Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/cddf94-8d51-41cd-8a5b-a0b4930cbd1e/1/lhebOdHB0o9QY8qSHWAH42Phxgs.mft
File: lhebOdHB0o9QY8qSHWAH42Phxgs.mft (raw, json)
Hash identifier: iBNBClQnEPlG1TimU5QdTpzuDzWMSyPTcdujFgDcdRk=
Subject key identifier: C6:DD:0E:08:C7:1D:4C:E9:E9:34:40:B7:55:2A:D2:B7:CA:58:C0:46
Authority key identifier: 96:17:9B:39:D1:C1:D2:8F:50:63:CA:92:1D:60:07:E3:63:E1:C6:0B
Certificate issuer: /CN=96179b39d1c1d28f5063ca921d6007e363e1c60b
Certificate serial: 0199FFC71FC00F76E46E545F6EBEB7A1586A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lhebOdHB0o9QY8qSHWAH42Phxgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/cddf94-8d51-41cd-8a5b-a0b4930cbd1e/1/lhebOdHB0o9QY8qSHWAH42Phxgs.mft
Manifest number: 16E4
Signing time: Mon 20 Oct 2025 04:01:03 +0000
Manifest this update: Mon 20 Oct 2025 04:01:03 +0000
Manifest next update: Tue 21 Oct 2025 04:01:03 +0000
Files and hashes: 1: lhebOdHB0o9QY8qSHWAH42Phxgs.crl (hash: lPYSgHN/7oxgI5inRh2mtZG4AbZ/SF7OXXYF3MSbDB0=)
2: zIbC2a3NLstRoJ1KbSzBvFb6vZ0.roa (hash: YltSOQHV02hFJedVO9/8WLk8TMz1RedE7tGsvMysOE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/cddf94-8d51-41cd-8a5b-a0b4930cbd1e/1/lhebOdHB0o9QY8qSHWAH42Phxgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/cddf94-8d51-41cd-8a5b-a0b4930cbd1e/1/lhebOdHB0o9QY8qSHWAH42Phxgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/lhebOdHB0o9QY8qSHWAH42Phxgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:1f:c0:0f:76:e4:6e:54:5f:6e:be:b7:a1:58:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96179b39d1c1d28f5063ca921d6007e363e1c60b
Validity
Not Before: Oct 20 04:01:03 2025 GMT
Not After : Oct 21 04:01:03 2025 GMT
Subject: CN=c6dd0e08c71d4ce9e93440b7552ad2b7ca58c046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:84:d0:81:1d:43:2a:f3:b1:29:f9:e7:3b:0f:
a7:c1:ab:e4:d5:da:f7:7d:f9:2c:e2:c4:c6:3f:25:
c0:e0:c4:0a:fc:27:7d:65:77:a2:2c:80:ad:80:d2:
0d:2f:8c:00:76:73:98:b1:43:fd:da:1d:22:e6:4f:
e8:2f:57:2b:fa:35:39:f7:c6:bf:be:d6:01:ff:5b:
b7:2b:2f:97:73:ba:ed:1f:15:97:76:ef:a0:92:62:
de:2d:65:3e:4d:57:1f:d2:5b:f6:f5:1e:a8:dd:78:
e3:52:f3:65:a2:c5:f5:0f:d7:ba:92:04:95:0a:23:
6d:e8:3a:8c:cc:20:4d:18:e8:5f:e2:d4:37:56:47:
df:35:18:72:df:55:63:c7:aa:53:66:77:f8:0b:4e:
9e:03:c9:e8:58:00:91:41:5c:8e:35:62:41:bd:ed:
4a:85:2b:a7:8f:75:4a:63:fd:5f:de:44:69:18:8d:
13:31:93:a2:d0:c4:78:a6:f9:b4:64:a4:ab:e1:65:
87:eb:8d:80:c7:20:4e:fd:c3:4f:e1:c0:f5:42:6b:
02:1f:f2:eb:04:b2:91:23:d5:9a:59:70:f9:53:5c:
63:5f:44:2c:4c:13:64:00:64:f1:6c:01:75:d1:89:
78:17:85:fc:e0:50:69:1b:08:9e:06:c1:f9:17:4d:
7b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:DD:0E:08:C7:1D:4C:E9:E9:34:40:B7:55:2A:D2:B7:CA:58:C0:46
X509v3 Authority Key Identifier:
keyid:96:17:9B:39:D1:C1:D2:8F:50:63:CA:92:1D:60:07:E3:63:E1:C6:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhebOdHB0o9QY8qSHWAH42Phxgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/cddf94-8d51-41cd-8a5b-a0b4930cbd1e/1/lhebOdHB0o9QY8qSHWAH42Phxgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/cddf94-8d51-41cd-8a5b-a0b4930cbd1e/1/lhebOdHB0o9QY8qSHWAH42Phxgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:fb:53:65:9e:27:fb:bd:7e:1f:4e:e3:b4:e2:3e:c9:c6:b0:
f1:6d:c9:0d:ea:57:38:7b:f5:8d:61:cf:9b:e8:a8:95:84:c7:
43:46:bf:97:62:09:23:9c:9d:c6:50:9c:f3:03:06:e5:de:8c:
68:87:48:9f:5b:5d:0b:3e:d0:67:9c:6a:77:c7:50:ee:33:8a:
f4:8c:97:f6:ff:c1:6e:dc:54:ce:d1:35:56:65:8d:56:90:dd:
eb:e0:1d:53:87:22:df:ae:53:e8:93:da:b7:1d:aa:49:aa:ad:
8a:b5:51:33:29:d2:68:37:4e:b5:d4:ff:20:e2:12:6a:55:05:
0e:90:db:5d:dc:9c:70:27:b9:3c:97:bf:50:a0:f5:dc:26:8e:
c8:ff:05:19:1b:a6:dc:e0:8a:ab:45:d7:3f:5e:5d:bf:a3:8d:
7e:55:07:b9:17:3f:84:a5:bf:f6:79:c2:f9:e7:2a:46:95:75:
59:b3:37:7f:3a:42:ae:fb:d3:8f:20:1e:bb:fc:7f:90:3f:ea:
6a:98:74:16:95:eb:8c:32:36:37:ca:5b:f3:f3:51:ed:59:bb:
0e:51:d4:47:5c:c2:cc:b5:de:ca:5c:c2:42:08:af:c9:6f:89:
be:1e:25:af:d9:cc:c0:7a:32:fa:93:e5:5e:05:b0:5c:68:9b:
ad:89:3a:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:31:26 2025 by rpki-client