Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/6a88ac-efb4-45e4-9199-2abdb21941bc/1/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.mft
File: lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.mft (raw, json)
Hash identifier: T/VQOovgt2Nz53p2uPmR+pXThoS2CWP640TkOruUw0E=
Subject key identifier: 34:2E:70:50:9C:12:A3:69:EC:C9:4A:9D:58:B8:BF:DB:FB:39:81:2F
Authority key identifier: 96:B8:7E:5F:D1:AA:DC:1B:BE:A3:72:B4:26:9E:EB:D3:93:C5:CD:67
Certificate issuer: /CN=96b87e5fd1aadc1bbea372b4269eebd393c5cd67
Certificate serial: 019853449D4971175048053F46DA803311C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/6a88ac-efb4-45e4-9199-2abdb21941bc/1/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.mft
Manifest number: 0D3D
Signing time: Mon 28 Jul 2025 23:01:02 +0000
Manifest this update: Mon 28 Jul 2025 23:01:02 +0000
Manifest next update: Tue 29 Jul 2025 23:01:02 +0000
Files and hashes: 1: O8xQyf4SlO_QA8u4YHx9nqfuT4c.roa (hash: WyDwMMx1y5LT2GHueRZtXWT+BMFzzrzU6Km40azPSxA=)
2: lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.crl (hash: tAAC+vTuEpIfShUYHB9Eagwp48j12gWyFCh2/bn0nHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/6a88ac-efb4-45e4-9199-2abdb21941bc/1/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/6a88ac-efb4-45e4-9199-2abdb21941bc/1/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:44:9d:49:71:17:50:48:05:3f:46:da:80:33:11:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96b87e5fd1aadc1bbea372b4269eebd393c5cd67
Validity
Not Before: Jul 28 23:01:02 2025 GMT
Not After : Jul 29 23:01:02 2025 GMT
Subject: CN=342e70509c12a369ecc94a9d58b8bfdbfb39812f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:44:60:30:91:59:f0:d4:82:12:b8:b0:4b:fe:
91:06:ae:9f:4b:0b:ae:ad:10:43:f9:bf:77:49:0d:
ab:91:16:72:73:ad:82:2c:c8:8f:d9:03:fb:84:d6:
b4:ec:c2:f6:a4:69:c8:28:35:d2:27:e9:d4:46:62:
08:82:e2:09:34:e7:a3:23:4b:f7:a1:8c:0d:2f:e5:
d3:d0:f6:5b:78:60:46:a6:ed:27:81:e7:6c:b8:d5:
ec:8c:c2:8c:6f:f7:ce:51:78:cd:b0:f5:fc:a4:ca:
6b:04:bf:3e:2c:f0:72:0d:90:5f:42:8c:c0:44:4f:
b5:12:2c:c9:4f:99:18:ee:17:e0:45:b0:cc:6d:19:
f8:cb:a7:f8:bb:85:2a:37:a1:9a:65:81:65:0f:ac:
8d:98:d7:05:c3:b4:0c:c7:db:68:b0:2e:0b:5d:27:
ba:84:a3:3a:52:ef:68:e1:a3:7c:c9:e3:ef:d4:cb:
19:5b:e7:e5:9d:84:e3:4a:5a:25:8f:ca:8d:a3:dc:
33:60:19:96:70:9f:05:ce:5a:13:57:a0:a4:3d:7f:
cf:11:13:b1:60:e6:09:ee:87:e9:d5:90:75:b4:b4:
f4:5a:3d:70:c6:22:3c:38:eb:c8:bd:bf:73:63:cf:
1b:57:6a:fe:73:2c:b0:e4:e8:4e:03:10:1a:3a:51:
10:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:2E:70:50:9C:12:A3:69:EC:C9:4A:9D:58:B8:BF:DB:FB:39:81:2F
X509v3 Authority Key Identifier:
keyid:96:B8:7E:5F:D1:AA:DC:1B:BE:A3:72:B4:26:9E:EB:D3:93:C5:CD:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6a88ac-efb4-45e4-9199-2abdb21941bc/1/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6a88ac-efb4-45e4-9199-2abdb21941bc/1/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:b9:48:0c:88:71:26:3c:9b:4e:3e:79:50:fb:71:76:1b:d2:
a3:05:b6:46:e5:8c:0d:e0:7e:be:5f:7a:bb:5b:bc:1c:d2:3e:
f1:a3:80:9e:03:9c:26:4f:ec:39:5c:15:e1:e6:5c:f8:9d:9f:
6d:85:ce:ec:cf:cb:d5:a8:7c:b1:9f:bd:49:37:98:72:30:5b:
1f:0d:42:17:b2:5b:a3:b8:45:24:4e:8a:db:c9:7e:c4:5d:e2:
5e:2d:e2:87:d8:83:e5:ed:82:e9:1d:43:34:2e:f7:b9:12:6d:
fd:ec:87:98:8e:40:cd:3d:c3:6a:b8:4e:91:91:6b:83:9f:14:
2b:5c:ae:7c:91:a6:45:d1:b5:f9:33:db:0b:9b:97:89:d9:6b:
3c:86:77:73:07:48:5b:8f:35:e2:88:2b:65:5a:ec:c9:a0:9a:
58:8c:38:be:77:13:56:60:89:12:a7:04:7e:85:68:0f:59:6e:
1f:aa:61:80:65:ef:9e:35:4f:36:ea:4c:b0:b4:ba:42:b5:2a:
b1:e7:90:9b:70:8c:18:6f:1f:5c:f0:36:45:a9:f6:b6:47:6c:
7f:fe:ab:8e:2c:5e:95:ee:1e:fa:12:c8:42:28:ad:a3:7d:bb:
16:b6:3e:4d:7c:f2:fd:ea:82:52:02:31:7a:a6:99:69:92:5f:
d3:e7:f0:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhTRJ1JcRdQSAU/RtqAMxHGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2Yjg3ZTVmZDFhYWRjMWJiZWEzNzJiNDI2OWVlYmQzOTNj
NWNkNjcwHhcNMjUwNzI4MjMwMTAyWhcNMjUwNzI5MjMwMTAyWjAzMTEwLwYDVQQD
EygzNDJlNzA1MDljMTJhMzY5ZWNjOTRhOWQ1OGI4YmZkYmZiMzk4MTJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkRgMJFZ8NSCEriwS/6RBq6fSwuu
rRBD+b93SQ2rkRZyc62CLMiP2QP7hNa07ML2pGnIKDXSJ+nURmIIguIJNOejI0v3
oYwNL+XT0PZbeGBGpu0ngedsuNXsjMKMb/fOUXjNsPX8pMprBL8+LPByDZBfQozA
RE+1EizJT5kY7hfgRbDMbRn4y6f4u4UqN6GaZYFlD6yNmNcFw7QMx9tosC4LXSe6
hKM6Uu9o4aN8yePv1MsZW+flnYTjSlolj8qNo9wzYBmWcJ8FzloTV6CkPX/PEROx
YOYJ7ofp1ZB1tLT0Wj1wxiI8OOvIvb9zY88bV2r+cyyw5OhOAxAaOlEQXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDQucFCcEqNp7MlKnVi4v9v7OYEvMB8GA1UdIwQY
MBaAFJa4fl/RqtwbvqNytCae69OTxc1nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHJoLVg5R3EzQnUtbzNLMEpwN3IwNVBGeldjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi82YTg4YWMtZWZiNC00NWU0LTkxOTkt
MmFiZGIyMTk0MWJjLzEvbHJoLVg5R3EzQnUtbzNLMEpwN3IwNVBGeldjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi82YTg4YWMtZWZiNC00NWU0LTkxOTktMmFiZGIyMTk0MWJj
LzEvbHJoLVg5R3EzQnUtbzNLMEpwN3IwNVBGeldjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlLlIDIhx
JjybTj55UPtxdhvSowW2RuWMDeB+vl96u1u8HNI+8aOAngOcJk/sOVwV4eZc+J2f
bYXO7M/L1ah8sZ+9STeYcjBbHw1CF7Jbo7hFJE6K28l+xF3iXi3ih9iD5e2C6R1D
NC73uRJt/eyHmI5AzT3DarhOkZFrg58UK1yufJGmRdG1+TPbC5uXidlrPIZ3cwdI
W4814ogrZVrsyaCaWIw4vncTVmCJEqcEfoVoD1luH6phgGXvnjVPNupMsLS6QrUq
seeQm3CMGG8fXPA2Ran2tkdsf/6rjixele4e+hLIQiito327FrY+TXzy/eqCUgIx
eqaZaZJf0+fwGA==
-----END CERTIFICATE-----
Generated at Tue Jul 29 01:28:29 2025 by rpki-client