Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/LIhzAtHnQPX5hIH7S3pGFpa_5cE.mft
File: LIhzAtHnQPX5hIH7S3pGFpa_5cE.mft (raw, json)
Hash identifier: ysGr2fG8WcBMOSjSvEl/gbIaJLcDTR8WDgYS5G/xJ5s=
Subject key identifier: 35:44:5C:9D:BA:B1:AD:F2:7C:13:25:D7:F4:BE:9A:80:77:9C:E0:13
Authority key identifier: 2C:88:73:02:D1:E7:40:F5:F9:84:81:FB:4B:7A:46:16:96:BF:E5:C1
Certificate issuer: /CN=2c887302d1e740f5f98481fb4b7a461696bfe5c1
Certificate serial: 019A71EE90FD5FF8095F7B66885047401A97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LIhzAtHnQPX5hIH7S3pGFpa_5cE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/LIhzAtHnQPX5hIH7S3pGFpa_5cE.mft
Manifest number: 1722
Signing time: Tue 11 Nov 2025 08:00:51 +0000
Manifest this update: Tue 11 Nov 2025 08:00:51 +0000
Manifest next update: Wed 12 Nov 2025 08:00:51 +0000
Files and hashes: 1: 2pOIOt6X219VN3XtCdkvfoMV1HM.roa (hash: KzERp6VpDMwzGAgg9zdxnmFvkE4p1OFFxh7fS85flGo=)
2: 9XHx-FMLe5KFZj_JCaCK7as9iPY.roa (hash: sCVbuVUuH2ERBnxlvsUX4HPEyoA2qfu7FIegGKtn/gw=)
3: GGgXcPcm_VptZUKYb8GMmNRReBo.roa (hash: j3A5aG9PwaRgDAI8o0WNyR1pWgweLYrS0ZRrTwX+vVc=)
4: LIhzAtHnQPX5hIH7S3pGFpa_5cE.crl (hash: 56h5VBNya8idGkQIGRoD8pSdhzboVJS9ga+yW75xIpA=)
5: aH3szR6jhr3LKmXFz58P9TMNq1M.roa (hash: k2DoDeJi//lnLAIw8oEfwg7P4tlKFybQoCOgJClGVQo=)
6: cg9vAN0so6RVwR7-dl1qakm7GSg.roa (hash: LWonZXTxxx8N9GGW8RVI8f+urakLOSBngPnNd8+m61s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/LIhzAtHnQPX5hIH7S3pGFpa_5cE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/LIhzAtHnQPX5hIH7S3pGFpa_5cE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LIhzAtHnQPX5hIH7S3pGFpa_5cE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:90:fd:5f:f8:09:5f:7b:66:88:50:47:40:1a:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c887302d1e740f5f98481fb4b7a461696bfe5c1
Validity
Not Before: Nov 11 08:00:51 2025 GMT
Not After : Nov 12 08:00:51 2025 GMT
Subject: CN=35445c9dbab1adf27c1325d7f4be9a80779ce013
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:96:01:4c:36:cc:f9:c2:ba:4b:ef:74:dc:5a:
14:7d:58:89:46:5e:11:67:eb:81:be:5c:7e:66:a1:
04:45:15:9a:f2:5a:40:f0:68:e1:06:72:d9:73:c0:
1b:8a:eb:48:94:ad:b4:06:ba:c1:62:99:19:4d:e1:
46:cc:80:74:9c:00:fc:72:c9:90:c7:f7:ff:ae:49:
7d:dd:fb:0e:85:a6:33:b7:2e:af:40:0f:8f:a5:b9:
e0:40:3e:78:7a:0b:ad:8e:c1:a0:cc:8b:e3:57:a0:
1d:87:bb:a0:cb:fb:85:2f:c3:a1:78:0d:c1:5e:5a:
63:a9:49:84:26:cc:e6:89:66:51:f7:b8:1e:3d:bd:
1d:73:9f:82:39:df:f7:cf:91:46:6a:53:57:38:7f:
2f:29:c8:ae:ec:de:74:52:71:8c:8e:05:26:12:5a:
ae:43:b1:35:e7:dd:0a:c3:5c:ed:18:8c:68:7c:66:
10:f7:ea:a6:b7:1a:99:1a:1a:3e:4d:33:0b:18:06:
2d:f8:84:f7:5a:01:27:f7:26:74:d1:c1:57:e7:43:
fa:ba:5d:9c:c5:20:c1:78:b4:db:b2:3a:61:26:85:
e2:40:5c:ba:4d:b5:f3:07:31:56:30:f2:38:47:12:
b9:d5:53:f8:40:f3:5f:41:02:c5:e0:fb:c1:0c:a9:
ce:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:44:5C:9D:BA:B1:AD:F2:7C:13:25:D7:F4:BE:9A:80:77:9C:E0:13
X509v3 Authority Key Identifier:
keyid:2C:88:73:02:D1:E7:40:F5:F9:84:81:FB:4B:7A:46:16:96:BF:E5:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LIhzAtHnQPX5hIH7S3pGFpa_5cE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/LIhzAtHnQPX5hIH7S3pGFpa_5cE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/LIhzAtHnQPX5hIH7S3pGFpa_5cE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:cc:b9:72:3e:96:28:c2:cc:74:06:74:c1:02:6c:69:46:52:
c2:ec:99:df:6a:74:2b:f1:2b:2d:31:af:42:c4:51:13:26:d1:
0a:f7:bf:ed:af:db:97:aa:5f:c8:76:a4:dc:29:19:af:4d:57:
51:40:71:d1:0a:52:2f:a4:38:ad:42:57:89:bc:52:5d:1c:c5:
78:39:f8:78:d5:64:9e:f4:b6:18:9a:ae:9d:75:e5:4e:b0:3f:
e8:92:5c:99:09:ca:ea:be:de:e3:8a:a8:ec:19:1d:29:c7:92:
d8:e0:ea:bd:3d:5c:b6:da:8d:bd:26:66:43:2b:4c:a8:ab:3f:
58:16:3a:a9:e1:e4:95:c7:d6:04:07:b0:25:8b:4b:4f:2a:eb:
0b:45:97:80:4a:88:e2:74:a2:74:e8:17:16:e9:f8:6e:ff:8c:
55:79:fc:99:e6:8f:ed:7e:8c:0f:75:2a:b2:83:a2:24:c7:b3:
ff:ee:7b:2a:2e:a5:c8:ba:4f:02:5e:fa:eb:b8:2e:64:6e:a9:
32:f6:d6:9d:19:e0:b5:df:a5:e4:d8:c2:ba:90:4f:68:85:a8:
01:83:75:a4:13:5c:27:35:6f:4c:65:b1:cd:5b:5b:cc:d9:81:
33:73:08:66:0a:c5:b3:f2:76:a7:a5:02:d8:e0:2c:49:e2:97:
46:4a:47:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:46:06 2025 by rpki-client