Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.mft
File: Lh0kV-C-VNx4_B9mh9s-lLBorJs.mft (raw, json)
Hash identifier: qiwq+LKAtsVpnqCB6bZ6jEP6NVxF8fZGGWXiYiu4eOM=
Subject key identifier: CF:0B:B0:1B:D9:2B:96:13:F4:A7:9C:90:E7:37:17:B6:42:8B:B2:AD
Authority key identifier: 2E:1D:24:57:E0:BE:54:DC:78:FC:1F:66:87:DB:3E:94:B0:68:AC:9B
Certificate issuer: /CN=2e1d2457e0be54dc78fc1f6687db3e94b068ac9b
Certificate serial: 0197B5FC6CE4AC989624239B1C2C44F433F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lh0kV-C-VNx4_B9mh9s-lLBorJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.mft
Manifest number: 0FC0
Signing time: Sat 28 Jun 2025 10:01:48 +0000
Manifest this update: Sat 28 Jun 2025 10:01:48 +0000
Manifest next update: Sun 29 Jun 2025 10:01:48 +0000
Files and hashes: 1: B3anwTfv9G1rVUQa6NJWLwdwXYI.roa (hash: mmLvT4hHYo/WnQMssEwo9M27udmQqtzbwXP4LSX1FYM=)
2: Lh0kV-C-VNx4_B9mh9s-lLBorJs.crl (hash: wqyJdN4io+b1ZHFcpgbBLJC6WoniNYsvD2BY2dxUBJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lh0kV-C-VNx4_B9mh9s-lLBorJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fc:6c:e4:ac:98:96:24:23:9b:1c:2c:44:f4:33:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e1d2457e0be54dc78fc1f6687db3e94b068ac9b
Validity
Not Before: Jun 28 10:01:48 2025 GMT
Not After : Jun 29 10:01:48 2025 GMT
Subject: CN=cf0bb01bd92b9613f4a79c90e73717b6428bb2ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:3d:c1:81:86:76:bb:62:4a:e3:74:50:ff:87:
23:7d:41:c2:f9:a7:57:95:0e:0e:8c:8f:f1:c2:d6:
77:dc:6e:d7:15:44:67:bc:c1:53:37:bf:a4:e9:d7:
99:16:80:cb:9c:c0:9c:c7:86:84:db:27:ab:ba:23:
f5:e2:7b:a3:d6:69:3e:0f:8f:d4:6f:23:da:20:b1:
95:8f:94:05:7d:3f:d5:fb:21:ed:c5:7a:7a:fb:34:
a3:63:50:0f:51:b3:ca:cd:36:d9:19:0e:58:5b:61:
25:8a:ad:fc:2f:c3:1b:2a:3f:7f:e2:76:16:1f:9e:
a6:df:9d:4c:8f:d9:d9:30:5a:f6:95:c2:ca:05:42:
2c:bf:a9:cc:f9:f1:df:d6:7a:e5:f0:8e:45:a4:a4:
b3:c3:30:e1:b4:df:31:b0:3d:dd:1e:d2:31:39:3f:
c5:ea:b4:c2:f6:12:d5:06:53:b9:c2:4e:9a:ed:7a:
0f:02:aa:e3:e2:0c:c0:20:ee:94:ae:10:81:1e:18:
21:12:dc:33:30:33:af:87:03:4b:81:2b:84:ab:e8:
80:ec:74:58:4b:93:0a:41:7e:bc:e2:bd:fc:0d:00:
0a:7d:9b:0b:99:67:7d:52:48:af:88:4c:40:4c:be:
5c:6c:7b:6a:65:b9:c3:af:a5:f6:fb:22:f5:09:3f:
97:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:0B:B0:1B:D9:2B:96:13:F4:A7:9C:90:E7:37:17:B6:42:8B:B2:AD
X509v3 Authority Key Identifier:
keyid:2E:1D:24:57:E0:BE:54:DC:78:FC:1F:66:87:DB:3E:94:B0:68:AC:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lh0kV-C-VNx4_B9mh9s-lLBorJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:00:b5:0b:57:08:de:29:38:f5:14:70:18:fb:bb:d0:44:da:
ff:98:d0:bb:7b:17:ff:b2:15:b5:3b:d4:57:31:40:b9:5b:48:
2c:9c:d6:67:52:73:9f:fe:03:81:d4:a7:32:2a:17:a4:8a:3d:
d0:af:53:0a:80:1a:5e:54:8b:b5:7d:84:8c:07:10:29:d4:9c:
f8:c6:c9:48:63:83:19:13:7d:16:48:e7:96:e1:65:71:fd:61:
53:84:db:ed:29:ba:d0:d0:db:a3:85:75:99:b6:5f:bf:3c:67:
bb:8e:63:7a:f0:78:fd:65:93:85:f1:7a:a6:a1:6d:59:c6:56:
54:44:2f:91:71:7a:ec:41:c3:0b:06:e9:c0:92:3e:98:a5:45:
9a:f2:cc:02:59:1e:43:d2:57:a1:3a:73:2f:1a:8c:60:4b:3e:
df:21:f0:cc:12:78:5f:82:eb:7a:68:33:d9:5d:1f:cb:e9:59:
40:2f:2a:0d:bd:47:30:3c:0e:2a:91:32:65:25:b9:96:bf:27:
92:c3:36:d8:c8:c0:e4:8f:54:7b:ad:9f:f1:c1:aa:b1:ad:7f:
fa:a4:86:f1:f0:77:58:33:c7:64:8f:09:bb:99:48:c3:b4:1e:
f6:1d:e9:e8:87:48:5d:03:fb:49:89:87:9e:af:6f:77:2b:a1:
2c:6c:70:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:45:09 2025 by rpki-client