Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.mft
File: Lh0kV-C-VNx4_B9mh9s-lLBorJs.mft (raw, json)
Hash identifier: CbuMy5N7FE87cre8E5g4lqGYOEZi/2ZiUtOw3bPTCWk=
Subject key identifier: 50:F9:11:22:35:AC:02:80:8C:63:12:90:AC:DC:A2:85:69:E9:E8:20
Authority key identifier: 2E:1D:24:57:E0:BE:54:DC:78:FC:1F:66:87:DB:3E:94:B0:68:AC:9B
Certificate issuer: /CN=2e1d2457e0be54dc78fc1f6687db3e94b068ac9b
Certificate serial: 019A4E4F9EF2CDEF67C354F742DD0CFD16FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lh0kV-C-VNx4_B9mh9s-lLBorJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.mft
Manifest number: 1118
Signing time: Tue 04 Nov 2025 10:00:32 +0000
Manifest this update: Tue 04 Nov 2025 10:00:32 +0000
Manifest next update: Wed 05 Nov 2025 10:00:32 +0000
Files and hashes: 1: B3anwTfv9G1rVUQa6NJWLwdwXYI.roa (hash: mmLvT4hHYo/WnQMssEwo9M27udmQqtzbwXP4LSX1FYM=)
2: Lh0kV-C-VNx4_B9mh9s-lLBorJs.crl (hash: LbIR+7+vhtW7VpwfFKTSp7bYH/O+WGC1rwLoo6HWuuY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lh0kV-C-VNx4_B9mh9s-lLBorJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:9e:f2:cd:ef:67:c3:54:f7:42:dd:0c:fd:16:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e1d2457e0be54dc78fc1f6687db3e94b068ac9b
Validity
Not Before: Nov 4 10:00:32 2025 GMT
Not After : Nov 5 10:00:32 2025 GMT
Subject: CN=50f9112235ac02808c631290acdca28569e9e820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a7:eb:ea:4d:ae:c5:95:55:96:c3:3c:49:f4:
a6:52:55:87:94:60:8b:9c:4e:a0:b0:f2:fa:c4:b0:
09:44:de:61:17:fe:63:af:6d:c1:d1:6d:5e:9c:73:
a1:76:32:6f:24:b1:55:1e:56:32:aa:0b:58:b7:5c:
39:71:61:50:b3:8c:50:4f:99:24:b5:80:46:dc:f7:
b5:69:e6:64:51:52:82:d2:68:fe:0c:ef:9f:ea:93:
5a:8b:5b:5a:73:36:9e:7e:16:fa:f9:ea:9d:a9:59:
3a:8b:db:5f:9d:14:c3:e1:5f:a3:39:fb:38:ad:61:
27:04:68:fb:65:81:33:15:00:9c:39:44:92:fc:ed:
26:71:99:a0:49:71:43:35:66:21:98:90:76:5d:b5:
43:19:ac:ef:c2:48:2b:25:9f:15:20:73:57:43:1f:
33:20:85:cb:f3:61:54:63:6f:c9:fd:25:e7:33:da:
80:6e:e9:02:6f:60:1a:09:df:30:aa:85:3b:80:d2:
69:b2:b5:1f:26:da:cb:fd:d9:9a:57:a2:f7:16:51:
a6:a6:ae:c2:e0:a1:10:e7:35:f7:f7:82:7b:41:7c:
dd:a7:d6:45:11:eb:06:e7:d3:e5:ae:53:41:8a:f8:
fc:b2:fe:23:01:e4:df:9a:df:ce:ab:dd:75:83:62:
cf:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:F9:11:22:35:AC:02:80:8C:63:12:90:AC:DC:A2:85:69:E9:E8:20
X509v3 Authority Key Identifier:
keyid:2E:1D:24:57:E0:BE:54:DC:78:FC:1F:66:87:DB:3E:94:B0:68:AC:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lh0kV-C-VNx4_B9mh9s-lLBorJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:68:6a:55:e0:67:31:15:4e:f2:1f:6f:75:28:45:d6:15:fc:
2d:50:6c:fa:8d:60:78:fa:9e:ae:f3:ef:4c:1d:4f:a6:bf:ce:
4a:f1:53:38:f4:ba:e8:b2:b8:ef:76:9c:1d:8c:02:2c:3d:20:
2e:8b:4f:2e:e8:9f:be:1a:17:47:fb:83:3a:bc:1b:9d:2c:24:
13:16:c4:de:43:14:2d:36:6d:e7:22:a1:5f:5a:9d:95:b5:06:
9a:d0:d6:70:3a:94:b3:99:6b:7d:16:38:b6:ce:ff:8a:13:0f:
96:d8:4b:29:e5:cb:4e:2f:ec:02:d6:51:d2:42:a3:76:a9:2c:
90:1d:0e:8d:f4:11:c7:58:d5:d5:bd:05:b0:aa:97:3b:bc:62:
11:9b:25:74:65:24:a4:cb:d9:39:8b:6b:4b:a1:90:07:85:19:
1a:ae:14:18:cb:f5:a3:15:2f:a7:9e:48:3e:31:60:01:2d:5c:
da:30:a8:71:03:ba:0f:a0:ca:90:47:4a:dc:16:03:93:e8:f7:
bf:78:08:bc:fc:8e:86:d9:cc:68:34:98:db:05:8f:e5:c4:f3:
12:f3:1e:d9:af:d5:39:17:a3:6a:18:ce:ab:a5:bc:02:2c:c1:
fb:a2:41:65:ff:17:5c:34:79:7f:3b:e3:59:3a:09:03:77:0a:
74:10:56:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:02:06 2025 by rpki-client