Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/cddf94-8d51-41cd-8a5b-a0b4930cbd1e/1/lhebOdHB0o9QY8qSHWAH42Phxgs.mft
File: lhebOdHB0o9QY8qSHWAH42Phxgs.mft (raw, json)
Hash identifier: 3mqCx7uFGoMtl7/KYj7JqnM6ocADj7kcXcUcBFZE0uU=
Subject key identifier: C7:06:AD:73:01:88:43:C3:3D:D6:E3:F7:45:17:B8:27:53:59:C3:17
Authority key identifier: 96:17:9B:39:D1:C1:D2:8F:50:63:CA:92:1D:60:07:E3:63:E1:C6:0B
Certificate issuer: /CN=96179b39d1c1d28f5063ca921d6007e363e1c60b
Certificate serial: 0197BA7D5B759CAB0874A6E5C113388F8B5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lhebOdHB0o9QY8qSHWAH42Phxgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/cddf94-8d51-41cd-8a5b-a0b4930cbd1e/1/lhebOdHB0o9QY8qSHWAH42Phxgs.mft
Manifest number: 15B7
Signing time: Sun 29 Jun 2025 07:01:06 +0000
Manifest this update: Sun 29 Jun 2025 07:01:06 +0000
Manifest next update: Mon 30 Jun 2025 07:01:06 +0000
Files and hashes: 1: lhebOdHB0o9QY8qSHWAH42Phxgs.crl (hash: dHpsIChxVBX+k5gDqEHotH585hSRGIVUMN7s6IKiHz8=)
2: zIbC2a3NLstRoJ1KbSzBvFb6vZ0.roa (hash: YltSOQHV02hFJedVO9/8WLk8TMz1RedE7tGsvMysOE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/cddf94-8d51-41cd-8a5b-a0b4930cbd1e/1/lhebOdHB0o9QY8qSHWAH42Phxgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/cddf94-8d51-41cd-8a5b-a0b4930cbd1e/1/lhebOdHB0o9QY8qSHWAH42Phxgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/lhebOdHB0o9QY8qSHWAH42Phxgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:7d:5b:75:9c:ab:08:74:a6:e5:c1:13:38:8f:8b:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96179b39d1c1d28f5063ca921d6007e363e1c60b
Validity
Not Before: Jun 29 07:01:06 2025 GMT
Not After : Jun 30 07:01:06 2025 GMT
Subject: CN=c706ad73018843c33dd6e3f74517b8275359c317
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:39:ae:19:ba:cd:43:8a:46:22:0f:64:b2:f6:
26:25:64:53:52:41:ea:93:d8:95:d4:24:96:f9:ab:
e5:b0:53:75:e2:8d:5d:bc:54:cf:6b:58:48:29:01:
51:db:bf:d2:7d:61:15:f3:23:6f:6d:e9:9f:cd:00:
ef:43:a9:a4:93:91:c4:3a:aa:b1:d9:6b:c7:6b:64:
1f:93:18:62:4f:2b:4e:a4:46:78:c1:e0:a4:fc:ed:
de:86:f3:1a:19:56:4f:a1:65:fa:04:a2:40:4b:30:
77:76:6a:8e:e6:fa:7f:36:e5:44:eb:2c:f4:ed:c2:
0e:1b:da:fa:65:d0:e0:88:e1:9d:f5:a7:85:32:24:
a3:f9:56:95:f3:39:80:f1:61:1d:b5:04:d8:89:ad:
85:b4:7d:d6:68:5d:fa:91:da:5c:c9:b2:6a:be:cf:
68:52:9d:52:a8:42:4d:ef:2c:5a:98:2f:4b:c1:89:
df:f5:6d:eb:45:e3:36:bf:d7:6a:18:6d:e8:37:a7:
db:22:46:55:d7:02:16:c5:c7:fe:2e:4c:44:85:ff:
30:a7:2c:9c:03:39:8a:62:cc:fa:92:b1:22:a9:aa:
3b:30:48:c7:57:44:40:3d:c5:9f:25:1b:46:fb:b4:
06:06:7a:74:ba:61:65:e4:dc:99:d2:06:0e:94:e5:
4c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:06:AD:73:01:88:43:C3:3D:D6:E3:F7:45:17:B8:27:53:59:C3:17
X509v3 Authority Key Identifier:
keyid:96:17:9B:39:D1:C1:D2:8F:50:63:CA:92:1D:60:07:E3:63:E1:C6:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhebOdHB0o9QY8qSHWAH42Phxgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/cddf94-8d51-41cd-8a5b-a0b4930cbd1e/1/lhebOdHB0o9QY8qSHWAH42Phxgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/cddf94-8d51-41cd-8a5b-a0b4930cbd1e/1/lhebOdHB0o9QY8qSHWAH42Phxgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:3b:55:53:0c:5e:fb:11:cd:6d:3e:b9:97:55:ed:db:00:d0:
cb:ce:0c:c5:fa:54:0e:a3:00:25:26:ae:b8:ef:44:09:91:b1:
e8:66:ed:ed:16:e7:25:64:71:9b:1b:3c:f3:40:4f:3c:47:21:
17:8e:11:de:46:d8:1d:bb:bb:98:82:b3:a2:42:6b:70:29:9b:
20:65:50:a9:f0:1d:b6:67:d5:99:6d:e1:3b:7e:9d:ac:36:24:
d7:a7:91:d0:bc:5a:29:0c:f0:9a:6d:aa:ca:e4:9f:54:bd:73:
db:95:10:5a:d7:48:36:35:93:61:38:4a:0b:c5:bd:bd:d1:73:
5c:ad:eb:20:6b:89:c2:d5:5b:5b:1a:11:6e:73:ab:9d:d7:d3:
8e:89:21:e0:9c:6f:5f:64:4e:4c:60:bc:54:e7:0b:11:f2:74:
5d:d9:ee:49:1b:eb:74:54:5f:d3:a9:75:1d:4c:7a:c1:d1:66:
ba:e0:10:25:8c:2d:e3:eb:22:5b:ec:b4:52:1c:9e:1c:8a:be:
00:46:28:9f:12:98:36:a4:23:37:7f:34:b9:e6:a1:1d:d0:34:
41:4f:f0:11:1e:bd:b6:65:0c:05:9d:62:b5:2c:d4:ae:d8:7e:
47:13:ff:dd:fc:d7:69:44:a5:13:28:53:65:c2:a3:a3:ce:7c:
ac:3d:f4:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 11:29:54 2025 by rpki-client