Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.mft
File: Lh0kV-C-VNx4_B9mh9s-lLBorJs.mft (raw, json)
Hash identifier: NNQqNTI9kpx2Wahat69qcbMdNv/Ndbw6O4UHGPkC7vs=
Subject key identifier: 7C:2E:43:01:3D:98:42:91:DB:F3:CB:FD:08:A7:67:33:17:8E:DE:16
Authority key identifier: 2E:1D:24:57:E0:BE:54:DC:78:FC:1F:66:87:DB:3E:94:B0:68:AC:9B
Certificate issuer: /CN=2e1d2457e0be54dc78fc1f6687db3e94b068ac9b
Certificate serial: 019943CED2DA0A987FF276FD224E643D41A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lh0kV-C-VNx4_B9mh9s-lLBorJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.mft
Manifest number: 108E
Signing time: Sat 13 Sep 2025 16:00:51 +0000
Manifest this update: Sat 13 Sep 2025 16:00:51 +0000
Manifest next update: Sun 14 Sep 2025 16:00:51 +0000
Files and hashes: 1: B3anwTfv9G1rVUQa6NJWLwdwXYI.roa (hash: mmLvT4hHYo/WnQMssEwo9M27udmQqtzbwXP4LSX1FYM=)
2: Lh0kV-C-VNx4_B9mh9s-lLBorJs.crl (hash: nvEJ6/kEm6UVYKiYCN+wpErkq8NH5YuZO8pArPeeRQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lh0kV-C-VNx4_B9mh9s-lLBorJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Sep 2025 11:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:43:ce:d2:da:0a:98:7f:f2:76:fd:22:4e:64:3d:41:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e1d2457e0be54dc78fc1f6687db3e94b068ac9b
Validity
Not Before: Sep 13 16:00:51 2025 GMT
Not After : Sep 14 16:00:51 2025 GMT
Subject: CN=7c2e43013d984291dbf3cbfd08a76733178ede16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0c:a2:16:41:04:cb:d2:1e:8f:b7:32:c5:f4:
0b:36:3f:8d:e6:35:44:48:9e:f6:d3:e5:69:f5:2e:
48:6d:5c:d5:1e:5b:65:70:69:f6:9d:21:47:af:27:
a1:c2:ba:e4:40:af:ff:c7:be:1b:6a:43:56:e1:ae:
11:07:75:0f:6f:69:d3:87:0f:69:35:2b:74:b7:55:
83:e3:02:f1:9a:76:e2:09:99:45:53:21:6b:ba:39:
91:2b:c6:b8:c5:ee:e8:e7:c0:08:d7:0b:c7:14:c7:
aa:ba:63:9f:12:f9:17:19:f5:80:72:4c:8a:61:e6:
0e:83:43:69:be:45:87:d6:b7:84:a0:d5:50:71:3e:
ac:87:ad:2f:07:92:02:ca:2a:b6:e4:8c:89:4c:4e:
4c:39:b1:eb:bf:a8:ca:30:53:d5:42:b4:ca:18:af:
03:dc:ce:e2:e9:12:58:dd:a7:d1:8d:c4:97:95:66:
f9:98:1a:18:a8:4b:9a:2f:1f:f0:87:c8:c3:f2:ab:
76:7b:a4:37:e6:b6:5b:57:72:91:86:1d:5f:45:de:
6c:a6:24:59:ec:c1:2b:d6:56:36:6f:37:a9:6f:7d:
24:ec:63:d3:73:b2:01:a3:41:a5:eb:45:6a:37:b8:
8a:10:61:37:ef:31:82:1b:3e:b3:d7:5f:36:fb:de:
10:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:2E:43:01:3D:98:42:91:DB:F3:CB:FD:08:A7:67:33:17:8E:DE:16
X509v3 Authority Key Identifier:
keyid:2E:1D:24:57:E0:BE:54:DC:78:FC:1F:66:87:DB:3E:94:B0:68:AC:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lh0kV-C-VNx4_B9mh9s-lLBorJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:d3:a2:50:be:c3:9e:57:cf:0b:68:27:02:83:8d:bd:53:30:
09:0b:28:d4:50:3e:0e:2a:d0:d7:46:8b:fb:02:d5:d9:f1:d1:
20:76:17:01:1e:b2:e0:29:43:82:e2:02:bb:5b:9e:05:42:4a:
b7:0a:6e:c0:00:07:0c:ea:77:2a:6b:03:ad:a2:9d:45:cd:0c:
b6:c4:c8:08:00:b2:21:26:b9:0d:ed:26:e6:64:36:87:a8:cb:
4c:34:a1:f8:39:18:13:c5:ef:a8:d6:61:d8:09:d8:d2:3f:62:
c1:b1:34:0b:9e:1a:20:7b:3c:2d:d0:1f:82:89:55:1f:2b:45:
ef:cd:b1:86:c1:b6:70:bc:93:1e:7f:45:de:4d:74:4c:cf:f3:
0b:63:e2:47:04:24:0e:2b:80:c3:67:a7:00:83:04:89:bb:b1:
db:e3:14:33:6d:2c:b6:4d:dd:1d:03:46:93:98:1f:f1:ba:fb:
b2:1d:5a:b5:be:62:b2:d1:52:b2:a2:c3:27:b0:23:8a:dd:b4:
d4:f9:0c:d8:55:83:f3:0c:2e:d3:ee:b3:7d:69:48:e5:44:e9:
7b:aa:93:ab:14:f2:28:71:9f:c7:c1:96:74:6d:ad:fa:9e:8d:
fb:8f:5c:11:7b:07:49:2f:98:5a:a2:1e:50:4e:50:e3:d2:72:
a9:37:d5:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 13 17:40:03 2025 by rpki-client