Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/6c4c26-e34a-4336-90c8-f90ae9966428/1/lH4-X564CJtcqU845lF8-8WyAGM.mft
File: lH4-X564CJtcqU845lF8-8WyAGM.mft (raw, json)
Hash identifier: zIwJNkuSd6VCG+2kTZLAq4wRsv3feETtvjjL00fP/A4=
Subject key identifier: B9:94:71:45:3D:29:3B:8B:A9:35:35:10:02:AC:E0:86:11:26:C5:DB
Authority key identifier: 94:7E:3E:5F:9E:B8:08:9B:5C:A9:4F:38:E6:51:7C:FB:C5:B2:00:63
Certificate issuer: /CN=947e3e5f9eb8089b5ca94f38e6517cfbc5b20063
Certificate serial: 0197C4CA0266F3F9BCAE8CDCBA846830B5B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lH4-X564CJtcqU845lF8-8WyAGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4c26-e34a-4336-90c8-f90ae9966428/1/lH4-X564CJtcqU845lF8-8WyAGM.mft
Manifest number: 044B
Signing time: Tue 01 Jul 2025 07:01:02 +0000
Manifest this update: Tue 01 Jul 2025 07:01:02 +0000
Manifest next update: Wed 02 Jul 2025 07:01:02 +0000
Files and hashes: 1: 8JJmvRAktSEG3OdLUZKBNwR6ws0.roa (hash: TC8WkMj5LqYLotUQsIJXNU0W5IJEuyjKyKXTJdzLmbM=)
2: lH4-X564CJtcqU845lF8-8WyAGM.crl (hash: zPmFmh9j1QFf1Ko9qSuZkmzOCNZ9e9E7AT4KUsD0QnU=)
3: zozOOHZMPpO8TU7R7OlzFjX6nTU.roa (hash: DO9vuDN/M4q7UhQA8k+ziHqB7tX/m/+CIduSaenQLlY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4c26-e34a-4336-90c8-f90ae9966428/1/lH4-X564CJtcqU845lF8-8WyAGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4c26-e34a-4336-90c8-f90ae9966428/1/lH4-X564CJtcqU845lF8-8WyAGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lH4-X564CJtcqU845lF8-8WyAGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 07:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c4:ca:02:66:f3:f9:bc:ae:8c:dc:ba:84:68:30:b5:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=947e3e5f9eb8089b5ca94f38e6517cfbc5b20063
Validity
Not Before: Jul 1 07:01:02 2025 GMT
Not After : Jul 2 07:01:02 2025 GMT
Subject: CN=b99471453d293b8ba935351002ace0861126c5db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:8e:94:22:7b:44:4f:c2:e2:6d:2a:63:c5:4a:
28:91:da:93:71:c1:67:e7:eb:eb:4d:52:d0:1c:e1:
02:4e:36:fa:8c:71:c6:1a:9b:42:4f:ab:f7:26:47:
2d:c3:d8:64:0a:66:89:0d:db:51:cc:26:85:a6:d0:
20:de:25:02:9f:3e:77:65:41:61:97:58:08:98:1f:
c4:53:23:0b:8f:d3:32:f7:a7:f4:ac:84:26:5b:4b:
a1:87:60:1b:e6:c7:fa:ea:0f:25:29:b0:79:54:81:
00:d5:78:f8:80:45:34:a4:22:0c:6f:ac:3b:e1:59:
8c:f2:f0:b0:a3:c0:68:8f:64:0e:22:21:32:11:68:
db:37:fb:b4:d1:1e:b8:cc:2a:43:21:03:d3:5e:6c:
ad:82:69:b4:30:72:58:19:32:81:8d:23:35:57:63:
70:60:03:f7:ca:cb:5f:11:22:5a:bd:08:6c:85:a7:
6d:e1:86:ef:8c:04:48:68:20:19:7d:d1:62:d9:63:
1b:5b:3b:8a:a4:7f:4e:86:67:e1:80:ff:12:98:95:
9c:1d:6b:b9:ed:88:e4:f2:1f:ce:35:57:b1:ed:c0:
14:21:09:1e:a8:4c:d6:85:fa:db:62:23:08:85:df:
63:81:e6:48:9b:64:6f:68:eb:46:aa:b2:18:b3:59:
f9:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:94:71:45:3D:29:3B:8B:A9:35:35:10:02:AC:E0:86:11:26:C5:DB
X509v3 Authority Key Identifier:
keyid:94:7E:3E:5F:9E:B8:08:9B:5C:A9:4F:38:E6:51:7C:FB:C5:B2:00:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lH4-X564CJtcqU845lF8-8WyAGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4c26-e34a-4336-90c8-f90ae9966428/1/lH4-X564CJtcqU845lF8-8WyAGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4c26-e34a-4336-90c8-f90ae9966428/1/lH4-X564CJtcqU845lF8-8WyAGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:a4:68:f9:a6:10:9d:aa:b6:36:c8:04:06:d3:43:1e:bd:ee:
e2:c7:a1:50:92:82:d4:3f:61:33:28:7c:0b:92:a4:a9:f8:82:
dc:98:0e:14:5a:a5:84:ac:2b:57:ca:21:94:20:15:a5:14:cf:
ff:16:ba:08:e7:3d:76:ed:44:14:70:bc:a3:17:52:16:f2:eb:
4f:01:e4:28:1b:d4:66:a0:13:79:a8:fc:b1:63:77:f9:45:d7:
45:94:52:39:be:00:8c:a3:12:57:fe:73:5a:1a:f3:bf:89:08:
c7:c9:04:a7:70:fe:68:11:9c:b8:44:8f:a4:17:d7:d3:85:da:
22:a3:73:1d:bc:09:5b:c0:a8:47:5e:fe:b1:f5:22:da:43:14:
ea:5e:58:a1:0e:f2:a7:d7:3e:01:68:cc:34:11:41:3f:6e:c6:
af:de:5f:56:f4:c1:b0:c8:56:9f:4d:db:70:18:b6:92:15:77:
8c:6d:20:6d:ac:a6:99:f1:7f:54:1a:b9:96:a8:a4:9f:0b:dd:
0d:19:e4:b5:0d:3a:22:ce:57:c7:e9:fd:db:27:ff:85:e9:b2:
f9:f3:58:39:60:63:a9:9a:0e:f9:80:12:a4:60:72:25:e2:46:
10:3a:fb:7a:44:1c:8e:d9:23:2d:c0:54:fb:e4:4d:c5:3d:84:
af:e4:cc:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 16:56:59 2025 by rpki-client