Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/cddf94-8d51-41cd-8a5b-a0b4930cbd1e/1/lhebOdHB0o9QY8qSHWAH42Phxgs.mft
File: lhebOdHB0o9QY8qSHWAH42Phxgs.mft (raw, json)
Hash identifier: 42U0piEgcRnt6YN01LkCpf0ZZEnH64/Fojt9KFvgAtA=
Subject key identifier: 9C:3A:62:25:D9:01:0F:E9:3D:5B:BD:1D:00:D9:22:2A:85:28:81:A0
Authority key identifier: 96:17:9B:39:D1:C1:D2:8F:50:63:CA:92:1D:60:07:E3:63:E1:C6:0B
Certificate issuer: /CN=96179b39d1c1d28f5063ca921d6007e363e1c60b
Certificate serial: 019921B292256385AFD07EDAC7C80BB1986B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lhebOdHB0o9QY8qSHWAH42Phxgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/cddf94-8d51-41cd-8a5b-a0b4930cbd1e/1/lhebOdHB0o9QY8qSHWAH42Phxgs.mft
Manifest number: 1671
Signing time: Sun 07 Sep 2025 01:02:54 +0000
Manifest this update: Sun 07 Sep 2025 01:02:54 +0000
Manifest next update: Mon 08 Sep 2025 01:02:54 +0000
Files and hashes: 1: lhebOdHB0o9QY8qSHWAH42Phxgs.crl (hash: Lal2XFUkJEXPmc1j8gH7OsTNu10wNAGz1icfoTaEFgE=)
2: zIbC2a3NLstRoJ1KbSzBvFb6vZ0.roa (hash: YltSOQHV02hFJedVO9/8WLk8TMz1RedE7tGsvMysOE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/cddf94-8d51-41cd-8a5b-a0b4930cbd1e/1/lhebOdHB0o9QY8qSHWAH42Phxgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/cddf94-8d51-41cd-8a5b-a0b4930cbd1e/1/lhebOdHB0o9QY8qSHWAH42Phxgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/lhebOdHB0o9QY8qSHWAH42Phxgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b2:92:25:63:85:af:d0:7e:da:c7:c8:0b:b1:98:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96179b39d1c1d28f5063ca921d6007e363e1c60b
Validity
Not Before: Sep 7 01:02:54 2025 GMT
Not After : Sep 8 01:02:54 2025 GMT
Subject: CN=9c3a6225d9010fe93d5bbd1d00d9222a852881a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:79:76:a5:86:28:2e:e0:b4:a8:79:20:b6:b3:
94:45:2b:fe:7e:35:77:a9:97:a6:67:78:7a:43:5b:
7e:95:ec:94:57:d3:c7:ee:e2:1e:e5:54:8b:11:b6:
5c:40:d7:28:62:65:ef:85:20:4b:8b:97:1c:36:f3:
61:d1:bf:45:c2:e8:21:3d:ef:62:f6:78:b9:50:61:
18:7b:00:cf:f8:cb:3a:89:30:f8:de:2b:c9:df:7b:
57:f1:b7:7d:88:59:65:d4:94:27:0f:0e:22:37:d1:
ee:43:01:da:48:7c:2e:24:60:7b:62:ee:68:42:d4:
25:6d:75:16:9e:12:9e:4c:9e:bb:21:b2:a1:1e:b0:
78:8c:48:48:75:0b:5f:c1:50:72:36:82:29:27:7e:
0f:dc:01:a8:a1:66:7d:32:d9:ed:05:61:e9:33:25:
16:d5:c6:cc:74:46:96:38:62:4e:45:86:e0:07:7d:
fc:cc:5c:bc:7a:a2:e5:b6:47:93:2e:8d:41:33:c7:
9c:24:8b:30:8c:16:c9:c8:66:60:31:80:6e:e2:ce:
b5:96:11:03:a0:13:82:8c:23:29:67:11:2d:11:e8:
40:c2:fe:cf:16:fe:02:80:b1:bc:46:66:41:e7:25:
1e:99:63:a1:db:e9:64:24:78:d0:fa:ad:27:3f:ab:
9c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:3A:62:25:D9:01:0F:E9:3D:5B:BD:1D:00:D9:22:2A:85:28:81:A0
X509v3 Authority Key Identifier:
keyid:96:17:9B:39:D1:C1:D2:8F:50:63:CA:92:1D:60:07:E3:63:E1:C6:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhebOdHB0o9QY8qSHWAH42Phxgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/cddf94-8d51-41cd-8a5b-a0b4930cbd1e/1/lhebOdHB0o9QY8qSHWAH42Phxgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/cddf94-8d51-41cd-8a5b-a0b4930cbd1e/1/lhebOdHB0o9QY8qSHWAH42Phxgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:79:50:cc:40:33:30:a8:12:82:f7:f0:69:50:5c:59:08:da:
68:8a:7e:a6:fd:d5:3a:6d:5d:e5:ca:bf:58:2f:b4:89:87:3f:
44:d2:d5:17:8a:2b:d6:30:f5:49:b5:f0:0d:47:88:95:3f:5c:
99:9c:bb:e7:c6:2c:8f:e7:11:d7:ac:27:39:21:f1:cd:f7:99:
13:c2:d7:09:fa:b7:2a:a0:26:30:b0:73:99:4d:97:d1:a5:9b:
69:fe:21:3b:c6:cf:eb:26:ff:4d:48:97:dc:1d:09:b0:41:1e:
ab:bd:ec:7c:b2:b1:1a:09:8c:b8:b3:90:6a:01:08:76:ed:f3:
a4:0a:47:39:ea:f7:f6:77:ba:ac:2c:e5:30:cb:f4:fa:e4:6a:
6c:f5:4d:fd:39:63:c3:0e:d8:27:5f:25:05:e9:22:7f:d3:1b:
ba:fb:ae:77:89:d0:29:cf:8d:95:68:ad:c8:f1:0e:2a:63:31:
e3:92:ae:b9:3c:48:b0:88:91:ac:a9:43:96:10:19:f9:b9:3b:
92:8a:ae:ae:e4:9b:4e:a8:45:c4:90:23:4f:42:cb:9e:30:c9:
89:12:80:66:56:fe:88:69:13:48:4c:54:7f:9a:c4:d2:62:ed:
c7:0b:a2:06:86:bc:7c:fc:2e:aa:c9:c7:ef:8e:7a:67:f9:31:
57:49:10:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:22:15 2025 by rpki-client