Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/063658-8262-4965-9661-0542427b02b9/1/lLHL_0vZcPon_e_Uv2iwLWjSud0.mft
File: lLHL_0vZcPon_e_Uv2iwLWjSud0.mft (raw, json)
Hash identifier: YgLJRiYKCJRyi35O8rk4ZY5ImXBVVRF4GBmBTFsxk94=
Subject key identifier: 87:AA:71:57:D8:D4:CF:BA:F6:47:F6:F5:53:A8:12:B0:64:18:C8:1C
Authority key identifier: 94:B1:CB:FF:4B:D9:70:FA:27:FD:EF:D4:BF:68:B0:2D:68:D2:B9:DD
Certificate issuer: /CN=94b1cbff4bd970fa27fdefd4bf68b02d68d2b9dd
Certificate serial: 019A72937C93824DEAF0A14C81AE547202B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lLHL_0vZcPon_e_Uv2iwLWjSud0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/063658-8262-4965-9661-0542427b02b9/1/lLHL_0vZcPon_e_Uv2iwLWjSud0.mft
Manifest number: 16DB
Signing time: Tue 11 Nov 2025 11:00:59 +0000
Manifest this update: Tue 11 Nov 2025 11:00:59 +0000
Manifest next update: Wed 12 Nov 2025 11:00:59 +0000
Files and hashes: 1: 1-tC0rjZV1jihIqCSqr691PhK46c.roa (hash: OZRRaNXEuVkMUwrYkvaXW28rMwl6+wF4euV4WCbSFTw=)
2: lLHL_0vZcPon_e_Uv2iwLWjSud0.crl (hash: qD7vNxLhv2x7hWt08LEPAXr8UqVIMNUHZ5SkjKmUW2s=)
3: wXXOQ9H2b6IyrY2B0lg-XuD_B8I.roa (hash: cgMdX3AAi5D4nzcU3HSWbT0lY1xCqmK5843fX99UXkY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/063658-8262-4965-9661-0542427b02b9/1/lLHL_0vZcPon_e_Uv2iwLWjSud0.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/063658-8262-4965-9661-0542427b02b9/1/lLHL_0vZcPon_e_Uv2iwLWjSud0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lLHL_0vZcPon_e_Uv2iwLWjSud0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:7c:93:82:4d:ea:f0:a1:4c:81:ae:54:72:02:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94b1cbff4bd970fa27fdefd4bf68b02d68d2b9dd
Validity
Not Before: Nov 11 11:00:59 2025 GMT
Not After : Nov 12 11:00:59 2025 GMT
Subject: CN=87aa7157d8d4cfbaf647f6f553a812b06418c81c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:57:c3:25:80:13:5a:27:eb:ea:35:f2:aa:b5:
bf:36:5b:42:3c:83:7e:2f:28:21:b0:ca:5c:57:00:
30:d4:4e:a4:e0:8c:43:32:ea:22:59:b2:6c:60:08:
51:6e:0e:80:b0:40:b7:e6:25:d3:2a:fc:db:bf:3c:
ae:29:f2:ce:33:cc:ad:3d:9e:35:5f:65:0a:28:25:
4c:62:44:85:3b:8a:70:23:df:df:7e:2e:89:71:a8:
d3:a0:68:ac:32:fa:c9:81:29:55:17:e2:3c:03:e6:
a3:44:3a:32:05:77:9b:68:a4:10:9b:ad:d5:e0:97:
e0:bd:af:4b:bb:69:6a:8d:6e:6a:db:91:5a:36:7a:
87:5e:6f:17:c0:44:f2:3a:4e:26:72:ea:ca:6f:d1:
33:fb:df:cd:0f:36:a1:0a:a1:8a:dd:13:93:5b:98:
4f:df:5b:29:a9:c7:04:8a:04:2d:38:d1:34:15:ea:
37:62:c4:f3:23:f4:e2:1a:72:86:d8:69:57:79:29:
06:f1:d7:52:19:1a:9b:ad:a2:4d:bd:31:7b:1c:1c:
0d:de:cc:49:98:41:d1:82:0e:13:4a:c1:a2:a7:a7:
7b:a4:7d:53:5b:41:43:d3:44:b5:c0:e7:b1:b5:e9:
58:32:27:90:3d:61:6e:b2:65:6b:10:ef:84:85:22:
4a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:AA:71:57:D8:D4:CF:BA:F6:47:F6:F5:53:A8:12:B0:64:18:C8:1C
X509v3 Authority Key Identifier:
keyid:94:B1:CB:FF:4B:D9:70:FA:27:FD:EF:D4:BF:68:B0:2D:68:D2:B9:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lLHL_0vZcPon_e_Uv2iwLWjSud0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/063658-8262-4965-9661-0542427b02b9/1/lLHL_0vZcPon_e_Uv2iwLWjSud0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/063658-8262-4965-9661-0542427b02b9/1/lLHL_0vZcPon_e_Uv2iwLWjSud0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:31:b7:a0:45:e0:8e:94:40:d4:d2:4a:99:a2:a2:c6:f3:21:
31:9c:16:3f:e1:e1:d8:b3:e4:2c:fc:d0:8a:6e:4a:ea:68:21:
38:73:fb:ea:9e:49:b2:6e:65:26:08:9a:ba:5d:04:4c:55:12:
61:13:d3:db:1f:41:9c:19:e7:15:fd:1e:79:f5:ed:57:af:f3:
8d:dd:99:2c:e1:18:76:b6:7d:95:47:c0:e7:74:e7:17:80:33:
50:89:15:25:c8:fd:ad:18:d4:07:83:0e:fa:78:01:cd:c0:1c:
b8:dc:c3:35:c4:c8:7d:38:1b:22:df:03:e4:92:24:4b:50:ad:
e3:9a:ab:37:72:45:ce:36:fb:54:3c:77:97:ac:d0:3b:6b:c2:
d7:3f:55:1d:c6:49:48:8d:59:e4:95:5b:11:a5:5e:51:0e:11:
a1:bc:06:18:e6:78:a4:c6:ca:01:3a:eb:f7:71:c3:cc:55:19:
df:1a:1a:81:98:33:1c:1c:60:f9:b2:2e:63:8b:35:7b:03:e8:
e5:9c:7e:c1:b3:8f:7a:d2:af:d8:b2:d6:ad:4a:ef:03:69:f8:
64:41:69:c8:e4:97:86:54:c7:bd:f3:a4:f8:8b:fc:13:3e:85:
6e:e1:77:68:01:3e:33:01:96:f8:88:c2:c4:34:19:bf:b5:7b:
09:f2:54:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:13:54 2025 by rpki-client