Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.mft
File: Lh0kV-C-VNx4_B9mh9s-lLBorJs.mft (raw, json)
Hash identifier: Ylo3WlyrAaEUwzWhf0eWzZDcLlqG9fyEr1h0mJP8x0I=
Subject key identifier: D1:1F:22:86:17:CC:20:CF:72:B7:8C:AF:44:33:7B:77:84:2D:B9:10
Authority key identifier: 2E:1D:24:57:E0:BE:54:DC:78:FC:1F:66:87:DB:3E:94:B0:68:AC:9B
Certificate issuer: /CN=2e1d2457e0be54dc78fc1f6687db3e94b068ac9b
Certificate serial: 0198D5BBC7B7D261125D926827A77A4631C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lh0kV-C-VNx4_B9mh9s-lLBorJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.mft
Manifest number: 1055
Signing time: Sat 23 Aug 2025 07:01:50 +0000
Manifest this update: Sat 23 Aug 2025 07:01:50 +0000
Manifest next update: Sun 24 Aug 2025 07:01:50 +0000
Files and hashes: 1: B3anwTfv9G1rVUQa6NJWLwdwXYI.roa (hash: mmLvT4hHYo/WnQMssEwo9M27udmQqtzbwXP4LSX1FYM=)
2: Lh0kV-C-VNx4_B9mh9s-lLBorJs.crl (hash: QicoLfAfLk3xwzQNpEl0yRhG3G5ERL0eMc5BANMlAMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lh0kV-C-VNx4_B9mh9s-lLBorJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:c7:b7:d2:61:12:5d:92:68:27:a7:7a:46:31:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e1d2457e0be54dc78fc1f6687db3e94b068ac9b
Validity
Not Before: Aug 23 07:01:50 2025 GMT
Not After : Aug 24 07:01:50 2025 GMT
Subject: CN=d11f228617cc20cf72b78caf44337b77842db910
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:a7:85:06:bc:92:ad:f0:1b:38:45:cb:18:e5:
40:94:ab:03:77:95:a1:a9:24:3d:e7:65:c9:07:a8:
dc:5f:dc:82:ec:34:66:f1:63:33:e1:23:e5:5a:6e:
f8:c9:6e:a2:a4:e6:9b:cd:43:b2:7e:33:af:8e:f4:
f8:ba:d2:eb:01:71:38:73:cd:bf:16:6e:a9:ba:1f:
49:e6:c9:2e:7d:37:ba:a7:5b:0b:b4:27:81:58:4a:
82:2d:76:50:e6:eb:6d:00:41:d7:67:a9:07:c9:22:
ef:0c:04:f3:c3:53:2a:8a:7c:6d:b8:f4:ff:e0:c8:
6d:54:47:2d:4a:94:5c:46:4d:92:3b:a1:f6:bf:37:
76:62:91:2b:b7:e1:70:9a:0b:2e:df:b1:fb:da:c2:
fc:3e:4d:c6:d7:32:d8:f2:5b:b3:36:54:7f:0a:a0:
17:26:f2:3f:ca:96:b4:04:96:9c:9c:46:5f:27:0c:
c1:9a:37:ec:c4:3d:e6:d6:d9:36:5c:fa:51:34:28:
62:72:e6:51:c6:3f:e4:1c:b2:08:f0:b7:b7:0e:ae:
e6:c3:58:ca:e8:27:e4:74:17:31:d3:11:b0:6a:8a:
63:1f:4e:e9:bb:bd:f1:a8:38:f8:4c:a7:f9:e0:6e:
1c:5a:91:5c:cd:e7:b6:4b:7b:92:2f:75:0b:12:cd:
67:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:1F:22:86:17:CC:20:CF:72:B7:8C:AF:44:33:7B:77:84:2D:B9:10
X509v3 Authority Key Identifier:
keyid:2E:1D:24:57:E0:BE:54:DC:78:FC:1F:66:87:DB:3E:94:B0:68:AC:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lh0kV-C-VNx4_B9mh9s-lLBorJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:53:31:ef:31:31:52:82:d9:4f:76:a7:80:5d:48:ec:d6:c0:
05:16:e6:59:6d:e3:e8:0b:3d:a5:7b:93:01:09:8b:ac:33:73:
56:cc:91:73:3b:3d:3e:3c:b3:d9:70:67:8d:e9:da:99:54:37:
7f:78:13:7b:df:01:65:0e:91:6d:03:d4:bf:b5:04:d7:f9:da:
dc:83:35:4b:fa:56:d2:78:4a:a4:95:5c:f5:92:cd:40:61:15:
d9:9b:ff:89:6d:2d:db:81:06:dc:fb:36:0f:e7:33:a4:96:9c:
84:bb:88:64:8e:02:89:78:64:01:47:ff:5a:c1:92:21:1a:bb:
b0:0a:7e:d7:07:4f:3c:44:ff:91:da:86:cb:13:81:47:11:41:
b5:1e:ac:9c:99:82:c2:50:c2:5a:16:63:b2:df:08:41:4e:6d:
3a:92:3e:57:93:38:b4:24:c9:a3:ba:b4:fa:4a:d1:d7:2c:39:
4c:cd:9a:51:db:13:22:bc:56:22:b0:b3:13:b2:28:32:4b:eb:
9a:5e:92:13:07:58:64:12:9f:71:51:f9:bd:7e:87:ae:6e:81:
24:96:1e:df:ed:56:86:f6:ef:c1:8d:29:f9:24:16:ff:e7:49:
92:b5:60:b6:c8:d3:97:37:d5:48:86:19:fa:76:64:e9:e2:89:
39:b7:e0:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:31:13 2025 by rpki-client