Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.mft
File: Lh0kV-C-VNx4_B9mh9s-lLBorJs.mft (raw, json)
Hash identifier: AYcQIAtpwjKYWGCzQHVYY/3AGXib34VIoQ6dYQwEyMY=
Subject key identifier: 49:6E:49:EF:EC:0B:94:53:D4:32:44:F0:C3:2C:2E:AC:D6:71:5C:FB
Authority key identifier: 2E:1D:24:57:E0:BE:54:DC:78:FC:1F:66:87:DB:3E:94:B0:68:AC:9B
Certificate issuer: /CN=2e1d2457e0be54dc78fc1f6687db3e94b068ac9b
Certificate serial: 019A04ED2E8AAAE1A050216A98028192BAF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lh0kV-C-VNx4_B9mh9s-lLBorJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.mft
Manifest number: 10F2
Signing time: Tue 21 Oct 2025 04:00:43 +0000
Manifest this update: Tue 21 Oct 2025 04:00:43 +0000
Manifest next update: Wed 22 Oct 2025 04:00:43 +0000
Files and hashes: 1: B3anwTfv9G1rVUQa6NJWLwdwXYI.roa (hash: mmLvT4hHYo/WnQMssEwo9M27udmQqtzbwXP4LSX1FYM=)
2: Lh0kV-C-VNx4_B9mh9s-lLBorJs.crl (hash: iSO3Ey1JagQH5iFlniFswiK0FmuS7OEtSCvktE6y1cQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lh0kV-C-VNx4_B9mh9s-lLBorJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 04:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:04:ed:2e:8a:aa:e1:a0:50:21:6a:98:02:81:92:ba:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e1d2457e0be54dc78fc1f6687db3e94b068ac9b
Validity
Not Before: Oct 21 04:00:43 2025 GMT
Not After : Oct 22 04:00:43 2025 GMT
Subject: CN=496e49efec0b9453d43244f0c32c2eacd6715cfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d1:49:96:33:0c:78:b7:b6:43:47:38:8c:d8:
89:17:95:b9:7c:56:c6:c8:8c:87:16:73:94:c5:6d:
e1:a3:c5:71:75:21:c3:b7:3d:cb:76:78:49:0b:43:
26:d8:84:09:6e:9d:48:09:5a:e1:7a:d0:24:68:05:
4b:f4:ab:b4:d4:ea:44:3e:93:42:0a:55:5c:ca:4a:
ea:37:17:9a:34:a3:a2:e1:42:88:65:7c:d3:ba:00:
a9:bc:1b:b2:19:fd:ba:10:ac:a5:a7:e0:eb:02:e4:
93:ea:5b:d5:4a:8c:85:82:d8:ba:30:91:4e:a3:d2:
16:a2:ba:bd:56:39:e0:85:89:af:2c:4b:18:ca:42:
f4:a5:6c:7f:93:d8:73:2a:ed:71:f1:f6:fb:a2:63:
3b:13:fd:07:ab:18:6c:6c:34:75:ab:28:99:a2:b0:
b2:98:2a:3e:4e:47:7d:22:74:38:05:3d:5b:79:4f:
5f:cb:2b:b7:ff:9b:c3:42:5c:52:35:46:01:09:4a:
1f:b8:72:d6:8c:48:1d:b4:42:d4:4d:b4:4d:62:b0:
e0:39:ab:af:42:af:42:e4:9e:f2:04:1d:23:25:70:
91:48:50:17:e5:1d:79:9f:da:e0:60:56:e8:f2:5d:
df:cb:7a:9a:c6:e3:df:c5:49:b5:67:bb:38:86:4f:
75:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:6E:49:EF:EC:0B:94:53:D4:32:44:F0:C3:2C:2E:AC:D6:71:5C:FB
X509v3 Authority Key Identifier:
keyid:2E:1D:24:57:E0:BE:54:DC:78:FC:1F:66:87:DB:3E:94:B0:68:AC:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lh0kV-C-VNx4_B9mh9s-lLBorJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:5e:e4:14:6c:65:9e:89:62:55:4f:a2:d2:9c:63:07:45:59:
ce:93:ef:c7:c9:2e:0a:e6:28:15:f2:58:a9:1e:84:bc:3f:6f:
db:00:13:0e:d4:ea:1c:e1:51:c2:25:50:d4:8f:21:3a:c6:dc:
bb:a7:54:16:23:eb:17:47:2e:e4:c3:1d:56:0f:48:51:be:51:
8e:22:07:b9:89:e7:5b:31:27:26:cf:ee:7d:c4:2d:99:5d:b2:
62:5b:96:e8:92:1c:81:45:1c:cb:cf:71:d2:e8:82:8b:6b:67:
8f:f8:22:be:77:27:8d:88:bd:68:26:d7:bb:dd:b5:be:d5:60:
c4:2f:71:f3:ab:f6:06:79:e4:d2:4e:86:f2:a7:32:38:34:1b:
3a:29:8e:90:17:31:7c:31:83:2d:64:24:4e:05:44:48:49:77:
75:63:10:08:42:00:ef:57:0e:5d:ff:8e:1d:2d:55:0d:5d:8e:
e9:5a:d8:00:5c:24:c7:f5:10:ab:f8:c6:46:65:ab:58:19:44:
97:a3:05:ef:f8:4c:b3:f8:e1:ed:2b:a3:f4:86:b3:f1:14:92:
4b:b6:c8:1e:37:df:8b:3d:2a:8b:58:8e:6b:eb:fc:e4:c4:68:
93:cd:f6:4e:c6:7b:06:f7:b4:74:b7:e1:30:1b:64:26:87:59:
9c:37:42:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 08:53:52 2025 by rpki-client