Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/0e6250-5420-4318-9284-2c2771e8e177/1/lDbagFrtoKOlD_xmJR3L-0Lw814.mft
File: lDbagFrtoKOlD_xmJR3L-0Lw814.mft (raw, json)
Hash identifier: S+qDO619z62qoLVQnDkrFulRAf2uRt6CWiGZw0Kvo9g=
Subject key identifier: C8:1E:4A:1C:E8:58:9B:53:24:49:53:93:2C:F7:34:55:53:13:F3:54
Authority key identifier: 94:36:DA:80:5A:ED:A0:A3:A5:0F:FC:66:25:1D:CB:FB:42:F0:F3:5E
Certificate issuer: /CN=9436da805aeda0a3a50ffc66251dcbfb42f0f35e
Certificate serial: 019A71B870D844F5D27CD74196ABAFDB5E65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lDbagFrtoKOlD_xmJR3L-0Lw814.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/0e6250-5420-4318-9284-2c2771e8e177/1/lDbagFrtoKOlD_xmJR3L-0Lw814.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 07:01:44 +0000
Manifest this update: Tue 11 Nov 2025 07:01:44 +0000
Manifest next update: Wed 12 Nov 2025 07:01:44 +0000
Files and hashes: 1: lDbagFrtoKOlD_xmJR3L-0Lw814.crl (hash: g52OX6yLh8qZisczh0SbBcfdmhneEBL0D2kvaDWTvTk=)
2: ucXy2KSNHkyj0NVTw1_Sgr3N0zY.roa (hash: rz/2Fi1HgmzQcvvjW5gJ3z/pWlF+IsIu5pUPW6A7j2U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/0e6250-5420-4318-9284-2c2771e8e177/1/lDbagFrtoKOlD_xmJR3L-0Lw814.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/0e6250-5420-4318-9284-2c2771e8e177/1/lDbagFrtoKOlD_xmJR3L-0Lw814.mft
rsync://rpki.ripe.net/repository/DEFAULT/lDbagFrtoKOlD_xmJR3L-0Lw814.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:70:d8:44:f5:d2:7c:d7:41:96:ab:af:db:5e:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9436da805aeda0a3a50ffc66251dcbfb42f0f35e
Validity
Not Before: Nov 11 07:01:44 2025 GMT
Not After : Nov 12 07:01:44 2025 GMT
Subject: CN=c81e4a1ce8589b53244953932cf734555313f354
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:96:9d:b6:78:08:5e:e6:17:11:db:0e:9b:f9:
1e:b7:75:7c:d5:87:1d:95:76:d2:49:dd:3e:e4:44:
9c:cc:a6:c1:ea:aa:e1:32:c8:62:a3:94:77:33:13:
e1:03:79:e3:cb:99:70:d0:43:34:81:b2:2c:3f:4c:
9f:d8:af:41:cb:74:38:db:7f:09:a7:5d:31:a4:17:
10:e3:a4:76:f4:2c:bf:ed:48:77:7f:c7:2b:5a:c6:
da:86:5f:a1:b3:70:da:0c:06:e1:16:f9:04:d4:fd:
9e:3d:7c:f5:15:44:dc:c7:c6:8b:e0:a7:ee:e9:c8:
72:05:c2:94:27:e6:d9:30:6a:cd:2f:28:71:79:30:
ec:6b:29:de:69:aa:85:a4:ad:c0:fe:5c:a5:6f:f2:
71:3b:b3:d4:7c:f8:6e:d8:78:d8:43:f8:f6:99:23:
93:8f:6a:c1:26:8b:80:85:6a:ad:18:e0:e9:2e:e0:
35:3e:9d:02:ec:6c:3e:1c:9d:43:1d:8f:65:cc:f7:
ae:66:6f:b1:94:25:2f:d9:63:ce:be:df:ff:97:5c:
52:85:65:ad:ea:00:27:6e:fa:83:5e:2e:ca:75:71:
18:84:fd:83:46:a5:c0:9c:07:32:4c:23:da:6d:cf:
c7:6d:78:ae:7c:b5:95:9e:53:26:6d:c2:41:f5:90:
5c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:1E:4A:1C:E8:58:9B:53:24:49:53:93:2C:F7:34:55:53:13:F3:54
X509v3 Authority Key Identifier:
keyid:94:36:DA:80:5A:ED:A0:A3:A5:0F:FC:66:25:1D:CB:FB:42:F0:F3:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lDbagFrtoKOlD_xmJR3L-0Lw814.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0e6250-5420-4318-9284-2c2771e8e177/1/lDbagFrtoKOlD_xmJR3L-0Lw814.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0e6250-5420-4318-9284-2c2771e8e177/1/lDbagFrtoKOlD_xmJR3L-0Lw814.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:48:c7:41:41:ad:eb:8e:e4:93:b6:e0:af:9f:75:9f:41:2c:
29:2b:96:d2:c6:4c:3d:eb:42:77:b6:ad:96:a7:ce:9f:cb:9a:
41:9a:fa:31:ea:dc:c2:00:1a:10:da:e2:11:11:da:d9:44:d4:
ff:7a:0a:4a:4d:0d:e8:d1:51:93:8e:84:0a:1d:15:82:41:14:
02:5a:4c:d8:a0:50:d2:eb:b7:d5:9a:6c:8f:09:dc:d1:5f:ae:
8a:af:24:dc:1e:a2:13:c9:04:51:98:eb:db:66:7d:ad:df:0a:
9b:30:de:93:75:24:88:52:38:67:20:68:2c:cc:e0:3d:6e:66:
dc:43:7a:89:08:5e:5f:71:98:e9:84:44:f1:6f:42:82:94:31:
5f:11:dd:44:3d:ad:cf:11:a3:af:53:3d:c2:da:35:81:5b:e7:
1d:07:ae:86:65:9e:c0:da:cf:86:f0:4d:41:49:27:b8:86:58:
42:fe:55:35:5e:1c:fa:b3:b8:0b:c3:97:de:a9:f4:47:a7:c0:
af:8a:d0:25:c2:37:9a:d8:71:e1:14:81:07:d4:9a:e9:83:13:
03:bb:26:55:27:aa:fb:72:54:49:6d:fc:07:51:83:f6:e4:39:
4a:13:e0:1a:10:b7:81:8f:2c:3c:c8:91:3f:fa:ec:80:8c:a6:
e1:ba:eb:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuHDYRPXSfNdBlquv215lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0MzZkYTgwNWFlZGEwYTNhNTBmZmM2NjI1MWRjYmZiNDJm
MGYzNWUwHhcNMjUxMTExMDcwMTQ0WhcNMjUxMTEyMDcwMTQ0WjAzMTEwLwYDVQQD
EyhjODFlNGExY2U4NTg5YjUzMjQ0OTUzOTMyY2Y3MzQ1NTUzMTNmMzU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2padtngIXuYXEdsOm/ket3V81Ycd
lXbSSd0+5ESczKbB6qrhMshio5R3MxPhA3njy5lw0EM0gbIsP0yf2K9By3Q4238J
p10xpBcQ46R29Cy/7Uh3f8crWsbahl+hs3DaDAbhFvkE1P2ePXz1FUTcx8aL4Kfu
6chyBcKUJ+bZMGrNLyhxeTDsayneaaqFpK3A/lylb/JxO7PUfPhu2HjYQ/j2mSOT
j2rBJouAhWqtGODpLuA1Pp0C7Gw+HJ1DHY9lzPeuZm+xlCUv2WPOvt//l1xShWWt
6gAnbvqDXi7KdXEYhP2DRqXAnAcyTCPabc/HbXiufLWVnlMmbcJB9ZBcpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMgeShzoWJtTJElTkyz3NFVTE/NUMB8GA1UdIwQY
MBaAFJQ22oBa7aCjpQ/8ZiUdy/tC8PNeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbERiYWdGcnRvS09sRF94bUpSM0wtMEx3ODE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8wZTYyNTAtNTQyMC00MzE4LTkyODQt
MmMyNzcxZThlMTc3LzEvbERiYWdGcnRvS09sRF94bUpSM0wtMEx3ODE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS8wZTYyNTAtNTQyMC00MzE4LTkyODQtMmMyNzcxZThlMTc3
LzEvbERiYWdGcnRvS09sRF94bUpSM0wtMEx3ODE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFEjHQUGt
647kk7bgr591n0EsKSuW0sZMPetCd7atlqfOn8uaQZr6MercwgAaENriERHa2UTU
/3oKSk0N6NFRk46ECh0VgkEUAlpM2KBQ0uu31Zpsjwnc0V+uiq8k3B6iE8kEUZjr
22Z9rd8KmzDek3UkiFI4ZyBoLMzgPW5m3EN6iQheX3GY6YRE8W9CgpQxXxHdRD2t
zxGjr1M9wto1gVvnHQeuhmWewNrPhvBNQUknuIZYQv5VNV4c+rO4C8OX3qn0R6fA
r4rQJcI3mthx4RSBB9Sa6YMTA7smVSeq+3JUSW38B1GD9uQ5ShPgGhC3gY8sPMiR
P/rsgIym4brrug==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:14:00 2025 by rpki-client