Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/6a88ac-efb4-45e4-9199-2abdb21941bc/1/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.mft
File: lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.mft (raw, json)
Hash identifier: MJUJ5Rfd3+FfJbKRowV41K/0yr1kqFlSnl3gDF5u/kE=
Subject key identifier: 44:3B:0F:9B:4A:F9:0A:BA:58:28:08:0B:E3:DD:5F:CE:EB:F3:15:0E
Authority key identifier: 96:B8:7E:5F:D1:AA:DC:1B:BE:A3:72:B4:26:9E:EB:D3:93:C5:CD:67
Certificate issuer: /CN=96b87e5fd1aadc1bbea372b4269eebd393c5cd67
Certificate serial: 0196BFA59386954EA55867A753389A84C6C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/6a88ac-efb4-45e4-9199-2abdb21941bc/1/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.mft
Manifest number: 0C6C
Signing time: Sun 11 May 2025 14:00:21 +0000
Manifest this update: Sun 11 May 2025 14:00:21 +0000
Manifest next update: Mon 12 May 2025 14:00:21 +0000
Files and hashes: 1: O8xQyf4SlO_QA8u4YHx9nqfuT4c.roa (hash: WyDwMMx1y5LT2GHueRZtXWT+BMFzzrzU6Km40azPSxA=)
2: lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.crl (hash: 7bnpDXpomEcW9ARjbl05V4i0tQtv9N5ZQTYwd89CWPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/6a88ac-efb4-45e4-9199-2abdb21941bc/1/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/6a88ac-efb4-45e4-9199-2abdb21941bc/1/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 14:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:a5:93:86:95:4e:a5:58:67:a7:53:38:9a:84:c6:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96b87e5fd1aadc1bbea372b4269eebd393c5cd67
Validity
Not Before: May 11 14:00:21 2025 GMT
Not After : May 12 14:00:21 2025 GMT
Subject: CN=443b0f9b4af90aba5828080be3dd5fceebf3150e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:34:92:3e:58:6b:48:25:8d:97:9d:2a:44:d8:
94:51:37:4f:f6:c9:1f:24:3a:e9:d4:05:b4:24:f9:
af:7f:14:22:23:7e:05:f0:23:14:b8:9e:06:cd:b7:
18:e0:8d:30:df:23:7c:bb:e9:79:54:78:0e:53:7a:
49:e0:74:5f:a1:b8:ba:25:ae:49:d1:5a:74:ec:98:
67:0b:26:b0:b4:c7:b7:7c:fe:06:28:67:59:82:a7:
f6:44:21:f9:5b:04:d1:f0:96:23:63:46:07:48:4d:
2a:3e:b4:80:af:02:38:28:d8:83:b8:61:2b:1b:71:
be:ab:ec:fd:3c:70:df:f8:bc:b2:33:db:76:65:06:
e5:91:3c:2f:4a:1d:38:70:82:ff:d7:0e:19:1c:de:
f3:23:af:04:2c:08:9b:aa:0e:f6:37:75:93:be:a1:
f6:3d:ba:24:8c:17:2d:8a:65:1e:7e:37:2f:5b:bc:
f8:6a:70:ab:80:03:e1:f3:72:2e:21:1d:4d:10:75:
b5:fb:62:bd:c9:77:4b:63:a9:28:2a:61:8e:fa:72:
f1:a4:d6:86:eb:ab:f4:d7:1a:55:90:28:c1:14:8a:
85:60:8d:fa:65:15:fa:fc:b7:97:05:90:f3:4f:1a:
3e:18:34:d5:9d:46:f5:26:8a:86:92:00:ea:25:02:
fb:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:3B:0F:9B:4A:F9:0A:BA:58:28:08:0B:E3:DD:5F:CE:EB:F3:15:0E
X509v3 Authority Key Identifier:
keyid:96:B8:7E:5F:D1:AA:DC:1B:BE:A3:72:B4:26:9E:EB:D3:93:C5:CD:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6a88ac-efb4-45e4-9199-2abdb21941bc/1/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6a88ac-efb4-45e4-9199-2abdb21941bc/1/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:01:b2:36:25:34:34:0f:06:e5:f9:89:87:74:47:6b:57:e8:
02:bd:66:a5:96:4e:99:19:02:72:1b:ec:04:97:5e:a4:98:59:
33:7a:a0:41:99:da:88:0e:a6:c6:1c:09:6d:4d:9b:f4:b2:18:
45:db:95:5b:6a:b3:8d:24:46:3f:d3:9f:49:ae:66:ec:59:0a:
36:3a:34:82:62:01:66:e7:e6:01:bc:f1:63:84:66:06:ec:31:
64:d0:1c:ab:84:c2:38:83:57:33:3e:0a:ee:90:40:eb:e1:7a:
99:86:c8:36:df:10:fa:9f:d9:e0:de:cd:fb:54:db:20:8e:9d:
8d:da:28:a9:67:d1:17:2f:b5:ef:41:a5:b3:4f:9e:26:31:92:
8b:e8:a2:34:ba:5f:af:08:90:d1:1a:fb:a9:d5:cf:ac:ea:1f:
7e:b6:a8:10:3a:1d:53:f2:0d:52:98:63:47:8d:43:3d:ac:b4:
1a:37:53:93:6c:a6:8a:23:ba:7e:0b:b5:61:6e:37:37:31:1e:
e9:91:55:08:4c:ad:11:d8:b2:90:1b:af:c0:ad:ba:93:2a:4d:
f0:8a:12:6f:86:16:fd:8f:d1:e4:0d:a4:e8:46:1b:93:54:57:
aa:c9:f4:f4:76:73:64:8c:e7:f3:85:30:df:3a:79:8c:f6:80:
4d:27:cd:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa/pZOGlU6lWGenUziahMbJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2Yjg3ZTVmZDFhYWRjMWJiZWEzNzJiNDI2OWVlYmQzOTNj
NWNkNjcwHhcNMjUwNTExMTQwMDIxWhcNMjUwNTEyMTQwMDIxWjAzMTEwLwYDVQQD
Eyg0NDNiMGY5YjRhZjkwYWJhNTgyODA4MGJlM2RkNWZjZWViZjMxNTBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1DSSPlhrSCWNl50qRNiUUTdP9skf
JDrp1AW0JPmvfxQiI34F8CMUuJ4GzbcY4I0w3yN8u+l5VHgOU3pJ4HRfobi6Ja5J
0Vp07JhnCyawtMe3fP4GKGdZgqf2RCH5WwTR8JYjY0YHSE0qPrSArwI4KNiDuGEr
G3G+q+z9PHDf+LyyM9t2ZQblkTwvSh04cIL/1w4ZHN7zI68ELAibqg72N3WTvqH2
PbokjBctimUefjcvW7z4anCrgAPh83IuIR1NEHW1+2K9yXdLY6koKmGO+nLxpNaG
66v01xpVkCjBFIqFYI36ZRX6/LeXBZDzTxo+GDTVnUb1JoqGkgDqJQL7NwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEQ7D5tK+Qq6WCgIC+PdX87r8xUOMB8GA1UdIwQY
MBaAFJa4fl/RqtwbvqNytCae69OTxc1nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHJoLVg5R3EzQnUtbzNLMEpwN3IwNVBGeldjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi82YTg4YWMtZWZiNC00NWU0LTkxOTkt
MmFiZGIyMTk0MWJjLzEvbHJoLVg5R3EzQnUtbzNLMEpwN3IwNVBGeldjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi82YTg4YWMtZWZiNC00NWU0LTkxOTktMmFiZGIyMTk0MWJj
LzEvbHJoLVg5R3EzQnUtbzNLMEpwN3IwNVBGeldjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApQGyNiU0
NA8G5fmJh3RHa1foAr1mpZZOmRkCchvsBJdepJhZM3qgQZnaiA6mxhwJbU2b9LIY
RduVW2qzjSRGP9OfSa5m7FkKNjo0gmIBZufmAbzxY4RmBuwxZNAcq4TCOINXMz4K
7pBA6+F6mYbINt8Q+p/Z4N7N+1TbII6djdooqWfRFy+170Gls0+eJjGSi+iiNLpf
rwiQ0Rr7qdXPrOoffraoEDodU/INUphjR41DPay0GjdTk2ymiiO6fgu1YW43NzEe
6ZFVCEytEdiykBuvwK26kypN8IoSb4YW/Y/R5A2k6EYbk1RXqsn09HZzZIzn84Uw
3zp5jPaATSfNdg==
-----END CERTIFICATE-----
Generated at Sun May 11 22:37:28 2025 by rpki-client