Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.mft
File: lhJPJSRqVAn77hG1Ny3YviTG6es.mft (raw, json)
Hash identifier: bORvvtz7OCQUBwKTeYcOZs5vobfvDfZEwKkSoH3Oqdk=
Subject key identifier: 91:64:59:4C:71:C4:40:41:63:E3:EA:0F:86:A6:E2:A1:73:7D:E8:5D
Authority key identifier: 96:12:4F:25:24:6A:54:09:FB:EE:11:B5:37:2D:D8:BE:24:C6:E9:EB
Certificate issuer: /CN=96124f25246a5409fbee11b5372dd8be24c6e9eb
Certificate serial: 0197C07FA917AD6D16D9E173C0E0481FE99B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lhJPJSRqVAn77hG1Ny3YviTG6es.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.mft
Manifest number: 08D9
Signing time: Mon 30 Jun 2025 11:01:20 +0000
Manifest this update: Mon 30 Jun 2025 11:01:20 +0000
Manifest next update: Tue 01 Jul 2025 11:01:20 +0000
Files and hashes: 1: c3njCbUkCCL3mnp4u_KCanHzP7M.roa (hash: vVs8Ror537sKvCZah39iYsDHQqQgVb1rydMRu4BJ5YQ=)
2: lhJPJSRqVAn77hG1Ny3YviTG6es.crl (hash: JqMZJyk7HYc+S1knwIRhaZajAMfvt1o8rgjK5DvjU4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.mft
rsync://rpki.ripe.net/repository/DEFAULT/lhJPJSRqVAn77hG1Ny3YviTG6es.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 11:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c0:7f:a9:17:ad:6d:16:d9:e1:73:c0:e0:48:1f:e9:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96124f25246a5409fbee11b5372dd8be24c6e9eb
Validity
Not Before: Jun 30 11:01:20 2025 GMT
Not After : Jul 1 11:01:20 2025 GMT
Subject: CN=9164594c71c4404163e3ea0f86a6e2a1737de85d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3f:2f:51:04:0b:f6:36:2c:be:38:75:26:2b:
a5:10:e4:8c:64:34:3a:be:b6:3f:40:4c:0d:be:24:
f7:2d:5b:03:a3:a9:23:48:7a:a3:a4:3e:d1:56:22:
84:7e:45:71:9e:67:29:df:2f:dd:4b:23:e9:90:98:
b2:3d:92:71:c5:25:c3:73:50:fa:c0:02:3e:34:1d:
fc:e7:07:f7:c6:dc:20:3e:c3:a1:9b:61:ee:d5:d9:
2f:41:c2:79:3f:a2:27:87:c3:8c:bd:50:bc:d1:b6:
7b:f5:5f:64:bd:1a:16:f5:32:38:50:63:d8:96:ad:
eb:10:e3:1a:c0:52:7b:e6:ac:c0:f8:60:be:42:f3:
86:ec:a5:8b:fd:9a:ec:6a:c9:35:0c:87:7b:95:79:
63:bd:a9:10:c9:fc:a4:f0:97:8c:aa:96:ef:16:0e:
ea:ee:49:55:ec:53:b9:5f:c8:64:7d:4b:23:f4:3f:
ce:71:d1:17:04:45:27:1a:fe:f3:aa:7c:52:7a:32:
80:8b:ff:9a:53:e0:c9:ad:c6:02:5d:2d:6a:ca:8f:
b3:6f:62:c9:86:a1:69:d8:2c:83:91:81:25:5b:2f:
5b:4d:34:c9:49:e0:0b:f1:5f:6c:73:db:9a:68:d1:
9a:68:e2:42:fa:3a:5e:b2:a1:6f:c9:84:14:e3:ff:
55:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:64:59:4C:71:C4:40:41:63:E3:EA:0F:86:A6:E2:A1:73:7D:E8:5D
X509v3 Authority Key Identifier:
keyid:96:12:4F:25:24:6A:54:09:FB:EE:11:B5:37:2D:D8:BE:24:C6:E9:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhJPJSRqVAn77hG1Ny3YviTG6es.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:15:be:0c:c5:6b:9f:89:59:76:a2:2e:36:26:17:37:e6:94:
b5:47:64:4f:db:00:9e:de:fb:f8:bb:ca:c4:2d:2a:27:a5:08:
bb:6c:b1:37:1a:eb:d6:c6:73:14:3c:d2:0e:76:83:3d:06:d0:
31:13:27:e7:ed:1a:48:31:b9:e4:82:27:e1:4c:0e:92:cf:58:
d1:5c:5d:08:9c:b1:3a:35:f7:21:d0:dd:3d:e5:f9:32:bf:09:
9a:77:6b:ec:a0:2b:3d:3e:ac:f5:23:a4:f1:74:a6:8a:ec:15:
d3:7a:74:da:a0:5e:d6:79:4d:22:59:d2:1b:44:9b:36:f0:1a:
96:f9:1e:39:94:34:e7:ba:f5:92:65:c7:61:22:10:ed:f7:7d:
60:6e:d2:3a:0a:b1:c0:32:3c:60:e4:15:dd:87:45:12:8d:77:
10:e6:4f:af:13:a8:c5:dd:b5:4c:22:76:ec:18:b8:fb:19:b2:
39:d8:74:53:71:8a:cb:bd:3e:71:68:fd:bb:7c:ee:74:88:71:
b0:64:26:53:64:87:e1:76:7c:22:0d:4f:a7:6f:e7:f5:a4:4c:
85:73:06:fe:ea:41:ad:5e:b1:8e:02:0c:4b:c7:dd:71:45:ce:
68:31:63:3b:7f:2c:40:05:16:79:7b:f9:f5:b0:a3:fd:cb:e1:
a5:01:ae:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 18:17:20 2025 by rpki-client