Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft
File: LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft (raw, json)
Hash identifier: xP2rS+tjkd4V2xb0Amkv+A2xLKFtu+fR4rZQ5VIiiPc=
Subject key identifier: C0:C2:E1:89:78:A6:A5:C1:88:7C:B8:C2:22:E1:61:ED:FB:14:96:51
Authority key identifier: 2E:16:20:89:0F:70:0F:01:2B:0B:A6:01:72:31:4E:3C:85:91:95:13
Certificate issuer: /CN=2e1620890f700f012b0ba60172314e3c85919513
Certificate serial: 01974F6A16D2F8AA1BC69B3E4023EBD0A80D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhYgiQ9wDwErC6YBcjFOPIWRlRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft
Manifest number: 157E
Signing time: Sun 08 Jun 2025 12:00:42 +0000
Manifest this update: Sun 08 Jun 2025 12:00:42 +0000
Manifest next update: Mon 09 Jun 2025 12:00:42 +0000
Files and hashes: 1: LhYgiQ9wDwErC6YBcjFOPIWRlRM.crl (hash: Jnbj+wOuxpfcjul8ZdlvG5pLmvAnsChCltN62yDzNTo=)
2: UEzUyopP5UVcAuE2wQnf6zxgiYA.roa (hash: WO7cSkDAVVG4RqEt/anGaCZXbbFB9XEJIQ0eE+HtSwo=)
3: g1Qj1KnuMxZpXuMaGLTMbgWLRyE.roa (hash: f3NI3BOfnPP1R6nzFdJwSdGpqAlLYVxZtd9uD+YokWY=)
4: x9mgn-wCUD8rT1tTi9C7mbyMAtI.roa (hash: sgZbLcOXGM2ArVU0X49/Qh6v7QEpIvbA1cc08MVfbkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/LhYgiQ9wDwErC6YBcjFOPIWRlRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:44:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:6a:16:d2:f8:aa:1b:c6:9b:3e:40:23:eb:d0:a8:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e1620890f700f012b0ba60172314e3c85919513
Validity
Not Before: Jun 8 12:00:42 2025 GMT
Not After : Jun 9 12:00:42 2025 GMT
Subject: CN=c0c2e18978a6a5c1887cb8c222e161edfb149651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:6d:29:b9:c3:c7:76:c8:8c:aa:50:81:c9:a7:
a1:4b:8e:d9:c6:18:01:17:be:7f:7d:1b:5b:68:ae:
a7:df:30:ec:4e:73:6c:87:b9:8d:57:8b:7e:ab:33:
7e:a1:b8:71:c8:67:99:da:95:54:09:34:ae:59:2a:
3e:a8:59:a2:b9:23:62:91:d0:09:a5:09:27:0a:91:
33:59:fe:4d:79:2f:fd:4b:0a:0d:90:11:c7:52:f6:
17:0c:60:d7:ef:d2:86:41:b0:40:3a:18:38:46:e3:
1c:7d:5f:93:81:56:7a:9b:23:7e:fa:93:b3:fe:aa:
d6:a9:57:ed:a7:ce:eb:13:96:18:77:57:91:dc:ec:
d4:5c:c4:39:f4:43:af:83:4c:f0:8b:21:52:0e:65:
0b:4e:fe:6d:a6:b5:7b:e8:e5:38:99:b1:1c:29:4d:
d2:a5:9f:6c:c5:71:07:6d:47:eb:0e:3e:c1:b1:e6:
4b:ac:7f:0a:6a:c6:1f:b8:d9:2c:30:77:af:a1:0e:
14:1b:a7:7c:a1:b5:37:75:80:d2:6c:b7:de:1f:c0:
ff:d3:10:70:a5:6c:9f:a4:4c:61:c5:6e:e7:4c:22:
6c:b6:a2:81:a5:5c:54:d2:66:8b:0f:9c:b2:e8:eb:
cb:02:4d:01:05:41:8c:c1:af:88:d5:35:c5:73:e7:
c4:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:C2:E1:89:78:A6:A5:C1:88:7C:B8:C2:22:E1:61:ED:FB:14:96:51
X509v3 Authority Key Identifier:
keyid:2E:16:20:89:0F:70:0F:01:2B:0B:A6:01:72:31:4E:3C:85:91:95:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhYgiQ9wDwErC6YBcjFOPIWRlRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:94:f1:2d:a6:2d:83:3d:0b:61:9a:73:0d:03:53:97:99:f2:
6a:72:4f:c5:f3:44:3e:73:2c:5e:25:f4:7b:d0:41:1d:bd:76:
bf:0a:14:f1:08:b5:91:43:09:03:5c:35:86:0d:42:8c:45:14:
9e:59:e1:18:4b:39:13:e6:83:c6:86:b5:9b:cb:93:ad:a9:7b:
c6:f3:ae:bd:ad:f4:96:e2:bc:be:c6:96:c7:b4:ad:d0:bd:5b:
cf:a8:7e:b9:77:f0:47:e5:21:d9:6b:41:c9:3f:7d:51:a5:30:
e4:c0:54:22:78:a7:34:7b:5d:94:a5:90:22:39:fd:64:ea:49:
f8:6f:64:75:86:21:0a:af:5b:95:c8:08:70:a1:f8:76:c2:dd:
a7:a7:52:38:de:c9:7c:77:aa:4d:63:28:59:d7:a0:8b:52:92:
be:45:2c:ce:93:2b:ed:e8:e1:0f:20:77:18:96:84:f9:1f:2d:
40:d2:56:08:04:ac:5b:43:b1:99:43:1c:e0:9a:60:f8:07:ef:
60:0b:0a:7f:66:bd:52:65:98:0b:67:f4:29:e3:ee:45:a9:18:
71:79:8f:17:3d:11:78:3c:0d:d0:67:9e:a9:f0:07:c1:0a:ae:
b0:3e:0d:95:5d:d6:84:7d:d6:39:ac:a4:c6:f8:36:c4:7a:fe:
5e:74:e9:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:38:08 2025 by rpki-client