Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/f79e8e-6625-45e9-bb9a-96d22861a922/1/LhEuLGHSqA58Q4XGCFjJHXXzHns.mft
File: LhEuLGHSqA58Q4XGCFjJHXXzHns.mft (raw, json)
Hash identifier: RX/8/QDpdh5RuiXY2xznh79zyYNkSwa7M/Kc1gNjQbs=
Subject key identifier: 1E:D4:C6:FD:D9:E2:78:26:06:DF:D3:4B:FF:42:93:69:25:7F:12:74
Authority key identifier: 2E:11:2E:2C:61:D2:A8:0E:7C:43:85:C6:08:58:C9:1D:75:F3:1E:7B
Certificate issuer: /CN=2e112e2c61d2a80e7c4385c60858c91d75f31e7b
Certificate serial: 0198D6605D8F127613B1304AA95ACF7A7273
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhEuLGHSqA58Q4XGCFjJHXXzHns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/f79e8e-6625-45e9-bb9a-96d22861a922/1/LhEuLGHSqA58Q4XGCFjJHXXzHns.mft
Manifest number: 0371
Signing time: Sat 23 Aug 2025 10:01:36 +0000
Manifest this update: Sat 23 Aug 2025 10:01:36 +0000
Manifest next update: Sun 24 Aug 2025 10:01:36 +0000
Files and hashes: 1: LhEuLGHSqA58Q4XGCFjJHXXzHns.crl (hash: MaKSZw2QuwbCM9N4oWchXTUEInXZy+QdSVxBAiY4Ldo=)
2: q6uLwCPUOFh0yPpYrfw-G5laCq4.roa (hash: P69J+km/g8LXq0BVXp4jTkXxFAbXvFeOKCLpK5Pw804=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/f79e8e-6625-45e9-bb9a-96d22861a922/1/LhEuLGHSqA58Q4XGCFjJHXXzHns.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/f79e8e-6625-45e9-bb9a-96d22861a922/1/LhEuLGHSqA58Q4XGCFjJHXXzHns.mft
rsync://rpki.ripe.net/repository/DEFAULT/LhEuLGHSqA58Q4XGCFjJHXXzHns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:5d:8f:12:76:13:b1:30:4a:a9:5a:cf:7a:72:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e112e2c61d2a80e7c4385c60858c91d75f31e7b
Validity
Not Before: Aug 23 10:01:36 2025 GMT
Not After : Aug 24 10:01:36 2025 GMT
Subject: CN=1ed4c6fdd9e2782606dfd34bff429369257f1274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:07:87:9d:b3:cc:0a:99:c4:df:fd:52:c7:9d:
d0:a3:e1:41:0c:7e:f3:a3:70:8a:ab:1e:c0:6a:65:
fa:cb:6d:be:b0:36:86:98:5d:6e:81:33:7d:40:a1:
f0:c5:f6:0b:aa:06:ba:a7:f7:5a:c0:74:61:a9:79:
8f:b6:5a:35:b2:48:99:b7:34:9b:22:16:ca:f3:46:
7d:46:c3:2c:55:97:0a:16:72:ea:81:ba:ec:b1:c5:
d9:6d:4d:3e:58:3b:06:cc:3b:e5:d3:86:c6:91:d6:
2c:51:54:cb:f6:dd:64:14:9e:99:08:c3:37:86:90:
be:a5:2a:69:86:fa:6c:31:0a:86:5d:2a:08:49:ed:
c4:7e:9d:eb:9e:04:4e:54:15:75:d6:58:ce:a2:92:
88:d5:8f:5d:e0:53:58:f8:ef:8e:2a:dd:81:42:1f:
39:84:35:e8:e5:f2:d8:23:ed:72:dc:6c:22:b9:a5:
0f:72:78:cb:cc:5e:51:22:cb:9a:ff:3b:60:30:12:
01:e8:e5:a3:c5:4e:a5:af:4a:7c:df:18:c0:67:22:
8b:ab:ab:bd:d4:af:41:ef:8d:fe:f2:31:d5:71:f9:
34:23:c4:95:ac:fd:ed:22:4c:60:c8:9a:0f:ed:97:
01:fd:5c:b9:2c:1f:81:23:97:88:26:30:df:4f:0e:
93:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:D4:C6:FD:D9:E2:78:26:06:DF:D3:4B:FF:42:93:69:25:7F:12:74
X509v3 Authority Key Identifier:
keyid:2E:11:2E:2C:61:D2:A8:0E:7C:43:85:C6:08:58:C9:1D:75:F3:1E:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhEuLGHSqA58Q4XGCFjJHXXzHns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f79e8e-6625-45e9-bb9a-96d22861a922/1/LhEuLGHSqA58Q4XGCFjJHXXzHns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f79e8e-6625-45e9-bb9a-96d22861a922/1/LhEuLGHSqA58Q4XGCFjJHXXzHns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:e4:11:b8:04:eb:55:aa:07:24:19:aa:17:80:73:ee:95:18:
69:71:9c:9c:b3:2d:56:80:a3:72:66:7c:4a:0a:cf:ba:25:fd:
fb:ae:39:5e:28:55:b1:c0:cb:05:39:a2:f2:e0:0e:c6:a3:7c:
9a:77:22:ae:6a:1e:f1:ed:8f:d7:e6:ed:d2:c7:af:f3:7c:5a:
ff:c3:c9:a2:b5:66:c8:55:5e:04:45:d2:73:f0:c3:34:71:30:
44:be:99:e8:b8:1c:8c:fc:40:72:ae:e2:b2:ef:9d:0f:78:73:
e1:a1:12:87:b2:c3:0b:aa:77:98:64:80:4b:60:44:5d:8c:cf:
11:f9:9f:4b:c5:c8:b8:4a:24:f5:c4:8a:9d:35:9a:11:61:66:
d0:eb:ca:31:3d:b6:c2:fd:03:5c:4e:37:b5:d1:79:7b:6a:75:
e5:e9:7b:83:47:4d:cd:ea:b9:33:ea:b8:60:c4:7d:af:f1:59:
40:ad:fd:ab:cd:5a:9c:24:ac:46:2e:8b:27:93:61:e1:e9:f5:
e7:ae:5f:96:f6:b6:15:a5:40:27:19:a0:2c:1f:4c:f5:6a:50:
71:6e:3c:e4:15:ed:99:fa:c2:c1:92:17:5d:a0:3a:20:91:c4:
8e:35:a4:88:3e:36:89:2a:be:6a:3c:ec:c6:53:6e:ce:f1:db:
e8:f9:be:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:53:13 2025 by rpki-client