Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.mft
File: lhEmS7nk5vqZRJ7kVsXQU_OtAcU.mft (raw, json)
Hash identifier: UwO9wVPMd24arA33dGQbxtSNfvGwLi5xQJov65UH3ok=
Subject key identifier: 93:10:0A:2B:7A:49:ED:CD:5F:F3:A9:AB:4B:D9:04:2E:73:D1:C9:7C
Authority key identifier: 96:11:26:4B:B9:E4:E6:FA:99:44:9E:E4:56:C5:D0:53:F3:AD:01:C5
Certificate issuer: /CN=9611264bb9e4e6fa99449ee456c5d053f3ad01c5
Certificate serial: 019A503DA9CEAD44915ABA8E14F3118FEC49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.mft
Manifest number: 169F
Signing time: Tue 04 Nov 2025 19:00:09 +0000
Manifest this update: Tue 04 Nov 2025 19:00:09 +0000
Manifest next update: Wed 05 Nov 2025 19:00:09 +0000
Files and hashes: 1: CgkoHi9RsjYjtbh7r--tHry08fQ.roa (hash: 9zVo3gN7fK+I6ZtoEWyk2DDHUy2shoezHq0ybpjSZPI=)
2: lhEmS7nk5vqZRJ7kVsXQU_OtAcU.crl (hash: DgsAljYvOLemmyDbpEgJD+UM9qGVBUERBxl6qiuYPTA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3d:a9:ce:ad:44:91:5a:ba:8e:14:f3:11:8f:ec:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9611264bb9e4e6fa99449ee456c5d053f3ad01c5
Validity
Not Before: Nov 4 19:00:09 2025 GMT
Not After : Nov 5 19:00:09 2025 GMT
Subject: CN=93100a2b7a49edcd5ff3a9ab4bd9042e73d1c97c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:36:46:38:00:87:84:a1:a2:5d:0d:8f:69:83:
a0:fd:44:66:a3:85:d3:16:69:61:12:ec:0b:04:a1:
71:ed:c8:10:08:a6:f5:8b:74:74:dc:cb:aa:64:9e:
3b:b1:95:7f:04:b2:b4:88:b3:19:5d:e0:ab:82:32:
76:29:2b:3c:52:f0:9f:c6:c1:5b:01:1f:1b:76:70:
f8:80:33:95:af:7a:7b:71:54:07:c3:a6:67:8c:b1:
dd:37:a6:fc:6b:ed:13:f9:be:73:f0:91:f9:27:45:
d4:64:ec:3f:fb:1f:77:72:b6:03:f3:d6:ec:c3:bd:
a9:82:99:75:c6:29:0d:3d:10:0f:ce:46:38:b0:60:
d5:c3:24:26:9d:5c:37:d7:39:e4:bc:d8:c8:e8:d4:
5b:48:1f:16:31:fd:5d:21:5d:87:ff:04:e5:ba:2e:
2a:51:7f:a8:92:d2:5a:9b:1c:60:7d:bf:b7:9a:a2:
08:d8:dd:cc:d6:63:b1:b5:27:85:be:0f:51:ba:2c:
4e:38:46:1f:77:9e:c5:7d:13:2f:80:c6:b3:9f:ea:
01:21:61:11:88:fe:d1:f3:59:c6:ec:ed:f6:50:d2:
97:a7:83:6a:7b:b7:5f:af:d2:e6:84:49:04:de:7e:
19:9e:f5:dd:cd:9a:45:a1:71:69:76:c8:ee:c6:5d:
30:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:10:0A:2B:7A:49:ED:CD:5F:F3:A9:AB:4B:D9:04:2E:73:D1:C9:7C
X509v3 Authority Key Identifier:
keyid:96:11:26:4B:B9:E4:E6:FA:99:44:9E:E4:56:C5:D0:53:F3:AD:01:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:62:f4:cd:67:d2:83:a8:0c:5a:02:c4:99:6e:79:79:31:69:
20:64:61:a1:cc:fa:15:9d:6f:8e:8b:0c:f4:4f:d1:ac:1c:99:
79:81:93:c2:74:76:40:18:e2:3d:91:8f:43:d1:70:7c:37:90:
c0:0f:d0:9f:1c:ad:c4:41:f0:ce:4f:29:22:4e:bf:12:7a:31:
cb:11:f2:3c:0a:83:11:bd:26:1c:25:b9:a3:74:d3:4f:06:99:
45:4d:bd:11:60:61:2b:dc:49:bb:c1:dc:39:a9:35:0e:c9:92:
b6:52:35:69:ff:2e:2a:1b:40:91:c2:71:02:45:a2:37:38:ae:
ab:c8:bc:d2:6e:2f:8a:02:5b:69:61:47:1b:90:97:cb:98:75:
be:4a:c7:39:1a:33:c4:b4:59:b2:ac:5c:90:a5:cf:a7:65:28:
2e:59:6d:0b:68:c9:40:a8:d4:e9:37:c2:68:90:c1:6e:7b:a7:
4e:4b:a0:0c:d4:bf:4f:5c:6c:39:8d:9c:c4:a0:84:e3:be:b0:
2a:73:79:c8:06:b1:af:9e:ba:42:11:20:34:b9:28:55:5b:b2:
e1:6e:e7:b7:79:29:55:1b:8b:d0:83:3e:8a:3c:87:63:db:e2:
78:0d:96:cf:0e:b5:b1:c8:de:73:b3:df:77:f7:bd:0e:0b:10:
ed:84:5f:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:30:17 2025 by rpki-client