Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/cddf94-8d51-41cd-8a5b-a0b4930cbd1e/1/lhebOdHB0o9QY8qSHWAH42Phxgs.mft
File: lhebOdHB0o9QY8qSHWAH42Phxgs.mft (raw, json)
Hash identifier: LN+kkStPt6/uA6CJS/e5sUYHGOiHidXzkMTv2QR3i5k=
Subject key identifier: 7A:79:D1:07:80:63:F5:85:3F:86:AE:37:D7:ED:61:06:51:2F:A9:88
Authority key identifier: 96:17:9B:39:D1:C1:D2:8F:50:63:CA:92:1D:60:07:E3:63:E1:C6:0B
Certificate issuer: /CN=96179b39d1c1d28f5063ca921d6007e363e1c60b
Certificate serial: 019A71B7B7345B196AA4521FE10D10A6BB6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lhebOdHB0o9QY8qSHWAH42Phxgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/cddf94-8d51-41cd-8a5b-a0b4930cbd1e/1/lhebOdHB0o9QY8qSHWAH42Phxgs.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 07:00:56 +0000
Manifest this update: Tue 11 Nov 2025 07:00:56 +0000
Manifest next update: Wed 12 Nov 2025 07:00:56 +0000
Files and hashes: 1: lhebOdHB0o9QY8qSHWAH42Phxgs.crl (hash: 0bWkqgiqTcvIUZdxe+iUlkV+Ux0NdAqvzdWul141TSk=)
2: zIbC2a3NLstRoJ1KbSzBvFb6vZ0.roa (hash: YltSOQHV02hFJedVO9/8WLk8TMz1RedE7tGsvMysOE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/cddf94-8d51-41cd-8a5b-a0b4930cbd1e/1/lhebOdHB0o9QY8qSHWAH42Phxgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/cddf94-8d51-41cd-8a5b-a0b4930cbd1e/1/lhebOdHB0o9QY8qSHWAH42Phxgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/lhebOdHB0o9QY8qSHWAH42Phxgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:b7:34:5b:19:6a:a4:52:1f:e1:0d:10:a6:bb:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96179b39d1c1d28f5063ca921d6007e363e1c60b
Validity
Not Before: Nov 11 07:00:56 2025 GMT
Not After : Nov 12 07:00:56 2025 GMT
Subject: CN=7a79d1078063f5853f86ae37d7ed6106512fa988
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fd:68:2e:5e:51:af:53:8f:21:c5:45:47:bc:
74:87:d8:ca:06:58:57:59:8c:47:82:03:45:8a:8b:
7f:0d:7a:16:20:da:0e:3f:ce:25:cc:bb:1f:1c:38:
f5:f7:a2:33:10:99:e4:e4:15:47:8d:dd:35:68:da:
35:c6:a6:ed:09:16:18:21:b1:38:8f:7b:a6:71:78:
a8:b0:1f:91:15:ba:7d:05:ed:33:f6:06:a6:6a:91:
05:ae:10:4a:99:95:d8:cf:a5:41:7b:33:e4:c9:39:
29:eb:a5:8f:8a:36:f9:51:fa:08:1d:0e:05:65:8a:
87:a2:e8:a5:4c:3d:5a:c2:ad:9f:f5:8d:0f:e7:bd:
89:a1:9b:24:0a:98:23:44:fb:d2:b1:86:67:7d:a7:
e0:2f:e4:46:92:22:51:98:3f:9e:72:99:6d:8e:ac:
26:26:e2:65:dc:a8:cf:d6:1c:57:8c:fc:06:66:a3:
67:55:a4:d5:d8:fe:3d:10:66:4c:39:06:43:ac:e6:
f8:92:dd:ea:f9:95:f8:05:4d:d2:04:c8:3c:85:31:
8e:e1:89:d9:37:9f:57:3e:6b:0f:52:c5:c5:4e:4d:
12:96:ef:54:a2:c0:0c:9d:e3:5a:61:23:07:0f:da:
e6:55:9e:28:96:03:d2:44:08:94:0d:39:e5:a1:8d:
d2:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:79:D1:07:80:63:F5:85:3F:86:AE:37:D7:ED:61:06:51:2F:A9:88
X509v3 Authority Key Identifier:
keyid:96:17:9B:39:D1:C1:D2:8F:50:63:CA:92:1D:60:07:E3:63:E1:C6:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhebOdHB0o9QY8qSHWAH42Phxgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/cddf94-8d51-41cd-8a5b-a0b4930cbd1e/1/lhebOdHB0o9QY8qSHWAH42Phxgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/cddf94-8d51-41cd-8a5b-a0b4930cbd1e/1/lhebOdHB0o9QY8qSHWAH42Phxgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:0d:b4:71:f0:16:b4:ea:2c:31:a9:1f:d8:a9:15:70:6a:2e:
9f:66:6d:ff:ec:3f:29:f2:8a:16:c9:a8:02:05:98:68:34:7d:
1a:0f:13:88:21:6c:b6:b7:77:58:b5:79:cc:f9:6c:5f:a4:34:
94:bc:be:61:2a:f0:65:58:a6:1e:50:60:1f:05:05:6b:9b:d4:
61:9d:df:19:ea:14:8a:ad:e5:34:8a:b0:54:78:fa:72:2b:3b:
14:01:44:cd:9b:b6:ed:16:6d:78:40:4b:88:8a:6a:2b:58:d4:
8d:fc:26:bd:b1:3e:ec:6e:02:48:9d:c0:f7:a1:b0:df:f0:37:
5e:23:7e:6b:74:a2:48:f9:b1:e7:87:9c:88:5e:19:52:dd:0f:
d8:97:74:d4:84:83:8e:87:de:d4:43:9d:40:e3:53:7c:67:f0:
2b:d2:ca:b2:91:fb:fd:cf:ac:d9:9a:db:4a:f6:ae:41:fb:33:
d2:30:19:73:e7:50:89:0d:58:98:a4:15:a0:84:75:91:2e:52:
c9:b4:ea:e1:3b:f5:37:67:4f:4e:4e:75:24:9f:52:26:36:8b:
b0:c0:89:f8:a3:fd:5b:48:e2:0b:43:68:11:5b:cf:21:6e:70:
58:ad:85:c4:74:fd:b4:53:10:4a:91:fd:ed:e0:29:28:b0:1f:
eb:c1:bf:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxt7c0WxlqpFIf4Q0QprtsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2MTc5YjM5ZDFjMWQyOGY1MDYzY2E5MjFkNjAwN2UzNjNl
MWM2MGIwHhcNMjUxMTExMDcwMDU2WhcNMjUxMTEyMDcwMDU2WjAzMTEwLwYDVQQD
Eyg3YTc5ZDEwNzgwNjNmNTg1M2Y4NmFlMzdkN2VkNjEwNjUxMmZhOTg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvP1oLl5Rr1OPIcVFR7x0h9jKBlhX
WYxHggNFiot/DXoWINoOP84lzLsfHDj196IzEJnk5BVHjd01aNo1xqbtCRYYIbE4
j3umcXiosB+RFbp9Be0z9gamapEFrhBKmZXYz6VBezPkyTkp66WPijb5UfoIHQ4F
ZYqHouilTD1awq2f9Y0P572JoZskCpgjRPvSsYZnfafgL+RGkiJRmD+ecpltjqwm
JuJl3KjP1hxXjPwGZqNnVaTV2P49EGZMOQZDrOb4kt3q+ZX4BU3SBMg8hTGO4YnZ
N59XPmsPUsXFTk0Slu9UosAMneNaYSMHD9rmVZ4olgPSRAiUDTnloY3SUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHp50QeAY/WFP4auN9ftYQZRL6mIMB8GA1UdIwQY
MBaAFJYXmznRwdKPUGPKkh1gB+Nj4cYLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGhlYk9kSEIwbzlRWThxU0hXQUg0MlBoeGdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9jZGRmOTQtOGQ1MS00MWNkLThhNWIt
YTBiNDkzMGNiZDFlLzEvbGhlYk9kSEIwbzlRWThxU0hXQUg0MlBoeGdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC9jZGRmOTQtOGQ1MS00MWNkLThhNWItYTBiNDkzMGNiZDFl
LzEvbGhlYk9kSEIwbzlRWThxU0hXQUg0MlBoeGdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACw20cfAW
tOosMakf2KkVcGoun2Zt/+w/KfKKFsmoAgWYaDR9Gg8TiCFstrd3WLV5zPlsX6Q0
lLy+YSrwZVimHlBgHwUFa5vUYZ3fGeoUiq3lNIqwVHj6cis7FAFEzZu27RZteEBL
iIpqK1jUjfwmvbE+7G4CSJ3A96Gw3/A3XiN+a3SiSPmx54eciF4ZUt0P2Jd01ISD
jofe1EOdQONTfGfwK9LKspH7/c+s2ZrbSvauQfsz0jAZc+dQiQ1YmKQVoIR1kS5S
ybTq4Tv1N2dPTk51JJ9SJjaLsMCJ+KP9W0jiC0NoEVvPIW5wWK2FxHT9tFMQSpH9
7eApKLAf68G/DQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:34 2025 by rpki-client