Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.mft
File: lhJPJSRqVAn77hG1Ny3YviTG6es.mft (raw, json)
Hash identifier: 8HEZVsEOEQ9HsOvSmeGax+TOiWslLhqIMHub8MeRaNE=
Subject key identifier: 47:53:E5:8E:A4:4A:F3:C5:2E:17:A7:B0:7F:8A:2E:8C:7A:0C:4B:8D
Authority key identifier: 96:12:4F:25:24:6A:54:09:FB:EE:11:B5:37:2D:D8:BE:24:C6:E9:EB
Certificate issuer: /CN=96124f25246a5409fbee11b5372dd8be24c6e9eb
Certificate serial: 019A24AED501A64CAD989B9B42EBBF97A0DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lhJPJSRqVAn77hG1Ny3YviTG6es.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.mft
Manifest number: 0A16
Signing time: Mon 27 Oct 2025 08:00:28 +0000
Manifest this update: Mon 27 Oct 2025 08:00:28 +0000
Manifest next update: Tue 28 Oct 2025 08:00:28 +0000
Files and hashes: 1: c3njCbUkCCL3mnp4u_KCanHzP7M.roa (hash: vVs8Ror537sKvCZah39iYsDHQqQgVb1rydMRu4BJ5YQ=)
2: lhJPJSRqVAn77hG1Ny3YviTG6es.crl (hash: dGQKbFIDOw1dXNUeJCrfHthAm7OkIgj5Fd0KbQZt/nw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.mft
rsync://rpki.ripe.net/repository/DEFAULT/lhJPJSRqVAn77hG1Ny3YviTG6es.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 07:27:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:ae:d5:01:a6:4c:ad:98:9b:9b:42:eb:bf:97:a0:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96124f25246a5409fbee11b5372dd8be24c6e9eb
Validity
Not Before: Oct 27 08:00:28 2025 GMT
Not After : Oct 28 08:00:28 2025 GMT
Subject: CN=4753e58ea44af3c52e17a7b07f8a2e8c7a0c4b8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:49:dc:76:bd:22:c6:fe:83:0a:61:39:98:37:
e1:b5:40:4e:13:5e:62:8e:80:16:e9:f3:d0:d0:b8:
fc:f2:11:cd:f5:4d:41:c7:59:68:0f:e2:51:1f:9d:
09:72:15:d8:5a:9f:7a:b1:ab:83:82:de:24:f9:f1:
c3:12:c1:81:79:fc:c8:7c:42:ce:25:e1:3f:57:60:
97:6e:48:74:06:c4:f8:98:d1:a5:86:a5:57:05:47:
d0:d2:75:f1:10:31:bf:03:d6:ba:d0:45:ac:e5:59:
75:57:78:e1:d7:c0:57:8b:0b:98:4d:f7:90:a7:c7:
69:d1:b5:00:2b:3a:0a:a3:35:47:16:37:4e:3a:22:
bf:c6:65:53:cf:44:f0:8b:f7:cb:40:a0:e6:53:25:
dd:fd:07:0b:38:43:5d:88:fc:3c:4f:cf:4d:17:60:
54:5a:0c:ae:15:2d:ea:92:e8:f7:37:ec:60:06:c1:
41:e6:a3:2d:a5:51:98:a2:6a:81:dd:6f:46:65:9a:
8e:23:72:7f:44:c4:3d:2b:70:9f:56:2c:aa:51:42:
09:93:94:90:bd:97:e7:6b:14:f3:a4:a7:bb:ce:8c:
68:d0:90:a6:c2:49:16:81:79:66:4c:11:30:2f:40:
01:5a:9b:52:e7:67:63:f1:16:cc:5c:e1:17:ee:17:
36:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:53:E5:8E:A4:4A:F3:C5:2E:17:A7:B0:7F:8A:2E:8C:7A:0C:4B:8D
X509v3 Authority Key Identifier:
keyid:96:12:4F:25:24:6A:54:09:FB:EE:11:B5:37:2D:D8:BE:24:C6:E9:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhJPJSRqVAn77hG1Ny3YviTG6es.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:1f:09:47:2e:9f:73:e3:d2:65:b6:bf:f1:44:9b:2e:a6:8d:
fd:d3:9c:0b:9b:33:cd:8f:2e:d6:cb:f6:9d:52:40:70:04:c2:
b3:8d:88:d2:e0:35:d4:f7:95:21:bf:11:a5:26:ed:03:a9:ef:
03:51:aa:58:ad:d5:54:14:8d:7d:28:6c:2b:77:80:d8:52:92:
4c:a4:9e:c7:80:12:bd:81:73:7d:62:48:0b:bd:69:10:4d:08:
14:db:e7:c8:a2:d3:27:b8:ec:9d:53:a8:7d:0f:96:59:5b:67:
56:32:31:32:b5:94:45:2c:6b:f5:46:10:96:01:e2:ff:3c:97:
62:60:7c:9f:84:2c:7a:3f:b7:21:6f:94:35:50:b8:5c:36:29:
e4:74:1b:df:fe:7f:34:0d:b8:06:cd:04:ac:90:12:fe:d6:04:
6f:6c:7a:e0:c3:0b:6a:e8:68:da:2b:f6:67:3c:e0:d6:ac:64:
7d:6d:85:96:d1:a3:21:0b:e2:85:63:9a:9c:38:11:1a:20:85:
c0:51:da:1f:02:66:ae:55:15:b0:7e:b4:3a:37:2d:28:b9:5c:
cf:55:18:76:88:f2:04:39:e9:eb:2f:99:a8:87:78:4c:ad:c8:
1d:69:40:d3:71:16:1c:ee:f2:9f:1b:31:60:f6:1c:2b:f2:03:
92:2f:14:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 09:19:37 2025 by rpki-client