Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft
File: LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft (raw, json)
Hash identifier: 34kAmFUbPovCfMREMXaGxRe9g9w3+cLdr8fJSNqsIXU=
Subject key identifier: 57:12:4A:0D:EB:E6:81:75:EC:08:B7:0B:B5:C1:1C:DC:1F:AA:13:DC
Authority key identifier: 2E:16:20:89:0F:70:0F:01:2B:0B:A6:01:72:31:4E:3C:85:91:95:13
Certificate issuer: /CN=2e1620890f700f012b0ba60172314e3c85919513
Certificate serial: 0197B7B2F4B1BC8D28EC564395443C6CEEA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhYgiQ9wDwErC6YBcjFOPIWRlRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 18:00:47 +0000
Manifest this update: Sat 28 Jun 2025 18:00:47 +0000
Manifest next update: Sun 29 Jun 2025 18:00:47 +0000
Files and hashes: 1: LhYgiQ9wDwErC6YBcjFOPIWRlRM.crl (hash: n3E7B2GX7thYfgL4fJjfH/96YnF7ovmfeXqF29IwSH0=)
2: UEzUyopP5UVcAuE2wQnf6zxgiYA.roa (hash: WO7cSkDAVVG4RqEt/anGaCZXbbFB9XEJIQ0eE+HtSwo=)
3: g1Qj1KnuMxZpXuMaGLTMbgWLRyE.roa (hash: f3NI3BOfnPP1R6nzFdJwSdGpqAlLYVxZtd9uD+YokWY=)
4: x9mgn-wCUD8rT1tTi9C7mbyMAtI.roa (hash: sgZbLcOXGM2ArVU0X49/Qh6v7QEpIvbA1cc08MVfbkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/LhYgiQ9wDwErC6YBcjFOPIWRlRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b2:f4:b1:bc:8d:28:ec:56:43:95:44:3c:6c:ee:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e1620890f700f012b0ba60172314e3c85919513
Validity
Not Before: Jun 28 18:00:47 2025 GMT
Not After : Jun 29 18:00:47 2025 GMT
Subject: CN=57124a0debe68175ec08b70bb5c11cdc1faa13dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:10:4e:76:96:28:7d:b4:01:7c:ad:9d:33:d5:
c1:37:00:bd:c7:98:69:61:8d:f6:c1:30:c6:9b:3e:
18:e8:0a:bc:3f:1b:01:5f:eb:c7:8f:bc:69:5f:c8:
8d:ae:2f:ea:bc:d1:71:ed:d9:a5:3b:cc:dc:e4:4d:
07:dc:f0:ba:85:55:5a:7f:78:10:f5:f3:e1:24:ff:
d7:db:c6:69:18:3e:69:1b:8b:bb:45:20:7d:57:df:
95:c9:5a:e3:3d:1e:15:ea:65:eb:20:65:47:1a:40:
d0:06:5d:f2:aa:99:e8:1b:3b:b7:b2:ac:39:6a:f1:
a9:dd:43:64:1c:35:9e:b1:0e:d9:99:88:71:26:e2:
a6:20:77:73:26:c6:60:1e:fa:cd:c5:68:64:bd:80:
9d:17:7c:0a:65:41:d5:76:77:89:63:c9:70:69:12:
f5:57:a6:97:13:3b:8e:31:8c:42:eb:2c:14:20:92:
73:fc:2a:57:c5:33:aa:e5:a2:2b:66:70:e8:8b:73:
18:c2:66:19:92:46:fa:2f:b8:a5:1f:35:a2:d6:60:
5e:ed:ea:60:1c:cc:36:53:74:83:fe:5d:00:29:a4:
9d:33:4b:de:e5:4e:b9:5f:9f:e2:e2:32:a7:d0:5b:
49:fe:87:8c:50:a3:ce:6d:12:df:3b:d3:5e:44:f0:
41:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:12:4A:0D:EB:E6:81:75:EC:08:B7:0B:B5:C1:1C:DC:1F:AA:13:DC
X509v3 Authority Key Identifier:
keyid:2E:16:20:89:0F:70:0F:01:2B:0B:A6:01:72:31:4E:3C:85:91:95:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhYgiQ9wDwErC6YBcjFOPIWRlRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:8c:bc:a4:1b:32:c1:1a:40:c0:71:99:66:f0:a1:40:d1:49:
c4:9e:b6:e1:4b:11:93:e2:ed:54:f2:d3:91:5a:0d:41:8c:a1:
88:19:46:41:da:88:a2:4c:e1:19:43:74:82:c8:66:81:e0:0a:
cd:95:77:7f:37:a6:1f:7f:3d:dd:15:f9:1d:dd:7a:b8:6a:92:
f6:1c:05:cd:3a:88:c4:1a:18:4f:f2:bc:75:2e:9e:42:a2:fa:
3f:46:24:3c:2b:a1:1e:46:3f:4b:21:16:ed:55:38:67:8f:32:
03:69:0b:df:39:34:e0:03:83:cd:9d:d4:35:a6:b8:1a:72:3a:
01:f7:79:e5:70:97:2b:8d:2f:26:c3:b3:d8:b8:cc:1f:8a:06:
9d:b0:9f:a6:59:2f:28:64:b2:5e:1d:ba:af:ac:ce:4c:01:b0:
13:c1:f9:ef:73:6d:bf:df:bd:c5:8d:79:fc:c4:9f:d3:75:58:
a3:d7:93:91:0e:20:2b:e3:71:a9:3f:aa:52:51:ef:0c:88:99:
16:90:f3:34:cd:25:1f:b0:90:f4:e6:f4:0f:1f:58:9a:3f:8c:
13:5d:43:27:6e:53:22:52:16:5d:8e:fd:b9:60:d9:8a:cd:13:
98:96:86:63:5f:0d:f5:34:3c:a9:ec:5e:f0:77:13:ca:04:23:
28:c1:84:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:05:57 2025 by rpki-client