Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/f78d7d-44f8-4099-9a12-6db826b87994/1/LHPvCB4tVzHERXQ5c6lqv96xQss.mft
File: LHPvCB4tVzHERXQ5c6lqv96xQss.mft (raw, json)
Hash identifier: 1vGYyB0tD6b4fCepjwLMguU12ZyfRbHC8aLwoyCoDsY=
Subject key identifier: 6E:75:9B:C9:F2:5E:9A:B3:F6:B5:1A:F3:75:16:42:B7:91:54:24:60
Authority key identifier: 2C:73:EF:08:1E:2D:57:31:C4:45:74:39:73:A9:6A:BF:DE:B1:42:CB
Certificate issuer: /CN=2c73ef081e2d5731c445743973a96abfdeb142cb
Certificate serial: 019A4EF5EC0759C410A39AFA55FDF615248F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHPvCB4tVzHERXQ5c6lqv96xQss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/f78d7d-44f8-4099-9a12-6db826b87994/1/LHPvCB4tVzHERXQ5c6lqv96xQss.mft
Manifest number: 0807
Signing time: Tue 04 Nov 2025 13:02:10 +0000
Manifest this update: Tue 04 Nov 2025 13:02:10 +0000
Manifest next update: Wed 05 Nov 2025 13:02:10 +0000
Files and hashes: 1: 47JVgVgToP2JCPCrNinv-XHW2N4.roa (hash: v4DRTra/MLLmoU83Ast19V67vrhVaOaxeHPCp8x8/Y0=)
2: CoUsP7_oLqXmI4GuJPmWe-DgrMk.roa (hash: CDiTJKYK+x288ogOQUhmmMXeMfsax3zovLJjdT/l5es=)
3: LHPvCB4tVzHERXQ5c6lqv96xQss.crl (hash: V32ImPiSll6deTIXV0xk4tZJxLoo9BysIrLSf55iLwI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/f78d7d-44f8-4099-9a12-6db826b87994/1/LHPvCB4tVzHERXQ5c6lqv96xQss.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/f78d7d-44f8-4099-9a12-6db826b87994/1/LHPvCB4tVzHERXQ5c6lqv96xQss.mft
rsync://rpki.ripe.net/repository/DEFAULT/LHPvCB4tVzHERXQ5c6lqv96xQss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:ec:07:59:c4:10:a3:9a:fa:55:fd:f6:15:24:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c73ef081e2d5731c445743973a96abfdeb142cb
Validity
Not Before: Nov 4 13:02:10 2025 GMT
Not After : Nov 5 13:02:10 2025 GMT
Subject: CN=6e759bc9f25e9ab3f6b51af3751642b791542460
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:df:ef:ae:a7:7c:00:7c:f7:2e:7a:d1:d3:53:
70:60:80:1a:f6:ef:a2:d1:51:19:8b:0b:65:76:c8:
54:cf:02:06:fd:89:ef:41:d4:c7:ff:22:bb:7c:12:
3a:df:ba:49:b1:b7:6c:be:cb:66:8f:3d:e1:09:71:
5a:d1:f1:3a:05:a7:a6:33:7a:0f:45:db:e3:fb:0f:
b0:7a:4c:d2:a6:cf:ea:47:2f:85:61:1c:a2:8c:64:
d8:e1:c4:2c:18:3e:74:de:01:1e:bd:7d:70:47:53:
fe:5a:b7:15:61:46:4d:26:bc:a2:c6:8c:d0:61:9e:
a2:cc:14:cc:4e:ef:ba:dc:f3:cb:a3:f5:d3:76:be:
ee:35:79:91:98:09:d5:c7:c5:b5:00:8e:d8:10:6e:
a3:80:f9:80:4e:65:87:4a:e3:91:76:54:34:e6:7a:
93:0b:6e:ba:45:da:10:12:42:46:b5:aa:69:10:1b:
04:bf:66:90:5e:fa:da:85:23:ed:a1:34:a8:d6:ed:
0d:1d:08:e6:10:32:6e:c7:bb:92:2e:e6:f3:4e:c9:
4c:c2:eb:e7:58:e9:e9:6e:fe:03:8c:52:d6:5d:5f:
37:ab:6c:f3:50:22:c1:44:f6:8b:58:7f:a4:78:b2:
ae:a0:bc:45:39:24:b2:82:72:80:9a:ba:61:a4:10:
e2:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:75:9B:C9:F2:5E:9A:B3:F6:B5:1A:F3:75:16:42:B7:91:54:24:60
X509v3 Authority Key Identifier:
keyid:2C:73:EF:08:1E:2D:57:31:C4:45:74:39:73:A9:6A:BF:DE:B1:42:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHPvCB4tVzHERXQ5c6lqv96xQss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/f78d7d-44f8-4099-9a12-6db826b87994/1/LHPvCB4tVzHERXQ5c6lqv96xQss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/f78d7d-44f8-4099-9a12-6db826b87994/1/LHPvCB4tVzHERXQ5c6lqv96xQss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:b6:8c:c6:da:77:ed:f3:89:25:2b:8e:87:74:22:6b:9f:8f:
75:b7:79:ca:80:76:5a:a0:01:49:cf:3e:23:d8:e1:4f:03:02:
a6:8e:30:ff:eb:7c:3d:8f:e4:88:bd:43:71:e6:ec:ce:f3:b1:
bf:5c:0f:d6:8c:9c:68:ac:c6:80:d6:89:e5:97:bc:60:75:9e:
31:a7:23:fd:25:44:31:c8:45:45:13:ab:34:3f:f0:99:51:77:
f6:ba:a4:22:4c:e6:9b:d6:09:6f:15:04:63:84:1a:2b:ef:cb:
13:43:04:b3:06:5a:5a:fe:39:8b:24:b4:34:7e:cb:79:fc:37:
f3:bf:f4:0d:f2:9d:b0:32:f5:a2:7b:10:74:0b:df:5a:14:6a:
33:b9:19:b0:e7:6a:92:f6:85:ef:05:0a:ab:05:6d:74:6e:83:
8c:2b:7a:07:a0:d4:a8:53:4d:94:50:7f:c8:3d:f4:ca:f2:10:
d6:c2:9d:45:18:43:eb:98:c4:6d:3f:de:c6:43:e5:b8:31:58:
e1:61:26:3f:06:26:c1:57:c8:da:1a:3d:c9:dd:2c:0d:97:34:
7a:5c:21:c5:b3:ec:5c:0f:14:b5:73:0b:1a:d7:3f:b2:f9:80:
c5:2c:c3:c4:15:fa:85:2a:59:91:a6:77:06:cd:f3:02:40:54:
9f:bf:e7:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:42:11 2025 by rpki-client