Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/eeb0c0-94f5-441a-8dd9-97b89c47d50a/1/LPHkHOfCQk-d-I65hGTJsIJr6cE.mft
File: LPHkHOfCQk-d-I65hGTJsIJr6cE.mft (raw, json)
Hash identifier: 7pBUUmTHgHRyIgco/Pgb6CDkAmwyaXV2GYdk23xIbpY=
Subject key identifier: C1:26:88:E9:EA:E4:A0:67:26:1A:B8:14:FB:D7:ED:40:8C:37:05:A3
Authority key identifier: 2C:F1:E4:1C:E7:C2:42:4F:9D:F8:8E:B9:84:64:C9:B0:82:6B:E9:C1
Certificate issuer: /CN=2cf1e41ce7c2424f9df88eb98464c9b0826be9c1
Certificate serial: 019A71B88123A7F7D240E69B869F1CDC1C67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LPHkHOfCQk-d-I65hGTJsIJr6cE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/eeb0c0-94f5-441a-8dd9-97b89c47d50a/1/LPHkHOfCQk-d-I65hGTJsIJr6cE.mft
Manifest number: 10B0
Signing time: Tue 11 Nov 2025 07:01:48 +0000
Manifest this update: Tue 11 Nov 2025 07:01:48 +0000
Manifest next update: Wed 12 Nov 2025 07:01:48 +0000
Files and hashes: 1: 21s8U-775BXGrImXYw5behrvCTg.roa (hash: dw6lhA0ynQrPKMXAZyoEl/NZ/Jca/wYUb0RkllkJszc=)
2: LPHkHOfCQk-d-I65hGTJsIJr6cE.crl (hash: kJ8QZx5giy4DZS0mAp0El5H21qCLq2NnJt7KEit58L0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/eeb0c0-94f5-441a-8dd9-97b89c47d50a/1/LPHkHOfCQk-d-I65hGTJsIJr6cE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/eeb0c0-94f5-441a-8dd9-97b89c47d50a/1/LPHkHOfCQk-d-I65hGTJsIJr6cE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LPHkHOfCQk-d-I65hGTJsIJr6cE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:81:23:a7:f7:d2:40:e6:9b:86:9f:1c:dc:1c:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cf1e41ce7c2424f9df88eb98464c9b0826be9c1
Validity
Not Before: Nov 11 07:01:48 2025 GMT
Not After : Nov 12 07:01:48 2025 GMT
Subject: CN=c12688e9eae4a067261ab814fbd7ed408c3705a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ce:00:a9:9c:de:f5:6c:a8:7d:fa:61:7a:54:
c7:3c:a3:7b:7e:88:78:98:16:27:b9:98:ae:2f:9a:
ba:89:78:36:40:17:80:ee:f8:d0:d7:e4:17:38:0b:
72:d8:e0:93:50:f1:32:cc:35:b6:7e:aa:98:7c:67:
59:60:95:e5:96:de:77:a6:0b:87:25:19:09:ff:f8:
c1:92:16:41:94:d0:fd:40:e4:b6:d5:af:cf:cb:1c:
47:69:b2:5f:af:3e:c9:64:1e:df:f3:40:c6:36:af:
dc:55:c4:37:36:4c:03:78:4a:00:e0:e2:45:55:37:
86:a5:67:ec:23:4a:d4:bc:37:5d:2a:f6:cc:71:a5:
22:01:f3:45:59:7e:ec:33:cd:eb:92:38:56:3d:61:
aa:d5:77:4a:af:d2:5a:6d:22:3b:71:5c:5d:f8:8f:
cc:a9:7f:76:49:40:3f:c0:6a:16:49:92:b6:7b:c8:
9d:19:68:a5:18:cc:04:1a:31:08:9c:f3:e7:f7:06:
e8:70:d2:14:14:87:ec:8f:1e:cd:46:4d:a5:f7:bd:
6e:a8:e7:fc:2b:39:c5:ef:56:1f:a4:2c:5a:44:8b:
d2:4e:1e:3f:fb:ed:49:a6:71:06:b7:3e:13:0a:b0:
68:af:3f:59:42:77:88:ca:26:4c:fc:68:8a:ff:8e:
41:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:26:88:E9:EA:E4:A0:67:26:1A:B8:14:FB:D7:ED:40:8C:37:05:A3
X509v3 Authority Key Identifier:
keyid:2C:F1:E4:1C:E7:C2:42:4F:9D:F8:8E:B9:84:64:C9:B0:82:6B:E9:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LPHkHOfCQk-d-I65hGTJsIJr6cE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/eeb0c0-94f5-441a-8dd9-97b89c47d50a/1/LPHkHOfCQk-d-I65hGTJsIJr6cE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/eeb0c0-94f5-441a-8dd9-97b89c47d50a/1/LPHkHOfCQk-d-I65hGTJsIJr6cE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:00:28:d7:3e:4d:9a:77:56:98:a8:a5:77:07:0c:e4:c6:3c:
e8:f5:11:48:cd:67:10:df:8c:d2:ba:4f:63:ad:42:43:90:52:
37:2a:24:4e:cd:10:f1:d0:9e:1b:df:f6:a9:7a:af:b5:2d:59:
28:f9:de:c9:2d:75:fc:98:06:41:60:77:dc:15:6d:b1:62:6b:
a5:d8:34:08:56:a5:45:3e:68:1f:0c:87:32:88:0c:63:e1:65:
f1:96:fc:c2:72:00:4e:12:cb:e0:8a:d7:83:10:6c:59:06:10:
8d:37:c4:17:b1:f2:0f:97:57:47:9f:ce:f9:54:d0:76:57:07:
a2:b7:56:fa:6f:c5:90:65:81:bc:0f:7f:a3:ab:80:97:ca:31:
00:ce:8a:37:a2:77:17:17:f7:c2:d4:ba:3a:26:53:3f:7d:53:
63:d2:77:9d:4a:e8:a2:78:7f:59:c6:d3:cb:a1:e2:a1:ae:e5:
44:bb:fa:27:ce:2c:5a:0a:47:ce:cb:7d:df:f6:71:17:f8:98:
2e:83:38:51:e2:24:fb:66:66:32:40:b8:c6:1f:6f:23:1f:f6:
75:da:16:33:c7:89:ca:a3:79:f2:fc:d5:41:28:b8:da:49:c1:
43:ec:b8:43:0e:d2:ee:db:62:ca:c9:cc:07:2f:0e:d2:86:0f:
bf:33:5d:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:02:40 2025 by rpki-client