Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/cddf94-8d51-41cd-8a5b-a0b4930cbd1e/1/lhebOdHB0o9QY8qSHWAH42Phxgs.mft
File: lhebOdHB0o9QY8qSHWAH42Phxgs.mft (raw, json)
Hash identifier: QeKiLU0G2aKaJiBzanpsFHdC1Pzm64okdSCU9HYA5bY=
Subject key identifier: 01:AA:AD:A5:8F:B8:82:45:22:24:2B:AB:5B:40:9F:81:89:F7:E7:7B
Authority key identifier: 96:17:9B:39:D1:C1:D2:8F:50:63:CA:92:1D:60:07:E3:63:E1:C6:0B
Certificate issuer: /CN=96179b39d1c1d28f5063ca921d6007e363e1c60b
Certificate serial: 01974C69A488580D4B8E20A9AC3EA9BB8FE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lhebOdHB0o9QY8qSHWAH42Phxgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/cddf94-8d51-41cd-8a5b-a0b4930cbd1e/1/lhebOdHB0o9QY8qSHWAH42Phxgs.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 22:01:20 +0000
Manifest this update: Sat 07 Jun 2025 22:01:20 +0000
Manifest next update: Sun 08 Jun 2025 22:01:20 +0000
Files and hashes: 1: lhebOdHB0o9QY8qSHWAH42Phxgs.crl (hash: I00hBAwbGaFOakeThPHywi3QWXMqeQ1O7R/RHSS8ETY=)
2: zIbC2a3NLstRoJ1KbSzBvFb6vZ0.roa (hash: YltSOQHV02hFJedVO9/8WLk8TMz1RedE7tGsvMysOE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/cddf94-8d51-41cd-8a5b-a0b4930cbd1e/1/lhebOdHB0o9QY8qSHWAH42Phxgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/cddf94-8d51-41cd-8a5b-a0b4930cbd1e/1/lhebOdHB0o9QY8qSHWAH42Phxgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/lhebOdHB0o9QY8qSHWAH42Phxgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:69:a4:88:58:0d:4b:8e:20:a9:ac:3e:a9:bb:8f:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96179b39d1c1d28f5063ca921d6007e363e1c60b
Validity
Not Before: Jun 7 22:01:20 2025 GMT
Not After : Jun 8 22:01:20 2025 GMT
Subject: CN=01aaada58fb8824522242bab5b409f8189f7e77b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:4b:12:95:68:18:0f:b8:cf:c9:89:ed:74:e6:
4b:fd:c9:2f:b9:39:c6:bf:af:5d:48:ed:98:c5:66:
ee:e3:9c:e6:9f:ad:e0:0a:b3:52:7b:2c:ab:4c:81:
85:a4:e9:69:73:9d:ba:9b:42:36:f9:31:99:f3:da:
2f:a7:17:9a:4a:a1:58:b5:00:e6:3f:8f:38:4d:e7:
9e:95:1a:1b:f0:51:cc:09:0f:aa:3e:2f:91:21:83:
9d:70:d2:be:97:e2:c3:86:01:cb:a2:e4:65:93:29:
8e:10:37:b7:5d:59:93:71:b4:9e:1e:f2:2e:56:4b:
ab:0a:b4:d6:37:46:53:08:89:4f:08:16:56:4a:ff:
c8:c9:32:33:ae:92:0f:d2:97:07:8e:2d:52:a6:38:
01:e8:88:44:03:8a:85:ec:1c:75:9d:6f:68:af:0b:
47:86:cf:51:55:b3:69:07:92:e8:ca:e4:c2:54:11:
0c:77:ab:14:21:6b:2e:e0:1b:8f:57:ca:fc:ea:ae:
ec:cb:6e:a5:59:46:4e:92:99:ec:a4:7d:ba:c0:b6:
81:6e:03:b2:d9:9e:5d:fd:5b:1b:33:4c:ac:2b:9d:
b6:dd:cb:b2:6f:d9:db:67:35:51:29:bc:c9:d0:86:
77:cb:86:96:34:da:4c:b3:02:ff:b7:3c:86:81:e0:
9a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:AA:AD:A5:8F:B8:82:45:22:24:2B:AB:5B:40:9F:81:89:F7:E7:7B
X509v3 Authority Key Identifier:
keyid:96:17:9B:39:D1:C1:D2:8F:50:63:CA:92:1D:60:07:E3:63:E1:C6:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhebOdHB0o9QY8qSHWAH42Phxgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/cddf94-8d51-41cd-8a5b-a0b4930cbd1e/1/lhebOdHB0o9QY8qSHWAH42Phxgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/cddf94-8d51-41cd-8a5b-a0b4930cbd1e/1/lhebOdHB0o9QY8qSHWAH42Phxgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:a5:67:70:70:f6:47:23:3e:bc:a3:d4:af:a1:68:eb:db:ba:
7d:f8:99:04:9b:3c:b1:d4:1b:b3:61:c9:0d:68:21:bd:5c:1b:
39:23:1a:b5:25:17:ce:d4:b0:83:2d:ec:a3:a7:34:05:c9:fb:
a0:0d:36:06:e3:b8:a2:27:54:2f:ed:4a:a6:03:60:8f:be:bd:
8d:46:f0:2a:95:9e:62:a3:cb:39:78:6c:fb:e8:0b:c6:cf:36:
68:1c:79:a6:01:6d:e0:b0:7b:6e:01:d1:43:ee:fc:e6:f9:03:
ef:82:d3:5b:5a:cf:87:74:d2:c5:c7:f8:42:2e:56:d0:b8:e4:
de:80:f5:ac:ad:af:e9:b7:11:67:6e:d3:64:b7:fc:0b:db:42:
0c:f3:9a:42:22:f4:5c:f5:dd:08:b3:06:e2:2c:f8:8a:db:c7:
05:1f:cc:92:66:b7:76:20:b3:e4:29:7b:ec:b0:f7:41:06:5c:
b8:e6:e0:ac:1a:db:5e:52:b6:43:1a:21:a3:1d:a2:d3:7b:3f:
76:45:2e:73:a0:af:10:5d:0f:34:29:1c:74:a1:c1:38:97:65:
39:11:2d:5e:32:e3:ce:49:34:0a:1a:03:73:f4:0b:31:1c:69:
e8:15:f8:4c:62:65:ab:3b:2f:48:f5:35:03:59:8a:ed:39:c3:
b2:bf:9d:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdMaaSIWA1LjiCprD6pu4/oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2MTc5YjM5ZDFjMWQyOGY1MDYzY2E5MjFkNjAwN2UzNjNl
MWM2MGIwHhcNMjUwNjA3MjIwMTIwWhcNMjUwNjA4MjIwMTIwWjAzMTEwLwYDVQQD
EygwMWFhYWRhNThmYjg4MjQ1MjIyNDJiYWI1YjQwOWY4MTg5ZjdlNzdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzksSlWgYD7jPyYntdOZL/ckvuTnG
v69dSO2YxWbu45zmn63gCrNSeyyrTIGFpOlpc526m0I2+TGZ89ovpxeaSqFYtQDm
P484TeeelRob8FHMCQ+qPi+RIYOdcNK+l+LDhgHLouRlkymOEDe3XVmTcbSeHvIu
VkurCrTWN0ZTCIlPCBZWSv/IyTIzrpIP0pcHji1SpjgB6IhEA4qF7Bx1nW9orwtH
hs9RVbNpB5LoyuTCVBEMd6sUIWsu4BuPV8r86q7sy26lWUZOkpnspH26wLaBbgOy
2Z5d/VsbM0ysK5223cuyb9nbZzVRKbzJ0IZ3y4aWNNpMswL/tzyGgeCa/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAGqraWPuIJFIiQrq1tAn4GJ9+d7MB8GA1UdIwQY
MBaAFJYXmznRwdKPUGPKkh1gB+Nj4cYLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGhlYk9kSEIwbzlRWThxU0hXQUg0MlBoeGdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9jZGRmOTQtOGQ1MS00MWNkLThhNWIt
YTBiNDkzMGNiZDFlLzEvbGhlYk9kSEIwbzlRWThxU0hXQUg0MlBoeGdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC9jZGRmOTQtOGQ1MS00MWNkLThhNWItYTBiNDkzMGNiZDFl
LzEvbGhlYk9kSEIwbzlRWThxU0hXQUg0MlBoeGdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbaVncHD2
RyM+vKPUr6Fo69u6ffiZBJs8sdQbs2HJDWghvVwbOSMatSUXztSwgy3so6c0Bcn7
oA02BuO4oidUL+1KpgNgj769jUbwKpWeYqPLOXhs++gLxs82aBx5pgFt4LB7bgHR
Q+785vkD74LTW1rPh3TSxcf4Qi5W0Ljk3oD1rK2v6bcRZ27TZLf8C9tCDPOaQiL0
XPXdCLMG4iz4itvHBR/Mkma3diCz5Cl77LD3QQZcuObgrBrbXlK2Qxohox2i03s/
dkUuc6CvEF0PNCkcdKHBOJdlOREtXjLjzkk0ChoDc/QLMRxp6BX4TGJlqzsvSPU1
A1mK7TnDsr+dwA==
-----END CERTIFICATE-----
Generated at Sun Jun 8 04:06:54 2025 by rpki-client