Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/f79e8e-6625-45e9-bb9a-96d22861a922/1/LhEuLGHSqA58Q4XGCFjJHXXzHns.mft
File: LhEuLGHSqA58Q4XGCFjJHXXzHns.mft (raw, json)
Hash identifier: MetgX9y7qNJH8J9t8ZCyRhS0uUYewjdEUPvQqm8SqDw=
Subject key identifier: 8C:84:DD:2D:24:E6:70:16:F7:38:2E:A8:92:63:E2:AB:25:3C:E7:4E
Authority key identifier: 2E:11:2E:2C:61:D2:A8:0E:7C:43:85:C6:08:58:C9:1D:75:F3:1E:7B
Certificate issuer: /CN=2e112e2c61d2a80e7c4385c60858c91d75f31e7b
Certificate serial: 0199FDDA4D09B86BE91A6E42A497BF4AD77F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhEuLGHSqA58Q4XGCFjJHXXzHns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/f79e8e-6625-45e9-bb9a-96d22861a922/1/LhEuLGHSqA58Q4XGCFjJHXXzHns.mft
Manifest number: 040A
Signing time: Sun 19 Oct 2025 19:02:46 +0000
Manifest this update: Sun 19 Oct 2025 19:02:46 +0000
Manifest next update: Mon 20 Oct 2025 19:02:46 +0000
Files and hashes: 1: LhEuLGHSqA58Q4XGCFjJHXXzHns.crl (hash: eKYlFamoPdhWHWXQkq/LuESAP1Slq02MCBUBwv28dUM=)
2: q6uLwCPUOFh0yPpYrfw-G5laCq4.roa (hash: P69J+km/g8LXq0BVXp4jTkXxFAbXvFeOKCLpK5Pw804=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/f79e8e-6625-45e9-bb9a-96d22861a922/1/LhEuLGHSqA58Q4XGCFjJHXXzHns.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/f79e8e-6625-45e9-bb9a-96d22861a922/1/LhEuLGHSqA58Q4XGCFjJHXXzHns.mft
rsync://rpki.ripe.net/repository/DEFAULT/LhEuLGHSqA58Q4XGCFjJHXXzHns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:02:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:4d:09:b8:6b:e9:1a:6e:42:a4:97:bf:4a:d7:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e112e2c61d2a80e7c4385c60858c91d75f31e7b
Validity
Not Before: Oct 19 19:02:46 2025 GMT
Not After : Oct 20 19:02:46 2025 GMT
Subject: CN=8c84dd2d24e67016f7382ea89263e2ab253ce74e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a4:81:71:39:7c:9e:e3:00:8c:83:68:7c:2c:
a3:96:86:8a:dd:9e:c3:03:93:1f:4e:03:9f:16:4b:
6b:06:e2:05:49:a9:11:f3:c6:cc:e8:68:88:1d:12:
ea:30:16:04:d1:fb:e1:8c:dc:97:c4:48:28:a7:f7:
f6:e7:d8:ff:ba:b5:30:6e:ad:0d:3b:6b:bf:47:1d:
a3:74:9e:96:b9:95:0a:f4:4f:43:03:e5:a9:76:7d:
54:10:14:d0:f5:96:bf:12:e8:2a:6c:29:89:6f:6c:
c1:56:af:9e:af:3c:e0:26:65:2c:f2:96:d3:0d:48:
39:e6:5b:8f:56:da:12:02:19:0f:33:c6:4b:fb:e4:
3d:56:18:15:9f:04:ed:84:8f:ad:3a:57:30:cf:3f:
97:3b:5f:82:80:98:ec:04:0f:f3:1b:52:3b:9f:2d:
07:d0:ae:6d:7e:68:80:b9:87:ff:03:2b:5c:99:05:
c5:97:3f:eb:9e:30:88:8e:86:31:0e:f2:49:94:f8:
44:ff:42:ba:96:08:4a:cd:93:b9:cf:ca:8a:78:8f:
cc:f3:f6:6d:73:6b:2b:99:19:3a:47:2c:88:ae:b4:
0d:e7:f0:28:7d:9b:6c:25:26:76:be:d6:09:27:be:
e6:1a:c5:30:9e:a3:66:e3:af:c1:8a:23:82:73:d6:
42:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:84:DD:2D:24:E6:70:16:F7:38:2E:A8:92:63:E2:AB:25:3C:E7:4E
X509v3 Authority Key Identifier:
keyid:2E:11:2E:2C:61:D2:A8:0E:7C:43:85:C6:08:58:C9:1D:75:F3:1E:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhEuLGHSqA58Q4XGCFjJHXXzHns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f79e8e-6625-45e9-bb9a-96d22861a922/1/LhEuLGHSqA58Q4XGCFjJHXXzHns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f79e8e-6625-45e9-bb9a-96d22861a922/1/LhEuLGHSqA58Q4XGCFjJHXXzHns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:47:bc:8f:98:64:60:a1:30:5b:78:57:82:65:81:c0:9a:50:
68:64:97:6c:12:d2:d1:6c:79:ba:7d:89:b8:25:16:67:6b:2e:
f2:4b:60:51:be:73:ff:e2:50:3a:ea:33:61:d5:8f:af:99:11:
6b:bc:15:da:cd:6b:d6:4b:99:54:64:05:9d:f5:0b:cc:b4:22:
87:46:98:6b:44:49:09:9d:c5:21:d3:69:08:e8:9e:d8:5b:6b:
23:77:eb:fd:c1:45:88:98:96:b8:c4:ee:f5:fd:f5:46:9c:e7:
0c:21:ab:53:28:1e:fb:41:95:e3:cc:4e:47:d2:3b:4d:ec:c4:
49:45:05:a8:af:66:ec:0c:28:04:b1:30:cf:89:c8:28:7c:13:
15:37:31:b9:63:6c:d7:48:ae:67:0b:dd:22:4f:ce:7b:f2:fe:
54:04:6a:3e:6f:2b:6b:9d:22:78:33:05:4b:ed:ee:d7:53:21:
13:0d:29:d4:70:d6:fb:22:30:71:01:09:71:40:05:5e:60:d9:
ef:1d:a2:4d:6c:3d:1a:b6:38:44:c7:6d:3f:71:dc:41:07:3d:
d3:0e:c0:ce:44:bf:9a:7b:d8:05:8e:42:af:79:18:38:4d:65:
d6:36:86:f4:40:f8:c8:a3:87:6b:1e:dd:b7:0a:9a:19:72:f7:
5b:a0:35:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:15:21 2025 by rpki-client