Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.mft
File: lhJPJSRqVAn77hG1Ny3YviTG6es.mft (raw, json)
Hash identifier: 6G0W6l1DQTWu5OLc39OUy3oEnr0tDS01Ps39bFFxeRs=
Subject key identifier: 47:AE:D2:88:32:A3:C5:7A:07:CF:0F:2A:4E:47:D0:E7:13:B6:B3:C8
Authority key identifier: 96:12:4F:25:24:6A:54:09:FB:EE:11:B5:37:2D:D8:BE:24:C6:E9:EB
Certificate issuer: /CN=96124f25246a5409fbee11b5372dd8be24c6e9eb
Certificate serial: 019A53080C654C0C878CFC7BB602627C9083
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lhJPJSRqVAn77hG1Ny3YviTG6es.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.mft
Manifest number: 0A2E
Signing time: Wed 05 Nov 2025 08:00:27 +0000
Manifest this update: Wed 05 Nov 2025 08:00:27 +0000
Manifest next update: Thu 06 Nov 2025 08:00:27 +0000
Files and hashes: 1: c3njCbUkCCL3mnp4u_KCanHzP7M.roa (hash: vVs8Ror537sKvCZah39iYsDHQqQgVb1rydMRu4BJ5YQ=)
2: lhJPJSRqVAn77hG1Ny3YviTG6es.crl (hash: P2H3NA9b+m5xUYmtrwektDk/albgYxUW/WpeSsnEV0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.mft
rsync://rpki.ripe.net/repository/DEFAULT/lhJPJSRqVAn77hG1Ny3YviTG6es.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:08:0c:65:4c:0c:87:8c:fc:7b:b6:02:62:7c:90:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96124f25246a5409fbee11b5372dd8be24c6e9eb
Validity
Not Before: Nov 5 08:00:27 2025 GMT
Not After : Nov 6 08:00:27 2025 GMT
Subject: CN=47aed28832a3c57a07cf0f2a4e47d0e713b6b3c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:18:17:bc:ef:93:ad:ea:b1:cb:8d:08:94:4c:
40:8b:6e:67:18:bb:b8:e2:d8:68:82:03:1d:fb:d3:
93:44:0b:e4:d7:71:ba:80:d8:10:8f:77:39:af:0e:
de:d7:32:56:f2:59:01:e7:ab:25:b7:bb:25:dc:8a:
25:04:18:eb:38:5e:ad:96:86:d7:32:d2:24:2a:3c:
59:c6:46:7a:d0:3d:11:dc:5d:2d:9e:a6:ca:8a:fe:
b6:b2:74:ab:69:9e:4f:4a:aa:46:3b:80:c0:8c:24:
85:1d:91:4c:f1:9c:5e:8c:ba:34:8b:02:52:29:cf:
ad:bd:7a:ed:8f:96:68:4e:91:77:95:42:22:98:94:
1d:93:c7:f7:4e:38:1c:2d:84:37:6f:82:50:a2:66:
45:e5:9e:19:04:45:61:e9:7e:67:85:67:2c:d2:56:
3d:97:06:98:3c:e8:b7:1b:17:27:ea:c4:45:4c:3a:
1a:69:ce:16:2e:e7:56:a3:37:7e:43:b1:89:b9:06:
19:1e:7f:94:43:9a:ae:29:dd:f9:88:4d:43:28:37:
03:bc:fd:2e:15:af:aa:f5:ff:2e:e3:2c:25:bb:5e:
69:d9:7e:e2:cb:12:77:ed:29:bf:19:28:dc:42:60:
90:27:bb:e2:c9:b9:7c:94:c7:88:99:18:ba:2f:c5:
e6:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:AE:D2:88:32:A3:C5:7A:07:CF:0F:2A:4E:47:D0:E7:13:B6:B3:C8
X509v3 Authority Key Identifier:
keyid:96:12:4F:25:24:6A:54:09:FB:EE:11:B5:37:2D:D8:BE:24:C6:E9:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhJPJSRqVAn77hG1Ny3YviTG6es.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:21:44:a4:eb:81:c8:25:23:85:d1:a0:a9:85:36:9c:86:7b:
f8:65:dd:89:26:41:c9:b2:a5:ab:7c:48:88:15:92:01:bf:cc:
e2:89:65:20:80:97:12:22:82:6b:a1:81:17:68:1a:d1:d7:31:
64:15:af:dd:38:36:7c:c3:f4:15:d1:89:3d:53:4e:81:33:fa:
6d:d9:83:e0:f1:6d:88:8d:b2:cc:be:5e:25:a8:12:1d:6e:f7:
b7:bb:35:bc:88:e5:8c:9f:0b:61:2c:68:9e:6e:f9:b5:a4:ce:
ea:05:70:89:fa:82:dc:16:ad:d0:c4:b4:e4:74:25:fc:51:81:
4f:1e:b5:1a:e7:f5:a3:c3:c0:04:c0:38:f6:02:7a:33:9c:fb:
17:ba:b7:81:e5:38:c2:01:38:92:77:a8:44:6d:5f:df:92:7e:
34:2a:72:91:83:25:a1:45:1d:6a:d9:06:c4:ee:62:31:b6:95:
7d:6f:05:04:58:09:df:5b:27:d5:84:b5:25:b8:1a:2e:a4:08:
01:1a:0b:a8:d1:85:01:28:7d:6f:a6:f4:aa:ab:1f:79:d5:f9:
c3:31:1c:4e:58:c6:d6:c7:5d:4b:9a:ad:be:52:d1:ae:91:50:
a7:3a:05:ab:d7:f4:d3:96:22:78:a2:1a:1f:0e:3b:2e:fc:60:
2b:21:3c:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:45:48 2025 by rpki-client