash: mi2HnN7cH74bvu1lEwLndA7z41JqUc9pgJEQ25fZQMk=)
2: LED81TmHsgn4rznKEhHycGCokC4.crl (hash: /+FMoyW+qp8KuBV04++M/utPVznc3maOCRmPYUCl4sw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/709fc9-68ef-411e-a1cc-e1e807ecd4df/1/LED81TmHsgn4rznKEhHycGCokC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/709fc9-68ef-411e-a1cc-e1e807ecd4df/1/LED81TmHsgn4rznKEhHycGCokC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LED81TmHsgn4rznKEhHycGCokC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:e7:4f:65:01:c8:f9:75:27:d9:68:24:8f:d2:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c40fcd53987b209f8af39ca1211f27060a8902e
Validity
Not Before: Nov 11 10:01:22 2025 GMT
Not After : Nov 12 10:01:22 2025 GMT
Subject: CN=d441e4f5e43d2ee08b2ac0e484b2d61744537515
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:31:32:4c:e3:d6:d9:69:6e:a7:15:a3:b7:68:
1c:e8:e5:21:68:08:f0:ec:18:ee:ac:95:77:ea:4a:
8f:c9:51:2e:cb:61:7a:2b:fb:87:7a:48:18:a5:ac:
00:14:2d:5a:f0:e2:bf:74:70:90:f5:d9:1d:96:38:
fc:08:7b:1c:b5:7c:0f:5f:fa:e5:88:97:a4:3e:59:
0b:b4:25:e5:ad:94:18:80:70:03:6e:14:d3:d1:42:
ce:d2:05:ec:fa:fe:4d:df:a7:6b:a8:54:ba:bb:c3:
65:bc:0c:92:7c:85:8d:ba:93:68:d4:ac:6c:f8:f9:
19:9e:ac:ca:36:67:95:ed:20:89:c1:cd:dc:4b:94:
4a:e9:29:6c:1d:65:ac:72:9c:7c:08:fc:40:61:51:
d0:e9:3f:54:cb:64:63:c4:0a:eb:1c:88:e9:55:1c:
bb:6f:8e:d1:ea:3f:4c:fb:26:fb:70:96:42:38:d5:
07:bd:fd:76:96:1e:00:e2:4c:61:14:03:ff:b1:46:
7a:af:84:0a:b8:67:3b:83:af:d1:6b:e6:1e:86:64:
d1:26:80:10:df:7d:e5:a3:4e:98:fb:ca:15:68:4a:
d7:a4:8f:04:d5:e6:13:41:96:dc:22:0f:11:40:cf:
9b:c1:cf:8c:be:74:0f:08:e1:c7:97:1e:a2:3b:99:
99:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:41:E4:F5:E4:3D:2E:E0:8B:2A:C0:E4:84:B2:D6:17:44:53:75:15
X509v3 Authority Key Identifier:
keyid:2C:40:FC:D5:39:87:B2:09:F8:AF:39:CA:12:11:F2:70:60:A8:90:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LED81TmHsgn4rznKEhHycGCokC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/709fc9-68ef-411e-a1cc-e1e807ecd4df/1/LED81TmHsgn4rznKEhHycGCokC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/709fc9-68ef-411e-a1cc-e1e807ecd4df/1/LED81TmHsgn4rznKEhHycGCokC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:68:8d:3d:dd:33:86:a7:c6:d0:9b:bb:9e:6b:4a:0b:c1:5a:
0d:74:49:6e:ee:f4:59:22:0c:54:28:00:ab:f8:91:70:b3:6a:
95:30:60:e9:d6:04:da:b5:09:28:ae:ae:cc:aa:9f:00:e3:d8:
6e:b1:2a:32:03:9f:8e:ba:96:46:9c:11:c8:be:d4:14:89:d6:
8a:d4:49:e2:be:90:a4:1f:d4:fd:94:34:1b:d7:50:d7:84:b4:
b3:a7:09:8b:c5:44:b0:54:e2:bf:5d:82:0e:92:e3:c0:e6:6b:
32:f2:8b:54:d3:f2:bb:12:95:1e:2a:ab:60:d6:3c:c1:f1:e1:
13:cb:f9:89:2c:07:e9:d2:55:21:50:bd:0b:02:b1:49:13:2c:
76:aa:1b:f5:57:f2:b0:d9:56:09:e4:8f:bd:63:e9:94:f4:34:
f2:da:9d:68:62:11:e8:2c:67:f4:b5:d7:da:d3:fa:1a:5c:68:
e4:74:28:e2:da:98:0b:07:05:36:43:cd:66:2b:d4:ec:3b:0e:
c1:a4:ea:e8:90:ff:fe:a0:52:96:38:79:04:07:42:95:05:82:
07:64:c0:87:07:d7:86:18:0c:fc:31:86:95:11:f2:c3:62:be:
49:95:bf:08:d1:d7:c3:a0:0d:f0:62:f8:fd:df:95:0f:7b:5a:
24:80:40:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyXOdPZQHI+XUn2Wgkj9ImMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjNDBmY2Q1Mzk4N2IyMDlmOGFmMzljYTEyMTFmMjcwNjBh
ODkwMmUwHhcNMjUxMTExMTAwMTIyWhcNMjUxMTEyMTAwMTIyWjAzMTEwLwYDVQQD
EyhkNDQxZTRmNWU0M2QyZWUwOGIyYWMwZTQ4NGIyZDYxNzQ0NTM3NTE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2TEyTOPW2WlupxWjt2gc6OUhaAjw
7BjurJV36kqPyVEuy2F6K/uHekgYpawAFC1a8OK/dHCQ9dkdljj8CHsctXwPX/rl
iJekPlkLtCXlrZQYgHADbhTT0ULO0gXs+v5N36drqFS6u8NlvAySfIWNupNo1Kxs
+PkZnqzKNmeV7SCJwc3cS5RK6SlsHWWscpx8CPxAYVHQ6T9Uy2RjxArrHIjpVRy7
b47R6j9M+yb7cJZCONUHvf12lh4A4kxhFAP/sUZ6r4QKuGc7g6/Ra+YehmTRJoAQ
333lo06Y+8oVaErXpI8E1eYTQZbcIg8RQM+bwc+MvnQPCOHHlx6iO5mZlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNRB5PXkPS7giyrA5ISy1hdEU3UVMB8GA1UdIwQY
MBaAFCxA/NU5h7IJ+K85yhIR8nBgqJAuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTEVEODFUbUhzZ240cnpuS0VoSHljR0Nva0M0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy83MDlmYzktNjhlZi00MTFlLWExY2Mt
ZTFlODA3ZWNkNGRmLzEvTEVEODFUbUhzZ240cnpuS0VoSHljR0Nva0M0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy83MDlmYzktNjhlZi00MTFlLWExY2MtZTFlODA3ZWNkNGRm
LzEvTEVEODFUbUhzZ240cnpuS0VoSHljR0Nva0M0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWWiNPd0z
hqfG0Ju7nmtKC8FaDXRJbu70WSIMVCgAq/iRcLNqlTBg6dYE2rUJKK6uzKqfAOPY
brEqMgOfjrqWRpwRyL7UFInWitRJ4r6QpB/U/ZQ0G9dQ14S0s6cJi8VEsFTiv12C
DpLjwOZrMvKLVNPyuxKVHiqrYNY8wfHhE8v5iSwH6dJVIVC9CwKxSRMsdqob9Vfy
sNlWCeSPvWPplPQ08tqdaGIR6Cxn9LXX2tP6Glxo5HQo4tqYCwcFNkPNZivU7DsO
waTq6JD//qBSljh5BAdClQWCB2TAhwfXhhgM/DGGlRHyw2K+SZW/CNHXw6AN8GL4
/d+VD3taJIBAGQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:28:12 2025 by rpki-client