Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/f79e8e-6625-45e9-bb9a-96d22861a922/1/LhEuLGHSqA58Q4XGCFjJHXXzHns.mft
File: LhEuLGHSqA58Q4XGCFjJHXXzHns.mft (raw, json)
Hash identifier: 34M1ic3/QJUwImiZM/0RsKwJJNwRWK3MyIkGSJhb9xE=
Subject key identifier: BD:3D:92:57:2A:42:62:F3:A2:1E:BC:2F:C8:D6:D2:AF:48:90:49:43
Authority key identifier: 2E:11:2E:2C:61:D2:A8:0E:7C:43:85:C6:08:58:C9:1D:75:F3:1E:7B
Certificate issuer: /CN=2e112e2c61d2a80e7c4385c60858c91d75f31e7b
Certificate serial: 0197B6A1A009A0D1BC7FE49E18BDEBE2FA45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhEuLGHSqA58Q4XGCFjJHXXzHns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/f79e8e-6625-45e9-bb9a-96d22861a922/1/LhEuLGHSqA58Q4XGCFjJHXXzHns.mft
Manifest number: 02DC
Signing time: Sat 28 Jun 2025 13:02:14 +0000
Manifest this update: Sat 28 Jun 2025 13:02:14 +0000
Manifest next update: Sun 29 Jun 2025 13:02:14 +0000
Files and hashes: 1: LhEuLGHSqA58Q4XGCFjJHXXzHns.crl (hash: s3CvfWyCoJR0FyHUztcAmmX6a4XWeWCHefUotrMJhQk=)
2: q6uLwCPUOFh0yPpYrfw-G5laCq4.roa (hash: P69J+km/g8LXq0BVXp4jTkXxFAbXvFeOKCLpK5Pw804=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/f79e8e-6625-45e9-bb9a-96d22861a922/1/LhEuLGHSqA58Q4XGCFjJHXXzHns.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/f79e8e-6625-45e9-bb9a-96d22861a922/1/LhEuLGHSqA58Q4XGCFjJHXXzHns.mft
rsync://rpki.ripe.net/repository/DEFAULT/LhEuLGHSqA58Q4XGCFjJHXXzHns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:a0:09:a0:d1:bc:7f:e4:9e:18:bd:eb:e2:fa:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e112e2c61d2a80e7c4385c60858c91d75f31e7b
Validity
Not Before: Jun 28 13:02:14 2025 GMT
Not After : Jun 29 13:02:14 2025 GMT
Subject: CN=bd3d92572a4262f3a21ebc2fc8d6d2af48904943
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:22:22:45:80:e1:89:cf:18:6b:1f:a9:4b:2e:
f0:bb:3e:01:ac:c5:b2:fa:0b:03:1a:fa:3a:21:c7:
d9:c9:15:4d:22:0a:29:d8:36:6a:75:3a:8d:c9:bc:
59:6a:a2:6b:a3:2b:cb:aa:49:f7:c1:05:a1:20:ba:
f2:33:13:59:01:91:e3:77:95:2f:de:f2:88:e7:7f:
e0:f7:c0:0e:bd:73:7d:a1:f1:e9:e5:94:70:4f:3f:
e2:65:00:c7:7f:6f:6f:cf:a1:a1:ca:ee:cf:02:98:
3f:40:fc:f9:92:53:6c:0c:77:99:ac:ac:a7:4c:40:
ea:d0:fb:32:2e:38:50:62:0e:29:87:0c:81:81:56:
30:82:4e:e1:83:d4:b6:64:dd:37:ae:6f:aa:b8:6e:
1d:10:fc:65:14:4a:53:d4:35:98:e6:48:19:e9:1a:
62:e6:fe:db:0d:bb:95:da:3a:72:1a:01:22:7a:67:
d3:cc:16:70:07:f3:9b:7a:1a:ad:08:22:e6:14:c5:
93:49:7d:de:dc:4d:82:47:5c:ac:84:56:1b:85:39:
ad:ae:83:ed:d7:48:a6:56:be:14:a5:55:42:17:65:
d3:3c:7c:32:a5:32:ef:2d:fa:dc:dc:e1:df:9e:98:
ca:3c:e3:ac:48:bf:ce:36:67:14:22:02:5c:3c:79:
e8:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:3D:92:57:2A:42:62:F3:A2:1E:BC:2F:C8:D6:D2:AF:48:90:49:43
X509v3 Authority Key Identifier:
keyid:2E:11:2E:2C:61:D2:A8:0E:7C:43:85:C6:08:58:C9:1D:75:F3:1E:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhEuLGHSqA58Q4XGCFjJHXXzHns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f79e8e-6625-45e9-bb9a-96d22861a922/1/LhEuLGHSqA58Q4XGCFjJHXXzHns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f79e8e-6625-45e9-bb9a-96d22861a922/1/LhEuLGHSqA58Q4XGCFjJHXXzHns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:ea:34:b0:15:cd:de:d2:88:09:45:8f:0d:fa:15:e7:8c:b8:
45:18:db:bd:c0:5d:bc:93:95:3e:d6:41:51:78:9d:2a:9e:35:
37:5c:a3:d3:71:87:28:88:3d:3f:49:5e:2b:28:07:e6:88:0f:
d5:34:4c:1b:cc:e0:ba:fc:45:34:99:0b:f5:60:62:ec:84:5d:
47:96:ee:03:1c:30:66:84:62:91:a6:e5:17:88:45:af:cc:be:
63:73:f4:d9:f9:8e:92:a6:20:3f:99:08:c6:f7:ed:66:c5:cd:
51:0c:62:cc:93:2b:3c:c0:4d:6e:3f:9b:d7:03:6a:eb:75:41:
ea:da:04:17:5e:26:f6:ef:88:1e:c0:d7:fa:b2:99:30:7c:22:
bb:21:0a:ea:c2:76:99:eb:26:10:25:82:ca:e2:65:77:ce:32:
42:82:dc:0d:29:96:a6:a4:1e:76:f0:d6:78:1a:28:c8:05:bd:
81:f8:b7:d3:aa:5b:d7:12:e3:7f:03:07:ea:3d:b7:c2:2a:5e:
f7:be:c4:0b:ca:f9:48:0a:41:57:73:5a:35:d6:d4:a8:39:8a:
1a:f9:7d:ac:78:2c:9a:54:d0:e3:e7:67:ad:30:da:92:e1:bf:
db:cc:fd:21:33:38:86:49:cd:9e:0f:a6:90:87:dc:1e:68:f6:
36:61:61:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oaAJoNG8f+SeGL3r4vpFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlMTEyZTJjNjFkMmE4MGU3YzQzODVjNjA4NThjOTFkNzVm
MzFlN2IwHhcNMjUwNjI4MTMwMjE0WhcNMjUwNjI5MTMwMjE0WjAzMTEwLwYDVQQD
EyhiZDNkOTI1NzJhNDI2MmYzYTIxZWJjMmZjOGQ2ZDJhZjQ4OTA0OTQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoiIiRYDhic8Yax+pSy7wuz4BrMWy
+gsDGvo6IcfZyRVNIgop2DZqdTqNybxZaqJroyvLqkn3wQWhILryMxNZAZHjd5Uv
3vKI53/g98AOvXN9ofHp5ZRwTz/iZQDHf29vz6Ghyu7PApg/QPz5klNsDHeZrKyn
TEDq0PsyLjhQYg4phwyBgVYwgk7hg9S2ZN03rm+quG4dEPxlFEpT1DWY5kgZ6Rpi
5v7bDbuV2jpyGgEiemfTzBZwB/ObehqtCCLmFMWTSX3e3E2CR1yshFYbhTmtroPt
10imVr4UpVVCF2XTPHwypTLvLfrc3OHfnpjKPOOsSL/ONmcUIgJcPHnovQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL09klcqQmLzoh68L8jW0q9IkElDMB8GA1UdIwQY
MBaAFC4RLixh0qgOfEOFxghYyR118x57MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGhFdUxHSFNxQTU4UTRYR0NGakpIWFh6SG5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9mNzllOGUtNjYyNS00NWU5LWJiOWEt
OTZkMjI4NjFhOTIyLzEvTGhFdUxHSFNxQTU4UTRYR0NGakpIWFh6SG5zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny9mNzllOGUtNjYyNS00NWU5LWJiOWEtOTZkMjI4NjFhOTIy
LzEvTGhFdUxHSFNxQTU4UTRYR0NGakpIWFh6SG5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA+o0sBXN
3tKICUWPDfoV54y4RRjbvcBdvJOVPtZBUXidKp41N1yj03GHKIg9P0leKygH5ogP
1TRMG8zguvxFNJkL9WBi7IRdR5buAxwwZoRikablF4hFr8y+Y3P02fmOkqYgP5kI
xvftZsXNUQxizJMrPMBNbj+b1wNq63VB6toEF14m9u+IHsDX+rKZMHwiuyEK6sJ2
mesmECWCyuJld84yQoLcDSmWpqQedvDWeBooyAW9gfi306pb1xLjfwMH6j23wipe
977EC8r5SApBV3NaNdbUqDmKGvl9rHgsmlTQ4+dnrTDakuG/28z9ITM4hknNng+m
kIfcHmj2NmFhtw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:33:00 2025 by rpki-client