Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/40a1e5-7d2a-48d6-a50e-f96fb4ea7e70/1/LHXzXSVsxKW4gxm7fku7oynkk0E.mft
File: LHXzXSVsxKW4gxm7fku7oynkk0E.mft (raw, json)
Hash identifier: JGwBoUy42vORek+g23Z4awc7oFQHdHe2e6KSOQ4j3Q0=
Subject key identifier: 1C:DE:BF:10:21:B1:9F:11:24:DF:38:33:06:9D:48:3D:B7:90:D2:83
Authority key identifier: 2C:75:F3:5D:25:6C:C4:A5:B8:83:19:BB:7E:4B:BB:A3:29:E4:93:41
Certificate issuer: /CN=2c75f35d256cc4a5b88319bb7e4bbba329e49341
Certificate serial: 0198597D4B19C513AD8010E9253CDAAFFD36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHXzXSVsxKW4gxm7fku7oynkk0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/40a1e5-7d2a-48d6-a50e-f96fb4ea7e70/1/LHXzXSVsxKW4gxm7fku7oynkk0E.mft
Manifest number: 0E20
Signing time: Wed 30 Jul 2025 04:00:40 +0000
Manifest this update: Wed 30 Jul 2025 04:00:40 +0000
Manifest next update: Thu 31 Jul 2025 04:00:40 +0000
Files and hashes: 1: LHXzXSVsxKW4gxm7fku7oynkk0E.crl (hash: 5QcuGdyNxpZ5WS55PMQuZODipCsj53EQBoQ+L78mm3c=)
2: YkA8Ssik5dMp6e7KGDWmp6DJ7AM.roa (hash: kaPK3T3qFTRqHUlFynSutBS2oYj5+768wNKSaLHwTTo=)
3: l2XBgGbcIMQ-iwqh11S1_yjLWig.roa (hash: nZxnXhBR3pemT3iBrE0kPVvVmqlAyhaBxoPDBmxVBEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/40a1e5-7d2a-48d6-a50e-f96fb4ea7e70/1/LHXzXSVsxKW4gxm7fku7oynkk0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/40a1e5-7d2a-48d6-a50e-f96fb4ea7e70/1/LHXzXSVsxKW4gxm7fku7oynkk0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/LHXzXSVsxKW4gxm7fku7oynkk0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 31 Jul 2025 04:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:59:7d:4b:19:c5:13:ad:80:10:e9:25:3c:da:af:fd:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c75f35d256cc4a5b88319bb7e4bbba329e49341
Validity
Not Before: Jul 30 04:00:40 2025 GMT
Not After : Jul 31 04:00:40 2025 GMT
Subject: CN=1cdebf1021b19f1124df3833069d483db790d283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f2:69:5b:17:1e:b1:e1:6a:00:3b:2c:85:ad:
1e:2f:9a:fd:c8:e2:b9:bb:74:4c:4c:7d:5d:64:ea:
2f:28:46:d4:9b:15:3b:87:f7:8b:a7:f4:35:1b:a4:
dc:d4:ce:55:26:01:10:7d:e1:28:99:f1:68:1c:19:
9d:08:76:1b:11:bf:79:6e:6a:e6:35:25:88:f7:50:
45:b1:6d:6e:ad:a2:19:1f:57:81:ab:e2:b4:fd:8a:
20:dd:1a:c4:1b:5a:ba:30:68:8d:26:ff:2c:59:cb:
13:f4:b2:33:cd:fa:17:20:a4:db:bd:0a:09:f8:ab:
32:56:f5:27:51:77:fe:20:10:d5:16:33:70:f7:eb:
7f:a0:35:d5:dd:6f:02:dd:14:8e:d6:31:74:97:aa:
d9:e6:a4:26:3d:9a:70:88:a2:6f:ea:3f:e7:d2:c6:
de:7d:62:73:1d:06:0d:fc:ae:eb:9a:c4:f9:c1:2a:
f9:71:16:02:97:40:19:25:f0:cc:6d:06:f8:a3:79:
10:cb:07:ce:e3:a7:35:2a:1e:b3:5d:c4:39:0a:f4:
04:f4:ad:bb:8a:d8:41:73:c1:38:85:93:b3:eb:dd:
1c:b2:1d:47:a6:4c:16:9a:cd:fb:bc:9f:cf:94:06:
3b:1c:bc:6a:5f:94:bc:05:db:14:a3:07:96:a8:1f:
26:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:DE:BF:10:21:B1:9F:11:24:DF:38:33:06:9D:48:3D:B7:90:D2:83
X509v3 Authority Key Identifier:
keyid:2C:75:F3:5D:25:6C:C4:A5:B8:83:19:BB:7E:4B:BB:A3:29:E4:93:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHXzXSVsxKW4gxm7fku7oynkk0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/40a1e5-7d2a-48d6-a50e-f96fb4ea7e70/1/LHXzXSVsxKW4gxm7fku7oynkk0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/40a1e5-7d2a-48d6-a50e-f96fb4ea7e70/1/LHXzXSVsxKW4gxm7fku7oynkk0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:ac:26:00:e9:c1:55:5b:64:13:1c:eb:04:b4:e8:4f:1d:00:
c3:a6:db:9f:31:31:fe:53:9b:ee:74:4f:1a:17:5e:6e:ba:70:
00:91:89:78:91:4e:48:bb:8a:7d:78:64:44:59:81:e1:08:42:
f6:fd:b7:fd:86:ed:28:e5:ec:e9:6b:f0:5c:0d:b8:a7:95:93:
12:51:22:87:45:b3:1d:4c:da:54:fd:c2:85:55:60:9d:c4:05:
51:6c:60:b5:b5:1b:67:8b:4d:19:2c:3c:00:d4:7b:ce:1e:2a:
49:ba:30:de:61:52:75:5b:b3:cf:d4:90:a6:bb:08:6c:cd:f7:
5a:7c:53:a0:db:ca:34:86:2c:ef:40:d3:c4:40:77:30:76:65:
98:6b:c5:40:61:6a:9c:e4:c6:2e:2c:60:02:12:29:3e:4b:37:
b2:67:a4:b3:53:5a:9b:9c:2f:2b:4c:b9:52:a0:c3:18:d0:ed:
1d:e2:cc:17:2b:a9:d1:5d:be:9c:d7:54:d8:62:bd:16:93:0e:
b4:a5:58:e7:a2:e1:59:10:89:35:ab:9e:03:96:a5:e8:8f:44:
e0:2e:27:f0:39:35:e7:52:3e:1a:ce:b4:b9:04:59:4b:39:14:
ad:d2:e3:ab:30:f5:bf:fb:65:df:36:c2:46:e9:47:c0:34:e7:
79:0c:49:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 10:33:37 2025 by rpki-client