Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/063658-8262-4965-9661-0542427b02b9/1/lLHL_0vZcPon_e_Uv2iwLWjSud0.mft
File: lLHL_0vZcPon_e_Uv2iwLWjSud0.mft (raw, json)
Hash identifier: 6cHNfxToSwo0+t/dftIRL8RQld5BpoVPKxTCgicoyXQ=
Subject key identifier: A3:EC:83:0C:37:69:70:EC:43:35:22:DB:AA:36:4B:E7:7C:02:06:7D
Authority key identifier: 94:B1:CB:FF:4B:D9:70:FA:27:FD:EF:D4:BF:68:B0:2D:68:D2:B9:DD
Certificate issuer: /CN=94b1cbff4bd970fa27fdefd4bf68b02d68d2b9dd
Certificate serial: 0197CCBB25A1214C4F51C18CB352A8894FD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lLHL_0vZcPon_e_Uv2iwLWjSud0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/063658-8262-4965-9661-0542427b02b9/1/lLHL_0vZcPon_e_Uv2iwLWjSud0.mft
Manifest number: 157C
Signing time: Wed 02 Jul 2025 20:01:46 +0000
Manifest this update: Wed 02 Jul 2025 20:01:46 +0000
Manifest next update: Thu 03 Jul 2025 20:01:46 +0000
Files and hashes: 1: 1-tC0rjZV1jihIqCSqr691PhK46c.roa (hash: OZRRaNXEuVkMUwrYkvaXW28rMwl6+wF4euV4WCbSFTw=)
2: lLHL_0vZcPon_e_Uv2iwLWjSud0.crl (hash: B3xin7dSPvkYbrGxkj33JOeaNUy6wD7ckzHShdSu1Xc=)
3: wXXOQ9H2b6IyrY2B0lg-XuD_B8I.roa (hash: cgMdX3AAi5D4nzcU3HSWbT0lY1xCqmK5843fX99UXkY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/063658-8262-4965-9661-0542427b02b9/1/lLHL_0vZcPon_e_Uv2iwLWjSud0.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/063658-8262-4965-9661-0542427b02b9/1/lLHL_0vZcPon_e_Uv2iwLWjSud0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lLHL_0vZcPon_e_Uv2iwLWjSud0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cc:bb:25:a1:21:4c:4f:51:c1:8c:b3:52:a8:89:4f:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94b1cbff4bd970fa27fdefd4bf68b02d68d2b9dd
Validity
Not Before: Jul 2 20:01:46 2025 GMT
Not After : Jul 3 20:01:46 2025 GMT
Subject: CN=a3ec830c376970ec433522dbaa364be77c02067d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8d:8d:1a:c5:cb:5c:72:20:e4:e1:d5:5e:14:
24:4e:d6:be:07:f6:56:d2:8f:ea:fa:4a:9a:61:cd:
db:39:30:24:cc:47:76:ea:41:a3:b4:51:56:b6:d5:
f9:e5:4b:62:1a:80:1b:e9:c2:84:cf:b7:b2:4c:fc:
94:97:25:c7:1e:4c:cc:ed:e3:98:1a:e2:26:93:70:
07:5d:1e:a5:7d:02:83:7b:cb:87:15:e0:46:b5:71:
5f:bd:22:7a:ae:ac:3a:d8:3b:2e:81:96:b9:20:04:
0f:23:ba:91:b2:ff:84:6e:85:c5:ad:f7:85:60:ff:
19:d6:73:71:b0:35:dd:56:ca:dc:f7:0d:17:e3:8e:
1e:17:40:33:30:a8:77:47:21:c3:a1:21:2a:b3:b0:
2a:1d:0a:2c:39:b9:56:15:29:c9:80:37:14:e8:bd:
49:c7:1b:c5:f1:e2:f1:85:77:59:b8:52:5c:ce:fc:
a1:39:f0:5c:bf:65:03:92:03:9a:51:d5:06:23:31:
1c:03:30:c8:22:b7:d4:e8:b1:d0:a0:d3:bb:4e:90:
41:cf:14:e8:55:9e:41:4d:9c:23:31:be:ef:1e:f6:
05:7f:38:05:32:e7:05:8b:74:a6:7d:44:8e:a9:d3:
05:ee:1f:3f:ec:76:4a:51:e3:03:30:47:d2:1c:3b:
7a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:EC:83:0C:37:69:70:EC:43:35:22:DB:AA:36:4B:E7:7C:02:06:7D
X509v3 Authority Key Identifier:
keyid:94:B1:CB:FF:4B:D9:70:FA:27:FD:EF:D4:BF:68:B0:2D:68:D2:B9:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lLHL_0vZcPon_e_Uv2iwLWjSud0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/063658-8262-4965-9661-0542427b02b9/1/lLHL_0vZcPon_e_Uv2iwLWjSud0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/063658-8262-4965-9661-0542427b02b9/1/lLHL_0vZcPon_e_Uv2iwLWjSud0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:7e:e1:3e:ef:6e:79:d8:14:eb:b4:ab:a3:fa:20:ba:71:4f:
9f:0c:14:47:92:9e:22:62:ca:94:30:05:3d:25:68:5f:a5:78:
ec:cb:50:8c:cf:99:0e:cf:72:30:3c:84:be:80:d0:5c:8a:08:
75:db:46:05:2e:b4:65:83:6a:52:68:3b:8c:ce:bf:8a:46:2f:
ef:38:17:46:50:af:e5:d4:ef:fe:5b:a6:ed:12:9e:44:76:ad:
6a:b2:03:a8:1b:c2:22:b1:ae:83:28:a0:3e:0e:11:d4:47:68:
fc:19:32:93:03:a5:28:2a:d8:fd:21:e8:a1:71:3c:40:31:69:
5d:f5:39:9e:f6:33:6f:af:2f:d1:10:34:7e:47:5e:39:fe:b9:
71:d2:fa:41:d1:f0:c2:af:38:cf:94:d6:db:5f:84:44:4d:5a:
1c:89:91:c4:1e:25:2f:4f:75:93:57:ba:53:c1:39:b4:a6:48:
93:3d:13:e5:ff:05:8e:4e:db:94:40:a2:4d:78:d2:53:e4:f0:
86:d1:d2:85:84:22:2d:62:9f:a6:e3:a9:05:69:a5:62:ce:d4:
00:f1:9b:6d:95:85:da:5b:a4:a0:c3:b6:c0:2e:34:4f:5e:ab:
0c:c3:a0:23:dc:5d:05:4f:2c:b3:7d:cb:36:8f:f5:48:7f:f5:
b9:0c:04:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfMuyWhIUxPUcGMs1KoiU/VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0YjFjYmZmNGJkOTcwZmEyN2ZkZWZkNGJmNjhiMDJkNjhk
MmI5ZGQwHhcNMjUwNzAyMjAwMTQ2WhcNMjUwNzAzMjAwMTQ2WjAzMTEwLwYDVQQD
EyhhM2VjODMwYzM3Njk3MGVjNDMzNTIyZGJhYTM2NGJlNzdjMDIwNjdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqo2NGsXLXHIg5OHVXhQkTta+B/ZW
0o/q+kqaYc3bOTAkzEd26kGjtFFWttX55UtiGoAb6cKEz7eyTPyUlyXHHkzM7eOY
GuImk3AHXR6lfQKDe8uHFeBGtXFfvSJ6rqw62DsugZa5IAQPI7qRsv+EboXFrfeF
YP8Z1nNxsDXdVsrc9w0X444eF0AzMKh3RyHDoSEqs7AqHQosOblWFSnJgDcU6L1J
xxvF8eLxhXdZuFJczvyhOfBcv2UDkgOaUdUGIzEcAzDIIrfU6LHQoNO7TpBBzxTo
VZ5BTZwjMb7vHvYFfzgFMucFi3SmfUSOqdMF7h8/7HZKUeMDMEfSHDt6qwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKPsgww3aXDsQzUi26o2S+d8AgZ9MB8GA1UdIwQY
MBaAFJSxy/9L2XD6J/3v1L9osC1o0rndMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbExITF8wdlpjUG9uX2VfVXYyaXdMV2pTdWQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny8wNjM2NTgtODI2Mi00OTY1LTk2NjEt
MDU0MjQyN2IwMmI5LzEvbExITF8wdlpjUG9uX2VfVXYyaXdMV2pTdWQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny8wNjM2NTgtODI2Mi00OTY1LTk2NjEtMDU0MjQyN2IwMmI5
LzEvbExITF8wdlpjUG9uX2VfVXYyaXdMV2pTdWQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB37hPu9u
edgU67Sro/ogunFPnwwUR5KeImLKlDAFPSVoX6V47MtQjM+ZDs9yMDyEvoDQXIoI
ddtGBS60ZYNqUmg7jM6/ikYv7zgXRlCv5dTv/lum7RKeRHatarIDqBvCIrGugyig
Pg4R1Edo/BkykwOlKCrY/SHooXE8QDFpXfU5nvYzb68v0RA0fkdeOf65cdL6QdHw
wq84z5TW21+ERE1aHImRxB4lL091k1e6U8E5tKZIkz0T5f8Fjk7blECiTXjSU+Tw
htHShYQiLWKfpuOpBWmlYs7UAPGbbZWF2lukoMO2wC40T16rDMOgI9xdBU8ss33L
No/1SH/1uQwEHA==
-----END CERTIFICATE-----
Generated at Thu Jul 3 00:58:15 2025 by rpki-client