Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/063658-8262-4965-9661-0542427b02b9/1/lLHL_0vZcPon_e_Uv2iwLWjSud0.mft
File: lLHL_0vZcPon_e_Uv2iwLWjSud0.mft (raw, json)
Hash identifier: 1i8r1lP/PqRPh/Jr3ujvY+6kLf2i31QNyJjsLBf5o50=
Subject key identifier: 0B:EB:31:9B:BE:66:18:D7:3D:70:B9:1B:A6:E4:7A:0B:FF:E8:30:C8
Authority key identifier: 94:B1:CB:FF:4B:D9:70:FA:27:FD:EF:D4:BF:68:B0:2D:68:D2:B9:DD
Certificate issuer: /CN=94b1cbff4bd970fa27fdefd4bf68b02d68d2b9dd
Certificate serial: 019A0291299A4E2501FF6C48FFC59B422671
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lLHL_0vZcPon_e_Uv2iwLWjSud0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/063658-8262-4965-9661-0542427b02b9/1/lLHL_0vZcPon_e_Uv2iwLWjSud0.mft
Manifest number: 16A1
Signing time: Mon 20 Oct 2025 17:00:59 +0000
Manifest this update: Mon 20 Oct 2025 17:00:59 +0000
Manifest next update: Tue 21 Oct 2025 17:00:59 +0000
Files and hashes: 1: 1-tC0rjZV1jihIqCSqr691PhK46c.roa (hash: OZRRaNXEuVkMUwrYkvaXW28rMwl6+wF4euV4WCbSFTw=)
2: lLHL_0vZcPon_e_Uv2iwLWjSud0.crl (hash: KWIfRcMpwvVtFTf2a/+5jVg4SLW/K25BZN+/3EmbQlY=)
3: wXXOQ9H2b6IyrY2B0lg-XuD_B8I.roa (hash: cgMdX3AAi5D4nzcU3HSWbT0lY1xCqmK5843fX99UXkY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/063658-8262-4965-9661-0542427b02b9/1/lLHL_0vZcPon_e_Uv2iwLWjSud0.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/063658-8262-4965-9661-0542427b02b9/1/lLHL_0vZcPon_e_Uv2iwLWjSud0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lLHL_0vZcPon_e_Uv2iwLWjSud0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:91:29:9a:4e:25:01:ff:6c:48:ff:c5:9b:42:26:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94b1cbff4bd970fa27fdefd4bf68b02d68d2b9dd
Validity
Not Before: Oct 20 17:00:59 2025 GMT
Not After : Oct 21 17:00:59 2025 GMT
Subject: CN=0beb319bbe6618d73d70b91ba6e47a0bffe830c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ce:12:21:9e:97:32:0b:47:32:2e:6f:6f:ac:
54:fa:99:57:08:18:c4:12:3a:46:a6:eb:d9:5d:0e:
54:0c:a2:32:3c:d2:03:19:2a:2e:89:b6:1a:1e:0c:
d8:67:a1:d5:17:61:5d:0b:98:ec:a3:53:5d:17:0f:
ac:a4:fc:63:60:16:db:a2:2f:01:77:76:29:7c:15:
64:af:65:78:a3:31:08:eb:c7:1f:40:98:eb:4a:fa:
bc:e4:b3:16:b6:8a:cf:80:cc:0d:8b:7e:cb:d4:6e:
80:ce:86:2c:cb:85:86:c6:92:1a:7c:0a:7b:94:ac:
df:dc:30:69:bb:8f:56:e8:d0:3d:56:ce:83:96:d9:
a9:e1:c8:b2:e2:c0:9b:76:2f:99:73:78:4c:59:f8:
07:e6:12:ad:7b:48:4e:ef:48:d5:2e:4d:3d:9a:06:
35:d4:35:19:ae:d3:02:93:74:cf:34:8d:39:44:6c:
cc:60:fc:1b:06:75:4b:7c:2f:c8:60:ce:9f:1b:63:
5a:76:c3:4b:16:22:09:f3:f1:40:4b:db:3e:7c:7c:
a7:38:3c:05:c4:89:6a:f2:f8:3b:78:64:57:85:de:
57:72:4b:38:da:a7:ec:23:fd:e1:73:35:86:df:3e:
7a:01:b0:e0:e9:99:c7:29:9e:1a:f0:b3:df:6f:d3:
c9:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:EB:31:9B:BE:66:18:D7:3D:70:B9:1B:A6:E4:7A:0B:FF:E8:30:C8
X509v3 Authority Key Identifier:
keyid:94:B1:CB:FF:4B:D9:70:FA:27:FD:EF:D4:BF:68:B0:2D:68:D2:B9:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lLHL_0vZcPon_e_Uv2iwLWjSud0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/063658-8262-4965-9661-0542427b02b9/1/lLHL_0vZcPon_e_Uv2iwLWjSud0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/063658-8262-4965-9661-0542427b02b9/1/lLHL_0vZcPon_e_Uv2iwLWjSud0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:cf:eb:54:a5:60:53:80:24:e5:e5:4a:fc:e3:e5:01:b0:66:
e8:0a:5b:41:c8:ae:f8:89:d2:62:1f:79:9f:fb:f9:47:e4:b3:
24:b2:b6:32:74:03:6a:95:e4:27:d3:ea:e0:b1:08:4f:1b:18:
75:54:4d:c8:ec:3b:3a:0e:1e:be:5e:e5:31:bc:9d:06:81:3a:
53:5d:43:50:69:17:be:18:5b:70:d4:5d:73:78:fd:57:60:11:
f7:fc:c2:cb:72:38:1f:58:42:8c:05:60:a7:e2:0d:53:89:56:
d7:22:5e:a9:24:ff:6a:71:66:d5:01:68:ff:5f:aa:ac:a3:5f:
c9:6f:48:e2:23:0b:ab:f9:59:4f:46:2a:2b:10:a2:19:a7:cf:
76:4f:79:99:4f:5a:f2:b8:5f:89:20:41:54:e7:13:45:a0:6a:
80:ba:44:22:59:54:67:b3:2a:83:5d:62:66:69:cc:3c:e8:6c:
cb:f8:df:7c:c4:4b:4d:3d:51:88:0d:a9:ad:cc:25:12:3f:b6:
61:58:3b:52:84:47:ba:ae:d2:06:0e:4c:04:3f:c3:39:c9:67:
60:38:ba:7f:0d:ad:0d:fc:9e:05:f8:42:b0:a0:1b:b7:c4:97:
b6:cd:e9:60:cd:2b:23:b3:8a:90:f8:c9:d3:f1:4c:33:4e:ef:
20:da:75:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoCkSmaTiUB/2xI/8WbQiZxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0YjFjYmZmNGJkOTcwZmEyN2ZkZWZkNGJmNjhiMDJkNjhk
MmI5ZGQwHhcNMjUxMDIwMTcwMDU5WhcNMjUxMDIxMTcwMDU5WjAzMTEwLwYDVQQD
EygwYmViMzE5YmJlNjYxOGQ3M2Q3MGI5MWJhNmU0N2EwYmZmZTgzMGM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAss4SIZ6XMgtHMi5vb6xU+plXCBjE
EjpGpuvZXQ5UDKIyPNIDGSouibYaHgzYZ6HVF2FdC5jso1NdFw+spPxjYBbboi8B
d3YpfBVkr2V4ozEI68cfQJjrSvq85LMWtorPgMwNi37L1G6AzoYsy4WGxpIafAp7
lKzf3DBpu49W6NA9Vs6Dltmp4ciy4sCbdi+Zc3hMWfgH5hKte0hO70jVLk09mgY1
1DUZrtMCk3TPNI05RGzMYPwbBnVLfC/IYM6fG2NadsNLFiIJ8/FAS9s+fHynODwF
xIlq8vg7eGRXhd5Xcks42qfsI/3hczWG3z56AbDg6ZnHKZ4a8LPfb9PJSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAvrMZu+ZhjXPXC5G6bkegv/6DDIMB8GA1UdIwQY
MBaAFJSxy/9L2XD6J/3v1L9osC1o0rndMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbExITF8wdlpjUG9uX2VfVXYyaXdMV2pTdWQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny8wNjM2NTgtODI2Mi00OTY1LTk2NjEt
MDU0MjQyN2IwMmI5LzEvbExITF8wdlpjUG9uX2VfVXYyaXdMV2pTdWQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny8wNjM2NTgtODI2Mi00OTY1LTk2NjEtMDU0MjQyN2IwMmI5
LzEvbExITF8wdlpjUG9uX2VfVXYyaXdMV2pTdWQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAws/rVKVg
U4Ak5eVK/OPlAbBm6ApbQciu+InSYh95n/v5R+SzJLK2MnQDapXkJ9Pq4LEITxsY
dVRNyOw7Og4evl7lMbydBoE6U11DUGkXvhhbcNRdc3j9V2AR9/zCy3I4H1hCjAVg
p+INU4lW1yJeqST/anFm1QFo/1+qrKNfyW9I4iMLq/lZT0YqKxCiGafPdk95mU9a
8rhfiSBBVOcTRaBqgLpEIllUZ7Mqg11iZmnMPOhsy/jffMRLTT1RiA2prcwlEj+2
YVg7UoRHuq7SBg5MBD/DOclnYDi6fw2tDfyeBfhCsKAbt8SXts3pYM0rI7OKkPjJ
0/FMM07vINp1NA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 21:23:42 2025 by rpki-client