Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/bf3eca-171f-401c-9b5d-ccc4f1e00990/1/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.mft
File: LHJ9Cfuxmn-YXXUaIDEcG61LBx8.mft (raw, json)
Hash identifier: iZVuW+Tv9wL/VLfkFxtQAXe7WzlddUa0XUoAZjI/HGg=
Subject key identifier: 83:F7:AC:03:BC:EC:93:42:28:A5:07:1A:C7:C5:35:A8:93:B4:17:6D
Authority key identifier: 2C:72:7D:09:FB:B1:9A:7F:98:5D:75:1A:20:31:1C:1B:AD:4B:07:1F
Certificate issuer: /CN=2c727d09fbb19a7f985d751a20311c1bad4b071f
Certificate serial: 019A72264F1FEB252ECA1ABB563E209464DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/bf3eca-171f-401c-9b5d-ccc4f1e00990/1/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 09:01:44 +0000
Manifest this update: Tue 11 Nov 2025 09:01:44 +0000
Manifest next update: Wed 12 Nov 2025 09:01:44 +0000
Files and hashes: 1: 9phsu2p4WF8NqnfUkSWWdnt6zzA.roa (hash: f41MILFdl6rcNDj7+ORCxwVOJlnjfxd2bAX97uHKrtw=)
2: LHJ9Cfuxmn-YXXUaIDEcG61LBx8.crl (hash: PUP5W/tU+9Ksqfoza+dnWYA4Tb/VSCOaxMnCnLryF88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/bf3eca-171f-401c-9b5d-ccc4f1e00990/1/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/bf3eca-171f-401c-9b5d-ccc4f1e00990/1/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:4f:1f:eb:25:2e:ca:1a:bb:56:3e:20:94:64:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c727d09fbb19a7f985d751a20311c1bad4b071f
Validity
Not Before: Nov 11 09:01:44 2025 GMT
Not After : Nov 12 09:01:44 2025 GMT
Subject: CN=83f7ac03bcec934228a5071ac7c535a893b4176d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:bb:44:b6:22:8d:fa:eb:f3:49:8f:7b:80:0d:
03:d0:52:c7:e3:53:46:d9:b9:91:38:fc:3e:c4:e3:
0d:bf:28:2b:ec:6a:e4:3c:8d:f3:fd:05:f0:ca:fa:
de:d9:d9:7a:86:b5:83:19:01:51:06:60:7f:8c:02:
31:66:ab:9a:7a:81:c5:94:30:0f:51:38:21:05:3c:
39:5c:55:2f:dd:1f:67:ab:f4:67:36:10:3b:24:cf:
10:b0:62:76:16:02:19:68:a5:83:4c:18:f2:24:90:
27:52:8a:1f:d7:cf:04:fa:25:40:96:0e:69:b9:5a:
e2:fa:39:90:dc:74:89:df:d8:68:fd:05:fb:5f:16:
31:d8:1f:f9:f4:19:ba:80:0e:c2:d1:fe:80:87:33:
4c:23:4c:c6:1a:8d:6b:2d:5b:40:f1:04:52:ab:1f:
ba:b9:72:b5:72:ea:da:b1:51:92:60:cd:5c:b2:be:
12:9f:87:d2:36:77:30:6a:f3:d5:59:08:5b:61:a6:
62:20:1c:02:bb:50:9c:41:bf:76:6f:d5:49:20:aa:
c1:ea:47:03:3d:c7:dc:4b:8e:ee:c0:8c:cd:d8:6d:
97:73:6a:2f:8c:26:3b:e9:08:2b:a5:40:77:6b:3b:
02:dd:d8:e9:b8:af:f8:3f:ad:ac:79:f8:40:e4:70:
95:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:F7:AC:03:BC:EC:93:42:28:A5:07:1A:C7:C5:35:A8:93:B4:17:6D
X509v3 Authority Key Identifier:
keyid:2C:72:7D:09:FB:B1:9A:7F:98:5D:75:1A:20:31:1C:1B:AD:4B:07:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/bf3eca-171f-401c-9b5d-ccc4f1e00990/1/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/bf3eca-171f-401c-9b5d-ccc4f1e00990/1/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:93:67:d2:76:e6:5e:eb:a9:da:95:8c:55:8d:e6:43:29:0d:
a6:7d:75:1a:33:90:4c:20:32:ab:b3:05:23:e6:4e:7f:a6:6e:
42:45:f7:15:24:71:8d:16:2b:f0:10:dd:19:f8:fc:df:37:ef:
24:5a:a1:63:12:14:22:42:cc:f4:35:bb:8b:78:48:58:ac:a3:
ee:cf:23:2e:7e:ef:e3:9d:93:ac:bc:05:4a:5c:2e:b7:ee:7f:
73:d0:e9:d4:73:69:45:85:ab:19:4d:30:66:f5:22:d5:47:a1:
9c:94:43:3f:62:ee:99:1f:ce:1b:68:28:44:a8:cf:5d:d9:da:
5c:31:4d:d5:d2:65:5b:6e:32:27:99:7f:2e:b3:53:08:7a:95:
2f:b5:c0:b0:c8:62:40:30:94:36:e8:49:9e:23:63:6f:f6:ab:
b5:09:e9:2b:1b:3a:a9:03:41:59:4e:a0:24:1c:92:95:ad:8d:
18:ba:72:80:14:20:cc:1d:a6:57:1c:8f:80:f1:7e:8d:f1:b5:
82:79:3b:03:10:0d:4c:22:04:6d:34:c5:8a:2d:d2:ba:7f:85:
7e:8e:16:c0:23:b0:4d:0d:cd:07:41:9c:53:c9:c6:f6:5e:c8:
2f:7b:55:e2:13:a5:03:b8:95:76:1f:d2:53:18:15:6b:19:78:
eb:c0:23:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJk8f6yUuyhq7Vj4glGTaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjNzI3ZDA5ZmJiMTlhN2Y5ODVkNzUxYTIwMzExYzFiYWQ0
YjA3MWYwHhcNMjUxMTExMDkwMTQ0WhcNMjUxMTEyMDkwMTQ0WjAzMTEwLwYDVQQD
Eyg4M2Y3YWMwM2JjZWM5MzQyMjhhNTA3MWFjN2M1MzVhODkzYjQxNzZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLtEtiKN+uvzSY97gA0D0FLH41NG
2bmROPw+xOMNvygr7GrkPI3z/QXwyvre2dl6hrWDGQFRBmB/jAIxZquaeoHFlDAP
UTghBTw5XFUv3R9nq/RnNhA7JM8QsGJ2FgIZaKWDTBjyJJAnUoof188E+iVAlg5p
uVri+jmQ3HSJ39ho/QX7XxYx2B/59Bm6gA7C0f6AhzNMI0zGGo1rLVtA8QRSqx+6
uXK1curasVGSYM1csr4Sn4fSNncwavPVWQhbYaZiIBwCu1CcQb92b9VJIKrB6kcD
PcfcS47uwIzN2G2Xc2ovjCY76QgrpUB3azsC3djpuK/4P62sefhA5HCVQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIP3rAO87JNCKKUHGsfFNaiTtBdtMB8GA1UdIwQY
MBaAFCxyfQn7sZp/mF11GiAxHButSwcfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTEhKOUNmdXhtbi1ZWFhVYUlERWNHNjFMQng4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9iZjNlY2EtMTcxZi00MDFjLTliNWQt
Y2NjNGYxZTAwOTkwLzEvTEhKOUNmdXhtbi1ZWFhVYUlERWNHNjFMQng4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy9iZjNlY2EtMTcxZi00MDFjLTliNWQtY2NjNGYxZTAwOTkw
LzEvTEhKOUNmdXhtbi1ZWFhVYUlERWNHNjFMQng4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmZNn0nbm
Xuup2pWMVY3mQykNpn11GjOQTCAyq7MFI+ZOf6ZuQkX3FSRxjRYr8BDdGfj83zfv
JFqhYxIUIkLM9DW7i3hIWKyj7s8jLn7v452TrLwFSlwut+5/c9Dp1HNpRYWrGU0w
ZvUi1UehnJRDP2LumR/OG2goRKjPXdnaXDFN1dJlW24yJ5l/LrNTCHqVL7XAsMhi
QDCUNuhJniNjb/artQnpKxs6qQNBWU6gJBySla2NGLpygBQgzB2mVxyPgPF+jfG1
gnk7AxANTCIEbTTFii3Sun+Ffo4WwCOwTQ3NB0GcU8nG9l7IL3tV4hOlA7iVdh/S
UxgVaxl468AjgQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:28 2025 by rpki-client