Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/LhmWbA6l3zqYf4NlUktRKMun_JA.mft
File: LhmWbA6l3zqYf4NlUktRKMun_JA.mft (raw, json)
Hash identifier: Aa1zUyTfLFFgYBXJa5UQHmED2eDezvbQiYti8K2eYr0=
Subject key identifier: 66:76:76:FA:DD:5A:24:AA:A5:D6:B5:45:B3:D2:20:C9:4C:21:E3:B5
Authority key identifier: 2E:19:96:6C:0E:A5:DF:3A:98:7F:83:65:52:4B:51:28:CB:A7:FC:90
Certificate issuer: /CN=2e19966c0ea5df3a987f8365524b5128cba7fc90
Certificate serial: 01984889B4FE58601D522ABA4E37B7771C73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhmWbA6l3zqYf4NlUktRKMun_JA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/LhmWbA6l3zqYf4NlUktRKMun_JA.mft
Manifest number: 1601
Signing time: Sat 26 Jul 2025 21:00:40 +0000
Manifest this update: Sat 26 Jul 2025 21:00:40 +0000
Manifest next update: Sun 27 Jul 2025 21:00:40 +0000
Files and hashes: 1: EB2pKsJqEpEjhB4YuLKeyjkIp9Q.roa (hash: ruDUWZ/Fl5sEVfjlgGOsVStJ3zZdJ/uyG7EZiN/zjl0=)
2: LhmWbA6l3zqYf4NlUktRKMun_JA.crl (hash: NjOmV12IPr7qhy6ydzWlyDXr5ZrF96phb3J4bt3Knsw=)
3: iOSgDas4E473RISs54ZCqJXEL1Y.roa (hash: cm025SWzl2vuQDv4U8M4vf0+/0CnnGay76ie0c/nESQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/LhmWbA6l3zqYf4NlUktRKMun_JA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/LhmWbA6l3zqYf4NlUktRKMun_JA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LhmWbA6l3zqYf4NlUktRKMun_JA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:89:b4:fe:58:60:1d:52:2a:ba:4e:37:b7:77:1c:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e19966c0ea5df3a987f8365524b5128cba7fc90
Validity
Not Before: Jul 26 21:00:40 2025 GMT
Not After : Jul 27 21:00:40 2025 GMT
Subject: CN=667676fadd5a24aaa5d6b545b3d220c94c21e3b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a8:39:ad:95:9b:9b:c7:83:68:c9:6d:f3:38:
27:df:0d:86:2a:d6:8d:cc:d9:ed:7d:40:02:c9:5c:
0b:e5:85:56:f7:7e:43:89:ac:c9:02:16:40:f1:6c:
fc:1b:b7:0e:f4:e6:e7:c2:6b:ee:8e:84:e0:03:0c:
2a:1a:89:ed:3c:08:46:57:8d:24:7b:94:c1:fc:3b:
85:fe:86:1b:54:85:58:3a:48:37:3b:86:af:86:a4:
9c:56:6f:f8:b0:11:5b:9b:be:29:4b:22:cd:3f:92:
87:82:04:a3:4d:ab:50:16:ac:65:ec:86:48:cf:63:
70:7e:f2:34:87:f6:33:59:b6:40:e9:17:15:b8:c5:
d0:61:18:b7:99:df:0b:a2:48:c5:dc:e1:27:84:07:
4b:cb:28:8c:0c:08:a1:ca:7d:3a:7e:8a:23:1f:64:
7a:ef:c1:c1:69:6f:5b:ee:b6:16:c8:36:90:a8:87:
1a:fd:26:4d:a0:7f:51:8d:b6:5b:b7:c2:fd:7c:44:
d3:b4:9b:8f:71:9b:41:1c:be:71:7d:9e:d6:08:61:
b6:8d:cb:62:06:13:8e:68:75:35:3b:70:66:55:ed:
44:a0:f1:57:43:30:27:f6:98:6c:f9:42:4e:7a:dc:
13:23:c1:b7:be:9b:19:03:15:5f:ee:41:9b:72:f9:
34:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:76:76:FA:DD:5A:24:AA:A5:D6:B5:45:B3:D2:20:C9:4C:21:E3:B5
X509v3 Authority Key Identifier:
keyid:2E:19:96:6C:0E:A5:DF:3A:98:7F:83:65:52:4B:51:28:CB:A7:FC:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhmWbA6l3zqYf4NlUktRKMun_JA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/LhmWbA6l3zqYf4NlUktRKMun_JA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/LhmWbA6l3zqYf4NlUktRKMun_JA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:85:13:ff:a7:85:78:e2:d0:01:51:c6:bf:a1:ba:36:89:1d:
4c:e8:2b:7f:9d:87:02:63:ef:70:15:7a:7b:c1:a8:a7:ec:e4:
25:06:b8:df:16:92:66:ba:0c:15:c2:73:01:47:e7:72:ac:85:
07:01:82:57:3b:5d:a7:a0:b4:e7:b1:54:89:8d:43:3d:17:5f:
39:bc:99:df:2a:47:10:a5:79:69:bb:ba:e7:df:f5:9a:f6:ae:
96:64:4e:07:eb:f5:87:13:21:ec:f1:64:20:ee:69:04:32:77:
30:83:81:8c:26:db:7f:8d:92:22:1e:0b:29:aa:0e:74:eb:5d:
cf:8a:4d:e0:f9:77:8b:7a:8f:75:bf:70:44:20:b8:e2:a8:cd:
b6:51:89:8f:2b:03:ac:10:42:f0:f4:5f:b4:0b:59:2f:bc:df:
6a:db:31:9c:31:b4:fd:23:0b:5f:ef:22:13:21:de:20:04:20:
6e:12:af:fe:32:e4:52:0a:e4:61:63:11:6e:38:6d:5c:88:0e:
aa:1a:fa:01:7c:5d:a1:a4:38:85:cb:b5:78:5c:ac:44:3b:70:
aa:b8:35:19:97:b6:1c:5f:9e:8c:0e:7d:92:fc:9a:32:3e:ec:
13:42:09:07:8d:5c:69:3e:4e:3f:1f:5f:a8:fd:e5:41:87:49:
94:29:8d:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:29:30 2025 by rpki-client