
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.mft
File: lHS1JBtjw6-9s0LMR2NMVasv-EY.mft (raw, json)
Hash identifier: 72NqLcRbCCkC1vbTDAMaLLlPz5HxRuv+3+3GfVI/bLE=
Subject key identifier: 29:A4:70:ED:A2:C1:3C:24:5E:C5:BF:41:8C:53:F7:88:0B:71:14:A0
Authority key identifier: 94:74:B5:24:1B:63:C3:AF:BD:B3:42:CC:47:63:4C:55:AB:2F:F8:46
Certificate issuer: /CN=9474b5241b63c3afbdb342cc47634c55ab2ff846
Certificate serial: 0199FAD7B0ED24CC4795EF7CF3353DC14EE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lHS1JBtjw6-9s0LMR2NMVasv-EY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.mft
Manifest number: 01F1
Signing time: Sun 19 Oct 2025 05:01:03 +0000
Manifest this update: Sun 19 Oct 2025 05:01:03 +0000
Manifest next update: Mon 20 Oct 2025 05:01:03 +0000
Files and hashes: 1: _esauh0bwxU4lPvXm-nLiVYT1MY.roa (hash: dg/Xh0ZCbSrkvMtC9w3xbJVNO3y7y3uRRsJgcH21rXg=)
2: lHS1JBtjw6-9s0LMR2NMVasv-EY.crl (hash: NyOyCc2z5rlzKIYeeCBqSN8KrP+v1VbMFMtLRSxOPlo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lHS1JBtjw6-9s0LMR2NMVasv-EY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d7:b0:ed:24:cc:47:95:ef:7c:f3:35:3d:c1:4e:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9474b5241b63c3afbdb342cc47634c55ab2ff846
Validity
Not Before: Oct 19 05:01:03 2025 GMT
Not After : Oct 20 05:01:03 2025 GMT
Subject: CN=29a470eda2c13c245ec5bf418c53f7880b7114a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a0:e2:cc:04:2b:77:a4:e0:9f:95:f5:63:87:
63:5b:3a:5e:b9:4f:aa:70:eb:82:6c:92:51:2e:65:
2b:c6:02:0e:70:95:a8:f3:ec:a7:9e:70:21:1d:43:
38:93:66:e9:32:99:6a:cd:d0:48:6e:ab:9d:7d:b8:
62:2b:2b:cf:08:a2:c1:4a:84:df:18:6a:5f:d0:9e:
ec:59:7b:a2:d0:4a:ee:5f:a1:8b:c6:6a:04:4f:a1:
a0:88:4d:e9:d6:1c:57:22:53:2b:d9:af:a1:dc:34:
fe:d6:da:ae:04:33:e6:7d:25:45:94:96:fe:60:d3:
7b:78:23:7e:07:a9:4a:d2:3d:18:13:3d:ce:91:d8:
5d:49:43:0a:73:4b:36:28:14:ae:64:fd:a0:8c:29:
2a:a1:57:fb:05:3f:6e:93:26:c4:ba:86:6e:0d:1e:
ab:a5:b2:2f:2b:69:5e:cc:28:46:ee:dd:17:d4:85:
8f:ec:4b:c9:10:74:ae:4c:36:20:c9:b1:7d:f7:7b:
9a:33:db:99:02:47:fb:70:8b:42:48:b1:4b:4f:59:
e7:f5:37:3c:60:58:6a:95:0e:90:ed:9b:28:c8:17:
2b:cd:1a:2e:fb:df:ca:ba:9d:f2:13:1b:01:5f:6f:
57:74:c5:d7:fe:07:6a:dc:a8:43:72:ec:79:3d:88:
2c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:A4:70:ED:A2:C1:3C:24:5E:C5:BF:41:8C:53:F7:88:0B:71:14:A0
X509v3 Authority Key Identifier:
keyid:94:74:B5:24:1B:63:C3:AF:BD:B3:42:CC:47:63:4C:55:AB:2F:F8:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lHS1JBtjw6-9s0LMR2NMVasv-EY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:e2:2f:9f:0b:e3:8d:66:4f:64:74:4c:48:9b:00:7d:67:b3:
cf:6d:bd:95:30:15:14:27:33:43:1f:fc:0f:11:4b:06:66:40:
21:93:0d:be:31:ca:46:7e:ec:d9:76:53:60:25:1c:ca:bc:54:
d8:a3:f1:2a:bb:e5:bf:75:2f:a0:0e:eb:bc:73:9c:95:d6:75:
85:b5:6b:1d:ce:41:f9:63:e1:50:06:5d:df:94:36:0e:bc:81:
f6:09:17:19:a8:04:91:c6:a6:54:b2:9c:60:5a:8c:3e:df:24:
98:07:ce:03:1a:3c:28:e8:7b:54:63:b6:4c:82:60:f8:57:90:
c2:28:62:6d:57:ca:95:12:7d:58:cc:d8:95:56:bb:90:e9:67:
59:dc:d6:f3:74:16:39:45:42:b5:0a:b4:62:61:02:aa:24:69:
be:e3:e7:ef:ea:d1:a5:88:4f:39:25:80:10:f6:4d:8e:70:60:
a9:a0:43:2a:72:17:30:49:12:88:b5:41:d0:2d:53:f4:ae:ae:
ed:74:0d:a2:e8:25:a2:bc:f9:63:15:1f:55:9d:70:cb:83:60:
f7:0b:ae:f7:9a:4d:18:9a:19:a9:fa:d1:d4:80:28:6d:12:ca:
4e:b4:57:bc:e3:8c:40:a0:aa:a3:43:38:1f:f8:16:23:22:56:
4b:92:9f:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:14:18 2025 by rpki-client