Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/6c4c26-e34a-4336-90c8-f90ae9966428/1/lH4-X564CJtcqU845lF8-8WyAGM.mft
File: lH4-X564CJtcqU845lF8-8WyAGM.mft (raw, json)
Hash identifier: SFph/oiWbX0jcKfsWwmnWm1sm+e4aQ4G8xmd4FGk244=
Subject key identifier: D2:01:F9:8C:40:0A:F0:CA:91:62:4F:04:E2:ED:B2:C4:BF:82:33:56
Authority key identifier: 94:7E:3E:5F:9E:B8:08:9B:5C:A9:4F:38:E6:51:7C:FB:C5:B2:00:63
Certificate issuer: /CN=947e3e5f9eb8089b5ca94f38e6517cfbc5b20063
Certificate serial: 0196C7CCD4744940F241B31CC3387A0B446D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lH4-X564CJtcqU845lF8-8WyAGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4c26-e34a-4336-90c8-f90ae9966428/1/lH4-X564CJtcqU845lF8-8WyAGM.mft
Manifest number: 03C8
Signing time: Tue 13 May 2025 04:00:11 +0000
Manifest this update: Tue 13 May 2025 04:00:11 +0000
Manifest next update: Wed 14 May 2025 04:00:11 +0000
Files and hashes: 1: 8JJmvRAktSEG3OdLUZKBNwR6ws0.roa (hash: TC8WkMj5LqYLotUQsIJXNU0W5IJEuyjKyKXTJdzLmbM=)
2: lH4-X564CJtcqU845lF8-8WyAGM.crl (hash: 4du1x6cPYY7jbuHbpXBaFSZUvnDaMhq4NhWT7f5v2sk=)
3: zozOOHZMPpO8TU7R7OlzFjX6nTU.roa (hash: DO9vuDN/M4q7UhQA8k+ziHqB7tX/m/+CIduSaenQLlY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4c26-e34a-4336-90c8-f90ae9966428/1/lH4-X564CJtcqU845lF8-8WyAGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4c26-e34a-4336-90c8-f90ae9966428/1/lH4-X564CJtcqU845lF8-8WyAGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lH4-X564CJtcqU845lF8-8WyAGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 04:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c7:cc:d4:74:49:40:f2:41:b3:1c:c3:38:7a:0b:44:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=947e3e5f9eb8089b5ca94f38e6517cfbc5b20063
Validity
Not Before: May 13 04:00:11 2025 GMT
Not After : May 14 04:00:11 2025 GMT
Subject: CN=d201f98c400af0ca91624f04e2edb2c4bf823356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f6:b4:bf:92:69:a6:14:1a:88:a5:1b:3f:18:
60:78:e2:97:a7:32:07:b1:44:d7:f8:11:8a:fb:04:
b4:9c:d6:c1:91:81:b1:98:d1:d4:0c:bc:bd:65:ee:
97:f1:0d:83:a4:44:8c:10:cb:e2:d9:49:84:44:44:
aa:a0:5c:66:e7:18:95:44:a7:97:f4:22:a7:90:b2:
0b:17:db:0a:19:f2:10:bc:27:e0:21:e0:b2:0f:46:
3d:0a:4b:02:23:3c:8e:86:8a:04:83:4b:99:e9:32:
40:36:74:0d:0f:a3:0f:0c:21:e5:a5:3a:f9:4d:fa:
93:4e:82:86:f3:ca:d9:99:94:a3:29:b1:37:10:1d:
b5:ed:9c:80:22:cf:70:e3:3c:a1:d1:4d:f5:43:8a:
f6:1e:32:e1:21:0d:1a:71:67:75:47:b8:c6:85:04:
e0:2c:f0:59:8e:85:80:cb:cd:73:36:7f:cd:8d:02:
38:9e:98:31:18:8f:46:e1:c3:36:96:85:b0:01:88:
19:f4:e1:82:41:3c:20:65:d3:e4:05:29:f7:25:1a:
02:98:f3:5a:40:46:4c:47:99:4f:42:ff:53:64:6b:
34:56:97:d3:e9:e2:27:e1:12:be:7d:b2:6a:86:f9:
51:62:40:3f:3b:2b:98:70:90:0b:e4:d0:90:cc:02:
d9:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:01:F9:8C:40:0A:F0:CA:91:62:4F:04:E2:ED:B2:C4:BF:82:33:56
X509v3 Authority Key Identifier:
keyid:94:7E:3E:5F:9E:B8:08:9B:5C:A9:4F:38:E6:51:7C:FB:C5:B2:00:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lH4-X564CJtcqU845lF8-8WyAGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4c26-e34a-4336-90c8-f90ae9966428/1/lH4-X564CJtcqU845lF8-8WyAGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4c26-e34a-4336-90c8-f90ae9966428/1/lH4-X564CJtcqU845lF8-8WyAGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:25:e8:79:d7:3a:60:ef:27:32:f9:13:0f:c6:a1:9e:37:33:
c7:9c:1d:23:05:f1:0b:03:70:ae:f2:00:97:32:09:f8:78:40:
56:b7:d8:41:9f:ca:22:e1:24:01:91:39:06:6d:12:96:11:db:
2d:58:af:77:cb:7f:61:f2:b6:8e:11:33:ba:fc:e1:53:6d:84:
49:a9:b6:08:bb:a4:72:10:12:82:7e:91:4c:28:3f:ec:03:e9:
a0:a7:a5:ac:bc:07:26:11:65:04:38:af:5c:0c:8d:04:44:e1:
b5:61:d9:40:1c:34:cc:bb:f4:70:45:e7:45:61:65:fb:eb:67:
19:f2:a9:d6:47:59:6e:2d:ee:ae:c7:af:8c:47:2d:17:d5:a3:
a0:a3:17:61:5f:c2:60:b0:78:b7:49:49:ff:c1:63:a0:57:71:
eb:69:02:30:02:38:5f:84:73:86:54:47:0d:a9:c3:34:85:3b:
6f:94:72:98:6d:43:ac:58:e7:b9:57:3a:36:d7:ae:73:9c:dc:
07:86:a4:ea:31:3d:8f:29:1e:2b:92:17:d9:71:4d:db:23:15:
e4:eb:fd:59:5c:38:54:44:47:a0:a3:67:0e:2a:0c:82:bc:21:
81:b0:64:7c:94:06:53:21:b0:f8:79:0d:41:83:c3:24:ac:33:
54:de:46:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 13:33:28 2025 by rpki-client