Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft
File: LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft (raw, json)
Hash identifier: v5khi1TJCcAwL4Wy1e+gIwqVFFyFV5CP+s0iRrdkqP4=
Subject key identifier: 2F:3D:0F:F0:B9:DF:40:26:28:D1:2C:DA:E0:08:F5:41:21:46:1D:AC
Authority key identifier: 2E:16:20:89:0F:70:0F:01:2B:0B:A6:01:72:31:4E:3C:85:91:95:13
Certificate issuer: /CN=2e1620890f700f012b0ba60172314e3c85919513
Certificate serial: 019A4E188DE3A8BF84A3370C52920952C2B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhYgiQ9wDwErC6YBcjFOPIWRlRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 09:00:23 +0000
Manifest this update: Tue 04 Nov 2025 09:00:23 +0000
Manifest next update: Wed 05 Nov 2025 09:00:23 +0000
Files and hashes: 1: LhYgiQ9wDwErC6YBcjFOPIWRlRM.crl (hash: zAsPIIphnqVf0OfqqvsdxFqLSfELxoQ6ZJj3rY9G1vs=)
2: UEzUyopP5UVcAuE2wQnf6zxgiYA.roa (hash: WO7cSkDAVVG4RqEt/anGaCZXbbFB9XEJIQ0eE+HtSwo=)
3: g1Qj1KnuMxZpXuMaGLTMbgWLRyE.roa (hash: f3NI3BOfnPP1R6nzFdJwSdGpqAlLYVxZtd9uD+YokWY=)
4: x9mgn-wCUD8rT1tTi9C7mbyMAtI.roa (hash: sgZbLcOXGM2ArVU0X49/Qh6v7QEpIvbA1cc08MVfbkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/LhYgiQ9wDwErC6YBcjFOPIWRlRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:8d:e3:a8:bf:84:a3:37:0c:52:92:09:52:c2:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e1620890f700f012b0ba60172314e3c85919513
Validity
Not Before: Nov 4 09:00:23 2025 GMT
Not After : Nov 5 09:00:23 2025 GMT
Subject: CN=2f3d0ff0b9df402628d12cdae008f54121461dac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:05:4a:58:f4:41:17:5b:98:aa:a6:57:9e:ca:
1d:cd:63:94:82:7f:e3:3d:4e:ff:52:e6:c8:b0:36:
7d:bd:ae:62:d5:18:9e:5d:b6:d9:aa:d5:10:ee:09:
2c:6b:ab:b9:57:48:75:76:ed:7c:81:5a:2d:46:4d:
74:6c:8b:ca:24:c9:3f:2b:91:7a:aa:96:42:c2:5e:
b5:ed:8b:e7:50:02:43:d1:67:31:87:1d:92:df:a5:
15:37:c1:7f:eb:6f:4c:11:9b:5e:dc:51:1e:57:7f:
dc:a9:d0:7b:5e:6a:b2:ed:b0:9a:b3:c2:3d:f3:49:
e0:cd:0b:c8:1a:67:2a:37:4a:15:7b:bf:a7:e8:21:
c1:69:32:34:37:ca:82:fd:0b:10:cb:65:71:ee:f5:
8f:dd:df:93:fc:29:51:6a:62:83:5d:b1:9d:c2:05:
13:46:85:02:b7:76:0d:32:bf:51:44:30:5b:01:3b:
a1:f4:9c:ee:5e:66:70:9d:42:7f:05:b5:9f:0e:8c:
c2:b8:ba:c6:48:16:64:ab:95:5a:d7:51:7a:a4:b5:
d9:79:bc:0c:d7:11:e4:aa:5b:cb:98:ef:c0:82:74:
e9:33:36:43:1b:5d:96:d5:63:ae:47:57:c6:31:d5:
b5:46:54:2c:b2:91:78:bb:94:fa:f0:cc:c3:3a:28:
96:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:3D:0F:F0:B9:DF:40:26:28:D1:2C:DA:E0:08:F5:41:21:46:1D:AC
X509v3 Authority Key Identifier:
keyid:2E:16:20:89:0F:70:0F:01:2B:0B:A6:01:72:31:4E:3C:85:91:95:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhYgiQ9wDwErC6YBcjFOPIWRlRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:dc:2b:67:69:bb:e2:9d:c1:5f:02:be:2b:aa:2b:e4:c0:2d:
ab:ec:fc:12:ce:57:b7:ab:35:1e:92:ef:0b:c8:44:7c:08:f1:
57:64:43:c9:06:7d:23:f8:74:1a:87:97:6a:03:a1:a4:02:a5:
c1:0f:25:42:83:b2:02:3f:b4:4c:e3:81:55:ff:e8:2c:07:85:
e3:cd:f8:d2:cb:f3:8b:cd:8f:c6:fc:4f:bd:5a:53:03:85:78:
bf:64:f2:50:53:c7:c9:52:d1:7d:4f:a5:8c:ab:df:d0:72:fe:
19:b6:04:65:98:f9:4f:89:16:5e:f6:a9:e4:b2:a5:27:71:92:
38:47:a1:f3:fc:88:2f:f0:f0:ca:02:ae:8e:05:dc:e9:95:7c:
25:81:c1:31:f8:78:a1:0a:00:52:eb:d4:ea:97:d9:35:0f:ba:
4a:af:ca:a1:a9:c6:1f:e5:21:d6:50:38:f0:91:80:ed:6b:4f:
a8:ef:3d:a8:08:ee:8a:28:ed:c9:8d:25:31:50:23:2b:88:90:
7a:4e:04:78:28:57:48:6b:15:34:76:cb:31:2f:94:78:c6:33:
3c:ee:c9:ce:eb:d3:cb:f6:82:4d:cd:da:1a:f6:11:f7:7b:d5:
26:84:6e:c2:ca:fb:42:8a:09:2d:53:1e:98:c2:d0:d0:0e:a8:
ef:66:48:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:49:47 2025 by rpki-client