Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft
File: LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft (raw, json)
Hash identifier: rVZ6AlejEx4kKI7NEWVpTmoeil2Ob++1PP0CMbe+OLU=
Subject key identifier: 45:3E:3A:47:FF:5B:35:53:31:27:54:BF:4E:4C:9A:53:C4:71:33:14
Authority key identifier: 2C:75:4A:E4:73:D9:C1:54:B8:04:B7:0E:D3:18:81:E0:25:D9:26:AA
Certificate issuer: /CN=2c754ae473d9c154b804b70ed31881e025d926aa
Certificate serial: 019A53E3DA77A984FCE955FE7CA0DD9763EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHVK5HPZwVS4BLcO0xiB4CXZJqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft
Manifest number: 0CEB
Signing time: Wed 05 Nov 2025 12:00:32 +0000
Manifest this update: Wed 05 Nov 2025 12:00:32 +0000
Manifest next update: Thu 06 Nov 2025 12:00:32 +0000
Files and hashes: 1: LHVK5HPZwVS4BLcO0xiB4CXZJqo.crl (hash: UMjyEplMj3x27j6YOKNhoWThbE8w3NRpjFPfMRzDBUw=)
2: RIso09h5--_F82YqfcCEAd3EpSw.roa (hash: dWlymz3qci5T5aLh2Je4Ec71LNxokFg1VFDedEjsW+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/LHVK5HPZwVS4BLcO0xiB4CXZJqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:e3:da:77:a9:84:fc:e9:55:fe:7c:a0:dd:97:63:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c754ae473d9c154b804b70ed31881e025d926aa
Validity
Not Before: Nov 5 12:00:32 2025 GMT
Not After : Nov 6 12:00:32 2025 GMT
Subject: CN=453e3a47ff5b3553312754bf4e4c9a53c4713314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:89:05:df:2e:a8:2c:db:34:78:df:6f:0a:2c:
13:cd:8e:5f:4d:f7:fc:eb:4e:9a:54:4b:21:73:3f:
40:8e:5f:6e:2c:48:20:ac:45:1c:e5:60:79:db:65:
08:0b:6e:a1:c6:3b:b8:87:e7:27:f0:f0:e2:f6:ca:
73:e6:1c:2d:3f:6f:45:af:fc:eb:a5:f9:d0:8f:b7:
0d:96:90:dc:91:9c:2c:6f:16:a7:80:04:2e:86:4c:
d9:01:68:07:ee:56:8e:be:cb:2b:5e:9d:67:ae:4d:
fc:96:8f:8d:df:6a:73:39:3c:7d:90:54:cb:15:3f:
dd:66:87:4c:6a:55:a4:a1:87:9c:01:4f:5d:43:7f:
a5:6a:bf:5e:f2:03:92:29:c6:1f:d2:89:11:0f:98:
47:53:79:80:ab:2e:d9:51:fc:2b:42:93:b4:1b:1b:
82:b3:af:79:51:cd:da:e6:c2:c5:32:18:5d:55:7e:
48:a0:0a:1a:81:ba:ab:5d:7a:78:8c:38:af:cd:23:
a1:19:1e:37:65:15:12:d6:0f:6d:0e:f2:df:03:e7:
d0:e1:69:1d:6b:7a:6c:c2:50:ac:11:b2:06:15:1d:
57:ab:18:45:66:14:c5:41:22:26:07:2c:fc:eb:61:
7a:eb:47:dc:2c:79:85:f9:89:4f:95:10:3c:70:58:
1c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:3E:3A:47:FF:5B:35:53:31:27:54:BF:4E:4C:9A:53:C4:71:33:14
X509v3 Authority Key Identifier:
keyid:2C:75:4A:E4:73:D9:C1:54:B8:04:B7:0E:D3:18:81:E0:25:D9:26:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHVK5HPZwVS4BLcO0xiB4CXZJqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:9b:66:f3:e5:3f:ba:57:44:cc:20:a8:01:0f:e8:b4:8a:66:
b8:2c:08:b3:6e:16:73:ca:d0:b1:8d:6b:0c:b2:80:d2:2d:68:
31:c6:05:2a:61:45:da:91:a5:65:91:0e:97:09:07:46:38:3f:
77:01:80:c3:e7:bf:dd:7c:78:48:ff:83:81:7e:b2:e0:fc:b7:
d8:cc:4e:b4:d6:aa:d5:6a:b3:1d:42:93:0a:a3:a5:11:0e:3b:
fd:f8:10:6e:bb:fb:f2:ab:b8:2b:91:07:a0:19:40:94:ac:18:
69:1d:82:40:3b:c7:40:58:1a:7d:d3:d6:a0:7c:68:0b:1c:27:
a5:a5:7d:e6:5a:b2:f0:ba:f5:44:96:01:12:12:be:e3:7d:46:
3a:42:6e:8f:97:03:a8:52:a3:8e:11:81:16:d2:24:c8:2e:07:
bf:af:15:42:24:f9:3a:f2:9f:45:fc:32:d3:0a:4c:f7:d4:a1:
c4:29:f5:93:c1:b9:69:f3:dc:7e:90:62:5e:6b:bd:01:3a:aa:
e8:53:34:f4:9f:96:54:77:e4:52:a1:d7:55:74:10:0e:78:95:
34:c1:f4:5d:7f:07:f5:41:e4:57:f0:24:ce:2c:ae:7f:2c:4e:
a8:8a:db:8d:72:21:c0:39:51:ab:d9:c5:b2:9a:9d:2d:5a:42:
16:6c:d5:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:33:11 2025 by rpki-client