Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.mft
File: lHMg0DCTAXjm987vkdKrh4TT3BY.mft (raw, json)
Hash identifier: SWvYRXtFhINWsCGoOrH2KXiHoQcMglG0uqNKPvvtX+0=
Subject key identifier: 66:59:97:EC:99:E9:87:63:A7:69:5D:8D:87:BB:DB:3B:AA:A7:DC:56
Authority key identifier: 94:73:20:D0:30:93:01:78:E6:F7:CE:EF:91:D2:AB:87:84:D3:DC:16
Certificate issuer: /CN=947320d030930178e6f7ceef91d2ab8784d3dc16
Certificate serial: 0198D698194DAF321066F0BAEC24EE9F9273
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lHMg0DCTAXjm987vkdKrh4TT3BY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.mft
Manifest number: 1277
Signing time: Sat 23 Aug 2025 11:02:28 +0000
Manifest this update: Sat 23 Aug 2025 11:02:28 +0000
Manifest next update: Sun 24 Aug 2025 11:02:28 +0000
Files and hashes: 1: 5QMHmJgfqvSExR78QZoDl1UWmsA.roa (hash: Dbmsjz6HJzMNQXjckNup+UFifmkcVaFAdGg2/Xlr06g=)
2: 9Hm8EAVuf4tqOcHaH0y7y-1Ym9k.roa (hash: FodBXOCVdl5JGOEkTl9E8+4jK0F+A6PAABCoahGBKds=)
3: ChcX6dEQMX7PgnkGnKeX9TQTPSU.roa (hash: 9GX5XaBmVeFjM4n7HjAG7e5pB9imRwZnEdAGfd1ulvc=)
4: I2s0NE0e0ldLesJa5IwWq_3YoQY.roa (hash: 32nxkp+mnSpxawrjeJdAmkwgRYzly761fgfPTbswaVo=)
5: Sx4GrZjuWgu9iofcfquhW4vyGIs.roa (hash: Klrfo3hpXP5vl7y24egIgTTHUAXo1XLHGZTsrjfNBg8=)
6: lHMg0DCTAXjm987vkdKrh4TT3BY.crl (hash: H95z9Z+2JuazI49ngi+LTvsokZuK6H2dGrsLcy8iSwk=)
7: wV_UPXPoWr2rMigTEJujKEPHkRU.roa (hash: sWrQ1dC0i8v5NdCh/KJb/CYIzz2swLex9WzWGoX8cPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lHMg0DCTAXjm987vkdKrh4TT3BY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:19:4d:af:32:10:66:f0:ba:ec:24:ee:9f:92:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=947320d030930178e6f7ceef91d2ab8784d3dc16
Validity
Not Before: Aug 23 11:02:28 2025 GMT
Not After : Aug 24 11:02:28 2025 GMT
Subject: CN=665997ec99e98763a7695d8d87bbdb3baaa7dc56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ca:c8:de:b7:ef:eb:74:1f:75:ed:48:f9:aa:
00:89:95:68:aa:da:fd:7c:c5:16:94:91:0b:37:d5:
e2:b1:6b:5d:e2:a0:87:05:a2:f7:c2:bd:b9:5e:29:
e8:87:25:78:a7:1b:8c:54:3a:0a:4c:23:03:df:16:
55:1c:c5:a6:75:fb:2c:2e:92:93:cb:c8:ca:ab:9e:
84:20:c0:0a:df:dc:c5:4c:8a:2e:1e:4e:1c:a0:14:
f3:37:a1:b8:a9:6f:06:dd:e3:b0:ec:e5:0c:4e:94:
c0:80:4b:c0:d2:d2:c4:4e:99:d0:2c:6e:18:ad:23:
ac:a7:41:81:7c:e6:f2:43:a9:60:d9:a1:08:e1:89:
18:ac:3e:31:5c:8d:98:a9:57:ad:54:95:a0:9f:5e:
2d:50:de:a4:4e:5f:2c:94:d5:5a:3f:31:a6:ef:33:
d7:ad:dd:95:5b:f1:5b:eb:ef:01:a7:6b:73:85:1e:
9b:bb:be:32:73:d3:07:32:2e:f0:d7:e2:3e:12:f9:
e5:b5:07:cc:2a:eb:3b:a9:bf:27:1c:86:04:f2:15:
a6:48:f6:b2:1a:96:57:db:12:b6:26:8e:ae:6b:6c:
d3:54:20:4c:61:0c:42:c9:ca:25:f7:6b:f9:02:15:
df:4c:e9:f2:f2:37:67:0b:e3:f5:40:d0:6c:6b:05:
e3:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:59:97:EC:99:E9:87:63:A7:69:5D:8D:87:BB:DB:3B:AA:A7:DC:56
X509v3 Authority Key Identifier:
keyid:94:73:20:D0:30:93:01:78:E6:F7:CE:EF:91:D2:AB:87:84:D3:DC:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lHMg0DCTAXjm987vkdKrh4TT3BY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:91:54:26:4d:74:4d:0b:aa:b6:68:a3:48:a2:3b:68:5a:fb:
bf:18:a0:c2:54:bd:0f:9a:25:5a:44:a1:c7:36:1c:d4:ac:b9:
a5:27:8c:cd:a8:4d:03:37:07:50:60:8b:a5:d9:a4:14:48:e1:
0d:6d:7e:7e:e2:b7:94:be:7b:1e:d7:ff:74:7e:73:3c:c5:01:
8b:da:69:21:57:26:aa:43:be:e7:4a:ed:10:6c:43:13:d7:e1:
f2:d4:26:50:bd:6b:6f:8b:8a:18:bd:9a:4b:62:bd:b8:f5:2b:
9e:f8:75:9b:7c:fa:a8:80:dd:a4:d2:b2:19:01:dc:53:93:09:
59:d8:3c:5f:f5:09:44:8f:08:60:08:70:d9:38:8e:d9:df:ee:
be:c9:7d:2a:f4:d9:d0:55:49:fa:f6:4c:10:a6:c9:ce:b0:e4:
7f:ac:c9:7a:21:98:04:45:15:52:ae:17:11:53:34:b5:c1:90:
d9:25:fc:61:d0:fe:b9:ce:fb:93:64:be:24:87:17:e9:ee:cb:
0a:40:4d:a5:32:91:4f:d9:59:cc:9c:af:a3:9c:b0:63:43:58:
1e:3d:1d:30:90:89:9a:22:d1:09:39:25:ef:95:0d:52:eb:5c:
24:75:d7:57:a3:72:f0:eb:05:de:e2:d9:8c:74:0c:1e:f9:5d:
be:4d:50:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:52:26 2025 by rpki-client