Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.mft
File: lcriw3yGYw5hr9-JA_4XTei5Rb4.mft (raw, json)
Hash identifier: OSUOs5EvzHRHpJWac4CpUQFocYQCk34R3H7GSyjfs+4=
Subject key identifier: 80:49:94:AF:A9:9F:66:70:E9:CA:32:B9:42:E3:B4:4B:1F:E5:DC:C3
Authority key identifier: 95:CA:E2:C3:7C:86:63:0E:61:AF:DF:89:03:FE:17:4D:E8:B9:45:BE
Certificate issuer: /CN=95cae2c37c86630e61afdf8903fe174de8b945be
Certificate serial: 019A2A4440642C4B0E6168175ED24AF799F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lcriw3yGYw5hr9-JA_4XTei5Rb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.mft
Manifest number: 16F8
Signing time: Tue 28 Oct 2025 10:01:47 +0000
Manifest this update: Tue 28 Oct 2025 10:01:47 +0000
Manifest next update: Wed 29 Oct 2025 10:01:47 +0000
Files and hashes: 1: 4PZQlcsjVsAvgmqOqQEmrDwbHdM.roa (hash: WiP23BGsK1UTNte+BakYOV/1LeI5VSUhcks2u5DxJ8M=)
2: Ha5upAoCmCkgHpv_bzidQHciZpU.roa (hash: dLaRJkdtGcshL2ZliATq/iRbMaN6GbsblgbG4F90nyk=)
3: lcriw3yGYw5hr9-JA_4XTei5Rb4.crl (hash: KMz53KTCb7od1ci6Jv62IrteiQqSVoZbn0CTa/BaGUk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lcriw3yGYw5hr9-JA_4XTei5Rb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:44:40:64:2c:4b:0e:61:68:17:5e:d2:4a:f7:99:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95cae2c37c86630e61afdf8903fe174de8b945be
Validity
Not Before: Oct 28 10:01:47 2025 GMT
Not After : Oct 29 10:01:47 2025 GMT
Subject: CN=804994afa99f6670e9ca32b942e3b44b1fe5dcc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c5:3b:05:a4:8a:c9:86:a4:e2:d0:13:2b:e7:
66:d1:fa:ec:ef:e7:79:d5:30:15:7b:70:e0:71:7a:
7a:a2:bd:29:27:a8:ba:bc:8b:84:96:0c:79:3f:d8:
d4:66:cf:4e:2b:16:a1:72:7f:4e:4b:96:44:82:30:
6e:f0:03:2b:98:56:6d:98:b3:23:fa:bd:a7:6d:35:
59:f7:6e:e0:78:4a:d5:e7:82:a0:b5:b9:5a:2d:44:
9c:8d:d0:72:09:13:4d:dc:4f:10:4c:7d:4d:52:38:
6e:c6:4c:3e:fd:c6:03:6b:fa:dc:14:0e:98:bc:d7:
18:6b:41:11:b5:31:3b:e7:5e:06:d6:85:27:44:5d:
32:ea:b0:1a:63:d0:06:53:6e:5b:5d:4f:20:b0:d1:
d0:a3:0f:8a:5c:55:ac:39:1a:8a:d5:27:69:dc:e2:
cc:e0:04:a8:1a:23:fd:10:50:0d:e9:73:e2:c5:d4:
ae:cd:19:48:59:75:ce:4b:ab:1c:8d:e6:ec:f7:18:
f2:af:e1:31:ad:ca:1c:c1:b1:c8:d4:6e:ad:58:3b:
23:6a:9a:cf:90:2c:4d:90:3d:80:6b:63:74:ba:83:
ba:00:fc:e2:bd:2d:c9:1c:02:33:b9:66:03:d7:81:
a0:a5:72:89:6f:2c:42:02:91:29:ac:60:96:1a:12:
b9:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:49:94:AF:A9:9F:66:70:E9:CA:32:B9:42:E3:B4:4B:1F:E5:DC:C3
X509v3 Authority Key Identifier:
keyid:95:CA:E2:C3:7C:86:63:0E:61:AF:DF:89:03:FE:17:4D:E8:B9:45:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lcriw3yGYw5hr9-JA_4XTei5Rb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:f0:d0:b5:95:2b:13:ff:46:f4:c8:0f:2b:2e:14:0a:5d:c4:
a4:bb:e1:d4:0d:97:bf:d6:83:ee:c1:bb:1a:ad:91:4b:43:cd:
37:7a:7e:65:02:30:a7:e0:5a:db:6c:5e:e0:8b:88:4e:0c:27:
58:42:43:86:d8:5f:1b:48:d2:2e:81:63:89:e8:85:09:a8:8f:
17:8d:28:ac:42:8c:01:4b:55:65:00:5e:91:3a:ca:c8:56:52:
14:99:78:ae:9f:82:33:c2:0e:df:50:d2:78:b2:a2:d3:a5:4d:
7d:8e:bb:48:f3:d5:0c:04:8a:38:be:24:21:56:77:64:32:b5:
8b:c9:d9:cd:e1:89:81:85:d5:76:6f:b2:ab:5c:4c:93:15:36:
4e:d6:00:26:88:bc:20:a0:51:c3:9d:a2:5a:e3:e1:9f:f9:60:
61:cb:ef:ac:fb:fa:97:91:ff:4c:0f:d3:e4:d9:d1:87:7c:30:
30:ee:46:f2:d9:39:8a:8b:ca:5b:ab:db:0c:77:63:62:93:1d:
c7:51:75:5f:80:6b:f5:d9:a2:f6:63:4d:df:cd:e7:1d:fd:a0:
53:07:b4:b2:6b:e4:93:e1:64:8f:76:af:56:5f:98:a6:f7:36:
85:d1:b2:f0:78:d5:95:f0:5e:88:f1:d2:58:ad:84:41:4b:98:
21:5a:7a:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoqREBkLEsOYWgXXtJK95n5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1Y2FlMmMzN2M4NjYzMGU2MWFmZGY4OTAzZmUxNzRkZThi
OTQ1YmUwHhcNMjUxMDI4MTAwMTQ3WhcNMjUxMDI5MTAwMTQ3WjAzMTEwLwYDVQQD
Eyg4MDQ5OTRhZmE5OWY2NjcwZTljYTMyYjk0MmUzYjQ0YjFmZTVkY2MzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8U7BaSKyYak4tATK+dm0frs7+d5
1TAVe3DgcXp6or0pJ6i6vIuElgx5P9jUZs9OKxahcn9OS5ZEgjBu8AMrmFZtmLMj
+r2nbTVZ927geErV54KgtblaLUScjdByCRNN3E8QTH1NUjhuxkw+/cYDa/rcFA6Y
vNcYa0ERtTE7514G1oUnRF0y6rAaY9AGU25bXU8gsNHQow+KXFWsORqK1Sdp3OLM
4ASoGiP9EFAN6XPixdSuzRlIWXXOS6scjebs9xjyr+ExrcocwbHI1G6tWDsjaprP
kCxNkD2Aa2N0uoO6APzivS3JHAIzuWYD14GgpXKJbyxCApEprGCWGhK5HwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIBJlK+pn2Zw6coyuULjtEsf5dzDMB8GA1UdIwQY
MBaAFJXK4sN8hmMOYa/fiQP+F03ouUW+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGNyaXczeUdZdzVocjktSkFfNFhUZWk1UmI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy84MmU2ZjUtODJmMi00NWU3LTg0NGUt
MzUxNDg0MWYzNmFlLzEvbGNyaXczeUdZdzVocjktSkFfNFhUZWk1UmI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy84MmU2ZjUtODJmMi00NWU3LTg0NGUtMzUxNDg0MWYzNmFl
LzEvbGNyaXczeUdZdzVocjktSkFfNFhUZWk1UmI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcvDQtZUr
E/9G9MgPKy4UCl3EpLvh1A2Xv9aD7sG7Gq2RS0PNN3p+ZQIwp+Ba22xe4IuITgwn
WEJDhthfG0jSLoFjieiFCaiPF40orEKMAUtVZQBekTrKyFZSFJl4rp+CM8IO31DS
eLKi06VNfY67SPPVDASKOL4kIVZ3ZDK1i8nZzeGJgYXVdm+yq1xMkxU2TtYAJoi8
IKBRw52iWuPhn/lgYcvvrPv6l5H/TA/T5NnRh3wwMO5G8tk5iovKW6vbDHdjYpMd
x1F1X4Br9dmi9mNN383nHf2gUwe0smvkk+Fkj3avVl+Ypvc2hdGy8HjVlfBeiPHS
WK2EQUuYIVp6bA==
-----END CERTIFICATE-----
Generated at Tue Oct 28 13:39:08 2025 by rpki-client