Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.mft
File: lHS1JBtjw6-9s0LMR2NMVasv-EY.mft (raw, json)
Hash identifier: UcXqwaEa+i1e30xnReVlmnOSX97hzJY5419Z3EJLQGQ=
Subject key identifier: 0F:66:F5:26:BC:C5:A5:EE:59:92:09:9D:2E:5E:F9:C7:89:10:16:64
Authority key identifier: 94:74:B5:24:1B:63:C3:AF:BD:B3:42:CC:47:63:4C:55:AB:2F:F8:46
Certificate issuer: /CN=9474b5241b63c3afbdb342cc47634c55ab2ff846
Certificate serial: 01974967F399F63182DFF41F1C489BB2F07A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lHS1JBtjw6-9s0LMR2NMVasv-EY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.mft
Manifest number: 8C
Signing time: Sat 07 Jun 2025 08:00:38 +0000
Manifest this update: Sat 07 Jun 2025 08:00:38 +0000
Manifest next update: Sun 08 Jun 2025 08:00:38 +0000
Files and hashes: 1: _esauh0bwxU4lPvXm-nLiVYT1MY.roa (hash: dg/Xh0ZCbSrkvMtC9w3xbJVNO3y7y3uRRsJgcH21rXg=)
2: lHS1JBtjw6-9s0LMR2NMVasv-EY.crl (hash: aMQQOyKQN5dtDvyTaU/NHtHfC5xpDzQSmrMGuu/sv80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lHS1JBtjw6-9s0LMR2NMVasv-EY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:67:f3:99:f6:31:82:df:f4:1f:1c:48:9b:b2:f0:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9474b5241b63c3afbdb342cc47634c55ab2ff846
Validity
Not Before: Jun 7 08:00:38 2025 GMT
Not After : Jun 8 08:00:38 2025 GMT
Subject: CN=0f66f526bcc5a5ee5992099d2e5ef9c789101664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:14:a8:f5:4f:3a:49:40:cf:90:30:9d:56:20:
e0:a3:c6:26:56:ee:99:61:00:24:54:d8:4b:d0:88:
73:6c:37:c9:f9:62:f2:43:02:7c:ff:12:bd:c1:af:
de:d4:52:ba:9e:4c:55:ce:75:cb:9b:51:d2:e4:aa:
e3:b0:9f:54:77:55:e9:4e:d7:c1:90:09:da:bc:94:
2e:70:40:cb:89:98:73:77:f2:c3:e9:f3:ba:9b:3f:
87:80:7e:29:0f:cc:b7:b5:e9:93:94:93:5b:6a:c8:
09:36:1a:32:42:be:03:9d:03:9d:8a:73:2c:ec:af:
00:08:74:ce:f6:dd:e2:38:6c:7a:99:83:d7:09:bf:
6f:65:b1:58:80:ee:d4:68:67:f9:98:81:a4:93:c4:
85:1c:c4:c8:d6:19:8e:c3:fb:b0:a5:9a:37:dc:73:
0a:5a:a0:ab:c3:c0:cc:1b:b8:ee:f1:7c:21:45:83:
54:12:27:25:38:fb:a2:02:12:4c:b8:a7:c7:80:88:
d7:ad:4d:d6:82:84:a9:d0:c8:29:7c:52:5a:20:83:
44:3d:d3:5e:75:bc:cd:70:39:3e:97:ac:a0:6f:e1:
c2:89:48:71:53:80:98:7a:1f:61:f0:1f:09:5f:2f:
25:93:f7:c9:ae:b9:a6:56:ee:c3:13:74:8b:54:c8:
0c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:66:F5:26:BC:C5:A5:EE:59:92:09:9D:2E:5E:F9:C7:89:10:16:64
X509v3 Authority Key Identifier:
keyid:94:74:B5:24:1B:63:C3:AF:BD:B3:42:CC:47:63:4C:55:AB:2F:F8:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lHS1JBtjw6-9s0LMR2NMVasv-EY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:67:29:b6:6e:35:88:2e:28:58:c3:a4:0e:ba:7a:93:ab:d9:
a5:8f:cd:86:c7:2f:01:e6:b2:9b:38:8a:ce:50:b5:7e:dd:fc:
38:9d:3e:a8:4c:17:45:44:b5:37:45:be:ca:2f:45:46:ee:ef:
a9:d3:1c:88:6f:03:87:a3:c0:52:a5:a6:7d:ce:99:df:1f:c4:
79:d0:e5:16:2f:26:58:c2:a0:53:d0:30:6d:a2:ea:6d:0d:44:
c3:73:4c:a4:cb:cc:d2:cf:d0:6c:8f:4e:aa:32:5d:b7:d7:95:
c0:8f:37:32:a6:8a:e6:5b:e8:c3:5d:b7:ef:54:76:01:bc:b0:
32:f0:dd:1e:2c:1b:ae:f9:f7:ca:dc:35:7d:17:4d:52:9b:53:
92:0b:45:8c:b1:ab:3c:8c:24:94:17:11:8c:dc:33:c7:e0:0b:
0a:f3:42:73:4e:a5:8b:1e:87:bc:26:bf:ad:85:fd:51:3f:26:
02:64:eb:e0:2c:48:ef:c0:60:3f:a7:43:d4:ff:02:de:5b:fa:
13:ef:35:12:d6:e2:11:f4:d4:71:0e:6c:d4:55:8a:cc:b8:fa:
53:ca:f9:72:d3:fe:40:e3:4d:27:a8:ac:01:a2:0d:f0:39:0c:
ae:1a:81:a5:5d:cb:d5:c6:12:38:7e:9b:6c:8f:20:a0:c5:40:
be:d3:22:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:43:54 2025 by rpki-client