Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft
File: LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft (raw, json)
Hash identifier: tVKtuZW+Fsxuvoxf46KPCsg+97hKoHhAVISEvtJ2LXY=
Subject key identifier: 45:09:9A:43:55:BB:8E:B9:81:E5:65:71:EB:23:61:B4:3C:DD:8B:7F
Authority key identifier: 2E:16:20:89:0F:70:0F:01:2B:0B:A6:01:72:31:4E:3C:85:91:95:13
Certificate issuer: /CN=2e1620890f700f012b0ba60172314e3c85919513
Certificate serial: 019A2F32A0891571C6263C8BEC7F79EACDA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhYgiQ9wDwErC6YBcjFOPIWRlRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft
Manifest number: 16FB
Signing time: Wed 29 Oct 2025 09:00:38 +0000
Manifest this update: Wed 29 Oct 2025 09:00:38 +0000
Manifest next update: Thu 30 Oct 2025 09:00:38 +0000
Files and hashes: 1: LhYgiQ9wDwErC6YBcjFOPIWRlRM.crl (hash: WfvFNKGuBdekarwiHp0bdzDqI1AWr05oFDBhWeB6c4Y=)
2: UEzUyopP5UVcAuE2wQnf6zxgiYA.roa (hash: WO7cSkDAVVG4RqEt/anGaCZXbbFB9XEJIQ0eE+HtSwo=)
3: g1Qj1KnuMxZpXuMaGLTMbgWLRyE.roa (hash: f3NI3BOfnPP1R6nzFdJwSdGpqAlLYVxZtd9uD+YokWY=)
4: x9mgn-wCUD8rT1tTi9C7mbyMAtI.roa (hash: sgZbLcOXGM2ArVU0X49/Qh6v7QEpIvbA1cc08MVfbkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/LhYgiQ9wDwErC6YBcjFOPIWRlRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2f:32:a0:89:15:71:c6:26:3c:8b:ec:7f:79:ea:cd:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e1620890f700f012b0ba60172314e3c85919513
Validity
Not Before: Oct 29 09:00:38 2025 GMT
Not After : Oct 30 09:00:38 2025 GMT
Subject: CN=45099a4355bb8eb981e56571eb2361b43cdd8b7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fa:d3:9b:0d:71:d2:b4:ce:6e:85:15:5c:0d:
a3:1b:65:eb:28:83:6f:ce:18:72:2a:88:f2:35:ca:
1b:bc:f7:4e:6c:12:9b:35:c4:0f:87:b3:4d:b3:98:
97:20:1b:6c:62:ad:e4:58:2c:bb:16:3e:b4:ed:d0:
82:69:d3:78:be:4f:cf:78:30:96:f5:13:b5:06:a9:
f9:9d:99:db:bf:a6:99:a5:00:25:bd:dc:7e:0a:82:
2a:5b:9d:3f:1f:36:bf:96:ed:3c:b8:b4:b6:91:ed:
b2:5c:fe:3e:d9:d7:ea:b7:fa:b5:d6:87:9c:d9:27:
b0:d5:d3:c0:c9:5b:d9:d6:a2:51:93:07:cf:b3:f8:
ad:c2:fa:55:f3:5f:3b:b7:59:f5:26:51:bd:c1:49:
59:d9:94:64:a3:d7:12:e1:77:07:ab:68:d0:da:f4:
9d:d7:1e:28:2a:32:1c:27:23:19:1d:e2:e1:b5:84:
74:e8:3b:ea:07:ed:74:f6:29:1b:7c:38:ff:29:13:
c2:f9:01:be:e3:e9:f4:cc:3a:d6:71:38:1d:d0:4c:
cd:f3:6c:76:24:e4:32:31:01:f4:f7:5f:9e:16:c1:
3a:14:45:af:c1:24:1c:a5:c6:b3:3e:da:1b:84:dd:
a7:72:14:d9:de:08:f3:b5:da:36:a9:57:d6:69:fa:
aa:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:09:9A:43:55:BB:8E:B9:81:E5:65:71:EB:23:61:B4:3C:DD:8B:7F
X509v3 Authority Key Identifier:
keyid:2E:16:20:89:0F:70:0F:01:2B:0B:A6:01:72:31:4E:3C:85:91:95:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhYgiQ9wDwErC6YBcjFOPIWRlRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:f3:37:74:7f:9d:5e:8e:c0:79:d5:72:42:8a:91:49:0b:5d:
4c:5c:1b:a0:95:d7:42:28:8f:f6:99:06:67:4a:d1:3d:5f:48:
6d:15:5f:07:11:10:a5:a3:78:6e:58:df:48:16:f8:b1:c8:23:
6c:35:56:cb:81:f0:95:5c:91:76:d6:d0:9b:d2:dc:d3:2a:05:
86:a6:08:64:61:84:52:97:01:75:a0:d6:da:ea:eb:96:ec:ba:
22:4d:81:18:9e:41:db:20:d6:d8:4b:6c:a7:9b:11:14:76:02:
e3:89:33:06:f9:ac:62:7a:1c:22:cd:6a:8c:f2:1e:74:be:b7:
e0:75:bc:19:83:e2:cd:9a:82:a6:4a:39:40:71:f8:a5:48:b8:
67:8a:a7:fc:04:c2:ba:fa:d5:2b:f7:82:a3:d6:1b:80:dc:73:
e5:3d:19:1f:0e:02:e3:55:06:d3:fc:0a:fa:e3:71:da:76:2f:
39:47:04:73:28:2a:5d:9a:93:dd:48:cb:81:96:4d:14:b3:bc:
4c:f6:ec:8c:f0:d2:09:67:dc:fe:58:f8:2f:17:3f:36:94:1c:
21:0c:69:29:93:c9:4f:38:05:0d:42:47:a1:09:e4:99:2c:1e:
da:43:29:08:ea:76:00:50:f2:66:7a:22:ea:6e:ae:76:a5:b3:
ab:ba:f4:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 14:49:04 2025 by rpki-client