Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/6c4c26-e34a-4336-90c8-f90ae9966428/1/lH4-X564CJtcqU845lF8-8WyAGM.mft
File: lH4-X564CJtcqU845lF8-8WyAGM.mft (raw, json)
Hash identifier: 9DNAU/BQAp35vUM+2dQcVt1CkuXFNr1dm0o4XpNlnuA=
Subject key identifier: 8B:8B:F3:96:B1:51:E1:69:0E:3F:E4:BE:B8:4C:D7:07:FA:7C:40:30
Authority key identifier: 94:7E:3E:5F:9E:B8:08:9B:5C:A9:4F:38:E6:51:7C:FB:C5:B2:00:63
Certificate issuer: /CN=947e3e5f9eb8089b5ca94f38e6517cfbc5b20063
Certificate serial: 0199FC8F4E0D26CD2157D1F03C50D18A54A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lH4-X564CJtcqU845lF8-8WyAGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4c26-e34a-4336-90c8-f90ae9966428/1/lH4-X564CJtcqU845lF8-8WyAGM.mft
Manifest number: 0571
Signing time: Sun 19 Oct 2025 13:01:14 +0000
Manifest this update: Sun 19 Oct 2025 13:01:14 +0000
Manifest next update: Mon 20 Oct 2025 13:01:14 +0000
Files and hashes: 1: 8JJmvRAktSEG3OdLUZKBNwR6ws0.roa (hash: TC8WkMj5LqYLotUQsIJXNU0W5IJEuyjKyKXTJdzLmbM=)
2: lH4-X564CJtcqU845lF8-8WyAGM.crl (hash: iketZcHJnlg+OVvWeQ4eJdAVcCJfP4yPpnkhHsN9nz8=)
3: zozOOHZMPpO8TU7R7OlzFjX6nTU.roa (hash: DO9vuDN/M4q7UhQA8k+ziHqB7tX/m/+CIduSaenQLlY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4c26-e34a-4336-90c8-f90ae9966428/1/lH4-X564CJtcqU845lF8-8WyAGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4c26-e34a-4336-90c8-f90ae9966428/1/lH4-X564CJtcqU845lF8-8WyAGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lH4-X564CJtcqU845lF8-8WyAGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:4e:0d:26:cd:21:57:d1:f0:3c:50:d1:8a:54:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=947e3e5f9eb8089b5ca94f38e6517cfbc5b20063
Validity
Not Before: Oct 19 13:01:14 2025 GMT
Not After : Oct 20 13:01:14 2025 GMT
Subject: CN=8b8bf396b151e1690e3fe4beb84cd707fa7c4030
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a4:18:13:4c:35:5f:13:26:d8:fb:2f:2b:3c:
00:38:e5:b8:7c:dd:bf:df:a9:9b:55:e2:24:df:71:
77:00:f9:3b:12:7e:ea:30:2d:c1:ef:b7:54:dc:93:
02:5f:69:e6:1c:59:ed:e4:24:29:97:63:d5:03:74:
52:db:09:8f:a0:46:6c:64:96:43:d5:00:16:5a:23:
dd:ac:ab:ec:b4:d3:19:6b:f4:9e:f8:6c:f4:b6:66:
f3:db:02:9d:ad:7c:5d:d1:1f:7a:e4:fc:c7:c7:dd:
de:b8:ca:07:7d:16:a6:37:2e:e4:1f:bb:a8:ce:52:
2e:d2:80:fe:5e:30:d9:8e:cf:15:4e:9a:0c:4f:c6:
c7:be:b3:35:3f:e0:a5:4d:88:5d:cb:9c:d4:c3:70:
39:5e:61:d0:b8:0d:1a:50:9b:eb:c7:13:16:a9:23:
67:93:34:ed:7c:a3:6f:93:e2:16:b3:fe:0f:6d:b0:
a9:3e:8d:8b:a8:43:f8:bc:d6:fc:6b:6b:7c:a3:51:
c3:13:2f:12:6a:91:b4:bd:52:53:3d:78:fe:a8:40:
2c:75:fe:7e:98:8b:08:9d:3b:d3:dc:3f:36:a9:b7:
7c:aa:98:1c:b9:c4:4f:b2:b8:f0:ac:3b:80:60:6f:
40:ec:98:82:56:38:5c:d1:07:12:ca:e2:71:a0:97:
b6:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:8B:F3:96:B1:51:E1:69:0E:3F:E4:BE:B8:4C:D7:07:FA:7C:40:30
X509v3 Authority Key Identifier:
keyid:94:7E:3E:5F:9E:B8:08:9B:5C:A9:4F:38:E6:51:7C:FB:C5:B2:00:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lH4-X564CJtcqU845lF8-8WyAGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4c26-e34a-4336-90c8-f90ae9966428/1/lH4-X564CJtcqU845lF8-8WyAGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4c26-e34a-4336-90c8-f90ae9966428/1/lH4-X564CJtcqU845lF8-8WyAGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:94:64:31:7e:7a:df:a6:09:b7:32:7f:07:54:82:e1:3f:c2:
5c:50:37:43:f8:2f:0b:d2:17:91:ec:b3:76:60:c7:c3:54:b4:
ea:aa:01:87:88:6f:4d:46:ae:dd:40:8e:b7:89:6d:92:63:00:
8a:fb:b7:df:fe:d1:ff:ff:b9:2e:b9:7b:8a:c6:4b:55:bf:eb:
74:0c:ec:e7:51:37:09:01:75:1d:4b:4d:77:48:cf:2b:87:8d:
19:f2:bd:58:85:d9:00:bf:13:1e:2d:3c:b4:b2:e1:26:50:61:
8b:35:c6:42:ea:05:fe:3e:b1:84:ca:a4:03:2f:89:50:6f:7e:
1a:e5:77:21:5b:7f:47:51:4d:a6:9c:15:62:a4:0d:5a:a1:bd:
07:da:b9:48:92:1d:7a:26:af:2a:4c:91:a2:3c:15:29:58:3c:
31:09:45:da:a5:59:0b:59:62:eb:db:da:14:c3:50:a7:8e:d6:
f4:d2:63:4e:49:7a:6e:fe:65:3a:7f:f4:db:4a:13:4b:e6:0e:
4e:c6:f1:0d:45:10:92:ab:7d:b1:62:13:6a:55:3a:f0:33:90:
03:c9:27:9e:93:db:95:b9:77:c6:a2:9e:55:2b:49:81:b4:e9:
87:b8:80:fd:5b:69:eb:9c:d8:12:94:24:85:82:f6:be:98:4c:
d5:a2:12:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:34:34 2025 by rpki-client