Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.mft
File: lhud90XDLfJ98z68_VNvGeE0dP4.mft (raw, json)
Hash identifier: uakcOAnlTL1OYVERU93yrQw1Z2n/aMRhl0OfOJPsjzs=
Subject key identifier: 56:2B:4E:12:4C:8E:BD:70:5E:DF:4D:2E:1D:EC:B7:92:31:4E:E1:C2
Authority key identifier: 96:1B:9D:F7:45:C3:2D:F2:7D:F3:3E:BC:FD:53:6F:19:E1:34:74:FE
Certificate issuer: /CN=961b9df745c32df27df33ebcfd536f19e13474fe
Certificate serial: 0199C4C4AC52CB159ECF8F4722695D36B936
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lhud90XDLfJ98z68_VNvGeE0dP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.mft
Manifest number: 0FDF
Signing time: Wed 08 Oct 2025 17:00:47 +0000
Manifest this update: Wed 08 Oct 2025 17:00:47 +0000
Manifest next update: Thu 09 Oct 2025 17:00:47 +0000
Files and hashes: 1: 3LMtRmONGNLMLTZbv-22SKS_G_A.roa (hash: pio5aJGvlnIF4jwmfbABDVK+nPuVznK9IHAqeg47uOI=)
2: 8cYySboA2VaDBExXOdn2f8YI2Iw.roa (hash: XrQTlxZOLpNHFd8Q5dqkWIouJ0kbCEk8FXuJ6lAGYRM=)
3: AW_xXvWFujKuLbVm-SnUT_Zjgxw.roa (hash: nFG/6G17wzGxW8RG1K73vy6beJj5zW9L3o6YXtPyInc=)
4: lhud90XDLfJ98z68_VNvGeE0dP4.crl (hash: 2JkMyGfvxNz/elM4iIq/jup+8+cowkq7bNqFd3Zlz4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lhud90XDLfJ98z68_VNvGeE0dP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 13:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c4:c4:ac:52:cb:15:9e:cf:8f:47:22:69:5d:36:b9:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=961b9df745c32df27df33ebcfd536f19e13474fe
Validity
Not Before: Oct 8 17:00:47 2025 GMT
Not After : Oct 9 17:00:47 2025 GMT
Subject: CN=562b4e124c8ebd705edf4d2e1decb792314ee1c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:54:70:44:b1:ca:7f:7c:0c:24:e5:a5:c5:79:
36:77:34:39:a8:b0:56:5a:14:98:e4:05:17:d8:55:
7a:53:a4:49:36:fe:4c:b5:be:12:93:a0:20:14:3d:
c1:f4:33:33:92:c6:73:49:03:2c:00:2a:85:6e:ce:
10:fe:a2:73:dc:4b:a1:9c:18:4f:a3:a3:7d:9b:82:
72:25:88:d7:12:95:8f:9a:8a:64:7a:64:60:2e:ea:
50:5c:05:91:80:e7:79:d2:67:f3:5c:9d:64:44:8c:
48:14:6a:b6:f6:84:a6:b3:27:7a:35:16:24:a7:41:
09:0e:c3:9a:5a:0c:29:d7:70:40:64:05:94:d5:1c:
bf:39:de:a3:70:f5:b6:9f:ab:a1:a1:c9:28:40:da:
75:a6:2d:e0:01:70:47:f8:18:25:95:e9:9a:9e:01:
63:bb:a7:9f:fb:6c:c4:d1:c5:5d:23:23:c3:52:ad:
ab:70:9a:29:12:42:22:3e:85:d1:96:56:6b:35:d3:
98:7f:aa:00:cd:09:7a:cf:8f:c9:f1:a3:0d:e4:cd:
a3:d1:97:80:4c:25:42:85:38:1c:91:83:8e:1e:da:
34:a3:89:0f:81:a7:83:e2:c6:e6:8d:af:70:cb:80:
12:74:bd:c9:4b:1d:c9:1c:88:b0:4e:81:1c:05:ff:
c4:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:2B:4E:12:4C:8E:BD:70:5E:DF:4D:2E:1D:EC:B7:92:31:4E:E1:C2
X509v3 Authority Key Identifier:
keyid:96:1B:9D:F7:45:C3:2D:F2:7D:F3:3E:BC:FD:53:6F:19:E1:34:74:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhud90XDLfJ98z68_VNvGeE0dP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:83:5d:55:1c:b6:b7:0b:9d:f7:a7:a6:c2:99:9a:b0:83:98:
4a:c6:0c:90:01:91:5d:b6:60:2b:ed:89:87:56:db:2c:7d:7b:
17:05:cc:55:2c:9a:c0:33:fb:a8:d5:8c:b8:1d:e7:aa:b1:13:
2e:36:c4:86:a0:4f:9b:9e:81:ee:c4:84:2c:10:20:34:6b:e2:
92:0b:2b:5a:35:ed:f3:e3:e7:dc:2e:98:93:d6:19:ac:b8:a3:
5e:37:34:4a:8a:94:ed:c6:a5:0c:0f:e6:11:2e:a2:5e:15:e2:
34:a1:dd:fb:aa:45:82:87:ef:b6:13:29:46:3e:c8:02:07:a6:
9f:42:fd:a8:40:4d:7f:f5:d3:ce:4f:1c:b7:9f:7f:bc:02:a9:
ca:5c:42:b1:0a:8c:27:67:60:6c:2e:22:bc:07:74:e9:9f:09:
5f:e1:f9:1c:6d:c2:61:c7:ff:3c:60:4d:07:ab:2e:17:34:cb:
70:bb:1a:59:7f:65:ac:3e:88:36:da:63:97:3e:39:40:87:6a:
28:65:94:81:f1:04:68:71:48:8e:d2:4a:ef:56:ce:df:b1:83:
47:9e:50:d6:66:fc:19:8f:8f:45:9a:bb:f7:5f:ca:a1:f2:31:
89:54:71:28:c0:56:bd:a4:8c:94:db:b4:b2:8d:02:53:7b:47:
19:65:1d:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 21:22:18 2025 by rpki-client