Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/063658-8262-4965-9661-0542427b02b9/1/lLHL_0vZcPon_e_Uv2iwLWjSud0.mft
File: lLHL_0vZcPon_e_Uv2iwLWjSud0.mft (raw, json)
Hash identifier: 2HO9Qu0stMPtiFWZb6M1bYvlZ4o173mlX1DaBS+bcJo=
Subject key identifier: 24:56:7F:75:31:F6:FB:C3:D1:4E:C5:70:E0:C5:8D:12:97:25:51:85
Authority key identifier: 94:B1:CB:FF:4B:D9:70:FA:27:FD:EF:D4:BF:68:B0:2D:68:D2:B9:DD
Certificate issuer: /CN=94b1cbff4bd970fa27fdefd4bf68b02d68d2b9dd
Certificate serial: 019A4DE1A59331E8330AA96E845220A9DFF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lLHL_0vZcPon_e_Uv2iwLWjSud0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/063658-8262-4965-9661-0542427b02b9/1/lLHL_0vZcPon_e_Uv2iwLWjSud0.mft
Manifest number: 16C8
Signing time: Tue 04 Nov 2025 08:00:24 +0000
Manifest this update: Tue 04 Nov 2025 08:00:24 +0000
Manifest next update: Wed 05 Nov 2025 08:00:24 +0000
Files and hashes: 1: 1-tC0rjZV1jihIqCSqr691PhK46c.roa (hash: OZRRaNXEuVkMUwrYkvaXW28rMwl6+wF4euV4WCbSFTw=)
2: lLHL_0vZcPon_e_Uv2iwLWjSud0.crl (hash: kGLPIqBndU4WCBGTSnEKn82qdzjBg9UYmW9kVCceYUM=)
3: wXXOQ9H2b6IyrY2B0lg-XuD_B8I.roa (hash: cgMdX3AAi5D4nzcU3HSWbT0lY1xCqmK5843fX99UXkY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/063658-8262-4965-9661-0542427b02b9/1/lLHL_0vZcPon_e_Uv2iwLWjSud0.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/063658-8262-4965-9661-0542427b02b9/1/lLHL_0vZcPon_e_Uv2iwLWjSud0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lLHL_0vZcPon_e_Uv2iwLWjSud0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:a5:93:31:e8:33:0a:a9:6e:84:52:20:a9:df:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94b1cbff4bd970fa27fdefd4bf68b02d68d2b9dd
Validity
Not Before: Nov 4 08:00:24 2025 GMT
Not After : Nov 5 08:00:24 2025 GMT
Subject: CN=24567f7531f6fbc3d14ec570e0c58d1297255185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:9a:06:2b:a1:0b:6d:df:a9:af:e2:7c:4d:df:
d8:5b:f9:e9:04:40:63:60:5c:5d:dd:e6:be:09:2d:
b3:fd:b5:f2:ad:bb:2e:5a:c7:2c:39:dd:56:30:6f:
72:c8:bc:e1:51:89:df:e7:1b:ff:cd:fe:de:a9:a7:
82:9a:16:cb:ac:3d:82:64:a2:af:00:bf:d2:63:86:
35:bf:b8:04:fd:b0:ed:22:ce:1c:a5:39:58:5a:6d:
c6:b8:e4:3f:d0:44:6e:73:1f:84:fb:44:ae:a8:9c:
3a:86:28:8b:cd:32:72:31:40:62:6a:94:73:1a:19:
39:c3:54:32:3e:97:c0:d6:95:aa:45:ff:3f:bc:0a:
eb:94:74:3d:ac:8c:9e:12:70:d6:4f:d4:c6:39:5f:
83:08:92:e8:2c:14:c5:83:a5:89:3a:f6:26:d3:22:
3a:bd:e5:ab:cd:53:73:84:5d:d7:52:91:1b:bb:c1:
34:76:01:ac:8e:82:49:c5:78:2b:a7:ed:90:6b:4f:
72:d6:e8:bc:34:3d:a0:5d:b4:93:6b:12:07:b9:ec:
14:f2:d4:f9:48:71:42:04:c3:91:e7:01:fa:a3:f7:
0f:42:86:33:64:31:a7:a8:b7:98:da:c6:e9:2e:b5:
f3:2a:27:33:1b:8d:0d:31:3f:a4:cd:05:77:f2:6f:
b8:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:56:7F:75:31:F6:FB:C3:D1:4E:C5:70:E0:C5:8D:12:97:25:51:85
X509v3 Authority Key Identifier:
keyid:94:B1:CB:FF:4B:D9:70:FA:27:FD:EF:D4:BF:68:B0:2D:68:D2:B9:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lLHL_0vZcPon_e_Uv2iwLWjSud0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/063658-8262-4965-9661-0542427b02b9/1/lLHL_0vZcPon_e_Uv2iwLWjSud0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/063658-8262-4965-9661-0542427b02b9/1/lLHL_0vZcPon_e_Uv2iwLWjSud0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:aa:16:1f:c1:ac:80:53:5b:72:21:6c:ac:37:bb:4b:d7:64:
42:52:f0:48:e8:52:5c:d1:58:12:15:a1:0e:bb:45:30:ed:63:
f3:89:69:59:e3:72:27:59:50:2d:cf:2a:21:39:d6:b8:6e:c4:
fa:1f:e4:fd:0f:fc:5b:58:5d:66:82:dc:b2:05:aa:6e:69:b3:
eb:f0:de:06:78:5c:0c:e6:2d:d6:2c:f9:e6:b8:bb:fd:9e:d9:
5f:a1:31:09:80:15:9a:6b:0c:6b:96:15:af:5e:77:53:76:d3:
bb:28:95:2e:ba:19:97:08:63:11:ef:12:8d:74:2b:f7:cb:93:
3d:68:50:32:98:1b:36:ab:20:20:cd:51:84:8b:cd:15:45:96:
06:dc:bf:d1:b4:3c:18:d5:8f:8e:21:29:03:48:75:a6:a1:ce:
2d:cc:94:8a:51:40:24:8c:c9:00:d6:67:cc:f1:07:ef:e1:b5:
bc:18:e1:36:4c:13:35:a7:dd:4a:88:a5:6f:82:fa:a1:9d:3e:
af:d6:b3:43:3c:0d:9b:a4:05:b3:bb:6a:24:3c:a0:d6:fc:0a:
f1:d7:bd:2b:81:77:3f:cf:b8:6f:f6:b8:03:8f:a6:ba:52:3b:
b2:48:cb:0c:85:95:db:c4:3e:41:54:70:55:a1:6a:e7:7c:18:
8b:43:61:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpN4aWTMegzCqluhFIgqd/yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0YjFjYmZmNGJkOTcwZmEyN2ZkZWZkNGJmNjhiMDJkNjhk
MmI5ZGQwHhcNMjUxMTA0MDgwMDI0WhcNMjUxMTA1MDgwMDI0WjAzMTEwLwYDVQQD
EygyNDU2N2Y3NTMxZjZmYmMzZDE0ZWM1NzBlMGM1OGQxMjk3MjU1MTg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA15oGK6ELbd+pr+J8Td/YW/npBEBj
YFxd3ea+CS2z/bXyrbsuWscsOd1WMG9yyLzhUYnf5xv/zf7eqaeCmhbLrD2CZKKv
AL/SY4Y1v7gE/bDtIs4cpTlYWm3GuOQ/0ERucx+E+0SuqJw6hiiLzTJyMUBiapRz
Ghk5w1QyPpfA1pWqRf8/vArrlHQ9rIyeEnDWT9TGOV+DCJLoLBTFg6WJOvYm0yI6
veWrzVNzhF3XUpEbu8E0dgGsjoJJxXgrp+2Qa09y1ui8ND2gXbSTaxIHuewU8tT5
SHFCBMOR5wH6o/cPQoYzZDGnqLeY2sbpLrXzKiczG40NMT+kzQV38m+4aQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCRWf3Ux9vvD0U7FcODFjRKXJVGFMB8GA1UdIwQY
MBaAFJSxy/9L2XD6J/3v1L9osC1o0rndMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbExITF8wdlpjUG9uX2VfVXYyaXdMV2pTdWQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny8wNjM2NTgtODI2Mi00OTY1LTk2NjEt
MDU0MjQyN2IwMmI5LzEvbExITF8wdlpjUG9uX2VfVXYyaXdMV2pTdWQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny8wNjM2NTgtODI2Mi00OTY1LTk2NjEtMDU0MjQyN2IwMmI5
LzEvbExITF8wdlpjUG9uX2VfVXYyaXdMV2pTdWQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIKoWH8Gs
gFNbciFsrDe7S9dkQlLwSOhSXNFYEhWhDrtFMO1j84lpWeNyJ1lQLc8qITnWuG7E
+h/k/Q/8W1hdZoLcsgWqbmmz6/DeBnhcDOYt1iz55ri7/Z7ZX6ExCYAVmmsMa5YV
r153U3bTuyiVLroZlwhjEe8SjXQr98uTPWhQMpgbNqsgIM1RhIvNFUWWBty/0bQ8
GNWPjiEpA0h1pqHOLcyUilFAJIzJANZnzPEH7+G1vBjhNkwTNafdSoilb4L6oZ0+
r9azQzwNm6QFs7tqJDyg1vwK8de9K4F3P8+4b/a4A4+mulI7skjLDIWV28Q+QVRw
VaFq53wYi0Nh5Q==
-----END CERTIFICATE-----
Generated at Tue Nov 4 10:46:53 2025 by rpki-client