Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/40a1e5-7d2a-48d6-a50e-f96fb4ea7e70/1/LHXzXSVsxKW4gxm7fku7oynkk0E.mft
File: LHXzXSVsxKW4gxm7fku7oynkk0E.mft (raw, json)
Hash identifier: HiwNIWQ4GP2xF1n+YH+kEOZP6JMZeFIq9i1AJiIl0R4=
Subject key identifier: 1D:6A:0A:C8:3A:60:89:AF:5E:59:D0:81:C9:63:AE:BC:D2:B1:26:99
Authority key identifier: 2C:75:F3:5D:25:6C:C4:A5:B8:83:19:BB:7E:4B:BB:A3:29:E4:93:41
Certificate issuer: /CN=2c75f35d256cc4a5b88319bb7e4bbba329e49341
Certificate serial: 0199FC8FB87C0B75415484FC32288083E67C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHXzXSVsxKW4gxm7fku7oynkk0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/40a1e5-7d2a-48d6-a50e-f96fb4ea7e70/1/LHXzXSVsxKW4gxm7fku7oynkk0E.mft
Manifest number: 0EF9
Signing time: Sun 19 Oct 2025 13:01:41 +0000
Manifest this update: Sun 19 Oct 2025 13:01:41 +0000
Manifest next update: Mon 20 Oct 2025 13:01:41 +0000
Files and hashes: 1: LHXzXSVsxKW4gxm7fku7oynkk0E.crl (hash: GunyDkP2yR0CMxTeyllk0nH0xu5wubevaZL18+V7kYw=)
2: YkA8Ssik5dMp6e7KGDWmp6DJ7AM.roa (hash: kaPK3T3qFTRqHUlFynSutBS2oYj5+768wNKSaLHwTTo=)
3: l2XBgGbcIMQ-iwqh11S1_yjLWig.roa (hash: nZxnXhBR3pemT3iBrE0kPVvVmqlAyhaBxoPDBmxVBEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/40a1e5-7d2a-48d6-a50e-f96fb4ea7e70/1/LHXzXSVsxKW4gxm7fku7oynkk0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/40a1e5-7d2a-48d6-a50e-f96fb4ea7e70/1/LHXzXSVsxKW4gxm7fku7oynkk0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/LHXzXSVsxKW4gxm7fku7oynkk0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:b8:7c:0b:75:41:54:84:fc:32:28:80:83:e6:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c75f35d256cc4a5b88319bb7e4bbba329e49341
Validity
Not Before: Oct 19 13:01:41 2025 GMT
Not After : Oct 20 13:01:41 2025 GMT
Subject: CN=1d6a0ac83a6089af5e59d081c963aebcd2b12699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:64:8f:fb:d5:ff:2c:6a:b1:e1:b3:0a:b2:b5:
1d:f9:2b:a6:27:81:3d:87:57:d2:e4:01:a4:18:db:
65:8d:a2:c0:0c:56:58:c9:f9:2e:1d:ee:e3:65:75:
17:dc:c4:02:4e:dd:3c:c1:51:10:e0:46:3e:a4:9f:
8d:0a:4a:e1:ec:1e:d8:50:56:26:78:50:d8:9e:ff:
6e:e6:5b:9a:c8:62:80:83:01:0a:f1:69:3b:b7:cc:
a4:6b:e1:0a:54:8d:24:5f:2d:3c:a4:b2:71:c0:82:
bf:38:00:d0:b4:32:6d:0d:c0:7c:0f:a8:87:1f:16:
5b:a7:b5:03:f5:d1:2d:ac:8c:0e:18:92:47:9c:26:
95:47:c6:62:d1:b1:d2:f4:3c:3a:f3:b0:61:90:ee:
4b:c3:1b:0e:9a:a9:27:4e:9c:88:38:6a:33:9e:9d:
9b:26:6a:38:e1:0c:1e:d5:61:12:c3:b1:42:06:15:
48:7d:9d:cb:27:ba:de:0e:80:8e:0b:61:a5:36:8f:
d9:e6:b5:28:5e:97:fa:5d:66:42:ff:6f:3d:1a:1a:
1e:8d:83:a3:ab:cb:a8:72:ca:b4:11:e2:24:f3:99:
20:2c:c8:be:42:6d:e7:ad:f3:e1:62:ef:57:ff:e1:
d2:ae:ed:50:f4:01:e1:ce:ef:d5:ab:03:5c:08:64:
f5:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:6A:0A:C8:3A:60:89:AF:5E:59:D0:81:C9:63:AE:BC:D2:B1:26:99
X509v3 Authority Key Identifier:
keyid:2C:75:F3:5D:25:6C:C4:A5:B8:83:19:BB:7E:4B:BB:A3:29:E4:93:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHXzXSVsxKW4gxm7fku7oynkk0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/40a1e5-7d2a-48d6-a50e-f96fb4ea7e70/1/LHXzXSVsxKW4gxm7fku7oynkk0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/40a1e5-7d2a-48d6-a50e-f96fb4ea7e70/1/LHXzXSVsxKW4gxm7fku7oynkk0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:ed:89:a9:0c:9e:b0:1b:b6:d1:3e:14:dd:97:95:33:f9:b3:
4b:30:3e:a8:b8:c3:97:08:30:03:4c:69:fb:2b:73:22:26:65:
ca:32:25:25:51:25:6b:3e:4d:44:ff:7f:82:8e:bf:64:08:76:
07:23:92:66:1a:e2:45:62:96:29:b2:e0:7b:f6:49:19:98:35:
bd:14:01:17:f8:c8:df:cb:49:e8:1b:40:6e:82:dc:06:24:25:
3a:e7:30:3b:a9:a8:54:36:04:e6:49:2d:36:d3:25:b7:4d:f2:
26:08:af:9e:ec:cb:4c:eb:60:f2:6c:e3:9a:63:04:fa:1d:bc:
24:64:28:87:e4:c2:af:7e:83:54:b9:b3:b8:ce:2c:a3:89:fa:
37:48:fa:b8:42:97:d3:34:a0:12:5d:82:69:6e:e0:82:a5:3c:
67:2b:a1:2f:4a:5b:08:9f:30:3e:6e:25:66:89:b5:eb:7e:55:
52:bb:dc:4f:2b:a1:27:ed:fd:25:ee:09:dc:36:16:49:80:b7:
84:af:f7:3b:86:75:f2:63:fc:76:5f:47:a1:c0:c6:5a:01:70:
37:f1:04:0e:04:0c:44:42:9e:98:62:ff:1e:72:97:02:e2:c0:
b3:ab:c8:77:54:56:c6:05:f3:74:35:c0:45:34:00:b8:28:81:
dc:3a:8c:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:53:44 2025 by rpki-client