Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.mft
File: lhud90XDLfJ98z68_VNvGeE0dP4.mft (raw, json)
Hash identifier: L9q6g0dDMX/Fc41pQTQnIdbywGogs0K0acjEXS2HSM4=
Subject key identifier: 18:09:ED:4D:80:1F:4B:E3:89:CC:23:04:A0:86:28:72:88:34:3D:C0
Authority key identifier: 96:1B:9D:F7:45:C3:2D:F2:7D:F3:3E:BC:FD:53:6F:19:E1:34:74:FE
Certificate issuer: /CN=961b9df745c32df27df33ebcfd536f19e13474fe
Certificate serial: 019A559B5C569B2A9CEA033C22F5C0C7E9B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lhud90XDLfJ98z68_VNvGeE0dP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.mft
Manifest number: 102A
Signing time: Wed 05 Nov 2025 20:00:36 +0000
Manifest this update: Wed 05 Nov 2025 20:00:36 +0000
Manifest next update: Thu 06 Nov 2025 20:00:36 +0000
Files and hashes: 1: 3LMtRmONGNLMLTZbv-22SKS_G_A.roa (hash: pio5aJGvlnIF4jwmfbABDVK+nPuVznK9IHAqeg47uOI=)
2: 8cYySboA2VaDBExXOdn2f8YI2Iw.roa (hash: XrQTlxZOLpNHFd8Q5dqkWIouJ0kbCEk8FXuJ6lAGYRM=)
3: AW_xXvWFujKuLbVm-SnUT_Zjgxw.roa (hash: nFG/6G17wzGxW8RG1K73vy6beJj5zW9L3o6YXtPyInc=)
4: lhud90XDLfJ98z68_VNvGeE0dP4.crl (hash: 5+UzB25NPybOF6ghOsWmVf89Z7fxCpsA8LKyLt5Toqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lhud90XDLfJ98z68_VNvGeE0dP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 20:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:55:9b:5c:56:9b:2a:9c:ea:03:3c:22:f5:c0:c7:e9:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=961b9df745c32df27df33ebcfd536f19e13474fe
Validity
Not Before: Nov 5 20:00:36 2025 GMT
Not After : Nov 6 20:00:36 2025 GMT
Subject: CN=1809ed4d801f4be389cc2304a086287288343dc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c3:95:ad:56:48:fd:a8:d2:c6:bb:95:44:ac:
2f:b6:32:0b:e4:ff:94:a5:99:f6:ca:e1:75:27:c3:
75:9b:4f:5b:ad:05:8b:d5:24:c2:47:a4:ab:c1:c3:
02:05:51:f2:98:0d:19:13:34:fb:5b:9d:aa:ce:0e:
40:dc:a6:ed:52:a3:e4:7c:9c:28:5c:50:de:de:52:
35:0e:fc:3c:c6:de:c6:31:47:df:de:a7:43:30:5d:
c7:72:4b:08:3b:4f:6d:f0:df:1c:5a:ed:2e:bd:f0:
c6:80:60:5f:b4:3b:4b:04:2d:13:89:c0:ed:9e:c4:
1c:cd:05:e7:02:02:94:cc:fa:d4:3e:5a:f5:52:52:
a0:56:77:f5:af:7f:05:5f:e8:a5:dc:07:0c:e0:96:
08:9a:be:21:13:09:c1:b1:ea:0d:af:8b:59:e5:6e:
23:f8:32:70:be:1c:f5:c7:dc:65:97:2d:f8:de:3f:
be:4d:92:70:22:15:d5:b6:f6:07:bc:e7:4f:4c:21:
16:46:ea:4d:24:3d:e7:73:f0:d0:6a:49:c3:2a:1a:
b0:45:cf:6d:09:e4:5c:5d:ed:4d:bd:2a:b2:7b:d2:
d9:a7:9b:8c:7c:cc:29:4b:9d:a5:bf:e1:67:f4:ac:
82:1f:b0:d6:17:b6:1f:fb:50:08:18:83:55:7e:18:
b6:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:09:ED:4D:80:1F:4B:E3:89:CC:23:04:A0:86:28:72:88:34:3D:C0
X509v3 Authority Key Identifier:
keyid:96:1B:9D:F7:45:C3:2D:F2:7D:F3:3E:BC:FD:53:6F:19:E1:34:74:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhud90XDLfJ98z68_VNvGeE0dP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:e4:4d:ff:0b:42:3f:d6:94:ed:58:60:a9:4d:cf:61:5b:69:
d4:4d:c7:25:ab:ae:dd:1a:64:e2:ca:71:96:1e:d0:49:cb:46:
8f:a0:e6:f6:77:93:cf:65:c4:d6:fc:20:92:4b:79:45:75:4f:
59:9d:03:86:57:a6:03:a7:c4:93:d6:5e:01:1b:c5:fc:2b:a6:
6b:e7:26:8d:a6:f3:a1:cf:43:64:05:74:00:3f:18:42:dc:d5:
d1:60:92:74:f1:21:5d:08:19:24:8c:97:06:22:d3:ca:c8:1c:
8a:48:78:a5:f4:d6:98:49:a2:e1:a6:7b:b8:2a:6d:62:f6:fa:
d9:71:5b:6d:d8:f0:99:f1:0a:de:73:00:b1:8c:da:92:23:9c:
16:3a:f3:72:44:ba:f4:ba:91:f7:68:f7:d2:3f:f5:90:cc:1f:
b9:a7:18:83:70:b7:fb:0a:8c:f6:ba:47:b4:90:74:fa:98:05:
63:24:98:ce:07:66:cc:05:c9:68:e4:67:42:37:60:a1:6e:3f:
00:56:d9:ce:e6:c1:dc:14:e8:65:54:75:9a:a2:d7:85:5e:ac:
90:ca:ab:e7:eb:54:28:e9:d7:d2:3a:78:9d:85:6f:9e:70:0a:
77:8e:ac:95:a2:50:43:ec:a9:9e:c9:b4:4f:f0:79:f0:7d:ff:
83:c3:0b:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpVm1xWmyqc6gM8IvXAx+m4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2MWI5ZGY3NDVjMzJkZjI3ZGYzM2ViY2ZkNTM2ZjE5ZTEz
NDc0ZmUwHhcNMjUxMTA1MjAwMDM2WhcNMjUxMTA2MjAwMDM2WjAzMTEwLwYDVQQD
EygxODA5ZWQ0ZDgwMWY0YmUzODljYzIzMDRhMDg2Mjg3Mjg4MzQzZGMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsOVrVZI/ajSxruVRKwvtjIL5P+U
pZn2yuF1J8N1m09brQWL1STCR6SrwcMCBVHymA0ZEzT7W52qzg5A3KbtUqPkfJwo
XFDe3lI1Dvw8xt7GMUff3qdDMF3HcksIO09t8N8cWu0uvfDGgGBftDtLBC0TicDt
nsQczQXnAgKUzPrUPlr1UlKgVnf1r38FX+il3AcM4JYImr4hEwnBseoNr4tZ5W4j
+DJwvhz1x9xlly343j++TZJwIhXVtvYHvOdPTCEWRupNJD3nc/DQaknDKhqwRc9t
CeRcXe1NvSqye9LZp5uMfMwpS52lv+Fn9KyCH7DWF7Yf+1AIGINVfhi2iQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBgJ7U2AH0vjicwjBKCGKHKIND3AMB8GA1UdIwQY
MBaAFJYbnfdFwy3yffM+vP1TbxnhNHT+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGh1ZDkwWERMZko5OHo2OF9WTnZHZUUwZFA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9lODQ5MjAtZjVjYi00NmQ3LWJjOTkt
ZmU1MzIxMGI1N2I2LzEvbGh1ZDkwWERMZko5OHo2OF9WTnZHZUUwZFA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9lODQ5MjAtZjVjYi00NmQ3LWJjOTktZmU1MzIxMGI1N2I2
LzEvbGh1ZDkwWERMZko5OHo2OF9WTnZHZUUwZFA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmORN/wtC
P9aU7VhgqU3PYVtp1E3HJauu3Rpk4spxlh7QSctGj6Dm9neTz2XE1vwgkkt5RXVP
WZ0DhlemA6fEk9ZeARvF/Cuma+cmjabzoc9DZAV0AD8YQtzV0WCSdPEhXQgZJIyX
BiLTysgcikh4pfTWmEmi4aZ7uCptYvb62XFbbdjwmfEK3nMAsYzakiOcFjrzckS6
9LqR92j30j/1kMwfuacYg3C3+wqM9rpHtJB0+pgFYySYzgdmzAXJaORnQjdgoW4/
AFbZzubB3BToZVR1mqLXhV6skMqr5+tUKOnX0jp4nYVvnnAKd46slaJQQ+ypnsm0
T/B58H3/g8MLxQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 23:03:49 2025 by rpki-client