Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/063658-8262-4965-9661-0542427b02b9/1/lLHL_0vZcPon_e_Uv2iwLWjSud0.mft
File: lLHL_0vZcPon_e_Uv2iwLWjSud0.mft (raw, json)
Hash identifier: HPIDysnD4q6oOlWAzKidYMIx5/I35VWIo4GsZH41KHM=
Subject key identifier: 55:D0:93:FE:3F:FF:05:E1:83:BE:C8:BB:B2:34:5E:EF:40:88:07:9C
Authority key identifier: 94:B1:CB:FF:4B:D9:70:FA:27:FD:EF:D4:BF:68:B0:2D:68:D2:B9:DD
Certificate issuer: /CN=94b1cbff4bd970fa27fdefd4bf68b02d68d2b9dd
Certificate serial: 019916F688DF6C2FAAD3D5DAFD858813F8E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lLHL_0vZcPon_e_Uv2iwLWjSud0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/063658-8262-4965-9661-0542427b02b9/1/lLHL_0vZcPon_e_Uv2iwLWjSud0.mft
Manifest number: 1627
Signing time: Thu 04 Sep 2025 23:01:19 +0000
Manifest this update: Thu 04 Sep 2025 23:01:19 +0000
Manifest next update: Fri 05 Sep 2025 23:01:19 +0000
Files and hashes: 1: 1-tC0rjZV1jihIqCSqr691PhK46c.roa (hash: OZRRaNXEuVkMUwrYkvaXW28rMwl6+wF4euV4WCbSFTw=)
2: lLHL_0vZcPon_e_Uv2iwLWjSud0.crl (hash: y5aH5D/ORlPS40x8BKMXIs0LFxgEgheD9W4zzk384N0=)
3: wXXOQ9H2b6IyrY2B0lg-XuD_B8I.roa (hash: cgMdX3AAi5D4nzcU3HSWbT0lY1xCqmK5843fX99UXkY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/063658-8262-4965-9661-0542427b02b9/1/lLHL_0vZcPon_e_Uv2iwLWjSud0.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/063658-8262-4965-9661-0542427b02b9/1/lLHL_0vZcPon_e_Uv2iwLWjSud0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lLHL_0vZcPon_e_Uv2iwLWjSud0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 23:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:16:f6:88:df:6c:2f:aa:d3:d5:da:fd:85:88:13:f8:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94b1cbff4bd970fa27fdefd4bf68b02d68d2b9dd
Validity
Not Before: Sep 4 23:01:19 2025 GMT
Not After : Sep 5 23:01:19 2025 GMT
Subject: CN=55d093fe3fff05e183bec8bbb2345eef4088079c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:8c:9a:b2:98:33:65:90:fc:f5:10:96:ba:38:
26:c5:37:67:61:99:4e:fe:b7:f2:6b:68:24:53:23:
bb:ca:76:6f:62:32:98:4e:00:7d:86:fb:77:bf:50:
db:b5:b8:cf:8b:5b:ea:db:87:60:47:1c:5f:0a:90:
22:3b:13:e0:b2:ea:99:88:59:ac:cf:5d:79:d8:f1:
88:88:2e:da:6e:06:87:63:fc:e1:ad:b0:2f:13:24:
02:8d:51:91:8a:09:76:f6:f0:c4:3f:7c:45:fb:98:
f8:e9:dd:a4:35:59:28:74:4c:50:f2:d7:db:0c:a7:
7d:22:ed:20:fc:8b:b6:95:58:f8:4b:29:bd:88:98:
cd:a3:7d:29:36:65:c5:fb:88:9f:01:7e:c6:8c:22:
17:8e:47:6d:1f:79:40:46:70:77:f4:42:22:37:9c:
33:50:4a:d8:31:d9:1b:8b:7e:ad:aa:78:b6:2f:64:
2d:f6:9a:b2:f6:7c:96:b0:c5:b0:15:0d:a7:d5:44:
88:47:64:f9:76:f9:6d:55:05:9e:e6:c4:19:bc:62:
99:55:a2:f6:c5:1e:aa:8a:bf:9f:cc:73:bd:0b:b6:
12:82:15:87:d1:7b:c1:e0:20:c5:a3:1b:a4:5a:8a:
2f:da:07:b7:98:67:cc:71:cc:9d:83:09:14:3c:70:
f2:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:D0:93:FE:3F:FF:05:E1:83:BE:C8:BB:B2:34:5E:EF:40:88:07:9C
X509v3 Authority Key Identifier:
keyid:94:B1:CB:FF:4B:D9:70:FA:27:FD:EF:D4:BF:68:B0:2D:68:D2:B9:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lLHL_0vZcPon_e_Uv2iwLWjSud0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/063658-8262-4965-9661-0542427b02b9/1/lLHL_0vZcPon_e_Uv2iwLWjSud0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/063658-8262-4965-9661-0542427b02b9/1/lLHL_0vZcPon_e_Uv2iwLWjSud0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:ae:c6:c2:da:1e:76:9f:2f:49:42:92:af:a2:24:e6:1e:13:
11:ec:f7:98:7c:52:3e:e8:1b:97:c2:20:37:59:1c:ca:86:24:
a8:72:bf:c9:bb:00:c3:fc:ac:1f:86:5d:db:5f:9f:45:18:18:
77:fb:44:8a:d4:e1:f5:09:2b:2f:a5:f2:e9:b4:27:a2:6e:dd:
c2:57:c9:18:f7:e8:63:ef:5b:a6:3d:8e:46:09:81:db:b2:60:
68:e8:6e:20:df:54:fa:47:73:28:a6:ef:5e:a1:96:0e:e2:0a:
5a:39:d0:f2:a5:00:62:66:8d:c8:4b:9b:d0:fe:09:09:e6:89:
53:18:23:79:ee:5e:4a:ed:5d:87:52:b9:87:ae:fd:76:44:57:
3e:ab:6d:71:6b:2d:d6:8e:fe:c0:61:5d:26:ac:0d:e3:95:f6:
42:9b:fa:8d:d6:33:49:4a:ae:f5:13:5a:e4:fc:de:08:7f:17:
c0:03:92:33:77:21:a4:1f:f8:0c:16:54:3c:9e:65:8a:8a:70:
8a:c8:22:e2:98:7c:b4:1a:58:d0:51:18:5e:bc:22:fb:5a:08:
d1:67:ec:74:40:b1:33:51:8d:70:67:64:c7:8b:34:39:bc:56:
98:23:bf:3c:c7:b8:8a:68:20:b7:7f:e4:4a:dd:ef:c7:04:75:
bd:59:1d:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 07:35:47 2025 by rpki-client