Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.mft
File: Lh0kV-C-VNx4_B9mh9s-lLBorJs.mft (raw, json)
Hash identifier: a30SPGfaOfU/ZXCf3lihPxEczhY4F9w1q1ukUhka7GY=
Subject key identifier: 30:0E:1E:E0:9E:B1:35:26:6B:6D:50:30:71:80:88:D0:70:A7:8E:63
Authority key identifier: 2E:1D:24:57:E0:BE:54:DC:78:FC:1F:66:87:DB:3E:94:B0:68:AC:9B
Certificate issuer: /CN=2e1d2457e0be54dc78fc1f6687db3e94b068ac9b
Certificate serial: 019842F5C63DDF89C40BC74028F90E3852E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lh0kV-C-VNx4_B9mh9s-lLBorJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.mft
Manifest number: 1009
Signing time: Fri 25 Jul 2025 19:00:59 +0000
Manifest this update: Fri 25 Jul 2025 19:00:59 +0000
Manifest next update: Sat 26 Jul 2025 19:00:59 +0000
Files and hashes: 1: B3anwTfv9G1rVUQa6NJWLwdwXYI.roa (hash: mmLvT4hHYo/WnQMssEwo9M27udmQqtzbwXP4LSX1FYM=)
2: Lh0kV-C-VNx4_B9mh9s-lLBorJs.crl (hash: 7KjjzEyTQu9auRzqWgLD3adQsZ8Vi545imcqyicx8oU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lh0kV-C-VNx4_B9mh9s-lLBorJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 17:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:42:f5:c6:3d:df:89:c4:0b:c7:40:28:f9:0e:38:52:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e1d2457e0be54dc78fc1f6687db3e94b068ac9b
Validity
Not Before: Jul 25 19:00:59 2025 GMT
Not After : Jul 26 19:00:59 2025 GMT
Subject: CN=300e1ee09eb135266b6d5030718088d070a78e63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:95:ba:89:b4:27:59:fe:47:a0:ab:cc:5f:78:
ed:77:fa:cb:ca:38:f2:0c:1e:6b:16:c8:72:0b:ca:
1d:2c:bc:ad:5f:ec:1c:f5:4b:6f:66:18:17:50:6e:
72:82:2e:ae:6f:54:56:9b:57:98:99:1e:62:0c:d8:
f2:90:fe:de:7d:a0:2e:ba:d5:73:de:71:48:88:d3:
98:66:e6:3a:8a:5e:30:62:57:40:aa:90:a8:4e:60:
d8:1b:cb:f4:c3:d3:80:62:2b:ba:86:ba:60:c1:31:
49:74:f7:f3:20:23:26:44:f3:26:1c:f3:6e:4e:e3:
4d:88:19:66:48:94:c2:69:86:c4:05:b3:da:2a:bb:
5f:40:02:7d:87:4a:a5:ff:a9:05:8c:b7:1d:b8:62:
0f:41:69:2d:77:e3:69:3d:24:90:ad:ee:9c:25:aa:
7a:18:b3:e5:c5:b3:0c:90:74:df:16:c1:07:4e:58:
4f:c3:92:f1:c5:39:80:63:0f:c5:39:eb:83:1d:f5:
1a:d2:47:af:b3:4b:62:eb:f1:4d:a7:ea:34:6d:17:
bf:1c:48:c7:74:45:7d:67:eb:36:5a:a3:24:f2:6e:
d8:df:43:0c:53:82:b4:d3:dd:c7:83:b5:80:d9:a4:
2b:de:26:cd:bb:29:01:4e:e7:46:2c:1f:c0:e4:9b:
f2:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:0E:1E:E0:9E:B1:35:26:6B:6D:50:30:71:80:88:D0:70:A7:8E:63
X509v3 Authority Key Identifier:
keyid:2E:1D:24:57:E0:BE:54:DC:78:FC:1F:66:87:DB:3E:94:B0:68:AC:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lh0kV-C-VNx4_B9mh9s-lLBorJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:59:c8:db:a4:52:2c:d8:2f:a3:8b:e2:2c:0e:06:ee:86:4c:
94:e0:4f:09:2b:9f:c9:0c:34:02:a2:c2:cb:0c:fa:40:75:12:
9b:44:43:69:71:ff:c1:c8:6b:fa:4e:ed:50:43:14:db:a2:9f:
ad:d2:2e:03:fe:f6:a1:a4:62:ab:5e:f1:e7:b9:aa:25:1f:73:
a9:36:6f:bf:b4:03:aa:87:16:6b:38:31:d9:c3:3e:d5:c9:8d:
33:f9:73:03:10:66:8b:d6:c2:d5:2c:90:9a:a1:71:5b:70:55:
db:cc:60:d9:d2:e2:be:79:90:a5:ae:76:7a:0e:9f:7d:e1:15:
0f:8d:c0:3f:64:fe:b4:e9:6e:70:7c:cc:80:4d:a9:ad:27:d7:
27:6d:c8:f0:d2:56:a2:dd:e0:9c:4b:30:b6:56:1f:87:5c:81:
69:02:98:10:3e:7d:0a:b6:c1:56:aa:93:92:b6:4b:49:d1:d3:
82:76:7d:8a:ea:ec:69:d5:9e:8b:71:d7:60:e8:80:ae:05:60:
53:0a:3d:0a:10:d6:1b:2c:63:e5:28:47:15:6e:b6:f9:91:9d:
ef:41:be:d3:96:e3:41:d5:1f:4c:0e:49:89:86:9b:8a:3c:29:
9a:99:83:75:c2:06:03:2e:0b:94:a2:f1:1f:cf:36:ab:e0:75:
b2:be:f2:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 01:06:48 2025 by rpki-client