Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/40a1e5-7d2a-48d6-a50e-f96fb4ea7e70/1/LHXzXSVsxKW4gxm7fku7oynkk0E.mft
File: LHXzXSVsxKW4gxm7fku7oynkk0E.mft (raw, json)
Hash identifier: tQkJu292f5Z9YaLrZGHG3TE7Jtp3tcrnBXG/0M5rgf8=
Subject key identifier: 07:CD:CE:AB:B4:E3:B5:A3:E2:F8:F8:30:4E:CF:7B:3D:62:C7:AD:31
Authority key identifier: 2C:75:F3:5D:25:6C:C4:A5:B8:83:19:BB:7E:4B:BB:A3:29:E4:93:41
Certificate issuer: /CN=2c75f35d256cc4a5b88319bb7e4bbba329e49341
Certificate serial: 019A5375FC607F8A45E667BEFC20B3B46AE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHXzXSVsxKW4gxm7fku7oynkk0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/40a1e5-7d2a-48d6-a50e-f96fb4ea7e70/1/LHXzXSVsxKW4gxm7fku7oynkk0E.mft
Manifest number: 0F26
Signing time: Wed 05 Nov 2025 10:00:32 +0000
Manifest this update: Wed 05 Nov 2025 10:00:32 +0000
Manifest next update: Thu 06 Nov 2025 10:00:32 +0000
Files and hashes: 1: LHXzXSVsxKW4gxm7fku7oynkk0E.crl (hash: l1oPvmqipOEbUo5gHeBRyQlQqi3+93TRImOj6hkoJng=)
2: YkA8Ssik5dMp6e7KGDWmp6DJ7AM.roa (hash: kaPK3T3qFTRqHUlFynSutBS2oYj5+768wNKSaLHwTTo=)
3: l2XBgGbcIMQ-iwqh11S1_yjLWig.roa (hash: nZxnXhBR3pemT3iBrE0kPVvVmqlAyhaBxoPDBmxVBEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/40a1e5-7d2a-48d6-a50e-f96fb4ea7e70/1/LHXzXSVsxKW4gxm7fku7oynkk0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/40a1e5-7d2a-48d6-a50e-f96fb4ea7e70/1/LHXzXSVsxKW4gxm7fku7oynkk0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/LHXzXSVsxKW4gxm7fku7oynkk0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:75:fc:60:7f:8a:45:e6:67:be:fc:20:b3:b4:6a:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c75f35d256cc4a5b88319bb7e4bbba329e49341
Validity
Not Before: Nov 5 10:00:32 2025 GMT
Not After : Nov 6 10:00:32 2025 GMT
Subject: CN=07cdceabb4e3b5a3e2f8f8304ecf7b3d62c7ad31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1f:4f:22:f1:4b:93:61:5b:da:86:34:c8:b2:
f0:89:d3:38:c2:35:ae:99:52:ce:dc:22:3b:51:74:
e9:45:ee:39:22:e6:c9:3a:77:4b:4a:9c:c9:d4:c0:
8e:a3:f0:16:fb:c4:c8:6f:d6:39:4b:36:85:97:03:
ea:16:af:ef:7c:66:38:46:2a:f1:6d:28:8f:66:af:
a8:59:ed:ba:02:d7:b0:57:5e:ec:91:d3:33:2e:42:
a4:c1:86:a3:72:5c:06:c1:f8:d2:e0:0a:ff:ce:28:
ba:43:65:c9:c4:98:05:f1:7a:a9:8f:bf:1e:fb:59:
1a:3e:3e:39:87:29:5b:d4:10:e3:f9:e7:3d:85:cf:
0e:ca:fb:bf:9b:26:4e:7f:60:9b:d7:66:16:35:17:
83:b5:fb:7f:07:58:57:59:1a:53:59:3f:75:e3:97:
e0:b6:09:6f:c0:a6:7d:bc:c9:a2:29:66:c6:fc:b8:
a4:a9:6f:42:d5:27:af:02:e5:a6:22:52:fe:0c:a6:
1b:8b:fd:36:1e:a4:34:a3:43:40:4c:dc:5d:7c:bb:
9a:3d:9d:2d:a2:6e:32:9c:28:7a:12:81:87:b1:35:
07:17:9b:c2:66:24:94:04:e3:1c:56:52:8f:47:05:
57:03:7d:07:ef:6e:e6:73:ba:21:fb:83:5a:34:80:
70:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:CD:CE:AB:B4:E3:B5:A3:E2:F8:F8:30:4E:CF:7B:3D:62:C7:AD:31
X509v3 Authority Key Identifier:
keyid:2C:75:F3:5D:25:6C:C4:A5:B8:83:19:BB:7E:4B:BB:A3:29:E4:93:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHXzXSVsxKW4gxm7fku7oynkk0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/40a1e5-7d2a-48d6-a50e-f96fb4ea7e70/1/LHXzXSVsxKW4gxm7fku7oynkk0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/40a1e5-7d2a-48d6-a50e-f96fb4ea7e70/1/LHXzXSVsxKW4gxm7fku7oynkk0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:5a:06:98:7b:cf:bb:fc:d9:d1:52:06:bb:2d:e4:3a:8a:24:
df:22:13:5c:29:40:cd:bd:a5:6c:77:0c:cd:f6:6c:da:30:84:
f8:55:84:38:4c:29:8b:6f:78:a4:22:0c:be:dc:db:ac:fc:44:
b4:86:31:9f:68:1a:c5:73:8b:1a:41:1c:52:33:39:1d:ad:44:
55:a3:56:6a:53:4b:90:cb:1e:56:5c:fb:1f:7a:42:05:ac:0a:
c9:53:67:a3:1b:a0:72:9c:7e:44:44:aa:b3:2d:47:6c:9b:4e:
43:17:cb:ae:0d:86:4e:59:06:dc:e5:21:df:9a:30:d9:fa:cc:
7a:b3:9d:2a:dd:9a:a8:e6:04:49:60:54:43:a3:72:ac:d3:b1:
d2:20:6b:e4:18:f6:b8:91:fe:d5:74:cb:70:e9:6d:ff:e8:bb:
21:95:76:7d:a5:69:b6:7d:e5:03:30:d1:30:f4:9a:6c:25:a3:
e6:1a:33:43:ee:d4:d7:43:d1:b5:27:1e:0a:0f:30:6b:47:10:
93:32:0c:15:2c:70:7f:16:fe:69:a6:df:42:78:b1:25:79:38:
a6:d3:a1:fa:83:b5:b0:84:45:e7:30:bc:24:a9:bc:77:10:cc:
32:39:91:05:e2:0a:79:30:f9:28:6e:1b:88:31:b5:1d:72:50:
36:7e:23:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:46:50 2025 by rpki-client