Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.mft
File: lHS1JBtjw6-9s0LMR2NMVasv-EY.mft (raw, json)
Hash identifier: W06VBPyPq/Ofx7oKs3OzKhPE/3VW77HOOL530Yg7cJM=
Subject key identifier: C9:91:05:C5:DA:47:10:C9:62:C5:B7:CD:7A:64:BF:AC:2F:6F:99:1C
Authority key identifier: 94:74:B5:24:1B:63:C3:AF:BD:B3:42:CC:47:63:4C:55:AB:2F:F8:46
Certificate issuer: /CN=9474b5241b63c3afbdb342cc47634c55ab2ff846
Certificate serial: 0197B77C837FD85E2DE35EA2930D341CD88B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lHS1JBtjw6-9s0LMR2NMVasv-EY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.mft
Manifest number: C5
Signing time: Sat 28 Jun 2025 17:01:19 +0000
Manifest this update: Sat 28 Jun 2025 17:01:19 +0000
Manifest next update: Sun 29 Jun 2025 17:01:19 +0000
Files and hashes: 1: _esauh0bwxU4lPvXm-nLiVYT1MY.roa (hash: dg/Xh0ZCbSrkvMtC9w3xbJVNO3y7y3uRRsJgcH21rXg=)
2: lHS1JBtjw6-9s0LMR2NMVasv-EY.crl (hash: hMaiLuHX/mzkTvvmhgjEAIzozV1GOeLV3W9ukzUPK9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lHS1JBtjw6-9s0LMR2NMVasv-EY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:83:7f:d8:5e:2d:e3:5e:a2:93:0d:34:1c:d8:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9474b5241b63c3afbdb342cc47634c55ab2ff846
Validity
Not Before: Jun 28 17:01:19 2025 GMT
Not After : Jun 29 17:01:19 2025 GMT
Subject: CN=c99105c5da4710c962c5b7cd7a64bfac2f6f991c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b1:a9:49:54:b7:82:c9:2e:01:fd:ed:97:be:
5f:a0:4c:88:e2:71:ae:0c:af:29:f9:0b:96:23:50:
28:b7:a5:57:9f:42:f3:9c:b8:55:2c:b6:23:e9:5d:
ef:d8:bc:86:80:9e:18:62:e0:f8:eb:cf:76:cd:1f:
04:cc:84:cb:60:78:d5:ab:6e:fa:c0:de:43:e6:7b:
0f:96:a5:8f:18:78:06:c2:4a:a1:bd:62:00:52:64:
c7:9a:a1:c0:39:82:f2:c4:1a:eb:25:ec:55:ac:12:
3c:4a:ae:10:21:21:bf:e4:d8:d8:7f:70:f8:16:35:
2c:50:f4:bb:e3:76:94:f3:0f:ad:14:7a:e6:30:2f:
aa:c2:91:72:3a:c5:c3:b4:f4:52:fa:a5:51:8b:2a:
23:6a:41:aa:73:15:98:cb:2d:ee:c8:d2:59:ab:18:
d1:b4:a5:c0:9b:cb:e8:06:49:5a:db:d8:a8:5e:38:
4b:61:48:79:53:89:19:56:c8:f4:fc:0b:d7:4f:f6:
37:a9:df:f5:9c:7d:54:c6:87:6b:0c:59:df:c8:fe:
3e:c5:2a:fa:68:55:2d:70:7b:26:e9:79:d8:bc:26:
54:eb:71:b0:25:cd:e6:af:dd:12:a7:20:ab:7c:0e:
20:b9:20:4c:2f:e4:5f:a0:3b:d9:a6:a7:b4:4e:a3:
d8:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:91:05:C5:DA:47:10:C9:62:C5:B7:CD:7A:64:BF:AC:2F:6F:99:1C
X509v3 Authority Key Identifier:
keyid:94:74:B5:24:1B:63:C3:AF:BD:B3:42:CC:47:63:4C:55:AB:2F:F8:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lHS1JBtjw6-9s0LMR2NMVasv-EY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:c0:96:26:bd:24:d4:f5:4c:cc:8d:99:11:21:25:c5:67:90:
e3:ca:23:2c:8a:0c:3a:ab:16:70:8b:b7:a3:d6:21:69:8c:61:
8a:44:b6:0b:0a:a4:98:0d:d6:98:07:e4:ad:02:f1:12:9a:a6:
13:02:48:67:11:56:6a:02:03:55:94:db:78:a2:2a:db:87:2b:
fe:99:67:84:bf:10:36:85:32:75:93:ba:d2:bb:2f:ad:e8:3b:
33:5c:71:2c:bb:7b:ec:fd:b7:d3:a1:14:fb:09:49:e4:e9:2d:
f1:e6:2d:08:e8:b2:16:0a:de:b8:ad:ec:22:04:d3:e3:d5:30:
d0:d7:eb:d3:88:fb:91:0e:41:03:db:04:e5:a0:5c:0a:9c:b3:
43:7d:42:2a:bf:0e:87:2c:cf:eb:4e:1b:8c:90:c5:75:02:7a:
5d:86:c5:99:56:e8:37:ea:ac:b5:c2:4f:81:ca:3d:b0:0d:a5:
62:27:20:25:6d:2d:ab:fa:ef:12:f7:aa:5f:a3:75:58:9b:76:
48:03:fd:bd:ee:42:3c:3b:10:8a:2c:34:5f:11:8f:ab:0d:8a:
ad:ed:d0:c0:8c:fb:81:be:ac:4c:29:ec:08:12:aa:bc:b6:15:
fc:1d:26:56:92:f8:89:2e:2d:b7:c8:08:71:37:49:47:11:ae:
80:da:5d:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:52:00 2025 by rpki-client