Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft
File: LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft (raw, json)
Hash identifier: DTS1FzE9tWHGKVZQFU0dYXbzCpx6i1ETm59JMSPpmB4=
Subject key identifier: A1:59:B9:39:08:63:C2:D2:FE:CF:E0:4A:51:A0:FB:E1:E9:76:2A:D9
Authority key identifier: 2C:75:4A:E4:73:D9:C1:54:B8:04:B7:0E:D3:18:81:E0:25:D9:26:AA
Certificate issuer: /CN=2c754ae473d9c154b804b70ed31881e025d926aa
Certificate serial: 0198D583962896E7625DC643E51CB6672D5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHVK5HPZwVS4BLcO0xiB4CXZJqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft
Manifest number: 0C25
Signing time: Sat 23 Aug 2025 06:00:27 +0000
Manifest this update: Sat 23 Aug 2025 06:00:27 +0000
Manifest next update: Sun 24 Aug 2025 06:00:27 +0000
Files and hashes: 1: LHVK5HPZwVS4BLcO0xiB4CXZJqo.crl (hash: hnqZPfMARzsb6HdX+vfFFsH2Qb3mY2mYlUvBCG/U8dA=)
2: RIso09h5--_F82YqfcCEAd3EpSw.roa (hash: dWlymz3qci5T5aLh2Je4Ec71LNxokFg1VFDedEjsW+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/LHVK5HPZwVS4BLcO0xiB4CXZJqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:96:28:96:e7:62:5d:c6:43:e5:1c:b6:67:2d:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c754ae473d9c154b804b70ed31881e025d926aa
Validity
Not Before: Aug 23 06:00:27 2025 GMT
Not After : Aug 24 06:00:27 2025 GMT
Subject: CN=a159b9390863c2d2fecfe04a51a0fbe1e9762ad9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1d:cc:59:5e:0b:58:c9:02:45:af:f1:ed:8a:
cd:a3:cb:cc:4f:e9:49:6f:f7:f2:97:ab:46:1c:39:
b3:da:a6:f4:ac:7e:54:51:1d:ba:27:6f:77:c5:ff:
c6:ad:6d:f2:a4:63:47:b8:b8:5e:30:6a:35:d7:6e:
54:d6:80:84:4f:77:4a:f4:31:fa:53:fb:2c:86:18:
e2:01:2c:9d:97:c6:31:16:3e:b5:6d:e9:4f:09:f0:
57:6f:39:f0:5c:3c:e0:e9:15:0e:c5:46:c5:ca:fd:
63:7d:67:8b:b1:bc:f1:72:15:d3:f0:9d:4b:97:d5:
93:28:5c:2c:c4:24:6a:8b:64:a4:06:a1:0d:64:ee:
a8:de:ea:45:96:42:fb:53:24:33:e9:52:6e:ef:0b:
50:61:66:23:ce:1d:a4:59:d0:a9:79:ae:2b:5b:49:
52:52:9e:0a:46:bd:79:f3:93:18:5e:91:de:a4:e9:
ff:d0:ab:45:14:8c:4f:17:6f:2b:db:84:c5:67:38:
00:50:d7:40:cb:f6:83:0e:50:8f:22:f2:e8:28:a1:
58:ac:8d:44:36:e4:27:d1:e7:f3:5d:4c:61:0b:df:
08:0c:b5:76:6d:d0:4e:4c:66:5f:db:0c:32:07:b1:
b8:bc:92:15:b7:e4:81:b1:28:af:30:5d:1b:7a:57:
20:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:59:B9:39:08:63:C2:D2:FE:CF:E0:4A:51:A0:FB:E1:E9:76:2A:D9
X509v3 Authority Key Identifier:
keyid:2C:75:4A:E4:73:D9:C1:54:B8:04:B7:0E:D3:18:81:E0:25:D9:26:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHVK5HPZwVS4BLcO0xiB4CXZJqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:a9:ca:24:a7:01:79:37:97:ad:3f:1f:db:56:44:79:e0:3c:
2a:a0:a1:a1:63:d4:b8:a4:27:33:4b:61:79:c5:68:f3:6d:37:
89:ef:f9:f5:77:40:c0:e3:75:a7:09:2e:8c:4d:6f:0a:3e:75:
83:5e:4a:2c:dc:61:0d:93:c0:fb:d1:e8:32:59:a5:04:ff:89:
16:3b:28:a5:37:32:ec:50:58:35:37:f0:46:49:b7:2c:4e:12:
d0:40:fc:ec:21:4d:0c:ff:bc:bf:bc:9e:b6:50:75:77:b2:b4:
a2:bc:5a:f7:b1:aa:ac:d2:04:14:36:1f:ee:1c:28:12:7f:6b:
fe:36:c7:66:a8:6f:88:92:bd:32:4f:04:20:50:23:b0:ca:45:
e7:87:6f:ea:cf:fe:c0:5f:2e:7b:35:2d:1f:f0:97:b1:52:72:
62:d6:9c:b4:27:32:51:10:f6:b9:f0:43:ee:13:8e:00:e9:60:
96:72:5b:a4:f1:17:41:a5:a1:4b:55:42:02:da:9b:75:20:41:
60:4a:d7:2f:1a:e3:65:41:b4:e3:a8:36:98:38:04:c8:15:07:
2e:bc:e8:e5:d5:19:e1:22:39:fa:87:70:5b:e5:d2:b4:48:27:
96:b4:16:69:dc:40:39:18:3b:dd:11:4a:97:50:4e:25:76:58:
8f:ea:47:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:39:32 2025 by rpki-client