Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft
File: LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft (raw, json)
Hash identifier: rywyQuDWZp0a3uevZ6YpT8C5pw+f3ygh3RLIyVoxhFI=
Subject key identifier: E5:72:D3:C1:84:B4:1D:23:9A:B8:5C:52:1A:C2:96:9A:4F:EC:89:00
Authority key identifier: 2C:75:4A:E4:73:D9:C1:54:B8:04:B7:0E:D3:18:81:E0:25:D9:26:AA
Certificate issuer: /CN=2c754ae473d9c154b804b70ed31881e025d926aa
Certificate serial: 019A258AC9076B1C4A04E72EF85D7CB4F83A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHVK5HPZwVS4BLcO0xiB4CXZJqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft
Manifest number: 0CD3
Signing time: Mon 27 Oct 2025 12:00:43 +0000
Manifest this update: Mon 27 Oct 2025 12:00:43 +0000
Manifest next update: Tue 28 Oct 2025 12:00:43 +0000
Files and hashes: 1: LHVK5HPZwVS4BLcO0xiB4CXZJqo.crl (hash: tN6rVO8qIBLL+BeyW9vD+akfgwt835IU1NaEqCx6ZDw=)
2: RIso09h5--_F82YqfcCEAd3EpSw.roa (hash: dWlymz3qci5T5aLh2Je4Ec71LNxokFg1VFDedEjsW+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/LHVK5HPZwVS4BLcO0xiB4CXZJqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 12:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:8a:c9:07:6b:1c:4a:04:e7:2e:f8:5d:7c:b4:f8:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c754ae473d9c154b804b70ed31881e025d926aa
Validity
Not Before: Oct 27 12:00:43 2025 GMT
Not After : Oct 28 12:00:43 2025 GMT
Subject: CN=e572d3c184b41d239ab85c521ac2969a4fec8900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:90:7a:1a:f0:24:92:3f:d2:01:34:a9:98:4d:
c2:8a:2f:13:b1:c9:50:54:80:f8:47:02:1b:92:db:
2f:ed:08:fb:25:98:b7:8a:b0:b3:e5:d9:46:b3:9b:
ba:df:b4:70:3d:38:c7:e4:98:6a:a0:58:36:22:0c:
d1:3b:7e:bd:6d:68:9f:45:d2:ed:53:5f:34:d9:06:
85:af:89:18:97:47:3e:50:7c:4f:f2:4b:5c:a0:24:
c2:53:9f:2a:29:71:8f:d0:e8:56:bc:8e:af:b6:26:
af:24:eb:98:a9:d4:d9:b9:1e:c0:bc:29:0f:ae:c4:
2d:de:7d:45:bf:38:8c:fc:c4:fe:3d:41:11:c0:9f:
e1:71:c4:d0:a9:34:7c:a7:9b:45:d9:ce:ab:59:7c:
b4:eb:dc:be:d0:bb:25:da:b1:1d:06:91:80:a1:0c:
b2:c0:29:9c:eb:a6:3f:33:8d:ef:d8:df:0a:85:25:
57:fa:05:04:15:27:cd:8d:71:5c:60:10:4e:92:ca:
52:77:73:af:c0:bb:35:6c:dd:60:ba:1e:32:8c:e7:
99:8a:b0:73:2e:fe:40:6e:15:04:36:38:fd:e8:3b:
4d:82:a7:f0:66:5a:4e:bc:40:09:8f:a9:ae:82:50:
d4:ec:6c:51:42:e9:7f:35:7e:09:b6:a2:ca:17:82:
d1:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:72:D3:C1:84:B4:1D:23:9A:B8:5C:52:1A:C2:96:9A:4F:EC:89:00
X509v3 Authority Key Identifier:
keyid:2C:75:4A:E4:73:D9:C1:54:B8:04:B7:0E:D3:18:81:E0:25:D9:26:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHVK5HPZwVS4BLcO0xiB4CXZJqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:8e:1a:46:0d:e9:10:ef:f8:50:33:af:79:97:82:2b:3c:da:
21:e7:20:45:71:c2:d4:4e:8e:16:19:71:71:fe:ab:52:b5:7d:
7b:09:e7:cf:27:be:a5:53:4e:65:87:cd:a1:99:c0:ec:f3:da:
e9:5e:05:29:3c:b1:46:1d:5a:a9:80:e2:03:fc:b7:42:7a:84:
85:d7:87:a1:a4:0c:8c:28:d5:c9:33:26:9f:5d:eb:93:14:db:
74:18:de:56:c3:6b:57:06:98:30:9c:de:95:36:06:cb:a0:78:
68:eb:bd:bb:45:00:03:f2:a8:5b:65:cf:ba:b3:bf:ae:9e:f5:
dc:39:3c:b0:c2:9e:38:a6:a5:38:82:31:e6:74:76:64:0e:b2:
96:03:f7:d2:5f:7d:81:4a:1e:d7:91:19:02:59:19:48:51:12:
2a:5a:29:80:03:c1:13:e0:0a:5f:bd:ef:72:36:33:69:ee:69:
24:78:42:0d:a6:c5:0f:c4:59:4c:b1:84:0a:2a:be:96:ec:c6:
5f:09:44:7a:92:12:7d:1f:7e:98:aa:c4:fe:a7:6b:f1:e7:ae:
29:da:bb:e1:94:9e:2e:cc:55:54:d9:1b:2e:ff:90:15:77:29:
d5:c5:fa:66:90:6f:96:fb:24:2f:e3:4c:de:0c:32:6e:a5:6b:
27:46:22:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoliskHaxxKBOcu+F18tPg6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjNzU0YWU0NzNkOWMxNTRiODA0YjcwZWQzMTg4MWUwMjVk
OTI2YWEwHhcNMjUxMDI3MTIwMDQzWhcNMjUxMDI4MTIwMDQzWjAzMTEwLwYDVQQD
EyhlNTcyZDNjMTg0YjQxZDIzOWFiODVjNTIxYWMyOTY5YTRmZWM4OTAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJB6GvAkkj/SATSpmE3Cii8TsclQ
VID4RwIbktsv7Qj7JZi3irCz5dlGs5u637RwPTjH5JhqoFg2IgzRO369bWifRdLt
U1802QaFr4kYl0c+UHxP8ktcoCTCU58qKXGP0OhWvI6vtiavJOuYqdTZuR7AvCkP
rsQt3n1FvziM/MT+PUERwJ/hccTQqTR8p5tF2c6rWXy069y+0Lsl2rEdBpGAoQyy
wCmc66Y/M43v2N8KhSVX+gUEFSfNjXFcYBBOkspSd3OvwLs1bN1guh4yjOeZirBz
Lv5AbhUENjj96DtNgqfwZlpOvEAJj6muglDU7GxRQul/NX4JtqLKF4LRXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOVy08GEtB0jmrhcUhrClppP7IkAMB8GA1UdIwQY
MBaAFCx1SuRz2cFUuAS3DtMYgeAl2SaqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTEhWSzVIUFp3VlM0QkxjTzB4aUI0Q1haSnFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC80YTA5NDktZGY1OC00MDA1LTk3Njgt
ZmM1MzkzYzU3ODg3LzEvTEhWSzVIUFp3VlM0QkxjTzB4aUI0Q1haSnFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC80YTA5NDktZGY1OC00MDA1LTk3NjgtZmM1MzkzYzU3ODg3
LzEvTEhWSzVIUFp3VlM0QkxjTzB4aUI0Q1haSnFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASI4aRg3p
EO/4UDOveZeCKzzaIecgRXHC1E6OFhlxcf6rUrV9ewnnzye+pVNOZYfNoZnA7PPa
6V4FKTyxRh1aqYDiA/y3QnqEhdeHoaQMjCjVyTMmn13rkxTbdBjeVsNrVwaYMJze
lTYGy6B4aOu9u0UAA/KoW2XPurO/rp713Dk8sMKeOKalOIIx5nR2ZA6ylgP30l99
gUoe15EZAlkZSFESKlopgAPBE+AKX73vcjYzae5pJHhCDabFD8RZTLGECiq+luzG
XwlEepISfR9+mKrE/qdr8eeuKdq74ZSeLsxVVNkbLv+QFXcp1cX6ZpBvlvskL+NM
3gwybqVrJ0Yi/g==
-----END CERTIFICATE-----
Generated at Mon Oct 27 17:37:01 2025 by rpki-client