
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/eeb0c0-94f5-441a-8dd9-97b89c47d50a/1/LPHkHOfCQk-d-I65hGTJsIJr6cE.mft
File: LPHkHOfCQk-d-I65hGTJsIJr6cE.mft (raw, json)
Hash identifier: aEqA9m/YH9x5pScS+4+8lAA+pYPCuZ5M/vpT3DD7+58=
Subject key identifier: F1:18:CE:B9:AB:D0:52:CC:1F:51:87:01:54:A4:63:3F:09:61:D6:FB
Authority key identifier: 2C:F1:E4:1C:E7:C2:42:4F:9D:F8:8E:B9:84:64:C9:B0:82:6B:E9:C1
Certificate issuer: /CN=2cf1e41ce7c2424f9df88eb98464c9b0826be9c1
Certificate serial: 0199FBEA8F9CF3FC4DD0183112147024C0A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LPHkHOfCQk-d-I65hGTJsIJr6cE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/eeb0c0-94f5-441a-8dd9-97b89c47d50a/1/LPHkHOfCQk-d-I65hGTJsIJr6cE.mft
Manifest number: 1073
Signing time: Sun 19 Oct 2025 10:01:17 +0000
Manifest this update: Sun 19 Oct 2025 10:01:17 +0000
Manifest next update: Mon 20 Oct 2025 10:01:17 +0000
Files and hashes: 1: 21s8U-775BXGrImXYw5behrvCTg.roa (hash: dw6lhA0ynQrPKMXAZyoEl/NZ/Jca/wYUb0RkllkJszc=)
2: LPHkHOfCQk-d-I65hGTJsIJr6cE.crl (hash: 3d19yr62FGwrOSvzw4ImX0PeNvrFr+eTOJ/7Q/fcNWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/eeb0c0-94f5-441a-8dd9-97b89c47d50a/1/LPHkHOfCQk-d-I65hGTJsIJr6cE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/eeb0c0-94f5-441a-8dd9-97b89c47d50a/1/LPHkHOfCQk-d-I65hGTJsIJr6cE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LPHkHOfCQk-d-I65hGTJsIJr6cE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:8f:9c:f3:fc:4d:d0:18:31:12:14:70:24:c0:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cf1e41ce7c2424f9df88eb98464c9b0826be9c1
Validity
Not Before: Oct 19 10:01:17 2025 GMT
Not After : Oct 20 10:01:17 2025 GMT
Subject: CN=f118ceb9abd052cc1f51870154a4633f0961d6fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f9:0f:91:36:b9:7a:75:2e:2b:51:a1:43:d3:
2d:f4:71:29:2a:20:13:eb:73:62:57:c6:18:9d:8b:
c0:6f:a2:a6:bb:cd:6a:4a:f1:05:2c:4d:fe:0e:d1:
13:d6:24:ce:94:30:7a:42:bf:6c:cf:8f:34:f7:79:
89:c4:30:b7:14:59:c1:0b:1e:47:4e:47:ac:c2:09:
58:ae:5e:a5:89:84:e1:3f:b5:3e:c0:f0:ce:5c:b3:
70:60:94:41:d0:e0:c0:d0:73:61:eb:75:a6:6b:9a:
9c:a1:40:47:a3:f3:59:2c:45:b5:64:ca:ef:f8:69:
3b:2e:ef:5f:48:c0:06:c6:f2:19:1d:cb:a4:fd:86:
ed:e1:00:a8:5f:92:10:18:b2:a1:07:9e:45:8d:e2:
18:de:c3:7e:e1:b9:09:62:84:24:4b:13:fc:83:f5:
6e:b7:70:9f:4c:33:36:33:5e:9d:5d:dc:d7:62:20:
ca:28:4c:54:77:f6:8a:37:59:5d:4e:42:e8:f0:07:
a9:13:28:0b:ad:17:56:64:5f:51:7a:9f:90:38:09:
97:98:2e:fb:99:ff:23:3d:3c:95:10:ed:ba:50:df:
d5:97:ce:4e:4f:9f:ca:cb:74:c2:ef:66:7e:c6:2f:
05:eb:a6:ba:fc:02:3e:91:05:13:a3:1b:76:a4:98:
3e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:18:CE:B9:AB:D0:52:CC:1F:51:87:01:54:A4:63:3F:09:61:D6:FB
X509v3 Authority Key Identifier:
keyid:2C:F1:E4:1C:E7:C2:42:4F:9D:F8:8E:B9:84:64:C9:B0:82:6B:E9:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LPHkHOfCQk-d-I65hGTJsIJr6cE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/eeb0c0-94f5-441a-8dd9-97b89c47d50a/1/LPHkHOfCQk-d-I65hGTJsIJr6cE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/eeb0c0-94f5-441a-8dd9-97b89c47d50a/1/LPHkHOfCQk-d-I65hGTJsIJr6cE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:06:d5:82:c9:e8:7e:94:79:c5:29:bb:0d:dd:b6:70:95:fe:
84:fa:e2:fc:eb:6e:55:4b:03:db:d9:77:cf:72:5c:c9:5b:73:
37:da:5b:c1:8f:29:85:97:47:9b:e8:b3:b1:0e:c8:42:83:10:
c2:06:41:cc:29:0b:b7:48:57:ff:3c:f6:b3:a9:f8:98:d9:3a:
c4:7d:96:62:8b:db:ac:63:70:33:2e:54:a3:ad:a4:a7:63:65:
f3:5c:3b:5a:79:7a:76:02:c3:0a:9f:6f:fa:d9:91:16:40:06:
6f:35:d3:7d:a7:37:e2:91:06:eb:8b:25:c3:9b:00:ba:59:fc:
6f:19:29:3f:e9:08:53:ea:6f:22:fd:0d:27:32:1c:00:14:f2:
60:9e:97:30:6f:db:8d:96:ae:f2:61:72:95:75:34:5a:f2:30:
a9:dc:3a:4b:21:5e:0d:af:3d:e3:87:ea:58:36:e6:90:47:9c:
76:65:c5:89:d8:55:ac:14:33:cf:60:58:af:72:72:c4:44:8f:
9e:64:1d:77:d2:32:d9:9c:d1:48:26:9d:4d:bc:14:43:6a:22:
3d:9e:cb:9e:d4:db:df:78:5c:62:e5:0f:2c:7d:f9:8c:7b:ee:
c1:ad:50:6a:a4:af:4b:7f:90:11:fb:36:e1:92:40:c6:7b:f6:
e4:5b:db:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:06:57 2025 by rpki-client