Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.mft
File: lHMg0DCTAXjm987vkdKrh4TT3BY.mft (raw, json)
Hash identifier: TyPbDS89DPnJtj1fnSkYEfG+qr27AqEGFrA0+EcA/cs=
Subject key identifier: E3:DC:B8:87:10:9B:3F:A8:27:68:BA:9D:1C:22:6B:8E:8C:E2:D3:95
Authority key identifier: 94:73:20:D0:30:93:01:78:E6:F7:CE:EF:91:D2:AB:87:84:D3:DC:16
Certificate issuer: /CN=947320d030930178e6f7ceef91d2ab8784d3dc16
Certificate serial: 0197B6D7877FFDF382067B2859566A519F91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lHMg0DCTAXjm987vkdKrh4TT3BY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.mft
Manifest number: 11E2
Signing time: Sat 28 Jun 2025 14:01:07 +0000
Manifest this update: Sat 28 Jun 2025 14:01:07 +0000
Manifest next update: Sun 29 Jun 2025 14:01:07 +0000
Files and hashes: 1: 5QMHmJgfqvSExR78QZoDl1UWmsA.roa (hash: Dbmsjz6HJzMNQXjckNup+UFifmkcVaFAdGg2/Xlr06g=)
2: 9Hm8EAVuf4tqOcHaH0y7y-1Ym9k.roa (hash: FodBXOCVdl5JGOEkTl9E8+4jK0F+A6PAABCoahGBKds=)
3: ChcX6dEQMX7PgnkGnKeX9TQTPSU.roa (hash: 9GX5XaBmVeFjM4n7HjAG7e5pB9imRwZnEdAGfd1ulvc=)
4: I2s0NE0e0ldLesJa5IwWq_3YoQY.roa (hash: 32nxkp+mnSpxawrjeJdAmkwgRYzly761fgfPTbswaVo=)
5: Sx4GrZjuWgu9iofcfquhW4vyGIs.roa (hash: Klrfo3hpXP5vl7y24egIgTTHUAXo1XLHGZTsrjfNBg8=)
6: lHMg0DCTAXjm987vkdKrh4TT3BY.crl (hash: xGlgkOhU6PravoNigaTyCVYc2MkyDjOhbfbKZ3cdneY=)
7: wV_UPXPoWr2rMigTEJujKEPHkRU.roa (hash: sWrQ1dC0i8v5NdCh/KJb/CYIzz2swLex9WzWGoX8cPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lHMg0DCTAXjm987vkdKrh4TT3BY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:87:7f:fd:f3:82:06:7b:28:59:56:6a:51:9f:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=947320d030930178e6f7ceef91d2ab8784d3dc16
Validity
Not Before: Jun 28 14:01:07 2025 GMT
Not After : Jun 29 14:01:07 2025 GMT
Subject: CN=e3dcb887109b3fa82768ba9d1c226b8e8ce2d395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:38:7c:39:fc:76:d6:4a:43:0e:15:72:f3:68:
41:cd:05:f6:8b:c7:b8:97:15:67:71:d0:e2:e9:7e:
4d:3b:7c:69:49:de:be:be:9a:59:0c:56:79:0c:93:
ee:82:fb:a5:c6:39:cd:6d:a7:d2:28:cb:e3:16:22:
75:91:af:0a:5c:bf:b6:b3:96:31:24:41:af:c2:c1:
98:ee:2a:ef:d6:d9:fa:50:3a:7d:8c:7e:dd:65:8b:
1b:c6:65:d4:d1:79:9f:09:6d:9f:4f:55:5b:83:93:
20:32:c8:5e:36:4f:e2:71:35:bc:5e:42:ec:ee:81:
7b:c9:94:f6:55:00:49:35:d7:37:aa:ef:aa:5c:20:
f3:94:72:89:69:c5:ef:6b:bb:f7:53:08:79:52:e6:
f9:3a:1e:c5:c7:d6:d7:b9:76:2f:be:c5:01:fe:eb:
9f:ec:93:2b:86:a3:11:28:18:0c:e7:0a:03:6b:e6:
6b:45:48:04:40:05:db:dc:17:05:1b:84:ab:73:5b:
0d:41:4d:84:20:13:25:6b:a0:6a:50:0b:7b:70:0a:
ef:99:40:1b:30:21:00:07:e0:d1:eb:e4:49:ad:16:
c4:3b:82:fa:ab:95:b5:ed:e2:a8:88:f2:f9:ae:5a:
54:20:8f:13:d5:3d:99:94:b7:3e:9b:a3:38:9e:b0:
50:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:DC:B8:87:10:9B:3F:A8:27:68:BA:9D:1C:22:6B:8E:8C:E2:D3:95
X509v3 Authority Key Identifier:
keyid:94:73:20:D0:30:93:01:78:E6:F7:CE:EF:91:D2:AB:87:84:D3:DC:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lHMg0DCTAXjm987vkdKrh4TT3BY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:32:7c:7f:73:e7:13:2a:ff:e5:67:51:5c:07:fa:92:b8:f3:
a0:33:b3:b9:0e:25:d7:5e:2d:94:fc:86:7a:f8:c4:93:b0:d2:
8c:cc:97:5f:de:81:5f:02:72:cc:73:73:af:d8:d5:69:ae:cf:
cd:59:07:3e:a8:1b:4c:35:d6:91:7c:bc:99:bf:cd:ca:61:2b:
bd:77:bb:3c:8f:e8:2d:ec:d6:72:b2:30:11:81:de:d8:7b:61:
4f:f6:0f:c1:81:a5:84:2b:b9:49:6d:79:f6:cc:4a:ea:70:5a:
29:46:6f:61:f1:b4:e8:00:fa:85:c3:c9:ec:8f:04:7d:da:43:
a1:06:3e:32:53:ce:fa:41:06:48:ac:86:ab:c3:eb:c5:c7:18:
7c:f6:6d:1a:5f:89:3b:fc:35:1f:66:92:6c:ac:2b:ac:e3:21:
6e:1c:0a:92:be:59:04:57:b9:ac:72:e6:a3:db:b7:aa:b9:4f:
26:15:4e:7c:23:27:43:2c:7a:66:bd:81:57:c6:a8:db:d8:1c:
c1:55:3a:8a:65:3b:09:fe:92:72:c5:2d:4f:45:ee:3d:49:5d:
60:9d:3c:b8:3c:29:d3:01:95:0f:b9:e1:a8:5d:b9:1d:23:80:
28:c9:10:23:f3:a0:df:a7:f9:27:fb:31:67:b6:8e:5b:0e:ac:
55:32:1e:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:57:00 2025 by rpki-client