Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/e4be23-b536-4e30-9a5b-5d5d02bb7199/1/lHjtPq1if84WxRgCUMRmIXMY1lw.mft
File: lHjtPq1if84WxRgCUMRmIXMY1lw.mft (raw, json)
Hash identifier: DLNmeYVzXh39pbr8C7Zmx/hVy+vugzXYawnYyj4tXCE=
Subject key identifier: EA:E0:11:DD:86:FF:1D:09:96:04:66:19:66:5C:5B:74:B9:9A:FB:72
Authority key identifier: 94:78:ED:3E:AD:62:7F:CE:16:C5:18:02:50:C4:66:21:73:18:D6:5C
Certificate issuer: /CN=9478ed3ead627fce16c5180250c466217318d65c
Certificate serial: 0199228C6BBE7C9A1342285950BD8A2AD0D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lHjtPq1if84WxRgCUMRmIXMY1lw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/e4be23-b536-4e30-9a5b-5d5d02bb7199/1/lHjtPq1if84WxRgCUMRmIXMY1lw.mft
Manifest number: 1670
Signing time: Sun 07 Sep 2025 05:00:51 +0000
Manifest this update: Sun 07 Sep 2025 05:00:51 +0000
Manifest next update: Mon 08 Sep 2025 05:00:51 +0000
Files and hashes: 1: df6eEH1lcm-NQu74tYmhvofIQ3M.roa (hash: 2j1bAmdfTQz3oXGIdGeOLHdjury5pLuTexUtxV+TqRE=)
2: lHjtPq1if84WxRgCUMRmIXMY1lw.crl (hash: k7Qku3+nLSKlcc9IL/Ia1MK7OrAT/y+tfaiBmNsX8+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/e4be23-b536-4e30-9a5b-5d5d02bb7199/1/lHjtPq1if84WxRgCUMRmIXMY1lw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/e4be23-b536-4e30-9a5b-5d5d02bb7199/1/lHjtPq1if84WxRgCUMRmIXMY1lw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lHjtPq1if84WxRgCUMRmIXMY1lw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:6b:be:7c:9a:13:42:28:59:50:bd:8a:2a:d0:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9478ed3ead627fce16c5180250c466217318d65c
Validity
Not Before: Sep 7 05:00:51 2025 GMT
Not After : Sep 8 05:00:51 2025 GMT
Subject: CN=eae011dd86ff1d0996046619665c5b74b99afb72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e7:b5:c6:51:10:76:d1:8d:9f:84:af:70:69:
a1:c9:2a:a4:22:d9:c9:d1:07:e4:d4:68:ee:c9:55:
82:9e:1b:a6:f3:df:b2:4e:a2:0b:ff:80:01:98:9f:
39:38:6d:3d:bd:be:39:c5:a9:ab:b0:02:0c:7b:db:
f7:7a:a7:c2:d8:a4:a1:b2:f0:04:6d:e6:2f:ad:7f:
ce:bc:42:c7:1e:ae:95:89:81:b7:51:d1:c2:6b:ff:
d3:f8:d6:76:12:45:83:3d:a4:6a:e7:9d:c9:15:8b:
9f:98:33:76:6f:56:71:e7:19:fb:5d:a4:6d:7f:f6:
54:ad:e1:46:84:d9:a0:a3:ec:59:22:a5:db:3b:41:
12:37:bd:43:c9:bc:1d:34:69:65:54:46:df:6a:9e:
28:e7:a9:b6:4b:eb:09:40:71:3b:40:c1:80:c5:45:
4a:a7:1c:59:b0:ae:ed:9b:7e:54:c1:49:c8:18:6d:
51:6a:00:3d:f1:af:21:d1:f6:a9:19:92:e6:69:74:
ba:39:69:c0:e5:a8:c2:1b:a4:15:cd:17:11:a9:bc:
2d:ca:73:5b:f0:1c:fb:20:05:11:bc:43:29:7e:a3:
a9:15:aa:fb:d3:ef:67:03:29:a2:d3:2f:6e:c0:ab:
ff:6e:2a:d7:d5:46:aa:f5:dd:04:10:9a:56:51:c9:
7b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:E0:11:DD:86:FF:1D:09:96:04:66:19:66:5C:5B:74:B9:9A:FB:72
X509v3 Authority Key Identifier:
keyid:94:78:ED:3E:AD:62:7F:CE:16:C5:18:02:50:C4:66:21:73:18:D6:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lHjtPq1if84WxRgCUMRmIXMY1lw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e4be23-b536-4e30-9a5b-5d5d02bb7199/1/lHjtPq1if84WxRgCUMRmIXMY1lw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e4be23-b536-4e30-9a5b-5d5d02bb7199/1/lHjtPq1if84WxRgCUMRmIXMY1lw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:95:77:01:15:af:66:9b:dc:d4:77:c0:29:89:54:80:fd:cc:
16:32:d4:72:01:58:0a:c2:72:8c:32:9b:2b:72:9d:02:04:76:
89:1d:70:ea:e5:81:d8:a8:1f:31:9e:ff:b9:ad:89:2a:e0:55:
ca:63:1f:41:56:cd:7a:4a:97:53:8c:e5:83:e3:dd:26:67:bf:
0a:d4:eb:7a:a4:a1:63:c3:3a:93:4d:73:06:35:b8:ef:af:41:
2a:cb:20:0b:3e:28:e2:7d:e2:f5:84:f7:10:12:d0:5c:10:c7:
e8:7e:3e:6a:84:db:6a:b5:fa:3d:46:3f:28:66:f0:5d:25:93:
f3:d6:62:79:46:95:e4:83:a2:2d:a0:fd:4c:d1:49:08:22:77:
51:f0:ac:a0:b4:57:24:bf:f0:3b:99:7e:66:4f:fb:45:ab:41:
04:0d:3e:89:5c:4c:f4:dc:5f:6a:47:f3:4e:6f:98:6e:c5:7d:
1d:61:ae:65:f9:c5:f4:93:db:f7:c7:2d:7a:d4:7e:d4:2c:c9:
7d:43:f4:b1:8c:0a:f1:2c:7b:37:0d:26:89:fd:db:2c:9e:7c:
77:0d:93:7d:dd:33:c6:b4:05:e2:91:f9:2b:8f:57:c5:1f:27:
d3:68:ab:be:9e:f0:ac:25:92:c8:a9:49:cd:1a:4c:13:24:85:
e9:7c:dc:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkijGu+fJoTQihZUL2KKtDSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0NzhlZDNlYWQ2MjdmY2UxNmM1MTgwMjUwYzQ2NjIxNzMx
OGQ2NWMwHhcNMjUwOTA3MDUwMDUxWhcNMjUwOTA4MDUwMDUxWjAzMTEwLwYDVQQD
EyhlYWUwMTFkZDg2ZmYxZDA5OTYwNDY2MTk2NjVjNWI3NGI5OWFmYjcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwee1xlEQdtGNn4SvcGmhySqkItnJ
0Qfk1GjuyVWCnhum89+yTqIL/4ABmJ85OG09vb45xamrsAIMe9v3eqfC2KShsvAE
beYvrX/OvELHHq6ViYG3UdHCa//T+NZ2EkWDPaRq553JFYufmDN2b1Zx5xn7XaRt
f/ZUreFGhNmgo+xZIqXbO0ESN71DybwdNGllVEbfap4o56m2S+sJQHE7QMGAxUVK
pxxZsK7tm35UwUnIGG1RagA98a8h0fapGZLmaXS6OWnA5ajCG6QVzRcRqbwtynNb
8Bz7IAURvEMpfqOpFar70+9nAymi0y9uwKv/birX1Uaq9d0EEJpWUcl76QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOrgEd2G/x0JlgRmGWZcW3S5mvtyMB8GA1UdIwQY
MBaAFJR47T6tYn/OFsUYAlDEZiFzGNZcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEhqdFBxMWlmODRXeFJnQ1VNUm1JWE1ZMWx3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9lNGJlMjMtYjUzNi00ZTMwLTlhNWIt
NWQ1ZDAyYmI3MTk5LzEvbEhqdFBxMWlmODRXeFJnQ1VNUm1JWE1ZMWx3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9lNGJlMjMtYjUzNi00ZTMwLTlhNWItNWQ1ZDAyYmI3MTk5
LzEvbEhqdFBxMWlmODRXeFJnQ1VNUm1JWE1ZMWx3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApZV3ARWv
Zpvc1HfAKYlUgP3MFjLUcgFYCsJyjDKbK3KdAgR2iR1w6uWB2KgfMZ7/ua2JKuBV
ymMfQVbNekqXU4zlg+PdJme/CtTreqShY8M6k01zBjW4769BKssgCz4o4n3i9YT3
EBLQXBDH6H4+aoTbarX6PUY/KGbwXSWT89ZieUaV5IOiLaD9TNFJCCJ3UfCsoLRX
JL/wO5l+Zk/7RatBBA0+iVxM9NxfakfzTm+YbsV9HWGuZfnF9JPb98ctetR+1CzJ
fUP0sYwK8Sx7Nw0mif3bLJ58dw2Tfd0zxrQF4pH5K49XxR8n02irvp7wrCWSyKlJ
zRpMEySF6XzcKg==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:42:15 2025 by rpki-client