Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/6a88ac-efb4-45e4-9199-2abdb21941bc/1/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.mft
File: lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.mft (raw, json)
Hash identifier: DkqF/vA0ajpz8RFZjDy/BNTlJpFl9knL+jgzlOnKy4o=
Subject key identifier: BE:F6:A4:B1:25:07:AF:26:33:F1:CC:35:67:3B:78:61:A3:DD:00:CF
Authority key identifier: 96:B8:7E:5F:D1:AA:DC:1B:BE:A3:72:B4:26:9E:EB:D3:93:C5:CD:67
Certificate issuer: /CN=96b87e5fd1aadc1bbea372b4269eebd393c5cd67
Certificate serial: 0198D6986E78D241D3C2BE6145CB1403E770
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/6a88ac-efb4-45e4-9199-2abdb21941bc/1/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.mft
Manifest number: 0D81
Signing time: Sat 23 Aug 2025 11:02:50 +0000
Manifest this update: Sat 23 Aug 2025 11:02:50 +0000
Manifest next update: Sun 24 Aug 2025 11:02:50 +0000
Files and hashes: 1: O8xQyf4SlO_QA8u4YHx9nqfuT4c.roa (hash: WyDwMMx1y5LT2GHueRZtXWT+BMFzzrzU6Km40azPSxA=)
2: lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.crl (hash: z1XSZqAxUf14MJHK2VCDwrCvVQ6J+vqUwh5A3jAqWsA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/6a88ac-efb4-45e4-9199-2abdb21941bc/1/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/6a88ac-efb4-45e4-9199-2abdb21941bc/1/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:6e:78:d2:41:d3:c2:be:61:45:cb:14:03:e7:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96b87e5fd1aadc1bbea372b4269eebd393c5cd67
Validity
Not Before: Aug 23 11:02:50 2025 GMT
Not After : Aug 24 11:02:50 2025 GMT
Subject: CN=bef6a4b12507af2633f1cc35673b7861a3dd00cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:21:74:13:08:5b:0d:f1:3d:12:4d:2e:7f:23:
44:fa:db:ba:cf:5e:4c:35:76:c5:de:77:ee:c0:e4:
69:06:0c:fb:e1:df:0b:e8:cb:91:22:4d:2e:64:28:
93:2d:eb:c2:03:e1:c4:e0:1e:b0:60:05:1d:a2:9f:
eb:fd:27:e6:dc:ac:0e:f7:7e:68:b9:ca:14:96:6c:
d0:59:9f:4d:c9:63:66:08:d8:c5:7f:ca:5c:dc:69:
4e:bd:ac:04:44:38:b6:7a:c6:7c:91:a0:f3:fe:f2:
54:ef:fc:4d:1c:80:37:ff:20:10:42:43:99:41:7c:
98:a4:31:7f:1c:43:37:0f:b9:4f:4c:4d:3f:20:85:
96:2a:b8:3b:46:a5:00:98:fd:c2:2d:e8:1b:c9:f2:
f4:47:02:00:af:6d:56:69:21:87:17:26:a1:ae:fc:
ef:75:90:65:8b:7a:c0:27:a7:a9:e7:7c:a0:af:87:
e8:3c:a3:4e:28:30:22:48:b2:14:5d:62:bf:0d:97:
e9:99:59:bd:20:0c:d1:51:7c:1b:98:af:87:06:20:
6d:bc:a1:4c:de:33:b8:83:c1:66:5a:23:03:92:ef:
e5:20:58:5e:c0:ec:c4:39:a3:11:a8:eb:25:2b:1a:
f3:f2:74:74:21:22:6b:cd:1e:1c:0a:ed:a4:2c:5c:
4b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:F6:A4:B1:25:07:AF:26:33:F1:CC:35:67:3B:78:61:A3:DD:00:CF
X509v3 Authority Key Identifier:
keyid:96:B8:7E:5F:D1:AA:DC:1B:BE:A3:72:B4:26:9E:EB:D3:93:C5:CD:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6a88ac-efb4-45e4-9199-2abdb21941bc/1/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6a88ac-efb4-45e4-9199-2abdb21941bc/1/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:ce:49:b5:c9:1a:97:32:f9:20:4b:b4:fa:42:10:4f:76:87:
ad:6d:f4:b1:29:1e:f2:a9:73:e2:c6:2c:49:b3:c5:b1:39:94:
f0:22:9d:bd:b0:2f:c8:8c:12:2f:cd:c1:51:29:6c:5b:c1:72:
3b:d1:2b:d5:a6:50:1f:85:fe:ea:ae:8c:9a:e6:b2:08:a9:9f:
64:78:04:30:5c:dc:73:5e:ae:fc:d4:00:ef:1e:71:a1:ee:8e:
5b:ee:2c:87:a8:6d:2c:16:64:d2:21:9c:37:7a:55:ec:a3:f2:
50:41:89:90:f7:07:28:8e:24:05:0b:18:05:b2:c9:01:ce:75:
5a:56:2d:d9:d9:21:15:8d:ef:72:a3:26:b4:71:20:29:ae:59:
94:b0:3e:84:f0:70:38:78:21:d7:51:d3:f5:6d:70:0d:24:b8:
36:a5:26:e0:32:75:cb:31:7b:a9:50:9f:19:ed:2f:13:da:de:
27:96:de:78:a6:b1:19:65:82:c7:a6:e3:e7:74:b3:ea:5c:11:
bb:b5:4a:51:47:fc:77:6d:e4:72:65:22:f5:e9:bb:74:06:04:
fa:1a:3b:1b:3c:3c:bc:b5:0e:e8:49:9b:74:7d:d9:f2:5d:d5:
f0:7b:c8:b1:f3:a9:88:76:f7:46:5b:da:21:4d:a1:16:d8:18:
c7:70:80:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:04:44 2025 by rpki-client