Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/bf3eca-171f-401c-9b5d-ccc4f1e00990/1/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.mft
File: LHJ9Cfuxmn-YXXUaIDEcG61LBx8.mft (raw, json)
Hash identifier: WBC1ZzUVHaUCDf1cmY9gFb761+lin4nOX4TDgqTyIgI=
Subject key identifier: 68:8B:DA:40:96:81:D3:27:96:12:B0:5A:FE:B1:AB:06:A7:7C:5C:19
Authority key identifier: 2C:72:7D:09:FB:B1:9A:7F:98:5D:75:1A:20:31:1C:1B:AD:4B:07:1F
Certificate issuer: /CN=2c727d09fbb19a7f985d751a20311c1bad4b071f
Certificate serial: 019748FAA121F54F1EFA5D388092703F4087
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/bf3eca-171f-401c-9b5d-ccc4f1e00990/1/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 06:01:14 +0000
Manifest this update: Sat 07 Jun 2025 06:01:14 +0000
Manifest next update: Sun 08 Jun 2025 06:01:14 +0000
Files and hashes: 1: 9phsu2p4WF8NqnfUkSWWdnt6zzA.roa (hash: f41MILFdl6rcNDj7+ORCxwVOJlnjfxd2bAX97uHKrtw=)
2: LHJ9Cfuxmn-YXXUaIDEcG61LBx8.crl (hash: BPBdywNRgj67a1e4DzM+3LBcLGflu32x/zjeCpjgXwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/bf3eca-171f-401c-9b5d-ccc4f1e00990/1/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/bf3eca-171f-401c-9b5d-ccc4f1e00990/1/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:a1:21:f5:4f:1e:fa:5d:38:80:92:70:3f:40:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c727d09fbb19a7f985d751a20311c1bad4b071f
Validity
Not Before: Jun 7 06:01:14 2025 GMT
Not After : Jun 8 06:01:14 2025 GMT
Subject: CN=688bda409681d3279612b05afeb1ab06a77c5c19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:51:51:06:60:fb:f2:cc:df:6a:b8:1e:63:c5:
16:c1:c9:ce:53:85:87:23:e7:5b:7c:a1:d8:36:6f:
3f:d3:e1:85:d1:c3:cd:e7:48:76:1c:bd:b3:14:57:
b7:36:95:99:7d:ea:d9:e2:ea:e8:4e:a6:76:d2:ac:
23:42:4b:a4:ce:68:51:bc:ac:b5:8e:dc:12:4a:87:
07:9b:5d:e5:97:eb:22:35:64:26:bc:16:b2:fc:4c:
21:b8:5d:75:20:2e:91:56:e9:45:b3:d6:8b:a9:6f:
e2:ab:27:36:b4:81:06:e0:e8:46:93:1d:64:9e:69:
f1:47:b9:92:85:8b:e5:28:7a:3c:1d:d6:7e:67:ce:
82:57:04:af:89:a9:d8:a1:e1:39:e4:09:11:7c:42:
26:27:34:ae:d7:85:0c:a3:0a:20:0e:92:af:03:93:
36:a0:d7:3f:d6:a6:04:34:e5:c9:00:c4:0b:51:62:
4d:f7:b5:f2:ac:ea:28:00:c4:ab:bc:ea:a3:4f:6e:
4d:d7:c9:1f:15:ab:bc:01:16:07:0c:8a:2e:00:dd:
fd:b5:e7:9a:f5:b0:ce:dc:b2:c6:a4:a4:36:14:22:
12:62:31:48:c0:ed:61:b6:87:0f:89:89:1d:61:2c:
c5:57:90:61:22:ea:7d:d5:c3:e6:59:e5:ed:da:20:
ba:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:8B:DA:40:96:81:D3:27:96:12:B0:5A:FE:B1:AB:06:A7:7C:5C:19
X509v3 Authority Key Identifier:
keyid:2C:72:7D:09:FB:B1:9A:7F:98:5D:75:1A:20:31:1C:1B:AD:4B:07:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/bf3eca-171f-401c-9b5d-ccc4f1e00990/1/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/bf3eca-171f-401c-9b5d-ccc4f1e00990/1/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:2c:db:4f:ff:c5:47:29:40:d9:16:40:3f:fc:1e:d8:f1:db:
36:8e:35:d0:e5:56:e3:51:b6:d4:ac:82:31:27:d0:fd:0e:0e:
5f:95:52:12:f2:d1:09:9c:4a:3e:cd:94:d7:04:7f:a7:45:5c:
66:69:45:74:6e:be:c8:40:53:19:10:ba:ed:51:e3:13:2c:0e:
00:46:8f:e0:16:df:21:ea:2c:a2:cf:94:af:a4:59:97:bf:39:
23:33:86:98:6c:ed:61:25:92:a7:86:6f:e4:39:8f:c4:51:2a:
2a:77:13:2f:b4:e2:9d:8b:66:17:99:a5:28:be:fe:c6:0a:b6:
d1:b5:5c:05:d4:84:ae:16:8f:5a:f0:43:eb:c9:d5:81:16:17:
7d:af:f2:b4:46:11:6a:a8:c0:7e:40:ca:1e:08:81:8b:22:e6:
55:1c:ad:ca:57:ae:eb:52:19:af:fd:0b:8b:12:c5:62:8f:29:
fc:4f:68:66:ee:8c:10:bc:19:26:e2:fe:38:a2:42:fb:03:da:
65:67:e3:3e:7f:f6:aa:0d:e4:59:15:c8:1f:5a:8d:df:b9:cf:
31:11:81:ec:23:6a:97:ea:ab:1c:90:c1:da:e3:22:0b:24:73:
58:8c:31:cc:7a:22:f7:a7:3e:5d:77:c1:3d:67:1e:f8:a6:f8:
b2:0a:1d:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:51:14 2025 by rpki-client