Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/LhmWbA6l3zqYf4NlUktRKMun_JA.mft
File: LhmWbA6l3zqYf4NlUktRKMun_JA.mft (raw, json)
Hash identifier: RxnBqalpuMzqvj4Gm5tWMSXThXG3hGhj2F+hhmD8t1g=
Subject key identifier: 6B:8E:37:E6:51:C6:01:23:04:DF:18:FC:B4:E0:64:44:B9:2A:DF:2D
Authority key identifier: 2E:19:96:6C:0E:A5:DF:3A:98:7F:83:65:52:4B:51:28:CB:A7:FC:90
Certificate issuer: /CN=2e19966c0ea5df3a987f8365524b5128cba7fc90
Certificate serial: 0197B7B3572720F82FDACD569DA794E4CD11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhmWbA6l3zqYf4NlUktRKMun_JA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/LhmWbA6l3zqYf4NlUktRKMun_JA.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 18:01:13 +0000
Manifest this update: Sat 28 Jun 2025 18:01:13 +0000
Manifest next update: Sun 29 Jun 2025 18:01:13 +0000
Files and hashes: 1: EB2pKsJqEpEjhB4YuLKeyjkIp9Q.roa (hash: ruDUWZ/Fl5sEVfjlgGOsVStJ3zZdJ/uyG7EZiN/zjl0=)
2: LhmWbA6l3zqYf4NlUktRKMun_JA.crl (hash: x7SKQ6YpEDvRAJl0IRkN5sqNtKkrZK0FsbwNcT0WwqI=)
3: iOSgDas4E473RISs54ZCqJXEL1Y.roa (hash: cm025SWzl2vuQDv4U8M4vf0+/0CnnGay76ie0c/nESQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/LhmWbA6l3zqYf4NlUktRKMun_JA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/LhmWbA6l3zqYf4NlUktRKMun_JA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LhmWbA6l3zqYf4NlUktRKMun_JA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:57:27:20:f8:2f:da:cd:56:9d:a7:94:e4:cd:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e19966c0ea5df3a987f8365524b5128cba7fc90
Validity
Not Before: Jun 28 18:01:13 2025 GMT
Not After : Jun 29 18:01:13 2025 GMT
Subject: CN=6b8e37e651c6012304df18fcb4e06444b92adf2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:05:41:7f:0d:04:f1:3b:69:44:98:15:6c:35:
f3:7f:a6:08:12:91:22:e4:46:15:e2:44:04:44:c7:
cc:5d:1c:df:9b:28:da:5e:69:9e:d4:3d:31:64:a8:
e7:73:af:03:4e:86:c7:07:95:b1:74:ac:90:37:1c:
5b:9c:d6:44:12:ab:09:f4:bc:e8:69:51:ea:45:3d:
83:62:35:2b:ce:d8:81:f3:51:3d:2e:48:c8:35:8c:
73:43:77:a0:72:7a:c1:97:cc:7a:c9:a4:dd:e8:27:
7b:56:93:46:aa:27:16:15:bf:f7:a5:a5:12:9d:36:
4d:5e:de:9b:0d:69:06:5f:a5:4a:26:e2:c4:f9:f9:
8d:4f:7e:15:c2:ed:24:44:ec:06:05:5f:6f:cb:c2:
28:55:0f:b6:c1:e3:59:9b:c0:0d:15:9b:03:36:2b:
22:5b:c2:1d:48:ba:61:92:75:0c:da:b6:86:5d:e2:
9b:23:cc:13:4d:b7:d1:a3:34:bc:14:21:91:d0:9f:
d2:18:a3:a4:39:80:8e:b5:07:91:65:4d:58:96:18:
65:d6:be:30:44:9b:4d:13:43:2c:f9:cc:dd:15:49:
cb:75:af:eb:a3:cd:eb:83:c4:1c:12:4b:d8:a2:16:
c8:b3:7c:3a:6e:70:a8:31:f4:3f:02:49:46:6e:c6:
9a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:8E:37:E6:51:C6:01:23:04:DF:18:FC:B4:E0:64:44:B9:2A:DF:2D
X509v3 Authority Key Identifier:
keyid:2E:19:96:6C:0E:A5:DF:3A:98:7F:83:65:52:4B:51:28:CB:A7:FC:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhmWbA6l3zqYf4NlUktRKMun_JA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/LhmWbA6l3zqYf4NlUktRKMun_JA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/LhmWbA6l3zqYf4NlUktRKMun_JA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:98:58:32:c7:6c:35:a8:fb:c7:1a:1c:00:4a:63:68:3f:2c:
98:82:98:38:9d:9c:0e:06:48:da:e5:9e:22:bd:fc:89:f5:ee:
34:5c:0f:0a:b8:5e:b8:f5:cd:31:c0:60:41:e7:fc:ed:eb:6e:
f3:ff:96:ac:ea:0e:af:55:66:f2:49:b1:58:d7:9b:d4:88:51:
d2:7d:c6:15:2b:ca:98:0f:de:52:d9:d5:6e:a3:17:6b:ab:b4:
e9:e7:96:63:68:28:53:e5:2c:26:44:51:a8:13:9f:69:d1:07:
09:db:06:1e:d3:73:e5:9a:45:df:46:f1:fe:4d:4e:ad:6c:fc:
9c:79:6f:79:15:20:0b:cd:73:aa:be:b8:05:bf:d2:52:0f:10:
f8:7f:31:de:44:7a:ec:ce:9b:a0:65:78:d4:46:da:77:ee:c8:
e6:08:04:07:53:62:3c:74:d8:6f:4b:8f:af:6a:2d:1c:0a:b2:
00:ee:18:7d:7f:e9:a1:e1:7c:39:e8:0a:a6:b4:5f:5c:76:02:
b9:39:80:7f:0b:3d:de:91:6f:bd:f2:81:45:96:ae:1a:53:c3:
15:ff:c7:0a:c0:46:78:ec:fb:32:eb:d6:13:eb:d5:3a:1d:ec:
fa:8a:cd:03:b1:7f:72:6a:65:8e:de:94:54:7d:cf:b6:a2:ca:
42:61:db:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:57:52 2025 by rpki-client