Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/e4be23-b536-4e30-9a5b-5d5d02bb7199/1/lHjtPq1if84WxRgCUMRmIXMY1lw.mft
File: lHjtPq1if84WxRgCUMRmIXMY1lw.mft (raw, json)
Hash identifier: 2LyFKEbj+61bZWunSFMwkbGRkai35Znhf391Sye50D8=
Subject key identifier: 45:6E:FC:14:6B:47:03:49:02:C6:15:CD:FB:62:C7:6A:7D:BC:AA:5F
Authority key identifier: 94:78:ED:3E:AD:62:7F:CE:16:C5:18:02:50:C4:66:21:73:18:D6:5C
Certificate issuer: /CN=9478ed3ead627fce16c5180250c466217318d65c
Certificate serial: 019A53AD020EEA05B364769FD11C0FD0F53E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lHjtPq1if84WxRgCUMRmIXMY1lw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/e4be23-b536-4e30-9a5b-5d5d02bb7199/1/lHjtPq1if84WxRgCUMRmIXMY1lw.mft
Manifest number: 170E
Signing time: Wed 05 Nov 2025 11:00:38 +0000
Manifest this update: Wed 05 Nov 2025 11:00:38 +0000
Manifest next update: Thu 06 Nov 2025 11:00:38 +0000
Files and hashes: 1: df6eEH1lcm-NQu74tYmhvofIQ3M.roa (hash: 2j1bAmdfTQz3oXGIdGeOLHdjury5pLuTexUtxV+TqRE=)
2: lHjtPq1if84WxRgCUMRmIXMY1lw.crl (hash: Ke7wLRosojrx3DTiWTvyyDJmHuw+7J2P6YrC6F1YWD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/e4be23-b536-4e30-9a5b-5d5d02bb7199/1/lHjtPq1if84WxRgCUMRmIXMY1lw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/e4be23-b536-4e30-9a5b-5d5d02bb7199/1/lHjtPq1if84WxRgCUMRmIXMY1lw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lHjtPq1if84WxRgCUMRmIXMY1lw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 11:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:ad:02:0e:ea:05:b3:64:76:9f:d1:1c:0f:d0:f5:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9478ed3ead627fce16c5180250c466217318d65c
Validity
Not Before: Nov 5 11:00:38 2025 GMT
Not After : Nov 6 11:00:38 2025 GMT
Subject: CN=456efc146b47034902c615cdfb62c76a7dbcaa5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:de:d8:cd:c9:0c:ae:4d:5e:64:3c:13:45:9e:
68:0d:cb:db:97:62:48:01:8c:a3:ce:d7:a5:a5:79:
f6:98:d3:2d:7d:8c:19:42:d2:14:f3:ca:3e:e7:61:
8f:51:c9:5b:d6:68:20:21:a6:04:4b:14:38:ee:ba:
07:2e:2e:44:37:d2:b7:23:7f:44:5e:64:a0:3e:bb:
01:1f:5e:17:6a:b8:f1:b6:6c:95:8d:7f:c6:da:0c:
d2:36:b7:b5:74:54:cb:af:75:c7:62:73:20:e0:1a:
21:78:34:8d:1a:81:17:7a:17:72:fa:34:46:b8:81:
9f:16:f2:d1:16:ba:33:83:14:dc:05:6e:1d:6e:f7:
cc:0d:dc:e2:8f:c7:67:08:7a:9e:ef:87:b0:a3:3a:
af:7d:36:2c:d5:56:95:63:06:41:58:b0:51:13:07:
c1:b7:88:da:97:44:42:6d:7f:19:73:bf:e3:95:e6:
bc:02:3f:3b:ac:13:bd:04:29:a4:ff:34:0f:d6:4d:
c2:b0:18:21:79:d0:fa:e2:c6:65:65:bf:d1:1b:8b:
4c:6b:ed:f8:70:a3:65:8d:3e:a8:6b:52:c3:06:f5:
94:af:26:b9:36:23:50:c9:b7:79:9c:e5:b6:0e:d8:
0b:03:c2:80:99:e3:f5:e7:91:75:56:b8:82:e1:a5:
e5:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:6E:FC:14:6B:47:03:49:02:C6:15:CD:FB:62:C7:6A:7D:BC:AA:5F
X509v3 Authority Key Identifier:
keyid:94:78:ED:3E:AD:62:7F:CE:16:C5:18:02:50:C4:66:21:73:18:D6:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lHjtPq1if84WxRgCUMRmIXMY1lw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e4be23-b536-4e30-9a5b-5d5d02bb7199/1/lHjtPq1if84WxRgCUMRmIXMY1lw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e4be23-b536-4e30-9a5b-5d5d02bb7199/1/lHjtPq1if84WxRgCUMRmIXMY1lw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:31:28:a7:de:e8:fc:b0:4d:d8:19:71:7f:bd:1e:c5:b2:e2:
51:1a:3c:25:2a:f8:6b:72:1a:b4:9b:65:cc:02:18:d6:33:53:
1a:71:b8:d5:a4:5f:be:fd:da:8b:d3:c8:fa:15:be:6e:5f:c7:
89:1e:b0:e1:cf:53:2c:27:2b:0b:a8:8b:39:3a:93:ee:44:d4:
b5:d3:ca:aa:e2:48:03:9f:e0:5f:40:bf:93:a0:76:cd:4d:06:
41:f9:34:40:b9:09:1e:ec:04:bc:a2:fc:f1:f4:6b:94:8d:2b:
0e:ec:bc:f9:45:36:27:08:a8:08:97:ba:32:56:4d:79:e3:52:
c4:dc:f0:18:37:5b:a2:5d:d7:fc:9c:37:5d:45:30:b3:84:76:
78:cc:b5:00:a4:36:b3:1f:3e:f3:23:01:3b:cf:3e:fa:6e:23:
9f:6d:9f:1d:f7:c9:6d:ff:57:8e:5f:1d:72:aa:30:96:56:03:
f4:cd:3e:e3:e0:d7:11:39:62:c6:0a:0a:78:08:a1:88:75:89:
fd:e4:dc:15:9d:97:77:06:e6:d7:32:8e:a1:89:46:a2:d4:7f:
d4:31:8a:df:11:11:48:25:1f:82:14:69:1d:d5:3e:0c:87:4e:
30:61:40:34:c3:dc:1b:b3:2b:c5:e8:14:3a:e3:8d:be:37:d7:
c5:0d:33:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpTrQIO6gWzZHaf0RwP0PU+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0NzhlZDNlYWQ2MjdmY2UxNmM1MTgwMjUwYzQ2NjIxNzMx
OGQ2NWMwHhcNMjUxMTA1MTEwMDM4WhcNMjUxMTA2MTEwMDM4WjAzMTEwLwYDVQQD
Eyg0NTZlZmMxNDZiNDcwMzQ5MDJjNjE1Y2RmYjYyYzc2YTdkYmNhYTVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7t7YzckMrk1eZDwTRZ5oDcvbl2JI
AYyjztelpXn2mNMtfYwZQtIU88o+52GPUclb1mggIaYESxQ47roHLi5EN9K3I39E
XmSgPrsBH14XarjxtmyVjX/G2gzSNre1dFTLr3XHYnMg4BoheDSNGoEXehdy+jRG
uIGfFvLRFrozgxTcBW4dbvfMDdzij8dnCHqe74ewozqvfTYs1VaVYwZBWLBREwfB
t4jal0RCbX8Zc7/jlea8Aj87rBO9BCmk/zQP1k3CsBghedD64sZlZb/RG4tMa+34
cKNljT6oa1LDBvWUrya5NiNQybd5nOW2DtgLA8KAmeP155F1VriC4aXlbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEVu/BRrRwNJAsYVzftix2p9vKpfMB8GA1UdIwQY
MBaAFJR47T6tYn/OFsUYAlDEZiFzGNZcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEhqdFBxMWlmODRXeFJnQ1VNUm1JWE1ZMWx3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9lNGJlMjMtYjUzNi00ZTMwLTlhNWIt
NWQ1ZDAyYmI3MTk5LzEvbEhqdFBxMWlmODRXeFJnQ1VNUm1JWE1ZMWx3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9lNGJlMjMtYjUzNi00ZTMwLTlhNWItNWQ1ZDAyYmI3MTk5
LzEvbEhqdFBxMWlmODRXeFJnQ1VNUm1JWE1ZMWx3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsTEop97o
/LBN2Blxf70exbLiURo8JSr4a3IatJtlzAIY1jNTGnG41aRfvv3ai9PI+hW+bl/H
iR6w4c9TLCcrC6iLOTqT7kTUtdPKquJIA5/gX0C/k6B2zU0GQfk0QLkJHuwEvKL8
8fRrlI0rDuy8+UU2JwioCJe6MlZNeeNSxNzwGDdbol3X/Jw3XUUws4R2eMy1AKQ2
sx8+8yMBO88++m4jn22fHffJbf9Xjl8dcqowllYD9M0+4+DXETlixgoKeAihiHWJ
/eTcFZ2Xdwbm1zKOoYlGotR/1DGK3xERSCUfghRpHdU+DIdOMGFANMPcG7MrxegU
OuONvjfXxQ0zkg==
-----END CERTIFICATE-----
Generated at Wed Nov 5 20:48:25 2025 by rpki-client