Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/6a88ac-efb4-45e4-9199-2abdb21941bc/1/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.mft
File: lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.mft (raw, json)
Hash identifier: k9n1cd5ocEJUhZYtWa5r/DNMUELU9QQtcrkT7zBvX2g=
Subject key identifier: 8A:8F:94:2A:CD:77:C6:A0:AB:EA:53:08:80:BB:7F:46:30:2C:ED:76
Authority key identifier: 96:B8:7E:5F:D1:AA:DC:1B:BE:A3:72:B4:26:9E:EB:D3:93:C5:CD:67
Certificate issuer: /CN=96b87e5fd1aadc1bbea372b4269eebd393c5cd67
Certificate serial: 0197CA2762460F818973A2F19A612FCB2242
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/6a88ac-efb4-45e4-9199-2abdb21941bc/1/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.mft
Manifest number: 0CF6
Signing time: Wed 02 Jul 2025 08:01:08 +0000
Manifest this update: Wed 02 Jul 2025 08:01:08 +0000
Manifest next update: Thu 03 Jul 2025 08:01:08 +0000
Files and hashes: 1: O8xQyf4SlO_QA8u4YHx9nqfuT4c.roa (hash: WyDwMMx1y5LT2GHueRZtXWT+BMFzzrzU6Km40azPSxA=)
2: lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.crl (hash: PI1xjeOPiSsdvT5O0vqi3+ZPw4DnfLlZydirRgPv9S8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/6a88ac-efb4-45e4-9199-2abdb21941bc/1/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/6a88ac-efb4-45e4-9199-2abdb21941bc/1/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 08:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ca:27:62:46:0f:81:89:73:a2:f1:9a:61:2f:cb:22:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96b87e5fd1aadc1bbea372b4269eebd393c5cd67
Validity
Not Before: Jul 2 08:01:08 2025 GMT
Not After : Jul 3 08:01:08 2025 GMT
Subject: CN=8a8f942acd77c6a0abea530880bb7f46302ced76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5b:93:cf:d5:26:e9:24:cb:c4:54:6f:de:be:
2d:f2:82:9d:81:76:48:2b:4b:5e:ef:fd:46:f9:a2:
b0:b9:90:08:88:1b:23:8b:48:73:7f:6b:b2:5c:8d:
9a:9c:a9:20:31:55:85:d5:63:65:59:b9:95:ef:4b:
32:da:b1:22:97:c1:bf:51:67:e6:db:f4:7f:bf:36:
90:01:33:e2:ee:81:10:10:f2:77:dd:9a:f1:01:44:
86:e2:8a:b2:a9:11:ec:5d:af:c9:ec:49:78:4f:0f:
ec:fd:e5:e6:af:d4:3e:2c:78:fa:2c:21:f7:99:6e:
0a:c9:ab:c4:82:0d:96:2f:5c:26:ec:e5:09:f2:e6:
0d:2a:8b:f0:97:ec:e9:40:fb:51:64:a7:07:d8:61:
3d:88:a1:3f:d8:35:b4:99:fe:69:37:51:bf:08:65:
d6:09:d4:ab:4f:7c:fa:d9:dc:d9:7d:a0:7e:54:4c:
40:eb:a2:1d:19:87:dd:18:77:80:a0:ce:cd:2e:85:
08:7e:38:d3:5c:2c:84:c2:b7:77:42:95:50:b3:9e:
9d:e0:f4:a2:f3:d1:52:c9:0c:cd:c1:1b:a3:a8:ea:
f6:e8:a8:db:87:13:1b:33:58:d7:50:8c:0e:f2:c6:
cd:d3:98:9b:ed:92:fd:43:cf:ef:02:cb:25:88:55:
d9:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:8F:94:2A:CD:77:C6:A0:AB:EA:53:08:80:BB:7F:46:30:2C:ED:76
X509v3 Authority Key Identifier:
keyid:96:B8:7E:5F:D1:AA:DC:1B:BE:A3:72:B4:26:9E:EB:D3:93:C5:CD:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6a88ac-efb4-45e4-9199-2abdb21941bc/1/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6a88ac-efb4-45e4-9199-2abdb21941bc/1/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:73:84:a0:4b:8f:a2:ae:76:af:d0:43:6e:71:2f:fc:98:91:
32:e5:df:10:8f:f8:1b:0b:e2:6f:fb:1f:4c:6f:33:01:21:94:
0f:26:ed:c3:79:c1:88:e5:d4:1c:84:ea:33:f9:7c:c3:cf:5f:
f9:f6:d5:cd:fe:6b:41:1e:72:33:39:6a:9b:76:c6:ca:4a:2e:
b4:1c:6a:31:c2:f2:e7:36:a3:31:0d:62:84:5a:8f:a3:ae:a1:
b1:b6:82:0f:53:e9:7f:82:4b:82:95:ef:20:fd:5d:51:ed:3a:
f6:aa:27:07:fa:f2:86:ab:14:3f:f4:b5:f1:bd:ad:6e:e1:7b:
3e:46:e0:35:c8:e5:73:8b:fa:88:19:ff:3d:74:4f:2f:76:ee:
9b:39:c4:38:24:da:e5:6e:d9:dc:18:8a:9f:d0:8f:b5:f7:ee:
f5:b8:83:fb:2d:ad:25:b5:ff:83:de:3a:89:73:3a:b6:dc:bf:
df:c4:62:cd:0e:c7:c9:fa:3b:f4:cf:23:4b:c7:2d:3b:a2:41:
b3:00:34:9c:c7:6b:34:4f:9c:d1:1b:34:ca:1e:8b:6e:d0:f7:
ef:89:b7:c0:8f:7f:75:95:a8:49:50:6d:12:ef:97:c4:5b:4f:
ef:53:58:06:c2:fb:f4:16:43:7a:df:ac:6e:be:79:a9:3f:36:
fb:92:33:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 15:56:34 2025 by rpki-client