Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/6a88ac-efb4-45e4-9199-2abdb21941bc/1/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.mft
File: lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.mft (raw, json)
Hash identifier: se5I9wb29vaeml9HPtZihZ7Fe4nSYdZTG5791cBtJlg=
Subject key identifier: A4:FB:D4:9F:E5:8D:FA:08:01:6E:03:A7:64:36:FF:34:25:03:BC:08
Authority key identifier: 96:B8:7E:5F:D1:AA:DC:1B:BE:A3:72:B4:26:9E:EB:D3:93:C5:CD:67
Certificate issuer: /CN=96b87e5fd1aadc1bbea372b4269eebd393c5cd67
Certificate serial: 0199FE0FCBFC9A57205FCB603C0B14125DEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/6a88ac-efb4-45e4-9199-2abdb21941bc/1/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.mft
Manifest number: 0E1A
Signing time: Sun 19 Oct 2025 20:01:12 +0000
Manifest this update: Sun 19 Oct 2025 20:01:12 +0000
Manifest next update: Mon 20 Oct 2025 20:01:12 +0000
Files and hashes: 1: O8xQyf4SlO_QA8u4YHx9nqfuT4c.roa (hash: WyDwMMx1y5LT2GHueRZtXWT+BMFzzrzU6Km40azPSxA=)
2: lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.crl (hash: +ZHNkH7EM2MMR2qRpfAS4E/rX+S+aoD04hp+/QWDhx4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/6a88ac-efb4-45e4-9199-2abdb21941bc/1/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/6a88ac-efb4-45e4-9199-2abdb21941bc/1/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:0f:cb:fc:9a:57:20:5f:cb:60:3c:0b:14:12:5d:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96b87e5fd1aadc1bbea372b4269eebd393c5cd67
Validity
Not Before: Oct 19 20:01:12 2025 GMT
Not After : Oct 20 20:01:12 2025 GMT
Subject: CN=a4fbd49fe58dfa08016e03a76436ff342503bc08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c3:8e:c9:b9:03:2c:ea:4c:48:27:5f:43:b9:
63:03:48:c4:5b:75:b7:6a:3e:05:23:c0:ca:a9:3d:
bb:ee:54:61:ef:16:5c:86:b5:09:06:11:75:ad:0b:
3b:93:3c:1a:a3:ee:4f:d2:fa:61:8a:50:b4:0e:05:
5b:38:f5:b8:56:01:63:2d:ca:af:21:65:64:57:9c:
94:31:cc:0b:3c:83:0c:73:bf:f9:90:ee:1d:7a:42:
df:3f:b5:bc:f6:2b:39:01:0f:32:f1:e4:db:b2:2d:
c6:a6:51:74:a8:eb:67:ce:f7:8e:a5:99:a5:f6:47:
be:5f:1a:0e:38:cd:f0:f0:83:e2:d4:77:6b:ea:57:
88:70:4c:f0:78:b8:70:9e:af:16:63:78:e3:06:7b:
a0:18:8c:34:fb:83:31:1d:6b:c4:9a:58:e4:50:a8:
8e:18:8b:68:e2:c9:29:fa:43:f4:b3:95:8f:a4:4b:
43:10:3f:44:75:17:47:d9:e6:36:a0:e1:5c:09:20:
8c:34:63:ff:f5:b2:df:4d:23:b0:a0:c3:91:e2:d2:
c2:a3:02:0d:d6:cd:3b:8e:5b:87:6d:24:bf:2e:cb:
5a:6e:03:64:db:9f:72:73:af:41:92:c0:d3:f4:48:
b4:a7:ac:5d:f0:55:21:4e:b2:ea:f1:da:b9:1d:5c:
5c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:FB:D4:9F:E5:8D:FA:08:01:6E:03:A7:64:36:FF:34:25:03:BC:08
X509v3 Authority Key Identifier:
keyid:96:B8:7E:5F:D1:AA:DC:1B:BE:A3:72:B4:26:9E:EB:D3:93:C5:CD:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6a88ac-efb4-45e4-9199-2abdb21941bc/1/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6a88ac-efb4-45e4-9199-2abdb21941bc/1/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:7b:eb:60:e7:66:aa:68:98:42:fb:1c:49:89:51:64:bb:56:
bd:76:3c:37:66:27:4f:6b:f8:81:98:18:29:41:e3:76:18:97:
7f:fb:06:8f:4a:e7:5e:a1:39:ee:98:72:1b:84:09:55:3b:9b:
cf:22:1a:5a:7a:68:08:d4:2e:3e:c0:32:42:63:50:4e:2b:ce:
38:c4:4e:d2:36:7a:a5:d1:c4:8b:c4:68:e3:5f:e6:da:75:c8:
f5:1b:f9:9a:ec:f4:ad:c3:cd:64:15:eb:91:ec:76:c8:9d:56:
01:ac:70:09:96:e5:fd:c5:34:6d:30:8f:d6:d9:02:ae:d5:dc:
d9:2e:d1:b9:fa:c2:fe:da:e4:c2:c4:a2:30:7a:c1:20:47:6b:
d9:3f:aa:e1:42:dc:b8:ab:46:cc:be:b1:e9:c6:be:54:26:93:
29:1d:6c:96:cf:40:79:bd:be:b6:e2:c7:bb:7a:93:54:cd:0f:
f6:ca:e7:dd:81:c6:6e:b7:18:75:3a:2f:85:42:2f:eb:2a:bb:
43:37:2e:94:d4:8a:81:4e:92:f2:f1:8c:02:53:60:9d:8f:43:
df:d9:7f:17:1c:31:a7:fd:d5:a5:71:63:54:7b:15:1a:c8:f4:
8d:2a:7a:86:bc:e1:e4:84:83:cb:8a:a6:19:ba:35:53:10:1d:
d1:c5:16:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:01:23 2025 by rpki-client