Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/79c5bb-619d-4beb-8649-a2f425600db3/1/lHEhWA7QLt309eWofTfgF7Mt9xs.mft
File: lHEhWA7QLt309eWofTfgF7Mt9xs.mft (raw, json)
Hash identifier: KX0UcPg76ygRYNWJIDWI7iPzkEV0LwX17SH8sOYDiqE=
Subject key identifier: A5:37:43:71:91:5C:FB:29:07:64:74:E5:85:18:0F:58:C7:CC:4F:F1
Authority key identifier: 94:71:21:58:0E:D0:2E:DD:F4:F5:E5:A8:7D:37:E0:17:B3:2D:F7:1B
Certificate issuer: /CN=947121580ed02eddf4f5e5a87d37e017b32df71b
Certificate serial: 019A71B8CCCAB699F988949FE9FE7B38AE47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lHEhWA7QLt309eWofTfgF7Mt9xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/79c5bb-619d-4beb-8649-a2f425600db3/1/lHEhWA7QLt309eWofTfgF7Mt9xs.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 07:02:07 +0000
Manifest this update: Tue 11 Nov 2025 07:02:07 +0000
Manifest next update: Wed 12 Nov 2025 07:02:07 +0000
Files and hashes: 1: lHEhWA7QLt309eWofTfgF7Mt9xs.crl (hash: tDtMpr2DO/WtY1Gq0OPCcD13wSMhaLpn3nuoZISd7vI=)
2: qxUZWESkWfPvrh5nMLtmisJ-xm0.roa (hash: QiH9IyXND+kMiLoL1S1ImhCqyZcezaR+0IjNSX+Zg6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/79c5bb-619d-4beb-8649-a2f425600db3/1/lHEhWA7QLt309eWofTfgF7Mt9xs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/79c5bb-619d-4beb-8649-a2f425600db3/1/lHEhWA7QLt309eWofTfgF7Mt9xs.mft
rsync://rpki.ripe.net/repository/DEFAULT/lHEhWA7QLt309eWofTfgF7Mt9xs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:cc:ca:b6:99:f9:88:94:9f:e9:fe:7b:38:ae:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=947121580ed02eddf4f5e5a87d37e017b32df71b
Validity
Not Before: Nov 11 07:02:07 2025 GMT
Not After : Nov 12 07:02:07 2025 GMT
Subject: CN=a5374371915cfb29076474e585180f58c7cc4ff1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:13:1b:25:22:38:d8:63:d9:db:97:5a:05:e1:
61:48:db:52:e6:16:08:c1:80:e1:db:7d:14:67:d5:
9c:87:09:cd:e1:34:cd:dc:29:1d:2d:d3:be:6b:bf:
63:18:a0:ca:d6:54:2a:96:9c:99:66:e2:fd:88:6d:
0c:bb:a8:3f:81:1a:1f:73:8b:0b:12:5c:36:93:d8:
1b:cd:71:10:a7:fb:6a:49:48:db:08:f7:a2:ef:60:
5c:50:ad:d6:e0:50:8a:fe:5a:48:fa:4b:bd:3e:a8:
fb:f3:f7:c9:b8:cc:0a:95:61:f2:00:66:c2:1a:60:
2c:d1:39:36:9c:bc:d1:bf:4e:8c:fe:8e:af:fc:61:
c2:f7:c2:e0:89:0d:c2:d9:72:55:32:e1:4a:26:ff:
00:0d:d1:0d:bc:c6:2b:47:bb:09:c7:d4:78:0f:5d:
2a:1b:bf:5d:f5:d5:79:ec:9e:92:25:34:2f:b0:13:
e2:9b:6b:7f:cc:4f:74:60:03:d6:a3:bb:82:1b:9d:
38:2a:7a:90:f3:71:90:dd:eb:5f:e4:20:35:1e:7f:
49:58:94:5e:b1:ef:27:77:b5:3f:d3:01:65:be:e7:
ea:78:81:27:58:56:81:a2:78:a9:b3:c1:bd:77:4e:
02:41:e5:57:37:cb:a0:da:cb:0a:45:e8:f3:c9:d6:
3a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:37:43:71:91:5C:FB:29:07:64:74:E5:85:18:0F:58:C7:CC:4F:F1
X509v3 Authority Key Identifier:
keyid:94:71:21:58:0E:D0:2E:DD:F4:F5:E5:A8:7D:37:E0:17:B3:2D:F7:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lHEhWA7QLt309eWofTfgF7Mt9xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/79c5bb-619d-4beb-8649-a2f425600db3/1/lHEhWA7QLt309eWofTfgF7Mt9xs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/79c5bb-619d-4beb-8649-a2f425600db3/1/lHEhWA7QLt309eWofTfgF7Mt9xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:3d:28:16:8c:6a:fb:19:38:0e:fd:ee:19:28:05:6a:e7:f4:
72:40:15:a9:51:57:14:55:37:81:22:18:f2:4c:06:93:a6:3e:
a9:52:7f:f1:f4:e0:7d:81:00:30:7c:03:d8:44:b2:52:5d:cf:
e0:c9:3c:02:f9:cb:ac:12:3e:39:a5:79:cf:47:62:32:b0:fa:
3e:a1:b7:4b:22:e9:a3:c1:26:49:b4:e6:f3:da:4e:8c:d1:04:
31:b4:98:c8:a0:4f:25:c0:33:c9:3b:cc:0a:28:b5:af:ea:58:
0b:80:62:28:ba:19:65:6b:8c:cb:c3:2b:91:80:4a:fd:68:e2:
67:c2:ca:dd:af:d8:2a:6f:2c:1c:6d:56:2f:33:8a:59:49:59:
d3:29:3f:d0:98:bf:89:01:76:d1:94:cf:6a:5e:f7:fa:7d:19:
62:4f:9e:f0:65:4d:ce:fa:bb:08:b7:be:a3:23:47:5b:aa:e2:
4d:a0:0c:d1:fe:42:78:bd:88:65:a2:ff:85:95:a2:5a:65:98:
43:9e:2a:0a:f9:57:ad:15:29:47:fe:99:78:03:d1:ed:37:73:
a6:39:d7:50:fa:fb:fd:db:90:b6:c0:91:ee:48:82:e8:fd:ff:
f2:04:ff:5f:4c:07:51:cc:d1:f0:60:6c:7a:01:07:91:01:f9:
71:f1:7a:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuMzKtpn5iJSf6f57OK5HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0NzEyMTU4MGVkMDJlZGRmNGY1ZTVhODdkMzdlMDE3YjMy
ZGY3MWIwHhcNMjUxMTExMDcwMjA3WhcNMjUxMTEyMDcwMjA3WjAzMTEwLwYDVQQD
EyhhNTM3NDM3MTkxNWNmYjI5MDc2NDc0ZTU4NTE4MGY1OGM3Y2M0ZmYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjRMbJSI42GPZ25daBeFhSNtS5hYI
wYDh230UZ9WchwnN4TTN3CkdLdO+a79jGKDK1lQqlpyZZuL9iG0Mu6g/gRofc4sL
Elw2k9gbzXEQp/tqSUjbCPei72BcUK3W4FCK/lpI+ku9Pqj78/fJuMwKlWHyAGbC
GmAs0Tk2nLzRv06M/o6v/GHC98LgiQ3C2XJVMuFKJv8ADdENvMYrR7sJx9R4D10q
G79d9dV57J6SJTQvsBPim2t/zE90YAPWo7uCG504KnqQ83GQ3etf5CA1Hn9JWJRe
se8nd7U/0wFlvufqeIEnWFaBonips8G9d04CQeVXN8ug2ssKRejzydY6DQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKU3Q3GRXPspB2R05YUYD1jHzE/xMB8GA1UdIwQY
MBaAFJRxIVgO0C7d9PXlqH034BezLfcbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEhFaFdBN1FMdDMwOWVXb2ZUZmdGN010OXhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS83OWM1YmItNjE5ZC00YmViLTg2NDkt
YTJmNDI1NjAwZGIzLzEvbEhFaFdBN1FMdDMwOWVXb2ZUZmdGN010OXhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS83OWM1YmItNjE5ZC00YmViLTg2NDktYTJmNDI1NjAwZGIz
LzEvbEhFaFdBN1FMdDMwOWVXb2ZUZmdGN010OXhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXT0oFoxq
+xk4Dv3uGSgFauf0ckAVqVFXFFU3gSIY8kwGk6Y+qVJ/8fTgfYEAMHwD2ESyUl3P
4Mk8AvnLrBI+OaV5z0diMrD6PqG3SyLpo8EmSbTm89pOjNEEMbSYyKBPJcAzyTvM
Cii1r+pYC4BiKLoZZWuMy8MrkYBK/WjiZ8LK3a/YKm8sHG1WLzOKWUlZ0yk/0Ji/
iQF20ZTPal73+n0ZYk+e8GVNzvq7CLe+oyNHW6riTaAM0f5CeL2IZaL/hZWiWmWY
Q54qCvlXrRUpR/6ZeAPR7TdzpjnXUPr7/duQtsCR7kiC6P3/8gT/X0wHUczR8GBs
egEHkQH5cfF6uw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:00:29 2025 by rpki-client