Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/d5f801-4426-4f45-8f26-9ccdd3c873a6/1/LHwKdxsw0nQoUIDdxC42eYOW8iw.mft
File: LHwKdxsw0nQoUIDdxC42eYOW8iw.mft (raw, json)
Hash identifier: OrmlnNbRQvou0c0bFD8Dzqk5YOIgTk3Hwdu39GoocVM=
Subject key identifier: F5:66:1E:5C:FD:6E:D3:DC:FF:A3:58:56:16:2B:64:64:89:86:4C:88
Authority key identifier: 2C:7C:0A:77:1B:30:D2:74:28:50:80:DD:C4:2E:36:79:83:96:F2:2C
Certificate issuer: /CN=2c7c0a771b30d274285080ddc42e36798396f22c
Certificate serial: 019A53E4097520E776DC4028589BA863009E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHwKdxsw0nQoUIDdxC42eYOW8iw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/d5f801-4426-4f45-8f26-9ccdd3c873a6/1/LHwKdxsw0nQoUIDdxC42eYOW8iw.mft
Manifest number: 1432
Signing time: Wed 05 Nov 2025 12:00:44 +0000
Manifest this update: Wed 05 Nov 2025 12:00:44 +0000
Manifest next update: Thu 06 Nov 2025 12:00:44 +0000
Files and hashes: 1: LHwKdxsw0nQoUIDdxC42eYOW8iw.crl (hash: 8qcnYrtYkM8tMnjfIAb7eyxRwqoI0srhP1JyKrEi7lA=)
2: _wYBYYAWsBdIPcz67gJjf_cpxBc.roa (hash: WT5EAFrH+ID6hV4wr/zaJ0InnDxoXdrcj+f2kf7QcuM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/d5f801-4426-4f45-8f26-9ccdd3c873a6/1/LHwKdxsw0nQoUIDdxC42eYOW8iw.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/d5f801-4426-4f45-8f26-9ccdd3c873a6/1/LHwKdxsw0nQoUIDdxC42eYOW8iw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LHwKdxsw0nQoUIDdxC42eYOW8iw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:e4:09:75:20:e7:76:dc:40:28:58:9b:a8:63:00:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c7c0a771b30d274285080ddc42e36798396f22c
Validity
Not Before: Nov 5 12:00:44 2025 GMT
Not After : Nov 6 12:00:44 2025 GMT
Subject: CN=f5661e5cfd6ed3dcffa35856162b646489864c88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:34:6e:f2:6d:8f:25:27:7e:f4:02:fd:b7:63:
a6:32:9a:97:db:97:1c:28:b5:19:39:db:33:dd:bc:
2e:37:d4:29:a1:c9:07:8c:a2:00:b4:16:d9:28:9e:
ae:b4:21:aa:8a:c3:b8:74:ce:b0:41:3c:5e:64:cc:
ed:ce:a6:58:cb:cb:ea:48:4e:16:03:03:52:a0:06:
d7:2b:dd:1a:21:15:43:24:8b:b7:09:3c:21:4a:eb:
b7:51:c8:aa:4d:b1:4f:e9:b8:13:e3:1b:14:a1:96:
ca:36:10:d2:d0:c5:f5:4c:85:e5:71:ba:11:55:37:
be:40:0d:d4:ad:ea:7e:9d:db:ad:33:c7:21:59:09:
e2:51:24:ed:bc:c3:40:ec:e0:61:d9:91:56:95:a3:
d2:a0:c8:cc:5c:a0:2b:c5:82:26:1e:73:54:81:fa:
68:2d:fc:e0:30:fd:9d:d1:8a:db:13:b9:13:f1:e2:
9d:8d:62:4e:fc:16:e7:ee:97:32:32:5d:12:5c:eb:
47:a4:72:b1:8c:69:54:f1:5d:96:53:89:35:70:43:
99:5d:c7:d0:68:22:f6:ea:97:53:52:50:90:6a:02:
3b:72:8d:c3:16:bb:93:e2:22:e5:50:f6:3e:05:74:
fb:76:67:cf:53:62:2f:c8:c8:a0:ad:50:49:8e:23:
6d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:66:1E:5C:FD:6E:D3:DC:FF:A3:58:56:16:2B:64:64:89:86:4C:88
X509v3 Authority Key Identifier:
keyid:2C:7C:0A:77:1B:30:D2:74:28:50:80:DD:C4:2E:36:79:83:96:F2:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHwKdxsw0nQoUIDdxC42eYOW8iw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d5f801-4426-4f45-8f26-9ccdd3c873a6/1/LHwKdxsw0nQoUIDdxC42eYOW8iw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d5f801-4426-4f45-8f26-9ccdd3c873a6/1/LHwKdxsw0nQoUIDdxC42eYOW8iw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:00:d2:38:09:b1:00:e8:43:ae:9a:55:57:e3:d7:19:f0:8b:
e8:a2:64:3e:99:c1:68:de:fe:4e:22:73:5b:b5:a9:23:34:a5:
8d:70:48:35:69:85:50:60:32:b1:b3:a2:c0:fd:2b:42:a3:2f:
3c:44:b5:9f:fd:18:89:b2:a7:69:99:b1:85:59:45:95:6d:be:
29:0d:3a:ac:6b:1c:b3:5a:73:21:59:24:5f:86:74:b0:d9:09:
b5:5c:b1:04:dd:8b:1f:78:36:81:09:8b:df:2b:a6:e8:8a:53:
ee:fd:44:7f:67:88:1e:05:63:89:e6:9f:9e:38:7d:ac:7f:f0:
e2:d5:f6:65:16:63:d8:64:fc:12:9e:18:03:2c:ff:f3:03:45:
5b:c3:8b:2b:5d:f8:70:b3:7c:5f:97:79:42:59:a8:97:36:11:
1b:c1:6b:73:f7:38:e5:53:0d:de:06:8d:1e:9e:14:33:e2:13:
40:25:01:c3:95:9e:43:27:df:16:7f:75:5e:bc:a5:93:b6:88:
ed:f5:42:00:5b:fb:c1:df:9e:ff:68:9d:19:fe:f9:e1:dd:9e:
2a:d4:0f:7b:c4:0a:f7:8a:ba:a1:32:05:ee:0e:1e:46:a5:56:
a8:a2:aa:81:f0:9f:22:73:65:99:3b:51:e7:98:a4:4b:55:43:
5e:c8:0c:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:09:12 2025 by rpki-client