Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/6c4c26-e34a-4336-90c8-f90ae9966428/1/lH4-X564CJtcqU845lF8-8WyAGM.mft
File: lH4-X564CJtcqU845lF8-8WyAGM.mft (raw, json)
Hash identifier: MWkvLHJo30dBuLTDMJwMVIUQt4dJDrKah2F4HjQYpPA=
Subject key identifier: B8:08:55:5F:33:6D:4F:82:0F:BD:E4:40:F9:F4:F1:4F:B8:24:65:35
Authority key identifier: 94:7E:3E:5F:9E:B8:08:9B:5C:A9:4F:38:E6:51:7C:FB:C5:B2:00:63
Certificate issuer: /CN=947e3e5f9eb8089b5ca94f38e6517cfbc5b20063
Certificate serial: 0198462D3E035421CC93C99F05E3A410E862
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lH4-X564CJtcqU845lF8-8WyAGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4c26-e34a-4336-90c8-f90ae9966428/1/lH4-X564CJtcqU845lF8-8WyAGM.mft
Manifest number: 048E
Signing time: Sat 26 Jul 2025 10:00:26 +0000
Manifest this update: Sat 26 Jul 2025 10:00:26 +0000
Manifest next update: Sun 27 Jul 2025 10:00:26 +0000
Files and hashes: 1: 8JJmvRAktSEG3OdLUZKBNwR6ws0.roa (hash: TC8WkMj5LqYLotUQsIJXNU0W5IJEuyjKyKXTJdzLmbM=)
2: lH4-X564CJtcqU845lF8-8WyAGM.crl (hash: XZoDuTBVaxvQuq61peQur2YmVgvnsPBvOqV//M3fo3k=)
3: zozOOHZMPpO8TU7R7OlzFjX6nTU.roa (hash: DO9vuDN/M4q7UhQA8k+ziHqB7tX/m/+CIduSaenQLlY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4c26-e34a-4336-90c8-f90ae9966428/1/lH4-X564CJtcqU845lF8-8WyAGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4c26-e34a-4336-90c8-f90ae9966428/1/lH4-X564CJtcqU845lF8-8WyAGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lH4-X564CJtcqU845lF8-8WyAGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 10:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:2d:3e:03:54:21:cc:93:c9:9f:05:e3:a4:10:e8:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=947e3e5f9eb8089b5ca94f38e6517cfbc5b20063
Validity
Not Before: Jul 26 10:00:26 2025 GMT
Not After : Jul 27 10:00:26 2025 GMT
Subject: CN=b808555f336d4f820fbde440f9f4f14fb8246535
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:98:4c:2d:56:54:f8:e6:60:5a:01:31:b2:39:
5f:f7:e5:e2:2f:7b:8d:cf:01:6e:a5:4d:d8:51:83:
83:d2:4d:e2:45:9b:3e:2e:ea:c2:12:9b:91:cb:11:
90:4b:a2:bf:3a:74:fa:ce:82:2b:b1:5e:bf:b8:0b:
16:0d:67:3d:b9:d3:87:52:27:b3:95:5f:65:44:01:
40:6b:ab:01:44:da:0e:4b:f3:25:88:3f:01:85:79:
33:92:73:54:b6:55:7a:2e:25:1c:50:8f:65:f0:37:
3d:0e:ed:49:7e:37:c3:bc:3d:64:0a:4c:ba:47:ca:
b1:31:fc:3b:36:73:90:ac:64:ec:f6:57:3a:d4:e1:
bc:2c:eb:9b:b1:3e:b9:a6:d0:d6:9f:7a:14:b7:29:
39:09:5e:d6:d5:6f:69:e3:22:d0:f2:77:88:4e:05:
48:92:96:61:74:ad:76:62:55:62:a7:12:23:32:ba:
bc:52:7a:dd:a6:17:fe:ff:37:e7:79:8e:23:87:2b:
3c:25:48:b0:c8:8c:c2:91:0f:ad:9c:b9:d0:ac:62:
99:f8:59:9e:59:75:99:e0:ae:60:35:b0:c3:33:69:
eb:79:69:b7:b4:f9:6b:71:53:20:59:c4:1f:d8:bb:
6f:79:e1:bc:e4:db:06:18:4a:2e:70:3d:9b:ae:a2:
30:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:08:55:5F:33:6D:4F:82:0F:BD:E4:40:F9:F4:F1:4F:B8:24:65:35
X509v3 Authority Key Identifier:
keyid:94:7E:3E:5F:9E:B8:08:9B:5C:A9:4F:38:E6:51:7C:FB:C5:B2:00:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lH4-X564CJtcqU845lF8-8WyAGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4c26-e34a-4336-90c8-f90ae9966428/1/lH4-X564CJtcqU845lF8-8WyAGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4c26-e34a-4336-90c8-f90ae9966428/1/lH4-X564CJtcqU845lF8-8WyAGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:5e:2f:cb:da:8a:3e:91:71:40:03:4c:87:f1:b7:13:8e:c9:
22:c1:aa:c0:23:5c:0b:26:ad:94:22:ee:db:ab:1b:0b:93:f7:
bc:64:fb:1b:9b:59:37:a2:fb:07:c2:3e:76:e8:0e:c4:af:d3:
6c:6d:52:73:f7:f6:e6:91:2a:88:5c:6b:29:01:74:9c:bc:07:
ab:ae:07:5f:32:21:a0:c3:85:51:9c:f6:96:e1:8e:dc:28:7a:
24:33:a9:c5:5f:a2:0f:c2:36:37:c6:14:a6:b3:10:21:09:be:
35:49:bd:3d:29:6a:ec:9b:34:ef:e5:9e:f8:ef:19:15:50:4a:
bb:4a:94:3d:e7:f3:8f:3d:dc:c8:7c:3b:56:a4:93:d3:19:9c:
fb:3c:a0:60:11:9a:93:6d:66:b0:da:39:fb:03:d0:02:ed:08:
5c:27:72:11:92:1f:86:41:ba:c4:be:e8:79:88:d2:17:c1:7a:
1b:c7:fb:b6:0f:cc:18:ac:db:97:d8:55:23:e2:b0:0e:42:51:
24:e8:17:a8:fe:e9:d1:8c:db:99:11:6e:9e:b9:fe:58:3c:ea:
1d:dd:88:59:1c:88:67:9e:0d:68:90:d4:96:9d:ea:f6:8e:7b:
61:18:f9:0c:cc:09:fa:fc:bc:67:31:d3:34:b1:25:e9:56:bb:
b8:78:2b:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 19:12:50 2025 by rpki-client