Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/40a1e5-7d2a-48d6-a50e-f96fb4ea7e70/1/LHXzXSVsxKW4gxm7fku7oynkk0E.mft
File: LHXzXSVsxKW4gxm7fku7oynkk0E.mft (raw, json)
Hash identifier: bzpIuPUeQRkjv3OgjKcK9K8StnBqdtxP7qyh0xXkdfc=
Subject key identifier: 0F:5F:2F:68:C7:51:65:E0:B4:D7:C7:9F:B4:AF:47:B6:27:CE:0F:78
Authority key identifier: 2C:75:F3:5D:25:6C:C4:A5:B8:83:19:BB:7E:4B:BB:A3:29:E4:93:41
Certificate issuer: /CN=2c75f35d256cc4a5b88319bb7e4bbba329e49341
Certificate serial: 01974D0D9997F1CD91A7020B0E7754D32C04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHXzXSVsxKW4gxm7fku7oynkk0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/40a1e5-7d2a-48d6-a50e-f96fb4ea7e70/1/LHXzXSVsxKW4gxm7fku7oynkk0E.mft
Manifest number: 0D95
Signing time: Sun 08 Jun 2025 01:00:26 +0000
Manifest this update: Sun 08 Jun 2025 01:00:26 +0000
Manifest next update: Mon 09 Jun 2025 01:00:26 +0000
Files and hashes: 1: LHXzXSVsxKW4gxm7fku7oynkk0E.crl (hash: +nI+b27FVrYp88XxZJNjvgaLDHgPwChKoytzKE+IsA4=)
2: YkA8Ssik5dMp6e7KGDWmp6DJ7AM.roa (hash: kaPK3T3qFTRqHUlFynSutBS2oYj5+768wNKSaLHwTTo=)
3: l2XBgGbcIMQ-iwqh11S1_yjLWig.roa (hash: nZxnXhBR3pemT3iBrE0kPVvVmqlAyhaBxoPDBmxVBEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/40a1e5-7d2a-48d6-a50e-f96fb4ea7e70/1/LHXzXSVsxKW4gxm7fku7oynkk0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/40a1e5-7d2a-48d6-a50e-f96fb4ea7e70/1/LHXzXSVsxKW4gxm7fku7oynkk0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/LHXzXSVsxKW4gxm7fku7oynkk0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:0d:99:97:f1:cd:91:a7:02:0b:0e:77:54:d3:2c:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c75f35d256cc4a5b88319bb7e4bbba329e49341
Validity
Not Before: Jun 8 01:00:26 2025 GMT
Not After : Jun 9 01:00:26 2025 GMT
Subject: CN=0f5f2f68c75165e0b4d7c79fb4af47b627ce0f78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4c:96:1b:aa:dd:9b:a4:3c:4a:a8:f4:d1:38:
3f:d2:0e:a6:d4:ca:e6:8d:ed:e6:40:0e:69:ab:53:
58:bd:ba:e3:67:01:f2:b7:1d:6c:17:e6:f0:ea:b2:
55:fa:60:30:78:63:1f:f2:17:5c:93:de:d6:c7:7c:
cb:06:89:40:61:29:a9:13:54:38:cf:7f:7b:ca:17:
b3:e8:52:c7:87:bd:6a:16:8d:b0:56:76:4c:f5:33:
92:ca:7c:d3:18:56:1f:24:4d:ce:4f:c3:e6:44:b9:
19:61:b7:bc:b6:bf:ad:e1:02:17:64:59:cd:65:e5:
b8:69:7c:68:26:8d:3b:ae:93:a8:7a:34:75:87:e1:
fa:b8:df:de:e4:87:20:fe:d4:8c:4c:bd:21:4b:ad:
eb:62:88:67:ac:a8:de:f0:03:59:c7:60:68:6f:31:
bc:bb:b3:8f:1d:fc:08:e5:16:6c:31:06:7d:40:18:
c0:1b:df:c3:73:d3:97:1f:35:5a:93:30:09:4b:bb:
48:57:52:9b:25:3c:64:36:ae:ae:b8:db:38:0e:c0:
ff:25:0d:46:f3:20:be:19:ee:17:78:7b:3f:39:d8:
cb:a4:59:08:aa:71:4f:c4:63:25:ac:63:2e:89:68:
36:d7:54:78:58:3e:8f:bf:29:05:37:c5:24:70:8a:
19:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:5F:2F:68:C7:51:65:E0:B4:D7:C7:9F:B4:AF:47:B6:27:CE:0F:78
X509v3 Authority Key Identifier:
keyid:2C:75:F3:5D:25:6C:C4:A5:B8:83:19:BB:7E:4B:BB:A3:29:E4:93:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHXzXSVsxKW4gxm7fku7oynkk0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/40a1e5-7d2a-48d6-a50e-f96fb4ea7e70/1/LHXzXSVsxKW4gxm7fku7oynkk0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/40a1e5-7d2a-48d6-a50e-f96fb4ea7e70/1/LHXzXSVsxKW4gxm7fku7oynkk0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:81:f2:f7:0d:5a:02:11:a7:d3:f4:00:cc:ec:c7:a7:7a:dc:
eb:ae:f5:8e:c8:16:7f:66:83:a0:c7:cb:17:af:9c:73:56:4d:
d9:d8:cd:7f:a0:4d:92:c1:1c:a0:46:87:33:3e:c9:bb:89:33:
c8:fd:ce:5a:21:12:b1:8e:9a:1f:65:13:0e:dc:00:26:3c:68:
69:ee:e6:07:cb:75:2b:1b:80:46:7b:44:9b:fb:e3:29:b5:eb:
09:5c:80:55:ae:0a:b6:c4:8e:dd:36:27:d6:98:08:71:b1:5c:
b1:48:42:fa:40:68:f5:c6:02:80:f4:df:69:bb:8b:49:30:20:
5b:d1:65:52:17:11:cd:87:4c:02:74:c3:79:fe:78:16:1e:00:
bc:3c:ef:db:bd:a1:bd:fa:1c:0b:73:bb:c1:0c:35:d0:46:e7:
75:24:a5:4c:e3:2f:b9:b2:93:01:f9:d4:5b:9a:24:6f:9c:80:
57:71:ed:36:5d:c3:36:34:15:93:c2:1e:77:04:9b:cf:f9:8c:
b8:f1:76:34:d3:98:0b:c8:2a:ec:f7:7e:3e:6c:58:93:7c:b3:
1c:64:8f:bb:6a:de:75:61:77:24:a8:d7:85:e0:86:07:46:2a:
77:06:e8:de:3e:74:0f:d4:0a:46:f7:ef:10:f6:67:34:7e:54:
ab:50:03:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:23:44 2025 by rpki-client