Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/79c5bb-619d-4beb-8649-a2f425600db3/1/lHEhWA7QLt309eWofTfgF7Mt9xs.mft
File: lHEhWA7QLt309eWofTfgF7Mt9xs.mft (raw, json)
Hash identifier: UeiWY2Hqhne2uU4B/Od8d8W/55X9xtq96I9WKa0M0UI=
Subject key identifier: 80:0C:FD:E8:77:05:0B:6A:A8:61:27:8D:99:37:C7:E0:6A:FD:73:74
Authority key identifier: 94:71:21:58:0E:D0:2E:DD:F4:F5:E5:A8:7D:37:E0:17:B3:2D:F7:1B
Certificate issuer: /CN=947121580ed02eddf4f5e5a87d37e017b32df71b
Certificate serial: 019A4EF4F6F0EE44A2A8A955410452AF6FFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lHEhWA7QLt309eWofTfgF7Mt9xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/79c5bb-619d-4beb-8649-a2f425600db3/1/lHEhWA7QLt309eWofTfgF7Mt9xs.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 13:01:08 +0000
Manifest this update: Tue 04 Nov 2025 13:01:08 +0000
Manifest next update: Wed 05 Nov 2025 13:01:08 +0000
Files and hashes: 1: lHEhWA7QLt309eWofTfgF7Mt9xs.crl (hash: 9Z7iLAUIOWrm9tlDXrpEwjSlAsZj508PyQMR/VdswZ8=)
2: qxUZWESkWfPvrh5nMLtmisJ-xm0.roa (hash: QiH9IyXND+kMiLoL1S1ImhCqyZcezaR+0IjNSX+Zg6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/79c5bb-619d-4beb-8649-a2f425600db3/1/lHEhWA7QLt309eWofTfgF7Mt9xs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/79c5bb-619d-4beb-8649-a2f425600db3/1/lHEhWA7QLt309eWofTfgF7Mt9xs.mft
rsync://rpki.ripe.net/repository/DEFAULT/lHEhWA7QLt309eWofTfgF7Mt9xs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:f6:f0:ee:44:a2:a8:a9:55:41:04:52:af:6f:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=947121580ed02eddf4f5e5a87d37e017b32df71b
Validity
Not Before: Nov 4 13:01:08 2025 GMT
Not After : Nov 5 13:01:08 2025 GMT
Subject: CN=800cfde877050b6aa861278d9937c7e06afd7374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:10:0d:d5:ec:c7:57:78:f4:72:e7:3b:34:36:
c6:92:78:72:3b:d2:7e:20:2f:11:44:ba:46:e1:77:
aa:6b:81:9b:7a:73:d1:88:46:df:dc:59:b8:16:ed:
34:3c:57:e1:60:d1:61:29:b8:5d:2c:8f:8b:75:75:
24:7f:7e:72:c6:e8:62:65:15:af:8c:d8:01:33:41:
24:76:30:93:40:a6:ab:36:b9:06:7d:9b:aa:da:61:
cb:4a:f0:25:3d:54:d6:54:f8:e5:0a:4c:a2:d3:8a:
a9:88:cf:38:14:1c:07:7b:df:8b:1c:3a:d2:29:fc:
de:87:75:1e:58:fb:f2:2c:82:78:83:96:5e:0b:05:
a9:9b:c3:39:47:00:e7:6e:bf:40:f3:17:03:58:18:
e5:c9:0f:bb:ea:58:db:f5:1d:05:1d:08:e8:33:0d:
ea:b3:01:d1:3c:25:15:b2:4f:4c:a4:78:ae:0a:83:
9b:4f:d3:ae:56:f9:56:e0:19:c0:3b:b1:5c:3a:b4:
e7:f0:e9:52:59:09:7e:45:d8:e3:52:59:d0:d0:d2:
8e:7d:6a:4d:c9:95:a4:75:7e:26:7d:e8:b5:bc:f5:
aa:5c:7f:bc:7e:98:d9:ab:d8:56:90:10:e9:29:a3:
55:02:cb:ff:13:1b:be:05:75:be:fc:dd:91:66:56:
f5:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:0C:FD:E8:77:05:0B:6A:A8:61:27:8D:99:37:C7:E0:6A:FD:73:74
X509v3 Authority Key Identifier:
keyid:94:71:21:58:0E:D0:2E:DD:F4:F5:E5:A8:7D:37:E0:17:B3:2D:F7:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lHEhWA7QLt309eWofTfgF7Mt9xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/79c5bb-619d-4beb-8649-a2f425600db3/1/lHEhWA7QLt309eWofTfgF7Mt9xs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/79c5bb-619d-4beb-8649-a2f425600db3/1/lHEhWA7QLt309eWofTfgF7Mt9xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:d6:40:a0:6d:38:e4:d4:57:19:0d:8d:48:a1:3d:b1:49:0e:
46:fa:c7:49:28:50:1f:53:89:57:b5:ec:db:99:d3:17:8a:e7:
10:dc:4e:a7:07:28:c9:11:6f:84:ea:82:27:e8:c0:f3:6e:1d:
48:a6:45:c5:ee:d8:a6:ab:14:80:9b:cc:cf:49:41:82:1a:e2:
30:c8:3d:7f:32:ea:3d:97:01:a5:e6:49:e8:1a:c3:50:2d:30:
f5:a4:df:38:ec:d3:85:40:c1:b3:53:6b:83:8a:e3:a8:18:46:
db:f1:48:10:0c:11:a9:bd:04:38:79:69:af:3a:82:54:6c:35:
c2:f6:73:dc:b2:b5:7e:12:46:60:f8:62:30:39:b5:f3:89:7e:
bc:32:12:28:a2:c8:65:ef:49:99:22:f3:3e:2a:34:96:80:3e:
8a:6b:8e:2e:68:6f:50:17:a1:d2:c5:0e:28:a4:52:ef:cb:d1:
9e:c2:3e:f0:b9:9a:aa:dd:bf:ce:d5:33:76:b2:db:8d:1f:3c:
9f:d9:12:2d:83:64:bd:06:fe:7b:80:b2:03:43:fa:87:e8:a0:
bf:e9:61:35:57:6b:a0:4f:45:ce:14:fd:cc:e0:91:6d:43:e9:
5f:66:c4:b6:b5:fd:f0:88:cb:09:8e:41:18:16:63:36:d1:d4:
0e:6f:a0:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9Pbw7kSiqKlVQQRSr2/7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0NzEyMTU4MGVkMDJlZGRmNGY1ZTVhODdkMzdlMDE3YjMy
ZGY3MWIwHhcNMjUxMTA0MTMwMTA4WhcNMjUxMTA1MTMwMTA4WjAzMTEwLwYDVQQD
Eyg4MDBjZmRlODc3MDUwYjZhYTg2MTI3OGQ5OTM3YzdlMDZhZmQ3Mzc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3xAN1ezHV3j0cuc7NDbGknhyO9J+
IC8RRLpG4Xeqa4GbenPRiEbf3Fm4Fu00PFfhYNFhKbhdLI+LdXUkf35yxuhiZRWv
jNgBM0EkdjCTQKarNrkGfZuq2mHLSvAlPVTWVPjlCkyi04qpiM84FBwHe9+LHDrS
Kfzeh3UeWPvyLIJ4g5ZeCwWpm8M5RwDnbr9A8xcDWBjlyQ+76ljb9R0FHQjoMw3q
swHRPCUVsk9MpHiuCoObT9OuVvlW4BnAO7FcOrTn8OlSWQl+RdjjUlnQ0NKOfWpN
yZWkdX4mfei1vPWqXH+8fpjZq9hWkBDpKaNVAsv/Exu+BXW+/N2RZlb1TwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIAM/eh3BQtqqGEnjZk3x+Bq/XN0MB8GA1UdIwQY
MBaAFJRxIVgO0C7d9PXlqH034BezLfcbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEhFaFdBN1FMdDMwOWVXb2ZUZmdGN010OXhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS83OWM1YmItNjE5ZC00YmViLTg2NDkt
YTJmNDI1NjAwZGIzLzEvbEhFaFdBN1FMdDMwOWVXb2ZUZmdGN010OXhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS83OWM1YmItNjE5ZC00YmViLTg2NDktYTJmNDI1NjAwZGIz
LzEvbEhFaFdBN1FMdDMwOWVXb2ZUZmdGN010OXhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkdZAoG04
5NRXGQ2NSKE9sUkORvrHSShQH1OJV7Xs25nTF4rnENxOpwcoyRFvhOqCJ+jA824d
SKZFxe7YpqsUgJvMz0lBghriMMg9fzLqPZcBpeZJ6BrDUC0w9aTfOOzThUDBs1Nr
g4rjqBhG2/FIEAwRqb0EOHlprzqCVGw1wvZz3LK1fhJGYPhiMDm184l+vDISKKLI
Ze9JmSLzPio0loA+imuOLmhvUBeh0sUOKKRS78vRnsI+8Lmaqt2/ztUzdrLbjR88
n9kSLYNkvQb+e4CyA0P6h+igv+lhNVdroE9FzhT9zOCRbUPpX2bEtrX98IjLCY5B
GBZjNtHUDm+gmg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:15:22 2025 by rpki-client