Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/e4be23-b536-4e30-9a5b-5d5d02bb7199/1/lHjtPq1if84WxRgCUMRmIXMY1lw.mft
File: lHjtPq1if84WxRgCUMRmIXMY1lw.mft (raw, json)
Hash identifier: 5PFv0+cMPhpfKjAGwVAwa/dYDGinueNBASbzSGTIGHk=
Subject key identifier: E8:E4:E7:28:FF:5E:5E:8C:65:EC:80:2F:5A:74:C8:F8:8F:40:32:D5
Authority key identifier: 94:78:ED:3E:AD:62:7F:CE:16:C5:18:02:50:C4:66:21:73:18:D6:5C
Certificate issuer: /CN=9478ed3ead627fce16c5180250c466217318d65c
Certificate serial: 0197B77CB5FDDAB0A105FBD35D6DC69AD5E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lHjtPq1if84WxRgCUMRmIXMY1lw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/e4be23-b536-4e30-9a5b-5d5d02bb7199/1/lHjtPq1if84WxRgCUMRmIXMY1lw.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 17:01:32 +0000
Manifest this update: Sat 28 Jun 2025 17:01:32 +0000
Manifest next update: Sun 29 Jun 2025 17:01:32 +0000
Files and hashes: 1: df6eEH1lcm-NQu74tYmhvofIQ3M.roa (hash: 2j1bAmdfTQz3oXGIdGeOLHdjury5pLuTexUtxV+TqRE=)
2: lHjtPq1if84WxRgCUMRmIXMY1lw.crl (hash: Wl+6+GtExeFAVDlezjdr5eg+dQZtQQp+e1cBZySioIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/e4be23-b536-4e30-9a5b-5d5d02bb7199/1/lHjtPq1if84WxRgCUMRmIXMY1lw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/e4be23-b536-4e30-9a5b-5d5d02bb7199/1/lHjtPq1if84WxRgCUMRmIXMY1lw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lHjtPq1if84WxRgCUMRmIXMY1lw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:b5:fd:da:b0:a1:05:fb:d3:5d:6d:c6:9a:d5:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9478ed3ead627fce16c5180250c466217318d65c
Validity
Not Before: Jun 28 17:01:32 2025 GMT
Not After : Jun 29 17:01:32 2025 GMT
Subject: CN=e8e4e728ff5e5e8c65ec802f5a74c8f88f4032d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:75:1e:27:b3:5b:e7:57:6f:b5:ea:42:f2:2f:
6d:d8:b5:bd:41:11:02:f2:e0:07:fa:01:63:cc:3f:
0e:f0:7e:62:28:33:0a:19:45:28:6c:90:56:3e:a8:
e2:6a:f9:76:6a:a3:3e:8d:08:2c:6f:8a:04:79:de:
f1:7e:f1:a8:3c:f1:8d:66:ee:0a:13:44:74:37:54:
ca:26:18:0a:1e:ce:3b:59:5c:ae:6a:bc:76:ad:30:
da:00:52:ae:ee:87:8b:d4:d1:8c:5a:71:59:38:dd:
6a:09:88:a0:d8:fa:a7:03:5d:81:44:73:e1:30:38:
d5:77:c1:2b:d5:73:0f:54:8f:9f:02:95:5f:16:34:
06:1d:74:bf:46:a7:e3:7e:c6:f2:4f:d2:f5:9f:3e:
22:6e:31:21:ed:f0:06:bb:49:d5:b1:dd:36:7c:02:
10:b7:f7:82:87:48:34:94:70:d2:71:a2:c0:31:9c:
63:b7:44:f0:04:20:cf:8d:ed:70:01:57:ee:dd:53:
df:ca:a8:16:48:94:82:4a:55:ee:c1:53:25:fc:1a:
61:77:41:44:ee:29:af:9b:5b:a3:39:1c:79:f7:c2:
d9:d3:4f:8f:3e:0d:1f:63:0d:c5:2a:8e:f7:f7:fc:
ca:00:c0:d0:81:e9:2f:95:23:3c:83:92:62:96:02:
09:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:E4:E7:28:FF:5E:5E:8C:65:EC:80:2F:5A:74:C8:F8:8F:40:32:D5
X509v3 Authority Key Identifier:
keyid:94:78:ED:3E:AD:62:7F:CE:16:C5:18:02:50:C4:66:21:73:18:D6:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lHjtPq1if84WxRgCUMRmIXMY1lw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e4be23-b536-4e30-9a5b-5d5d02bb7199/1/lHjtPq1if84WxRgCUMRmIXMY1lw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e4be23-b536-4e30-9a5b-5d5d02bb7199/1/lHjtPq1if84WxRgCUMRmIXMY1lw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:a5:65:14:78:af:a0:cf:36:56:f1:9d:c8:59:3e:0f:6d:b5:
47:6e:9f:ac:5c:14:69:26:de:41:3a:b6:b8:3a:c0:6c:b1:a2:
d9:32:16:78:d6:ce:e4:df:ec:64:a7:81:69:7b:b3:68:3e:7e:
6f:2a:72:2f:7b:ac:7b:21:f5:49:ee:82:92:43:72:c8:40:4d:
4f:13:2f:81:a5:ff:3d:bb:74:c0:3f:e6:be:57:50:1c:4b:a4:
14:0a:29:96:9f:33:ac:a0:1e:36:d8:b6:eb:0f:33:b2:12:9b:
e6:40:8b:6d:30:88:39:46:60:0d:9c:f7:63:33:93:e2:db:44:
8e:ed:12:26:a4:54:2d:57:28:35:21:16:cb:b6:41:65:b7:25:
04:68:85:ce:5d:86:dc:72:94:c8:9a:a0:52:1a:96:ba:09:af:
d3:47:ec:0f:69:77:17:6a:98:d5:d0:63:16:8e:09:b1:7b:1f:
a5:d6:5d:5e:ec:57:b8:7c:0e:be:ee:08:72:06:f0:ac:2b:bc:
b8:ad:3a:45:24:26:43:16:e0:ce:66:06:6b:2f:f6:93:d7:17:
4e:ad:16:41:aa:81:94:53:ed:4f:90:05:aa:dd:5a:3c:38:f9:
2f:41:ad:51:b0:e7:37:df:16:b9:90:c1:46:b3:9b:c7:a6:2e:
02:d9:f9:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:56:59 2025 by rpki-client