Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.mft
File: lHMg0DCTAXjm987vkdKrh4TT3BY.mft (raw, json)
Hash identifier: otfN2fF5bqKBczmntgu77VefkZyEVCXW4fKqcia6l1I=
Subject key identifier: 50:FA:62:D3:07:ED:2D:C9:64:E0:68:65:DF:9F:4A:D5:5D:E4:01:9A
Authority key identifier: 94:73:20:D0:30:93:01:78:E6:F7:CE:EF:91:D2:AB:87:84:D3:DC:16
Certificate issuer: /CN=947320d030930178e6f7ceef91d2ab8784d3dc16
Certificate serial: 0199FD6B1D3383BBE289C4EAF683DAA4279B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lHMg0DCTAXjm987vkdKrh4TT3BY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.mft
Manifest number: 1310
Signing time: Sun 19 Oct 2025 17:01:19 +0000
Manifest this update: Sun 19 Oct 2025 17:01:19 +0000
Manifest next update: Mon 20 Oct 2025 17:01:19 +0000
Files and hashes: 1: 5QMHmJgfqvSExR78QZoDl1UWmsA.roa (hash: Dbmsjz6HJzMNQXjckNup+UFifmkcVaFAdGg2/Xlr06g=)
2: 9Hm8EAVuf4tqOcHaH0y7y-1Ym9k.roa (hash: FodBXOCVdl5JGOEkTl9E8+4jK0F+A6PAABCoahGBKds=)
3: ChcX6dEQMX7PgnkGnKeX9TQTPSU.roa (hash: 9GX5XaBmVeFjM4n7HjAG7e5pB9imRwZnEdAGfd1ulvc=)
4: I2s0NE0e0ldLesJa5IwWq_3YoQY.roa (hash: 32nxkp+mnSpxawrjeJdAmkwgRYzly761fgfPTbswaVo=)
5: jSjfKvzyOnWZuydcXt3rIa9SA5M.roa (hash: vLtsL1YPKmn6qXZiRbrjcjOEo4/Oi9668rEJ8VN4zCs=)
6: lHMg0DCTAXjm987vkdKrh4TT3BY.crl (hash: 4TPoCjoZP10ZJcZ8jHNJAqOJjgka5zoldQpbGJ6JgNk=)
7: wV_UPXPoWr2rMigTEJujKEPHkRU.roa (hash: sWrQ1dC0i8v5NdCh/KJb/CYIzz2swLex9WzWGoX8cPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lHMg0DCTAXjm987vkdKrh4TT3BY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:1d:33:83:bb:e2:89:c4:ea:f6:83:da:a4:27:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=947320d030930178e6f7ceef91d2ab8784d3dc16
Validity
Not Before: Oct 19 17:01:19 2025 GMT
Not After : Oct 20 17:01:19 2025 GMT
Subject: CN=50fa62d307ed2dc964e06865df9f4ad55de4019a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:e6:9c:b5:88:bc:52:a0:c5:63:0c:92:43:03:
a4:af:f0:4d:8b:d8:da:92:40:4e:63:71:ee:e2:a2:
19:44:c0:c3:26:88:98:3c:09:b5:76:70:d0:d9:88:
a7:7e:4f:7f:27:10:1c:10:19:71:ac:19:2d:e9:21:
3f:86:00:5e:15:34:23:54:85:87:e1:d1:7c:01:9f:
b7:d1:0f:3e:4a:3e:0d:24:22:e1:54:14:38:69:16:
08:59:8a:32:e0:9f:f7:a3:5c:d2:2b:82:c1:65:b1:
7f:a3:1e:fb:bc:2b:eb:93:50:c8:0e:90:f1:fb:c1:
41:48:b3:43:8a:45:f1:1b:b5:3c:07:25:3d:fc:21:
95:82:e2:c5:f6:e5:b6:db:e3:0d:2b:2c:ef:31:9b:
0a:b3:3d:9e:05:33:1d:1e:6b:5e:05:6e:61:4a:47:
77:63:6b:08:6a:c0:c5:1f:56:9d:b3:fa:a3:5a:a2:
49:79:f0:8e:ec:0e:81:35:2b:fd:13:e5:b2:ed:25:
b9:1b:6d:87:f5:88:ed:db:3c:fd:cd:3c:bd:0b:9c:
fa:fa:9c:96:3d:ee:d3:41:e9:96:fb:b7:47:11:90:
bf:e5:cc:b9:3c:b7:3a:90:5d:ba:7c:89:26:51:98:
10:fd:62:e3:3f:42:9f:a4:66:3f:b0:47:39:66:02:
60:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:FA:62:D3:07:ED:2D:C9:64:E0:68:65:DF:9F:4A:D5:5D:E4:01:9A
X509v3 Authority Key Identifier:
keyid:94:73:20:D0:30:93:01:78:E6:F7:CE:EF:91:D2:AB:87:84:D3:DC:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lHMg0DCTAXjm987vkdKrh4TT3BY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:5f:88:5f:f9:09:a3:3a:31:e9:e7:4d:9e:7c:8c:f1:0f:77:
32:a1:da:b1:31:d1:17:42:a1:f1:06:78:3d:ee:90:0d:14:a5:
7b:e7:1f:a4:cc:da:91:83:f7:db:3d:f7:23:b1:d8:47:ff:81:
14:ca:53:67:36:bd:e8:3a:f6:81:b5:00:42:41:42:c7:d6:ce:
e6:dd:a7:5a:86:28:f8:8e:d4:02:47:c3:81:27:d9:54:e4:c7:
78:10:5e:64:82:78:39:1c:c5:08:86:ac:b8:aa:72:fa:19:af:
9e:e3:c2:a7:83:5c:15:4d:00:c2:54:cb:6b:91:36:66:d5:bc:
2c:89:88:66:5d:44:11:e1:bd:b8:69:9c:02:15:31:31:d6:e9:
cf:24:8c:6d:72:92:57:68:04:3a:f8:71:67:59:01:40:a3:8e:
42:3f:7e:ee:3d:3c:60:2f:14:8e:29:35:2d:9d:92:e6:27:12:
7e:de:a3:53:72:be:6a:18:b7:4d:8f:e7:92:a8:9c:90:c3:fe:
88:f2:d6:69:82:30:99:bd:58:3e:04:a8:3f:7f:fc:a5:b6:87:
7a:cb:ef:6e:81:2b:85:da:ce:11:12:27:88:ca:c9:1b:a9:91:
78:5d:d4:00:8a:d9:8d:05:1a:22:44:4f:e1:9c:f2:4b:68:d4:
1c:4e:7d:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:19:31 2025 by rpki-client