Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.mft
File: lhJPJSRqVAn77hG1Ny3YviTG6es.mft (raw, json)
Hash identifier: OJSKg8uT3gr6zNqhb9cXTK+I+/MFYMAPve19I/B8Xcs=
Subject key identifier: 26:D5:E8:E9:98:1E:BB:9B:E6:05:C8:CB:34:69:7F:28:E6:7E:42:19
Authority key identifier: 96:12:4F:25:24:6A:54:09:FB:EE:11:B5:37:2D:D8:BE:24:C6:E9:EB
Certificate issuer: /CN=96124f25246a5409fbee11b5372dd8be24c6e9eb
Certificate serial: 01974CA002C5A60F85B99FEE8ABFBE064D96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lhJPJSRqVAn77hG1Ny3YviTG6es.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.mft
Manifest number: 089D
Signing time: Sat 07 Jun 2025 23:00:44 +0000
Manifest this update: Sat 07 Jun 2025 23:00:44 +0000
Manifest next update: Sun 08 Jun 2025 23:00:44 +0000
Files and hashes: 1: c3njCbUkCCL3mnp4u_KCanHzP7M.roa (hash: vVs8Ror537sKvCZah39iYsDHQqQgVb1rydMRu4BJ5YQ=)
2: lhJPJSRqVAn77hG1Ny3YviTG6es.crl (hash: ynGprUHEDN6jZPY7zHG27U3QL5YaLKA2mN7JV1EAbaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.mft
rsync://rpki.ripe.net/repository/DEFAULT/lhJPJSRqVAn77hG1Ny3YviTG6es.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:a0:02:c5:a6:0f:85:b9:9f:ee:8a:bf:be:06:4d:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96124f25246a5409fbee11b5372dd8be24c6e9eb
Validity
Not Before: Jun 7 23:00:44 2025 GMT
Not After : Jun 8 23:00:44 2025 GMT
Subject: CN=26d5e8e9981ebb9be605c8cb34697f28e67e4219
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:dd:17:c8:47:48:0f:7e:70:bf:87:d8:4a:81:
5c:a8:05:e8:3b:46:4e:63:80:a0:6b:5d:3a:37:10:
42:d3:f8:86:64:e2:e5:32:8c:0f:da:7b:d0:80:35:
29:90:f1:c7:c5:80:9a:7d:0a:f1:b9:08:b5:9c:73:
5b:36:d7:07:f8:c2:7c:0a:36:5a:26:f3:b7:fb:43:
d4:f9:e4:5d:ab:ea:95:db:57:06:5d:e7:90:38:f4:
78:16:67:da:31:9e:12:57:17:20:11:f5:5e:f3:dc:
13:56:04:45:6e:fe:05:81:36:33:ed:ed:75:16:ab:
13:78:dd:89:4d:9a:e7:6b:e8:26:8c:97:74:80:4b:
6f:24:50:a5:a2:9b:75:bf:e5:84:97:d5:3c:fa:29:
76:bb:c3:93:d8:83:df:ed:77:3c:c7:e1:bf:3a:0b:
dc:4a:d8:cd:eb:7c:3c:bf:db:74:10:ba:36:28:ef:
09:08:84:6c:be:b3:ae:93:6f:05:e1:6e:4c:87:f9:
b5:30:3d:75:3e:1e:53:ac:f2:50:ec:60:a8:e9:4e:
48:41:db:58:ab:7d:a3:91:a7:47:b0:14:6b:bc:05:
d5:6f:fc:e7:f8:e1:40:7a:ff:0b:ae:2a:1e:46:90:
04:b5:f8:a5:d6:8a:a8:a2:69:46:17:66:5c:86:80:
f3:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:D5:E8:E9:98:1E:BB:9B:E6:05:C8:CB:34:69:7F:28:E6:7E:42:19
X509v3 Authority Key Identifier:
keyid:96:12:4F:25:24:6A:54:09:FB:EE:11:B5:37:2D:D8:BE:24:C6:E9:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhJPJSRqVAn77hG1Ny3YviTG6es.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:5b:bf:43:cf:8f:53:86:3e:ea:0a:1b:7a:e4:4a:cf:7b:4b:
a2:b0:a8:4f:ab:b3:64:4d:0d:41:04:cb:24:dd:20:79:ee:44:
20:96:81:07:a4:cd:f9:6b:99:2a:d2:b6:df:24:b0:f3:44:a7:
09:d5:58:49:11:75:76:68:76:ce:c8:91:c4:2e:03:1a:58:52:
8c:80:42:b3:d5:6b:5e:b9:e5:c2:11:79:f0:34:1c:62:eb:6f:
29:77:2c:b9:dd:8a:b2:47:ce:b6:b7:74:d2:a3:27:b3:1a:f2:
bb:b0:e8:3e:28:b3:d2:64:ed:2e:ff:42:ee:a1:70:b0:90:b9:
d0:ca:bd:c1:22:27:42:22:c3:81:5a:7c:f4:ae:cb:86:31:7f:
28:d9:0c:89:ca:89:02:22:40:68:5b:bd:45:bc:d8:7c:14:a9:
25:82:d5:71:32:c2:2e:81:f9:70:f4:db:e9:cb:e3:0c:5c:bc:
e6:e6:f4:49:f1:77:c5:2c:1d:7f:b3:dd:d4:51:57:41:b7:54:
c7:fc:fa:f6:ea:88:9c:0b:f4:33:9f:90:dd:83:b5:fd:d6:7e:
91:f3:39:d1:3e:00:35:67:2c:c1:6b:91:f8:ea:77:a8:ad:90:
4a:cc:cc:78:c7:0c:85:99:c1:a3:03:99:5a:a2:3d:48:90:24:
77:d7:09:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:35:25 2025 by rpki-client