Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.mft
File: lhEmS7nk5vqZRJ7kVsXQU_OtAcU.mft (raw, json)
Hash identifier: 5hVcVZP8KJ1+EAi90P5ch/5W5MrBFkBamh15q6CXfaU=
Subject key identifier: 3C:16:D3:7F:9E:FC:E1:82:E8:15:FA:91:54:24:D0:02:D1:1F:1E:D8
Authority key identifier: 96:11:26:4B:B9:E4:E6:FA:99:44:9E:E4:56:C5:D0:53:F3:AD:01:C5
Certificate issuer: /CN=9611264bb9e4e6fa99449ee456c5d053f3ad01c5
Certificate serial: 0199FD343CF024B4E675EFDA6E72E927B4A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.mft
Manifest number: 1674
Signing time: Sun 19 Oct 2025 16:01:23 +0000
Manifest this update: Sun 19 Oct 2025 16:01:23 +0000
Manifest next update: Mon 20 Oct 2025 16:01:23 +0000
Files and hashes: 1: CgkoHi9RsjYjtbh7r--tHry08fQ.roa (hash: 9zVo3gN7fK+I6ZtoEWyk2DDHUy2shoezHq0ybpjSZPI=)
2: lhEmS7nk5vqZRJ7kVsXQU_OtAcU.crl (hash: 6tCNZX38ucYLPJOlEc36jR4cOXqbm9TBB7eUUxfgI4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:3c:f0:24:b4:e6:75:ef:da:6e:72:e9:27:b4:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9611264bb9e4e6fa99449ee456c5d053f3ad01c5
Validity
Not Before: Oct 19 16:01:23 2025 GMT
Not After : Oct 20 16:01:23 2025 GMT
Subject: CN=3c16d37f9efce182e815fa915424d002d11f1ed8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0b:a9:1b:f6:dd:05:fa:df:8b:ab:59:5a:a8:
b4:d5:e5:66:e1:0f:1b:0e:91:28:7e:ca:be:68:2f:
ea:56:7c:f0:a5:ec:2a:3c:27:0a:8b:7a:e8:a1:81:
cd:a1:52:fe:78:e4:ec:11:24:cd:51:9f:e1:ed:cc:
58:5f:e3:9f:65:22:13:16:02:a3:45:69:9b:47:6a:
4f:78:48:ab:35:17:2b:97:1b:28:63:a9:9a:ae:6c:
3b:49:8d:fd:df:6b:12:cc:c3:76:78:9c:42:b8:ff:
c7:da:57:03:2f:e5:b0:50:39:97:b1:3d:ef:54:6f:
e7:45:08:9c:1f:87:66:64:09:56:7f:d8:fc:52:a5:
c7:7a:a6:ad:a8:65:7a:45:5e:bd:e0:99:ab:a7:96:
a3:88:58:ea:eb:60:70:3f:de:06:60:37:e2:71:1c:
a0:04:2b:b0:50:6d:5b:3f:21:28:ec:6f:36:eb:0e:
55:e2:cf:ee:96:dc:ce:e0:20:b1:df:55:f8:51:08:
40:dc:41:18:54:c0:82:d6:a7:c8:89:79:c0:f4:cc:
90:20:f7:78:8c:21:9f:d0:9b:ce:00:57:e9:a9:29:
74:51:b4:a4:12:92:b5:ed:e1:a8:c6:7d:b6:6c:03:
29:68:02:b2:e7:56:40:6a:38:ce:d1:10:cc:e2:df:
22:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:16:D3:7F:9E:FC:E1:82:E8:15:FA:91:54:24:D0:02:D1:1F:1E:D8
X509v3 Authority Key Identifier:
keyid:96:11:26:4B:B9:E4:E6:FA:99:44:9E:E4:56:C5:D0:53:F3:AD:01:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:d4:96:33:bf:51:a7:28:a7:07:a4:d6:bd:a7:7b:e9:bc:9d:
4c:ce:1f:80:5b:b6:02:49:41:ce:f2:6a:a8:78:f5:a5:d7:d7:
9f:42:e2:68:27:bf:5c:a0:8a:84:41:80:9d:98:e6:37:84:e0:
32:e4:15:0b:12:d8:97:df:77:1a:2c:1b:02:32:7c:4e:bb:be:
6a:66:33:0b:cc:c9:40:8b:8c:30:46:e9:d3:37:6f:85:bf:01:
07:d0:88:b4:ed:20:11:0f:6b:b6:4a:7c:11:f4:29:f4:16:0a:
4a:f2:4b:8b:22:fe:f9:ff:b1:85:bb:4b:bd:a6:85:da:b9:e6:
24:89:ca:cd:aa:0e:84:0a:38:34:d7:66:b1:4b:65:9e:0a:0d:
97:d7:8c:93:64:70:0f:ac:09:87:dc:7b:18:4b:f7:bc:29:2b:
e2:26:83:01:0e:83:92:8a:14:1a:dc:56:16:54:9d:57:7d:f6:
31:0d:02:75:2a:33:ab:33:05:e5:a3:fb:95:1e:48:ee:f8:b5:
e2:29:3e:f8:63:02:c0:d9:44:1c:68:8c:80:cc:a5:86:db:be:
dd:7d:74:7a:61:05:9c:fe:d1:45:fa:2b:f3:cf:95:64:97:62:
dd:92:32:04:d1:7d:b9:f0:01:d1:5a:6b:b1:96:9a:b5:5c:ec:
e1:a1:51:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9NDzwJLTmde/abnLpJ7SjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2MTEyNjRiYjllNGU2ZmE5OTQ0OWVlNDU2YzVkMDUzZjNh
ZDAxYzUwHhcNMjUxMDE5MTYwMTIzWhcNMjUxMDIwMTYwMTIzWjAzMTEwLwYDVQQD
EygzYzE2ZDM3ZjllZmNlMTgyZTgxNWZhOTE1NDI0ZDAwMmQxMWYxZWQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygupG/bdBfrfi6tZWqi01eVm4Q8b
DpEofsq+aC/qVnzwpewqPCcKi3rooYHNoVL+eOTsESTNUZ/h7cxYX+OfZSITFgKj
RWmbR2pPeEirNRcrlxsoY6marmw7SY3932sSzMN2eJxCuP/H2lcDL+WwUDmXsT3v
VG/nRQicH4dmZAlWf9j8UqXHeqatqGV6RV694Jmrp5ajiFjq62BwP94GYDficRyg
BCuwUG1bPyEo7G826w5V4s/ultzO4CCx31X4UQhA3EEYVMCC1qfIiXnA9MyQIPd4
jCGf0JvOAFfpqSl0UbSkEpK17eGoxn22bAMpaAKy51ZAajjO0RDM4t8iUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDwW03+e/OGC6BX6kVQk0ALRHx7YMB8GA1UdIwQY
MBaAFJYRJku55Ob6mUSe5FbF0FPzrQHFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGhFbVM3bms1dnFaUko3a1ZzWFFVX090QWNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS82MGU5YTAtYzljMS00MWU5LTg5ZmMt
MjRiNjc2YjU2NzgzLzEvbGhFbVM3bms1dnFaUko3a1ZzWFFVX090QWNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS82MGU5YTAtYzljMS00MWU5LTg5ZmMtMjRiNjc2YjU2Nzgz
LzEvbGhFbVM3bms1dnFaUko3a1ZzWFFVX090QWNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMdSWM79R
pyinB6TWvad76bydTM4fgFu2AklBzvJqqHj1pdfXn0LiaCe/XKCKhEGAnZjmN4Tg
MuQVCxLYl993GiwbAjJ8Tru+amYzC8zJQIuMMEbp0zdvhb8BB9CItO0gEQ9rtkp8
EfQp9BYKSvJLiyL++f+xhbtLvaaF2rnmJInKzaoOhAo4NNdmsUtlngoNl9eMk2Rw
D6wJh9x7GEv3vCkr4iaDAQ6DkooUGtxWFlSdV332MQ0CdSozqzMF5aP7lR5I7vi1
4ik++GMCwNlEHGiMgMylhtu+3X10emEFnP7RRfor88+VZJdi3ZIyBNF9ufAB0Vpr
sZaatVzs4aFRSg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:11:36 2025 by rpki-client