Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/f78d7d-44f8-4099-9a12-6db826b87994/1/LHPvCB4tVzHERXQ5c6lqv96xQss.mft
File: LHPvCB4tVzHERXQ5c6lqv96xQss.mft (raw, json)
Hash identifier: v78fpEvkveQqHY8A7ptAq6pqd0/2YnU8Vdq05cUdzGU=
Subject key identifier: 30:56:00:34:55:60:1D:0C:32:A4:1C:5D:3F:F3:44:60:BC:1F:F7:17
Authority key identifier: 2C:73:EF:08:1E:2D:57:31:C4:45:74:39:73:A9:6A:BF:DE:B1:42:CB
Certificate issuer: /CN=2c73ef081e2d5731c445743973a96abfdeb142cb
Certificate serial: 019A1EADD576FEA9198E48AA337F940F6B4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHPvCB4tVzHERXQ5c6lqv96xQss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/f78d7d-44f8-4099-9a12-6db826b87994/1/LHPvCB4tVzHERXQ5c6lqv96xQss.mft
Manifest number: 07EE
Signing time: Sun 26 Oct 2025 04:01:39 +0000
Manifest this update: Sun 26 Oct 2025 04:01:39 +0000
Manifest next update: Mon 27 Oct 2025 04:01:39 +0000
Files and hashes: 1: 47JVgVgToP2JCPCrNinv-XHW2N4.roa (hash: v4DRTra/MLLmoU83Ast19V67vrhVaOaxeHPCp8x8/Y0=)
2: CoUsP7_oLqXmI4GuJPmWe-DgrMk.roa (hash: CDiTJKYK+x288ogOQUhmmMXeMfsax3zovLJjdT/l5es=)
3: LHPvCB4tVzHERXQ5c6lqv96xQss.crl (hash: txsd89UYLrXEw2R8Nw+mbzRUU1PHu3pfzlw0oD2zEdg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/f78d7d-44f8-4099-9a12-6db826b87994/1/LHPvCB4tVzHERXQ5c6lqv96xQss.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/f78d7d-44f8-4099-9a12-6db826b87994/1/LHPvCB4tVzHERXQ5c6lqv96xQss.mft
rsync://rpki.ripe.net/repository/DEFAULT/LHPvCB4tVzHERXQ5c6lqv96xQss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 03:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1e:ad:d5:76:fe:a9:19:8e:48:aa:33:7f:94:0f:6b:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c73ef081e2d5731c445743973a96abfdeb142cb
Validity
Not Before: Oct 26 04:01:39 2025 GMT
Not After : Oct 27 04:01:39 2025 GMT
Subject: CN=3056003455601d0c32a41c5d3ff34460bc1ff717
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:70:0b:fb:54:0b:46:76:a5:a3:78:9a:33:8b:
c4:9c:21:b9:49:dc:de:59:ec:34:8f:9a:59:d2:fa:
e5:ed:e1:1d:8b:56:38:5a:fc:f5:88:a1:61:23:16:
31:e1:cb:94:c3:99:41:38:a7:0b:01:7c:64:4b:94:
dd:9e:4e:0c:84:71:f2:f9:09:8a:27:fd:0e:6a:9b:
08:c5:f4:7e:e1:bd:28:96:02:43:e1:83:6a:2f:41:
13:ec:40:dd:29:59:73:3e:0c:68:a7:ba:c0:b5:9f:
39:7d:03:3e:3f:73:4d:2b:0b:4f:22:7c:91:b2:6c:
0a:51:44:c6:73:4a:fe:3e:a3:a2:e6:c9:fd:62:ea:
9f:de:54:25:03:8b:21:08:44:d6:81:c8:c4:c2:1b:
97:9e:00:be:b9:04:d6:fb:07:1e:83:97:54:8b:cd:
c8:4c:fc:9e:f7:d4:7b:81:89:e0:1b:72:a2:9b:17:
82:54:97:a3:9d:bd:05:dd:61:34:ae:10:01:b2:e4:
a4:0f:d8:b9:78:44:c1:74:29:13:c3:c6:f6:b6:69:
21:85:d1:7e:1d:47:96:4a:ee:e9:46:80:ae:ad:56:
36:47:c7:e2:ca:a2:e7:5e:d2:dd:77:e9:1e:50:28:
a1:3f:8a:20:2a:a6:40:1a:1a:75:e7:4e:d6:5b:99:
40:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:56:00:34:55:60:1D:0C:32:A4:1C:5D:3F:F3:44:60:BC:1F:F7:17
X509v3 Authority Key Identifier:
keyid:2C:73:EF:08:1E:2D:57:31:C4:45:74:39:73:A9:6A:BF:DE:B1:42:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHPvCB4tVzHERXQ5c6lqv96xQss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/f78d7d-44f8-4099-9a12-6db826b87994/1/LHPvCB4tVzHERXQ5c6lqv96xQss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/f78d7d-44f8-4099-9a12-6db826b87994/1/LHPvCB4tVzHERXQ5c6lqv96xQss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:ea:83:4b:8c:b7:3f:b1:18:e5:02:f2:ce:3a:06:c1:b1:19:
42:27:d7:ca:fb:2a:4d:51:59:67:50:b0:9b:3d:6c:67:ad:da:
2c:58:68:49:74:59:1d:5b:6e:ed:28:9d:16:6a:c3:ff:e2:4d:
5d:60:5a:80:9b:0d:3a:3e:2c:fb:8b:64:1c:ae:30:20:c8:95:
81:96:e2:7c:fb:47:cf:43:c4:2c:ce:3c:ba:94:d1:a3:58:c5:
d7:87:a3:5c:ac:1a:e2:d1:8b:e7:c5:c6:00:dc:2c:0b:61:60:
6f:d1:27:70:1c:21:75:a2:20:42:3c:f6:49:9b:13:38:61:56:
1c:39:60:87:af:ae:05:44:9c:8e:86:00:ad:8c:6f:5e:f9:b4:
9c:c0:49:31:64:5a:df:c2:db:32:b6:a8:a7:41:92:4e:6e:f4:
48:02:4a:38:36:21:66:98:17:a9:84:6a:8e:f3:60:32:20:b4:
7d:9d:56:16:ed:8b:44:2d:07:f7:c9:8f:ec:ea:92:40:bd:d1:
fb:08:e7:2a:d9:f5:de:66:60:8a:12:57:ed:8d:a4:0c:67:12:
46:8e:20:c1:c3:7b:d3:78:43:79:a4:38:a6:c6:0f:91:1b:e3:
4f:c5:0b:3f:bc:87:2b:05:ca:e1:c7:ef:5a:93:c2:aa:1a:c2:
e7:ef:f4:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoerdV2/qkZjkiqM3+UD2tOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjNzNlZjA4MWUyZDU3MzFjNDQ1NzQzOTczYTk2YWJmZGVi
MTQyY2IwHhcNMjUxMDI2MDQwMTM5WhcNMjUxMDI3MDQwMTM5WjAzMTEwLwYDVQQD
EygzMDU2MDAzNDU1NjAxZDBjMzJhNDFjNWQzZmYzNDQ2MGJjMWZmNzE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6HAL+1QLRnalo3iaM4vEnCG5Sdze
Wew0j5pZ0vrl7eEdi1Y4Wvz1iKFhIxYx4cuUw5lBOKcLAXxkS5Tdnk4MhHHy+QmK
J/0OapsIxfR+4b0olgJD4YNqL0ET7EDdKVlzPgxop7rAtZ85fQM+P3NNKwtPInyR
smwKUUTGc0r+PqOi5sn9Yuqf3lQlA4shCETWgcjEwhuXngC+uQTW+wceg5dUi83I
TPye99R7gYngG3KimxeCVJejnb0F3WE0rhABsuSkD9i5eETBdCkTw8b2tmkhhdF+
HUeWSu7pRoCurVY2R8fiyqLnXtLdd+keUCihP4ogKqZAGhp1507WW5lA3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDBWADRVYB0MMqQcXT/zRGC8H/cXMB8GA1UdIwQY
MBaAFCxz7wgeLVcxxEV0OXOpar/esULLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTEhQdkNCNHRWekhFUlhRNWM2bHF2OTZ4UXNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9mNzhkN2QtNDRmOC00MDk5LTlhMTIt
NmRiODI2Yjg3OTk0LzEvTEhQdkNCNHRWekhFUlhRNWM2bHF2OTZ4UXNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC9mNzhkN2QtNDRmOC00MDk5LTlhMTItNmRiODI2Yjg3OTk0
LzEvTEhQdkNCNHRWekhFUlhRNWM2bHF2OTZ4UXNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq+qDS4y3
P7EY5QLyzjoGwbEZQifXyvsqTVFZZ1Cwmz1sZ63aLFhoSXRZHVtu7SidFmrD/+JN
XWBagJsNOj4s+4tkHK4wIMiVgZbifPtHz0PELM48upTRo1jF14ejXKwa4tGL58XG
ANwsC2Fgb9EncBwhdaIgQjz2SZsTOGFWHDlgh6+uBUScjoYArYxvXvm0nMBJMWRa
38LbMraop0GSTm70SAJKODYhZpgXqYRqjvNgMiC0fZ1WFu2LRC0H98mP7OqSQL3R
+wjnKtn13mZgihJX7Y2kDGcSRo4gwcN703hDeaQ4psYPkRvjT8ULP7yHKwXK4cfv
WpPCqhrC5+/0mw==
-----END CERTIFICATE-----
Generated at Sun Oct 26 07:04:50 2025 by rpki-client