Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft
File: LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft (raw, json)
Hash identifier: V+/bYLCYFhJGMebbV+7nDl/W7ovQP7ruRNPcyfarIWE=
Subject key identifier: 94:C1:E0:C3:B2:1B:52:64:FB:3A:8E:67:2F:9D:1C:F6:09:F7:D5:B5
Authority key identifier: 2C:75:4A:E4:73:D9:C1:54:B8:04:B7:0E:D3:18:81:E0:25:D9:26:AA
Certificate issuer: /CN=2c754ae473d9c154b804b70ed31881e025d926aa
Certificate serial: 0199FEEBFD76602A42F8F98BFB3A852324AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHVK5HPZwVS4BLcO0xiB4CXZJqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft
Manifest number: 0CBF
Signing time: Mon 20 Oct 2025 00:01:42 +0000
Manifest this update: Mon 20 Oct 2025 00:01:42 +0000
Manifest next update: Tue 21 Oct 2025 00:01:42 +0000
Files and hashes: 1: LHVK5HPZwVS4BLcO0xiB4CXZJqo.crl (hash: n4qDR5gej8o+YuQ52BdHPIoZVJcS0N26t9EXG43/47E=)
2: RIso09h5--_F82YqfcCEAd3EpSw.roa (hash: dWlymz3qci5T5aLh2Je4Ec71LNxokFg1VFDedEjsW+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/LHVK5HPZwVS4BLcO0xiB4CXZJqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:fd:76:60:2a:42:f8:f9:8b:fb:3a:85:23:24:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c754ae473d9c154b804b70ed31881e025d926aa
Validity
Not Before: Oct 20 00:01:42 2025 GMT
Not After : Oct 21 00:01:42 2025 GMT
Subject: CN=94c1e0c3b21b5264fb3a8e672f9d1cf609f7d5b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ec:db:e0:cf:d3:73:e8:e0:54:89:93:f7:c2:
fc:e4:a6:61:b9:63:16:55:2b:2f:4d:d6:2d:4f:e7:
48:f3:11:4d:04:4c:4d:8c:4d:51:d7:07:e0:74:ed:
50:a1:24:16:06:a9:48:77:12:f5:17:91:bc:7c:74:
7c:50:e3:ff:2a:c8:49:d2:47:16:38:35:97:f8:3f:
75:07:43:d9:aa:e1:ad:eb:e3:5e:51:f0:61:ba:55:
57:98:4d:ae:6e:4c:33:4c:61:61:77:40:7c:1d:51:
6e:b8:be:2a:fd:95:31:81:09:fb:dc:39:44:28:47:
71:73:14:9b:f9:ef:6f:9e:d5:e7:61:0e:6e:b5:69:
3d:dd:e3:a6:95:65:d1:85:84:85:ae:e4:29:c9:95:
02:35:bb:2e:7a:9b:be:b3:bc:2f:25:89:cb:0d:88:
93:ec:ff:a3:e7:7a:cc:6c:05:ef:21:2d:87:35:15:
00:cd:11:ce:6f:74:a5:af:d0:5f:8a:64:27:ef:a8:
8f:5f:d5:6c:78:e8:f5:2b:fa:d5:85:1c:87:5f:97:
63:4f:f8:d5:41:3b:00:07:1d:9f:e4:11:a9:b2:35:
09:c5:b0:2e:05:a2:80:17:34:53:f2:a0:d2:09:cc:
24:de:26:54:cd:70:42:9a:3b:29:b4:bc:74:dd:d7:
59:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:C1:E0:C3:B2:1B:52:64:FB:3A:8E:67:2F:9D:1C:F6:09:F7:D5:B5
X509v3 Authority Key Identifier:
keyid:2C:75:4A:E4:73:D9:C1:54:B8:04:B7:0E:D3:18:81:E0:25:D9:26:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHVK5HPZwVS4BLcO0xiB4CXZJqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:77:e6:e7:66:73:d7:ee:7d:70:4c:b5:e2:72:10:17:12:e5:
2f:1e:74:be:6f:b1:7e:40:39:ae:2b:2b:cf:17:0c:8e:1f:45:
e1:3e:ff:b4:f7:f5:6a:e9:e7:2d:26:f3:01:83:e9:70:0d:8d:
98:c3:c2:90:88:4e:6f:57:0b:f1:0e:f9:b1:fd:cf:4b:98:d1:
73:44:c2:78:db:76:5f:ca:fe:d2:b3:45:b2:62:f7:24:96:1e:
5f:07:22:ed:d7:dd:58:d1:ac:c6:62:39:33:db:f1:1a:0b:a6:
7b:ce:ba:cb:d7:e6:9c:c1:b1:91:6c:ca:11:8e:1c:69:3c:65:
c6:c7:c8:1b:e4:9d:07:11:1e:69:a6:bf:9d:5d:55:35:37:09:
e0:13:f3:7f:18:c6:92:ac:59:67:53:fc:3d:ec:4e:7b:e2:d8:
9d:56:8a:13:a1:e0:6a:55:1d:25:d7:19:05:2c:ed:ab:53:73:
13:ce:94:c6:cf:df:da:2a:af:d5:9e:18:e4:e6:54:c0:df:0b:
33:d3:21:ba:80:3c:77:06:d0:54:46:12:44:ef:c5:e8:57:dd:
db:0a:e1:f7:18:2f:19:99:75:b6:41:da:99:57:e4:76:d6:d1:
14:1f:71:65:d3:95:b5:79:1b:83:b0:99:64:ac:58:72:6b:c5:
07:7f:b5:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:57:08 2025 by rpki-client