Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft
File: LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft (raw, json)
Hash identifier: twfosmQhyLsd5F+UgzXWZIXuOqPoj0nfoaEs/hHCtRs=
Subject key identifier: 05:BC:8C:BB:3F:8C:FA:47:20:C8:85:BD:FF:18:B5:B3:C3:25:44:EA
Authority key identifier: 2E:16:20:89:0F:70:0F:01:2B:0B:A6:01:72:31:4E:3C:85:91:95:13
Certificate issuer: /CN=2e1620890f700f012b0ba60172314e3c85919513
Certificate serial: 0199FEEC1BE36FEBF281CA3BD8E0B632C3B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhYgiQ9wDwErC6YBcjFOPIWRlRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft
Manifest number: 16E2
Signing time: Mon 20 Oct 2025 00:01:50 +0000
Manifest this update: Mon 20 Oct 2025 00:01:50 +0000
Manifest next update: Tue 21 Oct 2025 00:01:50 +0000
Files and hashes: 1: LhYgiQ9wDwErC6YBcjFOPIWRlRM.crl (hash: CdM6fJv6mJAZO9SPC8NAmVTPlP7NRebJ/GtOf2KN/jY=)
2: UEzUyopP5UVcAuE2wQnf6zxgiYA.roa (hash: WO7cSkDAVVG4RqEt/anGaCZXbbFB9XEJIQ0eE+HtSwo=)
3: g1Qj1KnuMxZpXuMaGLTMbgWLRyE.roa (hash: f3NI3BOfnPP1R6nzFdJwSdGpqAlLYVxZtd9uD+YokWY=)
4: x9mgn-wCUD8rT1tTi9C7mbyMAtI.roa (hash: sgZbLcOXGM2ArVU0X49/Qh6v7QEpIvbA1cc08MVfbkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/LhYgiQ9wDwErC6YBcjFOPIWRlRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:ec:1b:e3:6f:eb:f2:81:ca:3b:d8:e0:b6:32:c3:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e1620890f700f012b0ba60172314e3c85919513
Validity
Not Before: Oct 20 00:01:50 2025 GMT
Not After : Oct 21 00:01:50 2025 GMT
Subject: CN=05bc8cbb3f8cfa4720c885bdff18b5b3c32544ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:5c:bf:2c:70:fe:d8:b1:20:f0:8b:32:1e:0a:
58:78:5c:59:a3:ce:1c:ce:d8:0e:88:59:28:3a:c7:
fe:e2:62:bc:eb:87:20:ed:2e:15:5b:3a:bd:29:43:
15:d5:b8:12:1b:ff:1f:0a:84:a5:31:6a:e2:9f:28:
3b:6f:ef:88:16:6d:a4:76:67:9d:1b:95:1e:ee:36:
2e:42:38:ef:f3:76:a5:0b:f6:99:ce:af:dc:7d:2c:
15:53:dd:55:8c:49:5f:38:67:86:01:21:6f:88:9a:
98:7c:af:57:70:db:09:25:e4:07:3b:2d:21:18:84:
ac:56:bd:c8:fe:2c:d3:e8:ef:ca:f7:7a:45:b3:be:
71:e0:9b:a3:f7:9c:3a:fc:7f:3a:2b:5c:80:71:81:
62:9a:6d:69:aa:52:d2:ac:bd:23:92:70:9f:71:c9:
e2:36:04:cc:62:44:30:6b:65:6d:c0:f3:a4:95:b3:
19:0b:4e:18:94:a6:95:b7:a8:f0:a6:6e:10:ac:6b:
57:cb:a0:b5:c6:a8:f2:d2:10:b3:8b:ba:ed:90:42:
e1:c6:11:09:46:ab:ac:cc:de:8d:d2:1b:d2:78:58:
b1:5c:28:f8:d4:f7:83:18:ed:ea:a8:ec:ea:cd:6d:
b2:b4:4a:c9:99:9a:d4:8e:37:c5:a0:26:70:a1:d8:
67:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:BC:8C:BB:3F:8C:FA:47:20:C8:85:BD:FF:18:B5:B3:C3:25:44:EA
X509v3 Authority Key Identifier:
keyid:2E:16:20:89:0F:70:0F:01:2B:0B:A6:01:72:31:4E:3C:85:91:95:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhYgiQ9wDwErC6YBcjFOPIWRlRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:6f:6f:3b:af:b1:ea:e1:b2:e8:22:e9:e1:53:23:d4:77:2e:
6d:f5:cc:c8:33:1b:7e:1e:8f:34:54:f1:1c:eb:90:84:e1:4e:
09:76:93:40:55:86:40:6b:cf:08:f4:f2:9a:df:7a:c3:24:69:
78:12:9a:97:fe:b6:dd:4d:13:48:22:4e:12:38:84:b0:0e:86:
d4:39:1a:37:93:a2:bb:b9:5c:98:f4:6b:58:8e:98:2f:89:45:
74:a6:9d:b6:04:bb:62:f1:87:8f:35:a9:1e:bc:36:a4:3d:fb:
7e:b5:5e:84:47:50:97:98:d1:04:8a:1b:01:f5:92:89:c8:9c:
a9:02:4c:43:af:fa:a6:ee:07:e8:8f:18:bb:64:a0:ff:80:c8:
37:71:ca:19:e1:9f:e9:c8:ab:14:ca:a3:d1:d4:46:74:6f:77:
3d:37:c6:70:f8:46:00:77:0f:dd:fa:87:f8:38:1c:1a:bd:b3:
27:99:1c:e2:6f:5b:79:7d:73:47:38:b2:5f:56:f3:57:97:5f:
ff:88:53:df:d1:3d:cc:11:23:27:cd:5a:9a:c0:ef:9c:8a:e2:
22:fa:d8:80:35:24:61:b1:ae:ce:de:46:5d:5c:87:4b:21:ae:
64:37:49:5a:2b:1d:e9:8c:15:7a:7e:13:48:fe:8d:a4:b3:c8:
92:6c:c0:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:43:16 2025 by rpki-client