Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/6c4c26-e34a-4336-90c8-f90ae9966428/1/lH4-X564CJtcqU845lF8-8WyAGM.mft
File: lH4-X564CJtcqU845lF8-8WyAGM.mft (raw, json)
Hash identifier: fPmcqGReoPerwQSv225F7X5Sv8gdu7V7Zms7xrPWSJM=
Subject key identifier: E3:08:63:63:11:9A:62:04:8F:D8:DC:DA:4A:E2:A5:A1:53:9D:62:3F
Authority key identifier: 94:7E:3E:5F:9E:B8:08:9B:5C:A9:4F:38:E6:51:7C:FB:C5:B2:00:63
Certificate issuer: /CN=947e3e5f9eb8089b5ca94f38e6517cfbc5b20063
Certificate serial: 0198D705E45795939DB669CFF522CA0A647C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lH4-X564CJtcqU845lF8-8WyAGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4c26-e34a-4336-90c8-f90ae9966428/1/lH4-X564CJtcqU845lF8-8WyAGM.mft
Manifest number: 04D9
Signing time: Sat 23 Aug 2025 13:02:24 +0000
Manifest this update: Sat 23 Aug 2025 13:02:24 +0000
Manifest next update: Sun 24 Aug 2025 13:02:24 +0000
Files and hashes: 1: 8JJmvRAktSEG3OdLUZKBNwR6ws0.roa (hash: TC8WkMj5LqYLotUQsIJXNU0W5IJEuyjKyKXTJdzLmbM=)
2: lH4-X564CJtcqU845lF8-8WyAGM.crl (hash: JXwp2h2CptIGEcSNcabu1XnHUsV6rZGJhaZRvdXy9XI=)
3: zozOOHZMPpO8TU7R7OlzFjX6nTU.roa (hash: DO9vuDN/M4q7UhQA8k+ziHqB7tX/m/+CIduSaenQLlY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4c26-e34a-4336-90c8-f90ae9966428/1/lH4-X564CJtcqU845lF8-8WyAGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4c26-e34a-4336-90c8-f90ae9966428/1/lH4-X564CJtcqU845lF8-8WyAGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lH4-X564CJtcqU845lF8-8WyAGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:e4:57:95:93:9d:b6:69:cf:f5:22:ca:0a:64:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=947e3e5f9eb8089b5ca94f38e6517cfbc5b20063
Validity
Not Before: Aug 23 13:02:24 2025 GMT
Not After : Aug 24 13:02:24 2025 GMT
Subject: CN=e3086363119a62048fd8dcda4ae2a5a1539d623f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:24:36:91:54:67:ca:16:6a:0b:85:f0:b2:6f:
d8:77:46:2f:3a:d2:b5:49:3f:ee:5e:a8:ef:df:92:
e5:75:f2:bc:94:c5:f8:f2:d6:c4:04:19:ce:d6:a6:
75:2a:86:ac:ea:e1:b7:63:63:ce:eb:f8:3b:e7:ce:
29:76:cf:8c:99:51:97:48:51:2c:1c:61:86:22:11:
aa:d7:d9:29:a4:ff:52:8e:d5:bb:c9:03:c8:52:5d:
6e:a0:7a:e6:3a:73:ca:55:89:d9:d8:82:e7:61:37:
9b:66:8b:67:b4:fd:56:dc:c8:09:c7:6c:27:a1:70:
89:9c:43:5b:0b:4e:c4:bd:89:44:c5:cd:7f:eb:de:
01:0c:7d:ba:f1:fd:b8:3c:cd:df:5b:2d:28:f6:7e:
c4:70:ff:fe:db:61:d9:25:d9:e2:a0:bd:9c:2f:b6:
83:a7:e4:0c:34:ea:cc:1f:29:e3:29:7c:a3:41:a1:
cd:fe:13:b9:80:af:16:d0:1e:2d:c4:20:5a:32:a6:
c1:4e:2b:d0:bb:e8:b9:17:89:5c:34:0a:a9:81:68:
60:d7:7d:1e:01:85:3b:e5:cb:fd:4a:f5:11:1f:a2:
18:38:af:e8:f4:b3:90:93:50:f7:c6:e3:db:93:f3:
33:fd:12:6a:7d:90:07:71:f4:32:19:46:9f:81:4f:
cf:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:08:63:63:11:9A:62:04:8F:D8:DC:DA:4A:E2:A5:A1:53:9D:62:3F
X509v3 Authority Key Identifier:
keyid:94:7E:3E:5F:9E:B8:08:9B:5C:A9:4F:38:E6:51:7C:FB:C5:B2:00:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lH4-X564CJtcqU845lF8-8WyAGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4c26-e34a-4336-90c8-f90ae9966428/1/lH4-X564CJtcqU845lF8-8WyAGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4c26-e34a-4336-90c8-f90ae9966428/1/lH4-X564CJtcqU845lF8-8WyAGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:1a:62:63:c4:0a:23:06:05:46:77:44:42:15:d0:10:68:ed:
25:8c:66:b1:ed:9d:f0:c1:68:f6:12:d3:d9:35:74:79:0a:dc:
a8:75:03:ea:cb:99:e3:d5:9b:31:6d:2d:0c:5b:74:41:fe:69:
f2:40:3a:0b:38:bb:9b:52:71:0f:46:69:a8:85:5b:15:5f:66:
e6:c7:f4:10:bf:3a:a0:ad:61:c0:c5:99:3a:b7:96:f1:77:e3:
cc:06:33:4c:8e:0c:a0:28:66:39:63:bc:88:d6:46:10:f9:9a:
2e:0a:85:d8:2c:c5:c9:eb:26:04:46:0f:66:a7:11:f9:df:18:
62:4f:67:7e:05:de:e0:2b:2e:13:5e:f4:f6:dd:95:3a:9e:fc:
d5:e2:83:9f:14:75:54:bb:98:1e:0c:36:b7:2c:a8:84:60:fa:
9e:21:51:b5:df:e9:1d:5c:1d:2b:24:24:d2:8d:06:a0:7d:5d:
c9:30:40:44:fd:6e:61:8d:28:10:93:8d:2f:f5:fb:bd:aa:81:
24:83:b9:d5:52:9d:4b:2c:6d:b8:c5:27:54:17:5d:88:1d:81:
58:8c:3c:35:ba:81:0c:d0:fb:60:62:52:c7:fd:54:56:cb:bb:
ec:73:73:77:87:03:9e:d6:41:e1:17:7e:fe:d9:b5:7b:00:4e:
15:16:2b:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:27:21 2025 by rpki-client