Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft
File: LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft (raw, json)
Hash identifier: wLGqnxqkM/fK8CoPWoqX8GOwaSIu1Nc/4Wo4m+Zm1Kg=
Subject key identifier: E6:F6:94:8C:54:F2:A8:0E:23:2A:79:8A:73:A6:E5:AB:21:7C:1F:50
Authority key identifier: 2C:75:4A:E4:73:D9:C1:54:B8:04:B7:0E:D3:18:81:E0:25:D9:26:AA
Certificate issuer: /CN=2c754ae473d9c154b804b70ed31881e025d926aa
Certificate serial: 0197E04143603ADC928A719F5D0E99858BFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHVK5HPZwVS4BLcO0xiB4CXZJqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft
Manifest number: 0BA6
Signing time: Sun 06 Jul 2025 15:01:02 +0000
Manifest this update: Sun 06 Jul 2025 15:01:02 +0000
Manifest next update: Mon 07 Jul 2025 15:01:02 +0000
Files and hashes: 1: LHVK5HPZwVS4BLcO0xiB4CXZJqo.crl (hash: gE29GgZyotUjrg9UteF+2OF4rVZJ0W5rpJWrrjrvFkU=)
2: RIso09h5--_F82YqfcCEAd3EpSw.roa (hash: dWlymz3qci5T5aLh2Je4Ec71LNxokFg1VFDedEjsW+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/LHVK5HPZwVS4BLcO0xiB4CXZJqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Jul 2025 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:e0:41:43:60:3a:dc:92:8a:71:9f:5d:0e:99:85:8b:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c754ae473d9c154b804b70ed31881e025d926aa
Validity
Not Before: Jul 6 15:01:02 2025 GMT
Not After : Jul 7 15:01:02 2025 GMT
Subject: CN=e6f6948c54f2a80e232a798a73a6e5ab217c1f50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:1b:e9:5a:5f:ab:8d:b2:61:51:26:a3:86:c8:
66:74:98:bb:df:73:5a:74:68:b1:87:1c:33:c8:7c:
89:d3:7c:99:cc:87:3b:b6:64:d4:85:c5:d3:b3:d2:
ec:05:ef:bf:e5:c9:5c:a6:a1:3d:57:ba:b2:ff:77:
95:5d:f6:5a:ab:6a:e5:45:93:2f:ed:19:e4:22:9c:
b2:ff:2a:c8:18:4f:37:e9:ae:df:40:70:24:f4:4f:
c2:43:90:e6:c6:14:d2:bf:9e:29:7d:d4:cd:9b:0a:
fc:fb:a6:48:ab:64:c3:f7:d6:a7:6d:d1:6d:7d:2c:
dc:a3:57:3f:78:ad:35:ab:38:c0:91:19:67:a0:99:
42:cb:4e:7d:e0:b6:13:65:50:f2:a8:7b:ff:e1:15:
d3:60:b1:00:1c:19:93:26:01:16:9f:d9:32:ac:3e:
e7:93:38:95:62:2a:f1:d6:23:10:94:2f:6e:68:d9:
4d:91:58:27:eb:3c:6f:a0:e0:30:9b:25:29:4d:03:
ac:1c:60:81:c6:1b:8c:3a:2b:10:93:44:e4:37:54:
58:68:46:cf:b9:47:cb:4a:17:98:43:ff:49:61:ef:
32:c0:e3:a4:1a:42:e7:8d:eb:a3:43:3e:fd:18:28:
d1:d0:41:c4:eb:9d:a3:5a:f4:20:5e:83:8b:66:8b:
8b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:F6:94:8C:54:F2:A8:0E:23:2A:79:8A:73:A6:E5:AB:21:7C:1F:50
X509v3 Authority Key Identifier:
keyid:2C:75:4A:E4:73:D9:C1:54:B8:04:B7:0E:D3:18:81:E0:25:D9:26:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHVK5HPZwVS4BLcO0xiB4CXZJqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:9b:2a:a4:ec:be:4e:70:0e:d2:df:a6:1b:be:89:d4:f1:e3:
95:7e:68:3e:bf:0d:f3:1c:71:72:53:17:91:c6:90:45:bb:1f:
12:f6:33:04:38:13:cd:2c:e0:bc:37:80:ae:9a:9a:07:5d:77:
0a:33:14:e1:01:69:00:e5:66:fe:67:61:7c:e3:f7:a0:ca:b3:
f5:0f:9e:fd:0d:10:1d:72:f4:80:b3:fb:ca:c7:af:6d:58:d1:
97:75:80:74:10:c6:25:d3:4c:22:82:5a:02:9f:22:7a:fd:b4:
20:7c:e1:28:cf:c1:fb:bc:9f:7e:32:b2:04:06:f0:82:61:f0:
bb:fd:f9:c2:f9:6f:61:37:70:e5:ec:e4:df:ab:e8:32:b6:f1:
ee:f3:2a:15:00:ae:75:4f:8f:cf:fc:43:cc:d4:85:4b:f1:17:
27:20:33:a9:6d:79:81:1d:00:b9:4a:d3:ca:3e:92:50:9e:27:
25:c7:32:1f:47:3e:61:84:91:c0:77:ce:28:d2:c1:83:42:e8:
ab:95:2c:75:c9:8e:8e:a9:64:bc:5b:c0:8d:76:c0:3a:73:7f:
ac:8a:bf:14:9e:a8:a1:e9:05:7b:6a:56:9d:3a:f1:c6:9d:c8:
55:e9:8d:c1:cf:17:98:e0:73:b9:03:61:3e:69:55:32:6b:5d:
76:f1:8c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 6 18:36:20 2025 by rpki-client