Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.mft
File: lHS1JBtjw6-9s0LMR2NMVasv-EY.mft (raw, json)
Hash identifier: 3140hyoLUUj4wSch97Z+l8+0hBFyWwe8z0UsspeUfLw=
Subject key identifier: 41:10:03:1C:CC:30:C8:A4:57:60:1D:90:89:15:15:C6:D0:28:5E:C0
Authority key identifier: 94:74:B5:24:1B:63:C3:AF:BD:B3:42:CC:47:63:4C:55:AB:2F:F8:46
Certificate issuer: /CN=9474b5241b63c3afbdb342cc47634c55ab2ff846
Certificate serial: 019848530B9834E2FFF3ED104BF70AE22BE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lHS1JBtjw6-9s0LMR2NMVasv-EY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.mft
Manifest number: 0110
Signing time: Sat 26 Jul 2025 20:00:58 +0000
Manifest this update: Sat 26 Jul 2025 20:00:58 +0000
Manifest next update: Sun 27 Jul 2025 20:00:58 +0000
Files and hashes: 1: _esauh0bwxU4lPvXm-nLiVYT1MY.roa (hash: dg/Xh0ZCbSrkvMtC9w3xbJVNO3y7y3uRRsJgcH21rXg=)
2: lHS1JBtjw6-9s0LMR2NMVasv-EY.crl (hash: 3JvhXpOKO1b+d/1AECG1t1J77X9Avmpg3j40pryUh48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lHS1JBtjw6-9s0LMR2NMVasv-EY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:53:0b:98:34:e2:ff:f3:ed:10:4b:f7:0a:e2:2b:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9474b5241b63c3afbdb342cc47634c55ab2ff846
Validity
Not Before: Jul 26 20:00:58 2025 GMT
Not After : Jul 27 20:00:58 2025 GMT
Subject: CN=4110031ccc30c8a457601d90891515c6d0285ec0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1e:78:85:22:ff:5b:b9:a5:db:df:2c:77:62:
b0:41:d6:04:fb:4b:d7:29:78:50:c4:fb:83:55:f8:
5a:98:d0:ba:d4:0c:c6:52:22:6b:eb:ba:e6:b7:22:
23:97:73:bf:4b:af:2a:3b:90:8e:18:09:03:13:91:
5a:94:6f:2b:50:fb:85:d3:06:99:10:b2:f0:4c:99:
15:79:ca:20:03:9d:fc:ab:ef:d1:a5:cd:de:b9:e7:
b6:90:ca:f1:4e:4e:3f:57:a2:5c:62:b8:ba:b2:53:
1a:0b:ff:dd:e1:d6:51:ae:0f:e1:ba:a6:9c:8e:b1:
71:db:2d:87:4a:1c:e8:f4:fd:9a:cb:a4:40:56:1e:
f1:3b:3d:e1:ba:ff:65:2a:4c:25:d7:5f:a4:c6:f5:
50:83:f2:fe:c7:a5:7a:ac:05:e4:ac:98:79:13:5e:
cc:80:d7:c0:24:4d:35:f3:1c:c7:c9:fa:79:d2:71:
36:36:aa:d4:ab:01:86:b0:c4:62:e4:f0:5d:57:61:
59:aa:fa:be:7d:8c:4f:d4:2b:8a:fe:6b:78:dd:59:
f6:c0:3c:cd:48:87:93:e9:2d:27:ce:2f:f6:ef:2e:
ab:81:38:9e:d2:d1:11:e0:c0:d5:db:c6:b4:e2:1e:
3b:40:9e:f0:d2:40:e3:81:2a:58:66:07:ea:d6:8e:
c1:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:10:03:1C:CC:30:C8:A4:57:60:1D:90:89:15:15:C6:D0:28:5E:C0
X509v3 Authority Key Identifier:
keyid:94:74:B5:24:1B:63:C3:AF:BD:B3:42:CC:47:63:4C:55:AB:2F:F8:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lHS1JBtjw6-9s0LMR2NMVasv-EY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:7d:3d:6a:34:eb:66:32:85:63:cd:a7:db:0e:84:e7:a7:75:
95:f5:31:b1:90:31:f9:93:d1:ad:e2:63:a6:a5:68:f9:6b:d7:
98:55:85:8a:7b:50:41:f5:6f:fb:b0:83:3b:93:af:70:c7:82:
5a:1c:2e:e3:65:58:d7:54:7f:68:f5:04:41:3a:88:8e:62:7d:
28:3c:60:af:cc:e6:22:65:46:bd:fa:7f:d1:fe:fd:74:9d:e5:
4c:55:bd:84:42:0b:1c:9b:a2:89:d4:e1:c8:5d:b3:a7:5c:a8:
e5:4e:57:ec:b8:05:b9:7b:fa:9b:3c:95:b1:52:e6:09:f0:0b:
3d:82:85:c5:fc:63:4e:d9:d3:a5:d1:6b:97:b4:19:12:cd:5f:
49:ed:81:0b:4b:1b:54:9d:15:7e:dd:57:0b:c9:50:a8:37:ae:
ca:97:23:97:df:7d:20:89:f4:28:65:69:5d:21:78:95:41:e3:
51:86:8a:3c:66:7d:47:5f:f5:07:33:a7:59:b5:85:a6:a9:99:
78:73:a3:eb:40:c4:c7:a8:a5:91:7e:75:b3:e5:d7:9b:00:09:
64:5e:1e:ba:ee:cf:f2:e3:ae:7e:be:34:f2:64:79:33:78:f8:
44:3e:20:75:45:77:69:e2:1e:2a:0f:76:dd:33:c3:8a:ba:1b:
78:97:54:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:12:39 2025 by rpki-client