Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/c48b4c-0221-4646-bb72-05cf9db430b3/1/lUZGXKW4bCWgLlLsvwTEz7wHZU0.mft
File: lUZGXKW4bCWgLlLsvwTEz7wHZU0.mft (raw, json)
Hash identifier: FUHauG6ooFhcdyrzNov+Lk+dWPXCd3GQwOcx48gCcZA=
Subject key identifier: 26:6D:52:50:E2:39:CA:5A:12:CA:47:53:29:8C:A4:13:43:DB:3B:CA
Authority key identifier: 95:46:46:5C:A5:B8:6C:25:A0:2E:52:EC:BF:04:C4:CF:BC:07:65:4D
Certificate issuer: /CN=9546465ca5b86c25a02e52ecbf04c4cfbc07654d
Certificate serial: 019A3534CD8EA7EE90D5F75B7F2ABFA8397C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lUZGXKW4bCWgLlLsvwTEz7wHZU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/c48b4c-0221-4646-bb72-05cf9db430b3/1/lUZGXKW4bCWgLlLsvwTEz7wHZU0.mft
Manifest number: 054A
Signing time: Thu 30 Oct 2025 13:00:44 +0000
Manifest this update: Thu 30 Oct 2025 13:00:44 +0000
Manifest next update: Fri 31 Oct 2025 13:00:44 +0000
Files and hashes: 1: NWUftztBrG96_y2EzypECwRaWiE.roa (hash: iB3abFntFNLTwV5YoQUMjYIpTV58Rd0ggjc38BexLcc=)
2: lUZGXKW4bCWgLlLsvwTEz7wHZU0.crl (hash: M0iuPFmrXwMmltmpqdhB0gmWiANy+pe8OWmFEiXlmLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/c48b4c-0221-4646-bb72-05cf9db430b3/1/lUZGXKW4bCWgLlLsvwTEz7wHZU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/c48b4c-0221-4646-bb72-05cf9db430b3/1/lUZGXKW4bCWgLlLsvwTEz7wHZU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lUZGXKW4bCWgLlLsvwTEz7wHZU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 31 Oct 2025 13:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:35:34:cd:8e:a7:ee:90:d5:f7:5b:7f:2a:bf:a8:39:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9546465ca5b86c25a02e52ecbf04c4cfbc07654d
Validity
Not Before: Oct 30 13:00:44 2025 GMT
Not After : Oct 31 13:00:44 2025 GMT
Subject: CN=266d5250e239ca5a12ca4753298ca41343db3bca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:c4:ef:19:5a:cc:0a:c0:f7:f0:e2:72:d4:0f:
05:ae:bf:bd:33:cd:93:98:9b:db:39:66:4c:89:a6:
b8:03:e0:cb:82:cc:f4:10:1d:c3:9d:cb:29:1c:a5:
40:c5:a4:37:9a:d9:3b:54:9f:fe:f7:13:cd:44:56:
4a:6c:53:30:19:69:7f:ff:80:1b:c4:31:89:0c:bf:
c8:36:79:b7:bb:38:66:23:ce:2c:da:bc:2e:dd:4c:
ca:8a:37:c7:9c:8a:3c:15:0d:f3:30:8c:46:05:62:
92:7c:08:ca:5d:11:df:6d:aa:bd:27:ac:5d:ca:e5:
13:76:a8:fe:99:a2:3d:3b:7a:96:a8:e5:b2:69:1c:
70:a3:bc:1e:34:f3:cc:b7:ed:96:6e:87:90:ae:cc:
40:f1:59:ec:5b:04:75:4a:4a:77:14:74:86:be:4b:
4c:b0:62:f5:a3:8c:a8:ab:d9:b3:25:bf:59:dd:0a:
6c:1b:c8:7a:a1:f4:06:ae:11:d6:51:38:a0:c6:d0:
41:da:1b:fa:b9:e1:14:0a:c6:6f:ea:9d:ca:26:fd:
52:1a:c6:1f:da:f3:f1:d2:4a:9b:d2:ca:48:41:59:
3f:71:ab:f4:a2:00:0f:1d:58:c2:7e:1f:ad:06:ed:
96:b0:df:52:48:6e:50:5b:0d:59:ac:ad:7d:8d:7a:
8d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:6D:52:50:E2:39:CA:5A:12:CA:47:53:29:8C:A4:13:43:DB:3B:CA
X509v3 Authority Key Identifier:
keyid:95:46:46:5C:A5:B8:6C:25:A0:2E:52:EC:BF:04:C4:CF:BC:07:65:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUZGXKW4bCWgLlLsvwTEz7wHZU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c48b4c-0221-4646-bb72-05cf9db430b3/1/lUZGXKW4bCWgLlLsvwTEz7wHZU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c48b4c-0221-4646-bb72-05cf9db430b3/1/lUZGXKW4bCWgLlLsvwTEz7wHZU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:93:45:2b:6b:f7:4b:ee:79:7a:ca:73:ae:f3:35:15:de:ad:
2b:73:5e:8e:21:19:ab:d5:3e:42:83:75:a5:28:a3:38:af:98:
ea:fc:66:eb:c9:8a:ef:b0:5d:47:c8:79:35:7b:b1:36:31:45:
93:a8:b2:8b:11:3a:4f:0e:4a:c5:01:8c:81:d7:59:6a:27:2a:
ee:ba:c0:3b:b8:b1:29:2f:b3:5d:c5:8f:60:37:64:c6:33:5d:
4b:23:1a:75:27:41:5e:e6:b4:fc:5a:1d:d7:be:f1:91:6a:fb:
64:41:78:03:7e:c5:70:b4:ad:a1:ee:69:bd:9b:3a:e4:7c:c6:
18:27:8e:81:a9:a6:17:d5:97:b7:70:f2:68:11:02:65:b8:41:
dd:bc:25:36:d2:39:ac:11:a3:5b:18:fe:7d:00:d2:1d:25:58:
e1:58:19:b2:98:07:73:69:ba:9a:d1:cf:04:cf:88:6b:ff:e5:
50:d7:23:81:01:f2:2e:d3:17:ef:ee:39:6b:10:85:07:a6:8b:
26:dc:34:44:62:90:23:37:69:34:e9:d4:70:69:3f:92:d8:ff:
b0:e1:0d:f6:17:6e:c5:16:86:f8:47:8e:b7:3d:d3:b7:1d:54:
53:84:54:e9:bc:3a:07:1f:39:18:24:6d:69:cf:ab:b9:e5:e9:
ff:25:fa:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZo1NM2Op+6Q1fdbfyq/qDl8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1NDY0NjVjYTViODZjMjVhMDJlNTJlY2JmMDRjNGNmYmMw
NzY1NGQwHhcNMjUxMDMwMTMwMDQ0WhcNMjUxMDMxMTMwMDQ0WjAzMTEwLwYDVQQD
EygyNjZkNTI1MGUyMzljYTVhMTJjYTQ3NTMyOThjYTQxMzQzZGIzYmNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6sTvGVrMCsD38OJy1A8Frr+9M82T
mJvbOWZMiaa4A+DLgsz0EB3DncspHKVAxaQ3mtk7VJ/+9xPNRFZKbFMwGWl//4Ab
xDGJDL/INnm3uzhmI84s2rwu3UzKijfHnIo8FQ3zMIxGBWKSfAjKXRHfbaq9J6xd
yuUTdqj+maI9O3qWqOWyaRxwo7weNPPMt+2WboeQrsxA8VnsWwR1Skp3FHSGvktM
sGL1o4yoq9mzJb9Z3QpsG8h6ofQGrhHWUTigxtBB2hv6ueEUCsZv6p3KJv1SGsYf
2vPx0kqb0spIQVk/cav0ogAPHVjCfh+tBu2WsN9SSG5QWw1ZrK19jXqNgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCZtUlDiOcpaEspHUymMpBND2zvKMB8GA1UdIwQY
MBaAFJVGRlyluGwloC5S7L8ExM+8B2VNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFVaR1hLVzRiQ1dnTGxMc3Z3VEV6N3dIWlUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9jNDhiNGMtMDIyMS00NjQ2LWJiNzIt
MDVjZjlkYjQzMGIzLzEvbFVaR1hLVzRiQ1dnTGxMc3Z3VEV6N3dIWlUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9jNDhiNGMtMDIyMS00NjQ2LWJiNzItMDVjZjlkYjQzMGIz
LzEvbFVaR1hLVzRiQ1dnTGxMc3Z3VEV6N3dIWlUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAepNFK2v3
S+55espzrvM1Fd6tK3NejiEZq9U+QoN1pSijOK+Y6vxm68mK77BdR8h5NXuxNjFF
k6iyixE6Tw5KxQGMgddZaicq7rrAO7ixKS+zXcWPYDdkxjNdSyMadSdBXua0/Fod
177xkWr7ZEF4A37FcLStoe5pvZs65HzGGCeOgammF9WXt3DyaBECZbhB3bwlNtI5
rBGjWxj+fQDSHSVY4VgZspgHc2m6mtHPBM+Ia//lUNcjgQHyLtMX7+45axCFB6aL
Jtw0RGKQIzdpNOnUcGk/ktj/sOEN9hduxRaG+EeOtz3Ttx1UU4RU6bw6Bx85GCRt
ac+rueXp/yX6Nw==
-----END CERTIFICATE-----
Generated at Thu Oct 30 21:44:31 2025 by rpki-client