Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.mft
File: lHS1JBtjw6-9s0LMR2NMVasv-EY.mft (raw, json)
Hash identifier: 8Q3kQ5z6HPUP2DWDrLAK7rRS/wD0ovV8JO3AVTLCy4o=
Subject key identifier: 29:1F:04:12:20:98:93:81:D3:28:8F:8B:6E:76:6F:5F:78:78:CC:A5
Authority key identifier: 94:74:B5:24:1B:63:C3:AF:BD:B3:42:CC:47:63:4C:55:AB:2F:F8:46
Certificate issuer: /CN=9474b5241b63c3afbdb342cc47634c55ab2ff846
Certificate serial: 0198D54E729C861427AC8797E6F4262F4808
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lHS1JBtjw6-9s0LMR2NMVasv-EY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.mft
Manifest number: 0159
Signing time: Sat 23 Aug 2025 05:02:24 +0000
Manifest this update: Sat 23 Aug 2025 05:02:24 +0000
Manifest next update: Sun 24 Aug 2025 05:02:24 +0000
Files and hashes: 1: _esauh0bwxU4lPvXm-nLiVYT1MY.roa (hash: dg/Xh0ZCbSrkvMtC9w3xbJVNO3y7y3uRRsJgcH21rXg=)
2: lHS1JBtjw6-9s0LMR2NMVasv-EY.crl (hash: 4wE9EFLAdPu9+oA13zQtJ/MEHitfE7XgiKo5DGIpRKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lHS1JBtjw6-9s0LMR2NMVasv-EY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:72:9c:86:14:27:ac:87:97:e6:f4:26:2f:48:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9474b5241b63c3afbdb342cc47634c55ab2ff846
Validity
Not Before: Aug 23 05:02:24 2025 GMT
Not After : Aug 24 05:02:24 2025 GMT
Subject: CN=291f041220989381d3288f8b6e766f5f7878cca5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c4:22:e5:c2:6f:34:7b:e0:d2:9e:30:5e:e8:
14:39:cc:4b:c1:0a:29:40:fc:34:d9:97:e9:26:41:
40:c4:c0:73:24:6e:39:a7:45:5f:f4:9c:09:e0:f0:
9a:7a:e0:c2:f5:cd:5a:66:25:0d:56:ff:47:dd:49:
81:e0:db:8b:49:23:67:77:d2:b2:65:36:2c:5c:e1:
25:40:af:ec:96:09:05:0b:37:64:44:06:0c:4e:d6:
66:b5:e1:1e:6c:63:f2:77:39:a9:12:c4:61:74:9e:
78:43:13:7f:6e:49:c9:31:ee:0e:d5:8b:8b:73:b0:
9b:d6:4d:99:54:46:bb:69:2f:57:67:87:89:c8:26:
06:eb:7c:9c:d1:6a:1c:97:62:b7:c9:8e:16:75:ea:
bc:66:9c:1e:48:06:f4:d5:44:26:f0:5f:d8:c7:d1:
57:b8:29:4f:8a:69:96:ff:e9:bc:83:18:70:91:e5:
8a:00:d4:29:b7:88:63:20:2c:6e:7b:89:b9:9e:7a:
22:06:42:b2:3c:50:73:c6:a3:00:c9:c9:df:f9:85:
e5:ca:02:9c:2f:89:a2:87:98:8d:4c:88:e2:f9:9b:
b5:af:18:3c:ff:f5:bf:19:94:23:42:4f:71:fb:9a:
01:12:e6:f0:56:a7:a7:fc:75:25:6d:42:c1:90:29:
3c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:1F:04:12:20:98:93:81:D3:28:8F:8B:6E:76:6F:5F:78:78:CC:A5
X509v3 Authority Key Identifier:
keyid:94:74:B5:24:1B:63:C3:AF:BD:B3:42:CC:47:63:4C:55:AB:2F:F8:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lHS1JBtjw6-9s0LMR2NMVasv-EY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:a5:88:5f:5c:aa:19:76:22:b0:37:c2:1e:89:59:36:c6:b5:
38:2d:be:1d:d1:ff:63:3d:79:5f:19:92:f3:76:d4:b4:29:fb:
24:9e:7a:e9:80:a4:5e:4e:3f:db:f8:db:0a:ae:84:7c:c5:b9:
33:fa:81:18:a0:d8:eb:8f:9f:1b:7a:5f:e7:32:c2:b0:ac:db:
0d:c1:69:7e:2e:0e:01:5f:2e:b8:39:e9:3d:51:a3:8c:5a:44:
ce:5f:ea:89:28:22:c4:3a:59:49:9a:de:6f:01:fe:48:63:ff:
ac:10:a4:5a:3d:9a:9c:1e:03:4e:5d:0e:aa:bc:49:d6:9d:95:
a2:ef:4f:40:f3:55:b5:6e:cf:c3:c4:36:b9:19:93:57:f1:d2:
25:89:5b:d5:64:06:71:d0:46:4f:63:92:53:6e:3c:5f:9c:fb:
4c:e1:73:7f:10:1b:6e:c3:35:d5:7f:e3:87:0e:62:e5:47:32:
ba:a3:d1:d4:cc:49:1c:ac:f7:a7:d8:9f:8b:df:47:77:bb:0a:
7f:d7:00:05:f3:b7:83:5b:1f:b0:d8:99:e7:f1:63:03:5a:57:
a0:c5:70:75:27:cd:61:03:fb:4a:71:08:3d:7a:9c:f6:b4:de:
80:27:0d:bf:7c:48:5f:d0:a8:cb:aa:39:29:4d:36:92:68:78:
88:bb:49:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:10:20 2025 by rpki-client