Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.mft
File: lhJPJSRqVAn77hG1Ny3YviTG6es.mft (raw, json)
Hash identifier: +O1+lXXOAd91fILSiyS0SqsvxSPehhKbAPCl2Ra2ASU=
Subject key identifier: A9:48:A8:F1:76:D1:57:41:00:D3:1F:71:4E:27:5F:E1:BD:0E:59:F7
Authority key identifier: 96:12:4F:25:24:6A:54:09:FB:EE:11:B5:37:2D:D8:BE:24:C6:E9:EB
Certificate issuer: /CN=96124f25246a5409fbee11b5372dd8be24c6e9eb
Certificate serial: 0199FE0FF015E9F6B66B47FA715609E9151D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lhJPJSRqVAn77hG1Ny3YviTG6es.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.mft
Manifest number: 0A02
Signing time: Sun 19 Oct 2025 20:01:21 +0000
Manifest this update: Sun 19 Oct 2025 20:01:21 +0000
Manifest next update: Mon 20 Oct 2025 20:01:21 +0000
Files and hashes: 1: c3njCbUkCCL3mnp4u_KCanHzP7M.roa (hash: vVs8Ror537sKvCZah39iYsDHQqQgVb1rydMRu4BJ5YQ=)
2: lhJPJSRqVAn77hG1Ny3YviTG6es.crl (hash: PCjNdc7tciBHCrINZ7Z8Ne72FRgblbVHWkShCOMqhps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.mft
rsync://rpki.ripe.net/repository/DEFAULT/lhJPJSRqVAn77hG1Ny3YviTG6es.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:0f:f0:15:e9:f6:b6:6b:47:fa:71:56:09:e9:15:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96124f25246a5409fbee11b5372dd8be24c6e9eb
Validity
Not Before: Oct 19 20:01:21 2025 GMT
Not After : Oct 20 20:01:21 2025 GMT
Subject: CN=a948a8f176d1574100d31f714e275fe1bd0e59f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:7b:4b:2a:79:96:33:20:08:e8:84:d4:56:ce:
3c:e6:ec:62:1e:ce:6a:e2:77:d8:8d:48:5b:04:eb:
e4:78:17:24:45:33:23:5d:73:77:7a:e6:56:33:cc:
59:60:d5:fd:6d:00:d4:8d:1c:88:4e:79:76:70:7b:
74:5f:45:d9:04:fc:64:c7:a1:3e:7e:41:ea:ee:3c:
92:32:94:62:3a:d6:29:db:7b:cf:9f:8a:bb:6f:b9:
77:ae:fc:a2:c3:6a:1c:ea:fa:f7:0b:22:f9:22:b5:
7d:cd:be:00:43:ee:f7:cf:f8:57:42:b9:fe:22:8d:
3b:fa:df:59:0d:cc:8c:0f:f5:1b:83:ea:c4:91:81:
dd:35:d7:e4:10:b7:f0:73:f4:67:dc:31:ef:9c:91:
84:12:c0:13:91:cc:e9:4e:a8:ed:08:4a:b5:e9:09:
08:cc:61:2e:17:7a:20:bc:b6:28:85:d4:b7:4c:24:
2a:92:15:32:58:04:50:d0:6b:f8:62:57:cc:65:b2:
c8:d3:6e:c6:00:4c:d4:48:b2:57:fe:d8:89:fc:47:
8d:7c:25:be:39:31:6e:6c:78:5e:42:23:87:2a:d1:
26:53:e4:b2:c4:3f:c3:3f:a6:28:e3:44:01:fb:a0:
6b:ef:8b:91:b0:b6:9f:30:7d:9a:3e:3a:00:b1:44:
40:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:48:A8:F1:76:D1:57:41:00:D3:1F:71:4E:27:5F:E1:BD:0E:59:F7
X509v3 Authority Key Identifier:
keyid:96:12:4F:25:24:6A:54:09:FB:EE:11:B5:37:2D:D8:BE:24:C6:E9:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhJPJSRqVAn77hG1Ny3YviTG6es.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:85:e0:dd:bd:e9:06:ba:67:dc:6d:85:75:a6:d6:56:31:67:
98:44:73:ec:b1:ec:80:a8:09:c7:64:4d:be:3b:e4:9b:46:bb:
e1:79:0c:95:e8:73:99:f3:61:eb:df:e4:a1:9c:18:99:31:f6:
33:ee:cb:7c:85:1b:f1:fa:05:42:60:da:c3:94:03:8f:b5:47:
a0:d2:59:f0:74:77:c7:5e:9a:41:23:72:9f:2d:da:95:55:06:
af:05:a2:80:55:07:fa:ed:94:74:68:0e:54:3a:6d:6d:9b:71:
45:0b:ea:be:20:e8:99:11:9c:6d:93:11:23:dc:ab:52:f2:4e:
61:d1:0e:24:17:d6:75:30:18:56:30:ea:03:ea:a9:d8:52:29:
95:60:0d:50:35:47:47:7e:52:8d:90:32:89:40:31:e5:3e:87:
42:6a:8e:ea:e0:77:5a:dc:21:fe:28:84:64:28:30:03:b1:5e:
c6:c6:ae:1c:ca:cc:51:4a:e4:6d:67:0c:6e:38:80:86:bd:05:
c0:6f:a5:f5:de:b2:c4:da:0b:c7:6c:14:0a:d6:83:2c:3f:dc:
48:54:ea:18:ac:5a:40:28:0a:91:3a:61:01:7b:12:94:f4:4f:
df:4c:11:55:87:82:e5:41:54:70:f6:21:d3:a5:a8:96:ee:46:
d0:dd:3b:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:36:05 2025 by rpki-client