Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/738188-73ae-4918-bfd7-7788aee1215f/1/LNH_SXJfYzHmO47XZEjXJd16hN4.mft
File: LNH_SXJfYzHmO47XZEjXJd16hN4.mft (raw, json)
Hash identifier: YDZQhlFAUvlPZv4lTRZfexJeLnTylI1MEEBxzop1mw8=
Subject key identifier: 05:97:AB:12:19:8B:F8:CF:4E:D8:7E:09:13:93:8E:E8:50:47:BA:14
Authority key identifier: 2C:D1:FF:49:72:5F:63:31:E6:3B:8E:D7:64:48:D7:25:DD:7A:84:DE
Certificate issuer: /CN=2cd1ff49725f6331e63b8ed76448d725dd7a84de
Certificate serial: 0197B77CC4A1E5CD9F391C3E8C7063F27347
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LNH_SXJfYzHmO47XZEjXJd16hN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/738188-73ae-4918-bfd7-7788aee1215f/1/LNH_SXJfYzHmO47XZEjXJd16hN4.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 17:01:36 +0000
Manifest this update: Sat 28 Jun 2025 17:01:36 +0000
Manifest next update: Sun 29 Jun 2025 17:01:36 +0000
Files and hashes: 1: LNH_SXJfYzHmO47XZEjXJd16hN4.crl (hash: N23QSU2Vco/YPQwBtmQ0SAxp5FSqVQvBexlE36MEWek=)
2: Upzwlv30c7TC3O9gxJ1kAAgNiDA.roa (hash: yTJNjXZ4BZhaMYBc9uxx4ckW86PF2pvOMSFidtmg0eA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/738188-73ae-4918-bfd7-7788aee1215f/1/LNH_SXJfYzHmO47XZEjXJd16hN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/738188-73ae-4918-bfd7-7788aee1215f/1/LNH_SXJfYzHmO47XZEjXJd16hN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LNH_SXJfYzHmO47XZEjXJd16hN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:c4:a1:e5:cd:9f:39:1c:3e:8c:70:63:f2:73:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cd1ff49725f6331e63b8ed76448d725dd7a84de
Validity
Not Before: Jun 28 17:01:36 2025 GMT
Not After : Jun 29 17:01:36 2025 GMT
Subject: CN=0597ab12198bf8cf4ed87e0913938ee85047ba14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:0a:54:b9:af:a3:97:9a:a0:fe:21:cc:4b:90:
6e:d8:fc:55:bb:df:0a:8f:21:34:07:bf:66:ed:35:
fc:f9:d8:28:f7:42:69:51:4f:46:5d:c9:5d:f3:cb:
95:90:c5:c3:97:1b:40:b1:0e:63:bd:7d:9e:52:3e:
77:77:5b:72:03:ef:26:e0:bd:22:68:ed:75:86:1b:
0f:82:50:0d:a8:24:5f:66:cb:17:90:24:44:e8:14:
b7:a0:b2:7c:fb:94:98:b5:f8:25:f4:f4:cd:4b:87:
f5:46:4e:42:af:72:b3:eb:44:7a:a4:c9:b8:e1:36:
06:97:7b:ad:99:1e:ec:85:14:09:6b:e1:b9:74:29:
78:d6:c6:38:a0:d6:69:9b:3d:ec:56:1f:bb:63:41:
08:8a:9b:b1:e1:58:c7:ea:31:7d:f2:55:1a:51:f8:
6f:90:c3:18:a1:f0:e2:be:3f:46:d6:7b:4c:bd:a2:
b3:f5:0d:5e:ec:73:ce:f5:6b:15:14:8b:b8:66:45:
04:46:51:69:d5:31:31:3f:f8:97:a3:3a:a6:b5:b5:
01:34:67:16:12:81:97:9f:53:c2:5e:39:fa:c8:17:
ba:90:51:e1:35:bf:42:9f:d7:7a:dd:38:fb:0c:c2:
aa:53:29:d1:90:9a:cb:ba:5d:6d:92:4c:f2:72:78:
a9:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:97:AB:12:19:8B:F8:CF:4E:D8:7E:09:13:93:8E:E8:50:47:BA:14
X509v3 Authority Key Identifier:
keyid:2C:D1:FF:49:72:5F:63:31:E6:3B:8E:D7:64:48:D7:25:DD:7A:84:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LNH_SXJfYzHmO47XZEjXJd16hN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/738188-73ae-4918-bfd7-7788aee1215f/1/LNH_SXJfYzHmO47XZEjXJd16hN4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/738188-73ae-4918-bfd7-7788aee1215f/1/LNH_SXJfYzHmO47XZEjXJd16hN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:97:13:34:65:0d:bc:5a:23:35:d7:cf:a4:4a:19:03:1f:ee:
c5:bb:dc:68:e1:f6:92:ea:b0:e6:a7:87:51:72:38:43:6f:48:
3d:7c:32:ee:a7:23:fd:02:14:31:84:2e:eb:47:e3:8d:65:63:
a4:2c:aa:68:a8:b5:93:40:a6:05:1e:28:cf:1a:13:5e:2b:cd:
7c:50:77:1c:01:47:83:c9:16:de:65:bc:0a:82:35:a8:fa:a1:
1f:25:66:12:ae:7b:bd:de:45:b9:eb:6f:88:5d:24:4d:33:eb:
ac:c0:21:6d:a7:c5:f6:59:f1:cf:3a:31:27:32:71:cc:a1:1b:
f6:fc:71:52:41:90:38:71:bc:b4:ef:90:fc:c9:3b:95:4f:ee:
87:1b:b1:98:c3:9b:33:11:37:3f:61:ee:d7:a7:13:b7:c9:97:
74:79:a6:3d:64:1e:1f:04:d3:82:5a:c8:1a:aa:e4:e1:d8:ff:
3b:ff:4f:fc:2d:3e:49:b2:b5:52:94:7d:39:4e:79:47:d3:f3:
d2:a0:4d:ce:04:a6:76:2a:7d:b9:5d:6b:4b:ef:c0:be:37:23:
e0:44:75:31:03:7e:8a:93:b0:ea:ee:d2:96:bc:bd:38:c3:6f:
d3:00:73:6f:30:cc:72:ff:13:6a:93:9c:14:7c:17:cd:7f:4b:
9b:8d:78:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:49:14 2025 by rpki-client