Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/f78d7d-44f8-4099-9a12-6db826b87994/1/LHPvCB4tVzHERXQ5c6lqv96xQss.mft
File: LHPvCB4tVzHERXQ5c6lqv96xQss.mft (raw, json)
Hash identifier: LigUAM9lbXKy8S8vl6o/MFC0jVXDdbE/nQJD9yLZIcE=
Subject key identifier: 5B:18:D7:B1:A0:FF:64:4F:31:DE:B7:63:A9:02:19:32:53:60:1A:54
Authority key identifier: 2C:73:EF:08:1E:2D:57:31:C4:45:74:39:73:A9:6A:BF:DE:B1:42:CB
Certificate issuer: /CN=2c73ef081e2d5731c445743973a96abfdeb142cb
Certificate serial: 0198D4737AEB3CC0D65B065AC8FD2CCCB126
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHPvCB4tVzHERXQ5c6lqv96xQss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/f78d7d-44f8-4099-9a12-6db826b87994/1/LHPvCB4tVzHERXQ5c6lqv96xQss.mft
Manifest number: 0743
Signing time: Sat 23 Aug 2025 01:03:14 +0000
Manifest this update: Sat 23 Aug 2025 01:03:14 +0000
Manifest next update: Sun 24 Aug 2025 01:03:14 +0000
Files and hashes: 1: 47JVgVgToP2JCPCrNinv-XHW2N4.roa (hash: v4DRTra/MLLmoU83Ast19V67vrhVaOaxeHPCp8x8/Y0=)
2: CoUsP7_oLqXmI4GuJPmWe-DgrMk.roa (hash: CDiTJKYK+x288ogOQUhmmMXeMfsax3zovLJjdT/l5es=)
3: LHPvCB4tVzHERXQ5c6lqv96xQss.crl (hash: 2uFnFDcHT9m4tO1C+APNHmu7mtnQ4SNnV3/W5twUUOQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/f78d7d-44f8-4099-9a12-6db826b87994/1/LHPvCB4tVzHERXQ5c6lqv96xQss.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/f78d7d-44f8-4099-9a12-6db826b87994/1/LHPvCB4tVzHERXQ5c6lqv96xQss.mft
rsync://rpki.ripe.net/repository/DEFAULT/LHPvCB4tVzHERXQ5c6lqv96xQss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:7a:eb:3c:c0:d6:5b:06:5a:c8:fd:2c:cc:b1:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c73ef081e2d5731c445743973a96abfdeb142cb
Validity
Not Before: Aug 23 01:03:14 2025 GMT
Not After : Aug 24 01:03:14 2025 GMT
Subject: CN=5b18d7b1a0ff644f31deb763a902193253601a54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3a:34:32:0c:3a:55:49:c4:a6:e6:d4:87:6f:
dd:20:dd:2d:b2:80:9f:5b:ce:14:11:3b:96:5a:9a:
14:3f:a3:e3:8a:37:75:33:80:db:6d:56:d1:c2:eb:
71:7f:68:fd:81:29:aa:99:0a:9b:d2:3a:2c:68:8a:
86:25:9f:fc:c6:1f:06:a2:a5:e8:9f:08:a1:7d:f5:
ed:47:75:ac:cd:09:40:d6:8a:37:72:da:c0:ac:16:
66:bb:72:ef:1e:37:fa:81:99:80:19:a5:f5:03:15:
24:7d:86:1e:fb:db:82:f3:c3:27:f4:39:5c:cc:ed:
2c:9d:f1:9f:43:12:b8:89:8b:d7:9c:ee:18:ae:c1:
8b:09:a7:9f:d9:13:35:bc:98:25:7a:ff:c8:8a:d2:
8e:ee:55:ba:4c:57:c1:e8:bf:b2:de:d3:95:28:73:
c3:a7:2e:38:e7:5a:9c:17:f6:f1:f3:15:13:40:79:
1a:35:17:41:e1:27:20:8e:99:fd:bc:0b:b0:98:48:
24:c6:fa:4b:d3:c5:87:73:fb:4b:31:0e:f6:aa:d7:
95:09:0e:43:02:d8:7e:87:43:2c:3f:a2:68:e3:63:
2e:37:45:3a:e4:0f:a9:f4:e4:3b:d5:0b:08:2a:1a:
3f:1f:f8:df:96:c8:c1:1d:9d:f4:67:41:8e:9a:cb:
9f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:18:D7:B1:A0:FF:64:4F:31:DE:B7:63:A9:02:19:32:53:60:1A:54
X509v3 Authority Key Identifier:
keyid:2C:73:EF:08:1E:2D:57:31:C4:45:74:39:73:A9:6A:BF:DE:B1:42:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHPvCB4tVzHERXQ5c6lqv96xQss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/f78d7d-44f8-4099-9a12-6db826b87994/1/LHPvCB4tVzHERXQ5c6lqv96xQss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/f78d7d-44f8-4099-9a12-6db826b87994/1/LHPvCB4tVzHERXQ5c6lqv96xQss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:55:38:ef:28:7a:46:e1:9f:30:6b:a2:90:37:36:b2:4f:1d:
2b:8f:ac:8a:59:79:63:c0:43:66:7a:30:4a:2d:00:36:72:aa:
fb:8e:31:e4:4c:72:59:61:38:dd:80:bd:04:8c:ae:b4:29:26:
00:d6:f2:99:35:c2:2b:db:cd:de:ae:c2:72:3d:f9:ba:ad:76:
08:e3:4c:52:de:67:0c:14:1a:66:a9:f1:45:2b:5f:2b:78:be:
21:5e:6c:eb:18:fd:bf:27:f6:98:9a:d8:6c:49:5c:15:8d:27:
b0:4a:0e:2c:f6:99:6e:c0:0d:e3:45:0d:48:29:85:5f:ea:96:
38:f0:ca:0f:07:46:df:01:ba:c9:e8:b4:de:da:ee:cd:1d:72:
a3:76:53:63:87:41:7a:ec:a0:7f:f0:e9:f3:c4:fb:d9:b1:05:
5b:76:a0:17:8b:46:af:4d:75:75:b8:21:39:43:bf:89:28:a2:
a1:6d:ab:21:5a:75:0e:00:2c:60:3e:c4:98:0b:a5:b4:0d:38:
48:a4:98:df:27:83:f5:da:56:73:4f:74:12:0c:f8:dd:9f:20:
51:86:3a:c0:60:a1:27:9e:4e:32:5c:3f:d5:85:37:b8:b2:74:
0e:0a:35:37:56:68:3a:70:5c:8f:43:c6:ad:e6:e4:0f:78:01:
d7:b1:c6:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:34 2025 by rpki-client