Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.mft
File: lhJPJSRqVAn77hG1Ny3YviTG6es.mft (raw, json)
Hash identifier: 7bnTpSDsN2ky8mrt3Bp8uzWvIgVXpgtAVC70ttf8dSU=
Subject key identifier: 54:09:B1:1F:27:36:79:C9:2A:BA:FB:6A:38:03:E4:22:E9:50:97:3D
Authority key identifier: 96:12:4F:25:24:6A:54:09:FB:EE:11:B5:37:2D:D8:BE:24:C6:E9:EB
Certificate issuer: /CN=96124f25246a5409fbee11b5372dd8be24c6e9eb
Certificate serial: 0198D697F0E93C7CDBAD4F5BFED24C8B6D67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lhJPJSRqVAn77hG1Ny3YviTG6es.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.mft
Manifest number: 0969
Signing time: Sat 23 Aug 2025 11:02:18 +0000
Manifest this update: Sat 23 Aug 2025 11:02:18 +0000
Manifest next update: Sun 24 Aug 2025 11:02:18 +0000
Files and hashes: 1: c3njCbUkCCL3mnp4u_KCanHzP7M.roa (hash: vVs8Ror537sKvCZah39iYsDHQqQgVb1rydMRu4BJ5YQ=)
2: lhJPJSRqVAn77hG1Ny3YviTG6es.crl (hash: ktSEr0XqmJ8wmQEME/zuY3Tu0vs+vKPo+cFTna0BF2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.mft
rsync://rpki.ripe.net/repository/DEFAULT/lhJPJSRqVAn77hG1Ny3YviTG6es.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:97:f0:e9:3c:7c:db:ad:4f:5b:fe:d2:4c:8b:6d:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96124f25246a5409fbee11b5372dd8be24c6e9eb
Validity
Not Before: Aug 23 11:02:18 2025 GMT
Not After : Aug 24 11:02:18 2025 GMT
Subject: CN=5409b11f273679c92abafb6a3803e422e950973d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:64:44:e7:12:83:d7:89:08:fd:61:28:3a:03:
03:53:20:0d:6c:9f:c9:f7:37:13:fb:e6:50:47:11:
de:85:a0:d3:b6:14:63:f8:42:b0:f2:b4:7b:8f:44:
96:c0:0a:f8:33:1f:7d:0b:04:94:81:e7:03:f7:7d:
9f:a6:a8:72:5a:03:c3:73:2c:ea:78:ce:9c:14:87:
2f:e4:49:92:32:91:85:2a:4b:b2:9d:24:c9:0c:6d:
26:0a:16:dc:0f:78:b8:8a:5e:da:62:26:a5:3a:77:
f3:6b:38:2f:dd:6d:c7:bc:9f:fe:01:15:85:fa:9d:
8b:c5:85:e4:e4:7e:46:1a:af:37:e1:6f:4b:21:41:
37:ac:d2:4c:4a:69:f1:2e:ff:67:fe:cb:ec:2a:9e:
b5:52:f5:0e:8b:9e:e8:0e:04:36:dd:11:14:ae:d6:
dd:c2:67:70:b3:e5:3f:2f:76:16:1c:09:d2:91:f8:
cf:67:90:44:0b:cf:5b:8b:32:fa:17:04:d0:44:33:
05:52:89:a2:54:63:dc:6d:29:11:64:4d:34:22:26:
b8:52:b1:c2:2d:9a:67:42:a9:a6:ce:0b:a5:5d:05:
31:df:4d:52:9b:78:70:6d:aa:e0:dd:88:3f:05:eb:
48:ee:14:07:6e:4c:3b:ef:3c:ff:bf:df:ca:0e:ad:
9f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:09:B1:1F:27:36:79:C9:2A:BA:FB:6A:38:03:E4:22:E9:50:97:3D
X509v3 Authority Key Identifier:
keyid:96:12:4F:25:24:6A:54:09:FB:EE:11:B5:37:2D:D8:BE:24:C6:E9:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhJPJSRqVAn77hG1Ny3YviTG6es.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:a4:26:55:bf:48:7d:13:2b:18:9c:f5:e9:55:53:8d:a2:63:
58:0a:39:8a:bb:52:b2:22:5d:85:86:62:19:10:44:86:71:8a:
3b:6c:ab:7f:d8:c1:21:ec:93:9d:a8:74:9c:78:aa:81:62:2f:
3c:a4:d2:82:2a:58:b2:9b:b6:f6:81:4d:cc:b0:6e:3d:a8:4d:
14:5f:02:39:41:00:d1:b7:d0:33:0b:ae:1b:aa:f3:d3:5f:4d:
5a:5c:ee:89:73:58:b2:01:5d:fd:4b:58:4b:11:12:86:2d:aa:
5f:97:c7:6b:84:aa:83:30:9b:46:b1:3d:71:4c:8c:ea:c9:86:
f4:a8:73:89:2e:40:6c:9b:24:ee:23:a6:60:93:fb:12:f7:13:
d8:fa:16:d8:cb:37:fd:f5:91:c4:b1:79:e5:3a:ce:fa:0e:01:
ba:9f:f4:f3:fa:21:fb:e7:2f:05:50:f5:b9:6b:f0:a3:20:04:
0e:ce:53:3d:f8:8c:22:8c:36:5b:9b:38:35:b3:ba:b5:48:b1:
93:c7:e1:ee:48:1f:d6:62:65:40:a9:33:8b:14:a4:c0:b9:25:
7e:eb:2f:fe:86:fe:aa:ec:82:e2:d1:1b:35:bd:10:1a:0d:08:
51:23:3d:86:01:e9:bb:ba:d9:e6:cf:36:e6:5f:69:76:dd:a9:
04:bf:38:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:08:13 2025 by rpki-client