Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/435a3b-0b05-4571-bd2d-f03ce824c76d/1/LfqfBo7bn8Q2NU0abZu0Ib_2MNU.mft
File: LfqfBo7bn8Q2NU0abZu0Ib_2MNU.mft (raw, json)
Hash identifier: lllNJfbww1R9hpU4PXUGVBmcUYbALGmGGcV97/3OYAo=
Subject key identifier: 94:3E:DD:41:1A:B9:F0:DD:2D:C1:33:FC:32:36:9D:F9:D9:F6:12:C9
Authority key identifier: 2D:FA:9F:06:8E:DB:9F:C4:36:35:4D:1A:6D:9B:B4:21:BF:F6:30:D5
Certificate issuer: /CN=2dfa9f068edb9fc436354d1a6d9bb421bff630d5
Certificate serial: 019A251C9C9EE983C7B30AAA233201684F78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LfqfBo7bn8Q2NU0abZu0Ib_2MNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/435a3b-0b05-4571-bd2d-f03ce824c76d/1/LfqfBo7bn8Q2NU0abZu0Ib_2MNU.mft
Manifest number: 0748
Signing time: Mon 27 Oct 2025 10:00:23 +0000
Manifest this update: Mon 27 Oct 2025 10:00:23 +0000
Manifest next update: Tue 28 Oct 2025 10:00:23 +0000
Files and hashes: 1: HK2Vi8L-VSUrFJS43CFHzQJcbz8.roa (hash: E5YSpnMWbKYKY1PUN7i5gprBfIcHK0dY28fjbucPCYI=)
2: LfqfBo7bn8Q2NU0abZu0Ib_2MNU.crl (hash: OlrGasSYrdQWAWUdJl0aTJumwp36cUra0A/Q5xbvQTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/435a3b-0b05-4571-bd2d-f03ce824c76d/1/LfqfBo7bn8Q2NU0abZu0Ib_2MNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/435a3b-0b05-4571-bd2d-f03ce824c76d/1/LfqfBo7bn8Q2NU0abZu0Ib_2MNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/LfqfBo7bn8Q2NU0abZu0Ib_2MNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:1c:9c:9e:e9:83:c7:b3:0a:aa:23:32:01:68:4f:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dfa9f068edb9fc436354d1a6d9bb421bff630d5
Validity
Not Before: Oct 27 10:00:23 2025 GMT
Not After : Oct 28 10:00:23 2025 GMT
Subject: CN=943edd411ab9f0dd2dc133fc32369df9d9f612c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:1b:a4:06:4e:eb:bc:cb:2b:30:ac:c3:21:9e:
f8:1b:89:22:d3:fb:1a:2a:a5:2b:b6:95:09:61:b2:
d3:e4:b7:ac:4c:61:a6:a5:f3:a2:03:9a:8b:25:6b:
90:da:38:f3:91:63:18:79:09:d1:87:f9:33:92:de:
ad:ad:14:6e:ed:e2:5c:20:40:5a:f9:66:0b:3b:8b:
41:dd:61:3d:b2:d4:cb:86:0e:64:d2:99:23:a8:15:
00:bf:19:a5:40:d2:af:a9:60:ca:00:40:2c:54:20:
42:29:01:cd:24:1f:43:7c:f2:31:b7:e0:f1:b8:65:
6e:f3:b6:fc:a1:20:79:8d:ee:31:e3:2d:3e:c1:bb:
11:1f:e6:99:8b:d5:88:20:80:8b:0d:ac:dd:ba:6d:
51:cd:c2:84:56:a9:d8:06:3f:30:fc:68:30:b5:e9:
18:37:4e:ac:16:1e:65:a7:8c:59:87:37:6e:46:7c:
91:29:7a:3b:85:a8:7c:08:5e:2a:c5:f3:ee:3f:77:
c1:a1:58:4d:f7:ea:e6:06:f1:ce:30:ae:f2:12:34:
ef:d8:a6:70:52:24:e7:30:b3:1c:89:7b:e0:7c:22:
b4:2c:42:f0:c1:ac:4e:17:a5:04:80:2c:f0:c7:fc:
01:ce:56:a1:7e:8b:d9:05:61:0a:f0:73:03:21:e2:
7e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:3E:DD:41:1A:B9:F0:DD:2D:C1:33:FC:32:36:9D:F9:D9:F6:12:C9
X509v3 Authority Key Identifier:
keyid:2D:FA:9F:06:8E:DB:9F:C4:36:35:4D:1A:6D:9B:B4:21:BF:F6:30:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LfqfBo7bn8Q2NU0abZu0Ib_2MNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/435a3b-0b05-4571-bd2d-f03ce824c76d/1/LfqfBo7bn8Q2NU0abZu0Ib_2MNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/435a3b-0b05-4571-bd2d-f03ce824c76d/1/LfqfBo7bn8Q2NU0abZu0Ib_2MNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:ea:13:26:cb:6b:c1:c2:ba:94:3e:59:ab:5f:4c:1d:42:af:
9d:10:a9:a3:7f:51:6e:fa:52:17:69:a7:9e:35:54:e7:8b:6b:
42:12:5d:2d:39:9b:11:75:e7:3a:1f:58:9f:28:60:1a:8b:19:
e3:46:a0:96:6c:77:f0:35:98:77:29:12:21:26:1b:05:7f:19:
e4:82:65:aa:75:c2:52:06:0d:8f:a2:4a:2b:65:4c:3e:b8:02:
3a:3e:71:99:d6:44:c7:ce:44:23:96:3d:2c:59:fa:bf:10:af:
73:ce:2f:6e:ee:2e:ac:e4:06:fb:4b:34:9c:5a:10:44:2b:0e:
89:b7:5f:89:1a:fe:8a:6f:b7:5d:5b:55:65:b2:b3:c2:c6:93:
99:09:8a:b3:bc:b4:90:2d:01:ff:a7:e0:b2:26:c0:df:1d:c2:
04:a6:66:06:bc:39:34:5c:74:dd:e5:de:5a:e0:7e:20:73:c3:
31:fe:41:79:97:68:4e:ed:b6:2f:5b:9d:06:3a:52:37:1e:db:
4d:2d:d4:61:0f:fd:c7:3d:9a:5b:50:7a:5a:c6:54:44:11:ba:
63:53:55:e2:f0:e9:c1:00:38:9c:ef:f1:ee:5f:96:ed:7e:27:
63:7c:85:a2:81:96:76:3b:8d:a2:89:4c:af:aa:2f:f5:bd:44:
4c:ad:80:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZolHJye6YPHswqqIzIBaE94MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkZmE5ZjA2OGVkYjlmYzQzNjM1NGQxYTZkOWJiNDIxYmZm
NjMwZDUwHhcNMjUxMDI3MTAwMDIzWhcNMjUxMDI4MTAwMDIzWjAzMTEwLwYDVQQD
Eyg5NDNlZGQ0MTFhYjlmMGRkMmRjMTMzZmMzMjM2OWRmOWQ5ZjYxMmM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhBukBk7rvMsrMKzDIZ74G4ki0/sa
KqUrtpUJYbLT5LesTGGmpfOiA5qLJWuQ2jjzkWMYeQnRh/kzkt6trRRu7eJcIEBa
+WYLO4tB3WE9stTLhg5k0pkjqBUAvxmlQNKvqWDKAEAsVCBCKQHNJB9DfPIxt+Dx
uGVu87b8oSB5je4x4y0+wbsRH+aZi9WIIICLDazdum1RzcKEVqnYBj8w/GgwtekY
N06sFh5lp4xZhzduRnyRKXo7hah8CF4qxfPuP3fBoVhN9+rmBvHOMK7yEjTv2KZw
UiTnMLMciXvgfCK0LELwwaxOF6UEgCzwx/wBzlahfovZBWEK8HMDIeJ+PQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJQ+3UEaufDdLcEz/DI2nfnZ9hLJMB8GA1UdIwQY
MBaAFC36nwaO25/ENjVNGm2btCG/9jDVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGZxZkJvN2JuOFEyTlUwYWJadTBJYl8yTU5VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy80MzVhM2ItMGIwNS00NTcxLWJkMmQt
ZjAzY2U4MjRjNzZkLzEvTGZxZkJvN2JuOFEyTlUwYWJadTBJYl8yTU5VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy80MzVhM2ItMGIwNS00NTcxLWJkMmQtZjAzY2U4MjRjNzZk
LzEvTGZxZkJvN2JuOFEyTlUwYWJadTBJYl8yTU5VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW+oTJstr
wcK6lD5Zq19MHUKvnRCpo39RbvpSF2mnnjVU54trQhJdLTmbEXXnOh9YnyhgGosZ
40aglmx38DWYdykSISYbBX8Z5IJlqnXCUgYNj6JKK2VMPrgCOj5xmdZEx85EI5Y9
LFn6vxCvc84vbu4urOQG+0s0nFoQRCsOibdfiRr+im+3XVtVZbKzwsaTmQmKs7y0
kC0B/6fgsibA3x3CBKZmBrw5NFx03eXeWuB+IHPDMf5BeZdoTu22L1udBjpSNx7b
TS3UYQ/9xz2aW1B6WsZURBG6Y1NV4vDpwQA4nO/x7l+W7X4nY3yFooGWdjuNoolM
r6ov9b1ETK2A5w==
-----END CERTIFICATE-----
Generated at Mon Oct 27 11:55:30 2025 by rpki-client