Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.mft
File: lHS1JBtjw6-9s0LMR2NMVasv-EY.mft (raw, json)
Hash identifier: OwKd2LaVitABFKT8R790ne5cTVDmwJWDr3kYEFXFSO0=
Subject key identifier: 90:8A:BA:8B:EA:BD:A9:59:37:70:AB:05:60:C2:1C:1B:68:EE:F5:53
Authority key identifier: 94:74:B5:24:1B:63:C3:AF:BD:B3:42:CC:47:63:4C:55:AB:2F:F8:46
Certificate issuer: /CN=9474b5241b63c3afbdb342cc47634c55ab2ff846
Certificate serial: 019A5789BF8BD9F6E524D89CFA3DCFE3F2FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lHS1JBtjw6-9s0LMR2NMVasv-EY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.mft
Manifest number: 0221
Signing time: Thu 06 Nov 2025 05:00:36 +0000
Manifest this update: Thu 06 Nov 2025 05:00:36 +0000
Manifest next update: Fri 07 Nov 2025 05:00:36 +0000
Files and hashes: 1: _esauh0bwxU4lPvXm-nLiVYT1MY.roa (hash: dg/Xh0ZCbSrkvMtC9w3xbJVNO3y7y3uRRsJgcH21rXg=)
2: lHS1JBtjw6-9s0LMR2NMVasv-EY.crl (hash: h6fF78d9PcTg5z4H6o3/mcq3Ix0nzAaiI/pRdnAijhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lHS1JBtjw6-9s0LMR2NMVasv-EY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 07 Nov 2025 03:53:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:57:89:bf:8b:d9:f6:e5:24:d8:9c:fa:3d:cf:e3:f2:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9474b5241b63c3afbdb342cc47634c55ab2ff846
Validity
Not Before: Nov 6 05:00:36 2025 GMT
Not After : Nov 7 05:00:36 2025 GMT
Subject: CN=908aba8beabda9593770ab0560c21c1b68eef553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:5a:8b:c8:b8:df:b7:1e:ac:6f:c2:df:0b:c5:
5a:1a:e9:c7:6c:98:9d:04:07:7b:36:8d:00:5d:45:
4c:2c:74:98:cf:cc:54:ba:db:37:e7:ac:d4:c2:77:
68:58:71:fb:de:c3:0b:f2:da:d6:56:63:36:4b:90:
18:ad:cd:a4:51:8e:e4:aa:99:8c:b3:52:3b:89:15:
39:e9:fe:35:f4:b0:69:45:4f:d3:51:11:b7:26:e7:
00:9d:17:b7:28:d1:4a:3e:a7:58:8e:bb:86:30:37:
1f:7d:87:11:bd:fc:9c:e5:70:cb:64:cf:97:5b:5d:
21:45:83:3e:a1:32:3f:0a:6b:4c:96:a4:77:fd:9c:
66:c5:e1:a7:95:fe:cb:d3:4d:65:07:a0:cf:dd:7d:
cc:2c:d9:d7:a3:5a:2d:4a:3c:9c:27:94:98:1c:8e:
ef:ae:11:f2:28:11:86:06:20:5f:3f:9a:93:5c:16:
d3:46:7a:e5:c4:0f:02:94:5b:e3:f3:3e:be:25:0a:
2e:40:67:8f:c2:d5:ac:32:d8:89:3e:60:32:0f:a3:
46:b7:a5:35:31:fd:9a:73:a8:bf:04:cd:0d:f8:40:
7a:41:37:cc:d4:ec:fa:07:df:01:23:89:00:27:10:
e0:3b:e7:f5:e9:f8:72:ee:c2:28:8b:fb:47:2a:b2:
bd:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:8A:BA:8B:EA:BD:A9:59:37:70:AB:05:60:C2:1C:1B:68:EE:F5:53
X509v3 Authority Key Identifier:
keyid:94:74:B5:24:1B:63:C3:AF:BD:B3:42:CC:47:63:4C:55:AB:2F:F8:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lHS1JBtjw6-9s0LMR2NMVasv-EY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:65:a5:61:c6:76:04:9d:6a:61:5d:c2:a2:4a:14:b4:6a:73:
7d:26:c5:30:27:2c:36:e7:58:84:30:2f:16:fb:e9:74:81:80:
ad:99:e0:55:a9:1e:e4:04:88:19:2d:82:65:d5:e2:00:03:72:
2f:ad:42:20:2a:e4:d9:7f:92:fa:ba:cb:a8:91:68:66:98:c8:
ce:95:94:96:af:2e:eb:a7:87:9a:52:bf:8b:be:ce:1e:8e:33:
cf:bd:58:5e:d6:5d:76:cb:89:3e:9e:56:e7:e2:56:75:d3:bb:
59:34:c7:bc:76:f8:e7:59:1f:ba:5e:8e:a5:27:0d:49:1f:a5:
98:c7:30:4e:4a:94:fd:5b:13:a0:6d:8f:dc:21:9a:86:50:dc:
19:cd:d4:f6:73:b0:a8:46:a8:89:33:7b:47:32:b8:a9:03:47:
2b:ae:7e:c7:76:d2:3b:12:7e:11:6d:b3:b7:ba:7f:d6:bc:4f:
e1:80:3e:53:ce:22:0e:76:ee:6f:52:70:bd:3a:97:95:54:65:
ef:f7:a8:c3:a6:28:16:03:bc:16:b1:88:eb:23:aa:37:15:73:
bc:7d:a0:dd:fa:d0:7b:b7:25:c3:63:58:e6:93:87:f6:95:79:
ef:59:c0:22:84:75:a0:c6:91:3b:91:c7:cf:1e:11:7c:cc:6c:
39:54:d9:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 07:48:20 2025 by rpki-client