Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.mft
File: lhud90XDLfJ98z68_VNvGeE0dP4.mft (raw, json)
Hash identifier: WJ/H3de8Ru0i9+Yn2oOemSimfPx/302oFKnlIs136NE=
Subject key identifier: 33:94:74:9C:44:E6:0C:17:AF:79:1F:D2:62:08:E5:2E:BE:99:F3:CC
Authority key identifier: 96:1B:9D:F7:45:C3:2D:F2:7D:F3:3E:BC:FD:53:6F:19:E1:34:74:FE
Certificate issuer: /CN=961b9df745c32df27df33ebcfd536f19e13474fe
Certificate serial: 0197B77C877D29778B0998E7627DF1E14569
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lhud90XDLfJ98z68_VNvGeE0dP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.mft
Manifest number: 0ECF
Signing time: Sat 28 Jun 2025 17:01:20 +0000
Manifest this update: Sat 28 Jun 2025 17:01:20 +0000
Manifest next update: Sun 29 Jun 2025 17:01:20 +0000
Files and hashes: 1: 3LMtRmONGNLMLTZbv-22SKS_G_A.roa (hash: pio5aJGvlnIF4jwmfbABDVK+nPuVznK9IHAqeg47uOI=)
2: 8cYySboA2VaDBExXOdn2f8YI2Iw.roa (hash: XrQTlxZOLpNHFd8Q5dqkWIouJ0kbCEk8FXuJ6lAGYRM=)
3: AW_xXvWFujKuLbVm-SnUT_Zjgxw.roa (hash: nFG/6G17wzGxW8RG1K73vy6beJj5zW9L3o6YXtPyInc=)
4: lhud90XDLfJ98z68_VNvGeE0dP4.crl (hash: wIoLLU+swh/pWFW+KjTgljtelEn4w52nkeEF6JjBFO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lhud90XDLfJ98z68_VNvGeE0dP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 17:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:87:7d:29:77:8b:09:98:e7:62:7d:f1:e1:45:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=961b9df745c32df27df33ebcfd536f19e13474fe
Validity
Not Before: Jun 28 17:01:20 2025 GMT
Not After : Jun 29 17:01:20 2025 GMT
Subject: CN=3394749c44e60c17af791fd26208e52ebe99f3cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:61:e4:33:32:9d:6f:b7:b1:c5:11:0c:81:36:
01:2a:53:ab:86:5f:f0:44:ad:59:86:55:d8:de:6d:
1b:8e:80:55:41:14:fc:c2:a2:f1:89:c3:96:30:2f:
cf:e3:6b:4f:4c:15:76:d2:50:bd:6c:b4:b6:6e:34:
60:4c:1d:ab:1f:87:40:8d:8e:a6:74:df:29:26:a7:
4a:f7:1c:f8:c9:42:2e:39:a7:0d:a0:cc:ec:70:52:
3e:01:e4:6a:74:66:b2:4e:70:a6:51:4d:d8:55:49:
bc:1d:be:77:30:7d:da:36:11:43:9d:06:22:5d:21:
86:1d:d0:88:71:58:c8:46:57:5e:cc:1a:a8:33:0c:
a6:3f:99:22:c7:ac:f0:d9:ec:b0:9f:a5:6d:a4:ec:
97:5a:6e:08:56:38:d8:50:b8:1e:56:64:7c:ce:39:
93:48:4d:84:9a:04:17:9b:ea:01:ed:6d:f3:47:71:
2f:8a:7b:7f:94:dd:58:b9:aa:b3:e9:fa:0f:e6:b8:
06:d5:64:7b:2f:e6:14:4f:82:03:d8:8e:93:70:8f:
4a:fb:46:3e:80:e8:89:a7:e6:0a:f6:bd:e9:12:62:
76:5e:c8:d8:f0:b7:74:bd:58:0f:62:aa:07:a3:4a:
c2:f4:3b:99:84:dd:05:6a:d9:49:1f:95:20:58:5f:
ad:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:94:74:9C:44:E6:0C:17:AF:79:1F:D2:62:08:E5:2E:BE:99:F3:CC
X509v3 Authority Key Identifier:
keyid:96:1B:9D:F7:45:C3:2D:F2:7D:F3:3E:BC:FD:53:6F:19:E1:34:74:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhud90XDLfJ98z68_VNvGeE0dP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:34:da:b0:32:c1:87:cc:72:56:90:2e:f5:a5:99:26:35:43:
c1:9b:88:77:b8:48:89:7f:86:c2:79:0e:c2:15:31:88:a3:23:
82:8f:e7:58:da:c7:09:a3:8f:46:1c:0a:91:c4:f0:9c:85:eb:
d7:2a:f8:ba:61:7a:34:82:55:fb:87:5b:67:8c:02:c1:67:41:
f5:66:fe:d3:ba:b1:c8:d0:b8:1d:ae:b0:1b:58:54:80:92:1a:
fd:a9:be:d2:02:28:4c:93:e0:65:a5:f6:54:29:58:ec:a1:b1:
5d:1e:0f:f9:58:f9:78:24:fb:31:f6:fd:87:21:4a:40:93:8e:
05:f5:34:99:4a:50:e4:b6:f2:b8:da:4d:b8:80:96:ea:20:4e:
bf:74:29:b8:ec:ce:bf:1d:7d:04:8e:6a:30:a0:8e:80:61:39:
e5:dc:dc:28:fd:2d:69:a0:4b:79:24:6c:f4:5a:94:3b:c8:6f:
ea:f3:c0:ac:d9:e1:6a:79:a5:80:61:a3:a5:f3:d8:08:53:19:
48:fd:37:85:0d:8f:75:47:e2:05:26:e3:bf:72:76:01:cc:f4:
35:6c:e6:e4:a5:94:00:29:2f:5d:5b:ca:bf:af:d6:72:e3:aa:
71:77:c9:48:72:2f:4a:02:7e:02:6a:f8:fa:46:35:48:71:e3:
8f:8b:6d:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:56:44 2025 by rpki-client