Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft
File: LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft (raw, json)
Hash identifier: mZLhJm9+xIK2E672S5pE/QewW6ZakVUtFg0c9W2zNDk=
Subject key identifier: AE:B4:B4:A0:6E:03:EA:81:BF:15:A3:77:0E:78:29:24:2A:FD:11:CE
Authority key identifier: 2E:16:20:89:0F:70:0F:01:2B:0B:A6:01:72:31:4E:3C:85:91:95:13
Certificate issuer: /CN=2e1620890f700f012b0ba60172314e3c85919513
Certificate serial: 019848894F952BEF759336FB6A0BD4925F22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhYgiQ9wDwErC6YBcjFOPIWRlRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft
Manifest number: 15FF
Signing time: Sat 26 Jul 2025 21:00:14 +0000
Manifest this update: Sat 26 Jul 2025 21:00:14 +0000
Manifest next update: Sun 27 Jul 2025 21:00:14 +0000
Files and hashes: 1: LhYgiQ9wDwErC6YBcjFOPIWRlRM.crl (hash: qFHuYPJREqocz/hPCnl4Wp9S7FufMs/LwJfgOaLMZkQ=)
2: UEzUyopP5UVcAuE2wQnf6zxgiYA.roa (hash: WO7cSkDAVVG4RqEt/anGaCZXbbFB9XEJIQ0eE+HtSwo=)
3: g1Qj1KnuMxZpXuMaGLTMbgWLRyE.roa (hash: f3NI3BOfnPP1R6nzFdJwSdGpqAlLYVxZtd9uD+YokWY=)
4: x9mgn-wCUD8rT1tTi9C7mbyMAtI.roa (hash: sgZbLcOXGM2ArVU0X49/Qh6v7QEpIvbA1cc08MVfbkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/LhYgiQ9wDwErC6YBcjFOPIWRlRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:89:4f:95:2b:ef:75:93:36:fb:6a:0b:d4:92:5f:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e1620890f700f012b0ba60172314e3c85919513
Validity
Not Before: Jul 26 21:00:14 2025 GMT
Not After : Jul 27 21:00:14 2025 GMT
Subject: CN=aeb4b4a06e03ea81bf15a3770e7829242afd11ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fe:4d:16:e2:2a:56:98:77:a9:00:8f:bc:5f:
79:6e:29:90:30:12:2d:74:8a:48:92:35:f0:e8:c8:
b2:83:65:99:0d:3d:56:bf:c4:92:1d:75:90:dd:d9:
8f:c0:1e:76:4b:8c:af:23:d9:30:e4:6e:05:fd:c2:
15:c3:4e:ff:02:26:9a:b1:34:67:cb:85:29:7a:c2:
6a:4e:84:95:ac:6c:7f:8a:c0:76:7c:a6:bd:17:a7:
e8:b4:e1:81:1a:ac:d8:e8:76:39:38:9a:9c:37:f4:
57:04:f1:df:84:6f:0d:0a:7d:f9:5b:c2:b5:6d:24:
7a:07:81:24:da:49:73:c9:00:42:f7:ea:6b:a4:38:
55:90:b6:b1:90:a5:1c:e3:b9:b6:96:85:be:4e:07:
ba:8a:de:4f:bf:e7:2b:2c:80:00:d8:a5:98:95:b1:
c2:71:5c:60:00:d3:ab:f3:2a:7f:8c:73:9a:1f:11:
fc:5d:d5:ef:27:5f:94:3f:00:73:95:26:65:f4:1e:
46:14:1d:12:0c:5f:56:c9:df:fe:69:33:a7:7f:1b:
6e:db:e8:94:3b:a7:6e:78:78:11:dd:80:c7:87:fb:
d1:43:18:b6:a5:27:73:13:d0:54:43:25:97:e8:3a:
48:15:2f:ba:07:ec:a8:56:08:ff:c0:3d:8b:a4:72:
4e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:B4:B4:A0:6E:03:EA:81:BF:15:A3:77:0E:78:29:24:2A:FD:11:CE
X509v3 Authority Key Identifier:
keyid:2E:16:20:89:0F:70:0F:01:2B:0B:A6:01:72:31:4E:3C:85:91:95:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhYgiQ9wDwErC6YBcjFOPIWRlRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:2f:47:cd:66:39:96:3f:a6:d7:46:e2:f4:26:be:4f:ca:2a:
08:7f:07:18:45:4a:f9:53:12:c1:b8:21:b8:6e:40:81:42:63:
a8:6b:92:9e:f0:4c:9a:e2:71:5f:1d:d9:97:8d:4f:07:d0:27:
d3:8d:0b:41:3a:0d:34:94:06:56:eb:9d:8c:8c:e6:80:cd:8e:
0d:35:fc:9e:46:c2:d4:7b:fd:3e:17:5a:8e:d0:0c:9a:7c:1d:
cd:f0:86:a3:a3:43:00:38:62:97:87:3c:76:d5:03:9a:7a:3b:
25:10:49:8f:a5:87:66:bd:a1:4d:ac:29:f7:71:9a:e6:e1:42:
c5:57:e6:b9:4f:74:8a:d5:9e:dc:1a:9e:a1:c0:c6:b2:00:f8:
cd:0e:f1:8c:3c:c4:c9:fb:e5:cb:f6:98:c3:66:2c:ae:85:b4:
dc:23:e4:88:6c:8d:a2:86:3d:a1:1a:ab:5f:01:7e:8f:3c:3f:
51:92:8f:55:21:bd:21:68:10:ed:e9:50:b7:d8:be:1a:7d:90:
0e:0f:04:40:e6:15:e4:f4:de:f1:58:af:cf:33:3d:9f:36:23:
34:47:89:eb:11:85:a4:25:79:89:37:ce:2e:26:36:f1:d7:24:
f6:ab:d2:09:d6:a0:64:b5:4f:ea:80:da:3f:9c:1b:8e:2f:ae:
ec:d8:b0:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:32:32 2025 by rpki-client