
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/bf3eca-171f-401c-9b5d-ccc4f1e00990/1/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.mft
File: LHJ9Cfuxmn-YXXUaIDEcG61LBx8.mft (raw, json)
Hash identifier: vQbBo5yRZKKpD0sAmKApqNL/swIMln/cthsBwxQkp5w=
Subject key identifier: F3:F3:82:4B:42:8F:C4:A8:34:DF:E9:88:95:3B:99:C1:74:EC:18:48
Authority key identifier: 2C:72:7D:09:FB:B1:9A:7F:98:5D:75:1A:20:31:1C:1B:AD:4B:07:1F
Certificate issuer: /CN=2c727d09fbb19a7f985d751a20311c1bad4b071f
Certificate serial: 0199168847331154D8E339DE0B0C92722AD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/bf3eca-171f-401c-9b5d-ccc4f1e00990/1/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.mft
Manifest number: 166B
Signing time: Thu 04 Sep 2025 21:00:53 +0000
Manifest this update: Thu 04 Sep 2025 21:00:53 +0000
Manifest next update: Fri 05 Sep 2025 21:00:53 +0000
Files and hashes: 1: 9phsu2p4WF8NqnfUkSWWdnt6zzA.roa (hash: f41MILFdl6rcNDj7+ORCxwVOJlnjfxd2bAX97uHKrtw=)
2: LHJ9Cfuxmn-YXXUaIDEcG61LBx8.crl (hash: CtTtrDMlsNakFmLKeW8CzfkByVzXeBrS0mSw0UzNjr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/bf3eca-171f-401c-9b5d-ccc4f1e00990/1/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/bf3eca-171f-401c-9b5d-ccc4f1e00990/1/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 19:46:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:16:88:47:33:11:54:d8:e3:39:de:0b:0c:92:72:2a:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c727d09fbb19a7f985d751a20311c1bad4b071f
Validity
Not Before: Sep 4 21:00:53 2025 GMT
Not After : Sep 5 21:00:53 2025 GMT
Subject: CN=f3f3824b428fc4a834dfe988953b99c174ec1848
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e7:fb:10:c8:4f:b8:c7:5c:d6:9c:c6:61:0f:
b2:57:2e:16:72:df:68:dd:20:4e:29:d0:e3:ff:72:
1d:2c:92:e7:6a:6b:ed:00:ee:b7:5d:92:55:86:a9:
5d:fd:a9:2d:31:d3:27:85:13:81:34:b7:f8:58:76:
bc:f9:e8:bf:96:c0:bc:9e:de:6f:cf:aa:62:6b:51:
a4:4f:75:fb:0f:d5:70:79:19:47:28:49:b3:eb:10:
84:47:98:0c:29:be:6f:76:f9:d8:60:75:8c:ad:89:
34:2c:ff:5c:08:fa:81:20:f7:96:fd:fb:6c:ee:c8:
39:e0:9f:dc:50:dd:a8:57:80:f8:93:3d:ac:4c:ab:
99:a4:b9:ac:57:9d:69:13:ed:bc:24:5b:08:ad:a1:
f9:55:7a:9f:a9:ce:27:57:dd:22:97:84:eb:94:a0:
de:4a:60:30:95:6e:5e:c5:2a:52:80:2c:aa:9b:35:
3a:af:27:a9:e5:ca:57:20:29:a5:cb:bc:b9:89:a7:
b8:62:29:02:e7:9d:32:b1:41:54:fd:fa:46:17:fa:
f8:e7:dd:59:66:f3:0c:93:c7:dd:b0:56:fd:73:f9:
f5:fa:a0:63:c8:59:0b:e0:13:aa:5f:88:57:05:d3:
f4:35:63:a3:2f:ed:c5:e6:77:bb:2a:8b:f5:39:96:
3d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:F3:82:4B:42:8F:C4:A8:34:DF:E9:88:95:3B:99:C1:74:EC:18:48
X509v3 Authority Key Identifier:
keyid:2C:72:7D:09:FB:B1:9A:7F:98:5D:75:1A:20:31:1C:1B:AD:4B:07:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/bf3eca-171f-401c-9b5d-ccc4f1e00990/1/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/bf3eca-171f-401c-9b5d-ccc4f1e00990/1/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:73:e9:9a:5a:d1:be:41:b5:dd:22:70:99:04:d8:2c:d5:ca:
30:b6:ab:b6:99:c4:1b:8f:a4:95:01:6a:0b:19:55:83:43:cc:
2a:8f:81:5e:e3:1b:f8:2e:a5:a2:5b:20:d4:5b:8f:8a:27:cd:
d4:5a:00:c3:fd:ad:92:99:57:6c:a8:d9:90:af:60:54:0a:81:
f2:2a:eb:1f:ca:35:3d:49:48:b9:43:bb:9a:c7:07:fe:41:bf:
7e:1f:5e:be:4f:f7:ac:cf:c8:47:48:f2:8c:3d:79:5d:22:c7:
61:45:05:f3:52:1a:36:04:09:7f:2e:b0:ad:35:05:02:bf:d5:
b2:30:2a:2e:a1:41:ba:ef:df:1a:45:06:2c:b3:3a:1b:cb:d2:
04:a6:c8:5b:ed:3a:b3:96:1f:24:5f:cf:50:fa:58:b3:c7:ab:
1e:c2:74:76:1d:32:07:42:86:c8:85:34:67:9d:50:f5:83:ca:
98:62:e4:28:b2:32:1b:f0:ae:2e:59:88:d4:1f:7f:46:11:bb:
1b:ab:de:86:b9:8d:5e:bc:a0:d0:bc:db:ef:3f:32:45:e1:ac:
59:19:40:8d:29:b9:10:9a:0c:fe:38:92:56:7d:ab:c6:d8:3c:
66:77:f4:e6:e4:aa:d4:6e:8f:96:5a:94:9c:3a:78:71:4b:f1:
f9:5d:2a:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkWiEczEVTY4zneCwyScirVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjNzI3ZDA5ZmJiMTlhN2Y5ODVkNzUxYTIwMzExYzFiYWQ0
YjA3MWYwHhcNMjUwOTA0MjEwMDUzWhcNMjUwOTA1MjEwMDUzWjAzMTEwLwYDVQQD
EyhmM2YzODI0YjQyOGZjNGE4MzRkZmU5ODg5NTNiOTljMTc0ZWMxODQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApef7EMhPuMdc1pzGYQ+yVy4Wct9o
3SBOKdDj/3IdLJLnamvtAO63XZJVhqld/aktMdMnhROBNLf4WHa8+ei/lsC8nt5v
z6pia1GkT3X7D9VweRlHKEmz6xCER5gMKb5vdvnYYHWMrYk0LP9cCPqBIPeW/fts
7sg54J/cUN2oV4D4kz2sTKuZpLmsV51pE+28JFsIraH5VXqfqc4nV90il4TrlKDe
SmAwlW5exSpSgCyqmzU6ryep5cpXICmly7y5iae4YikC550ysUFU/fpGF/r4591Z
ZvMMk8fdsFb9c/n1+qBjyFkL4BOqX4hXBdP0NWOjL+3F5ne7Kov1OZY9uQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPPzgktCj8SoNN/piJU7mcF07BhIMB8GA1UdIwQY
MBaAFCxyfQn7sZp/mF11GiAxHButSwcfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTEhKOUNmdXhtbi1ZWFhVYUlERWNHNjFMQng4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9iZjNlY2EtMTcxZi00MDFjLTliNWQt
Y2NjNGYxZTAwOTkwLzEvTEhKOUNmdXhtbi1ZWFhVYUlERWNHNjFMQng4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy9iZjNlY2EtMTcxZi00MDFjLTliNWQtY2NjNGYxZTAwOTkw
LzEvTEhKOUNmdXhtbi1ZWFhVYUlERWNHNjFMQng4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoXPpmlrR
vkG13SJwmQTYLNXKMLartpnEG4+klQFqCxlVg0PMKo+BXuMb+C6lolsg1FuPiifN
1FoAw/2tkplXbKjZkK9gVAqB8irrH8o1PUlIuUO7mscH/kG/fh9evk/3rM/IR0jy
jD15XSLHYUUF81IaNgQJfy6wrTUFAr/VsjAqLqFBuu/fGkUGLLM6G8vSBKbIW+06
s5YfJF/PUPpYs8erHsJ0dh0yB0KGyIU0Z51Q9YPKmGLkKLIyG/CuLlmI1B9/RhG7
G6vehrmNXryg0Lzb7z8yReGsWRlAjSm5EJoM/jiSVn2rxtg8Znf05uSq1G6PllqU
nDp4cUvx+V0q9Q==
-----END CERTIFICATE-----
Generated at Fri Sep 5 04:27:23 2025 by rpki-client