Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/063658-8262-4965-9661-0542427b02b9/1/lLHL_0vZcPon_e_Uv2iwLWjSud0.mft
File: lLHL_0vZcPon_e_Uv2iwLWjSud0.mft (raw, json)
Hash identifier: JdHl8eI9Se9CfelvX8rhxXGZ75AoSpD5cBuYl/TyMw4=
Subject key identifier: 1C:F7:FA:6D:76:13:78:1B:B2:16:AC:93:47:B3:95:87:12:41:2F:33
Authority key identifier: 94:B1:CB:FF:4B:D9:70:FA:27:FD:EF:D4:BF:68:B0:2D:68:D2:B9:DD
Certificate issuer: /CN=94b1cbff4bd970fa27fdefd4bf68b02d68d2b9dd
Certificate serial: 01976E19EAD467EA0B769FD1A9BA1C2C797D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lLHL_0vZcPon_e_Uv2iwLWjSud0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/063658-8262-4965-9661-0542427b02b9/1/lLHL_0vZcPon_e_Uv2iwLWjSud0.mft
Manifest number: 154B
Signing time: Sat 14 Jun 2025 11:01:19 +0000
Manifest this update: Sat 14 Jun 2025 11:01:19 +0000
Manifest next update: Sun 15 Jun 2025 11:01:19 +0000
Files and hashes: 1: 1-tC0rjZV1jihIqCSqr691PhK46c.roa (hash: OZRRaNXEuVkMUwrYkvaXW28rMwl6+wF4euV4WCbSFTw=)
2: lLHL_0vZcPon_e_Uv2iwLWjSud0.crl (hash: fEGFDRACdO4AtZE3FQS6bUfcSuQlmFZkwRV0c3F291A=)
3: wXXOQ9H2b6IyrY2B0lg-XuD_B8I.roa (hash: cgMdX3AAi5D4nzcU3HSWbT0lY1xCqmK5843fX99UXkY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/063658-8262-4965-9661-0542427b02b9/1/lLHL_0vZcPon_e_Uv2iwLWjSud0.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/063658-8262-4965-9661-0542427b02b9/1/lLHL_0vZcPon_e_Uv2iwLWjSud0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lLHL_0vZcPon_e_Uv2iwLWjSud0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:19:ea:d4:67:ea:0b:76:9f:d1:a9:ba:1c:2c:79:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94b1cbff4bd970fa27fdefd4bf68b02d68d2b9dd
Validity
Not Before: Jun 14 11:01:19 2025 GMT
Not After : Jun 15 11:01:19 2025 GMT
Subject: CN=1cf7fa6d7613781bb216ac9347b3958712412f33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b6:47:36:91:d5:53:94:36:e1:62:f1:91:b2:
f8:bd:08:e5:cb:57:11:3a:c5:2f:e8:97:77:bf:c3:
b5:5b:8b:d9:38:70:92:1c:55:ad:b9:53:d3:e8:5c:
5c:91:04:41:3b:ad:73:26:a0:d8:e9:de:92:07:dc:
9c:12:3b:53:db:8d:37:1a:57:ff:78:1c:99:29:ab:
a6:96:69:99:2e:f5:e3:53:6a:56:26:50:32:88:e5:
0e:f2:57:fc:e6:63:2b:10:a8:bb:f7:2d:66:ff:16:
c9:1c:0d:2a:ea:a2:af:54:98:9b:94:f3:38:0a:f2:
6f:b5:f9:79:c7:7e:fd:a7:50:c0:be:1e:1d:33:81:
8d:28:3c:5b:c5:4f:b6:55:36:cd:e4:5d:73:2d:58:
5c:e5:84:b6:41:b5:b2:48:de:06:d7:19:0c:b3:4d:
c1:af:51:15:a9:a9:92:3e:d5:63:7d:e8:f8:0c:39:
58:03:21:ef:c5:a1:dc:a5:f4:18:1c:43:ed:dd:34:
1b:d7:74:20:1f:9d:9a:d6:fd:eb:c6:d7:f3:75:16:
62:ac:e0:9a:f2:59:7e:43:d0:ab:74:07:f5:47:63:
51:e3:79:9b:39:65:0c:0a:a8:6c:b7:6f:64:a3:e2:
73:72:e0:78:81:51:c1:07:70:83:99:fc:34:82:11:
f9:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:F7:FA:6D:76:13:78:1B:B2:16:AC:93:47:B3:95:87:12:41:2F:33
X509v3 Authority Key Identifier:
keyid:94:B1:CB:FF:4B:D9:70:FA:27:FD:EF:D4:BF:68:B0:2D:68:D2:B9:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lLHL_0vZcPon_e_Uv2iwLWjSud0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/063658-8262-4965-9661-0542427b02b9/1/lLHL_0vZcPon_e_Uv2iwLWjSud0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/063658-8262-4965-9661-0542427b02b9/1/lLHL_0vZcPon_e_Uv2iwLWjSud0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:17:05:3c:c4:34:b4:d1:78:13:80:16:b4:80:7c:7d:12:50:
71:0a:77:8f:21:55:23:fe:c4:27:2d:f7:e8:18:61:fa:40:32:
90:d4:c7:6f:b3:3f:d0:33:aa:c1:6a:be:5d:4f:d0:01:a1:78:
fa:56:fb:3b:71:e4:86:f5:74:e8:7c:1a:41:5e:94:02:1e:e5:
d7:e5:1b:d2:09:30:67:f7:3b:e1:d6:d5:b3:05:84:f7:18:5d:
69:5a:00:a9:1f:78:22:2e:1d:ce:2b:88:6c:75:bd:10:ef:dd:
57:50:a9:ab:b7:11:34:ae:b1:0e:ac:d1:84:5a:ab:41:fd:51:
c7:8e:10:9a:97:9d:60:22:40:e5:be:db:b4:d0:86:34:8b:f8:
2d:ca:b3:8b:22:5a:df:72:b8:d4:c0:54:e9:a9:c0:2f:7c:7b:
4f:72:fb:fc:a0:53:13:e7:e5:13:29:82:2e:98:cc:b5:b6:d9:
00:e1:62:37:aa:cd:da:7e:f3:bd:82:c9:5c:f9:df:51:fb:ec:
ae:15:9c:f9:57:29:89:8c:27:d9:cd:23:b8:88:71:c7:70:1c:
d2:35:e2:84:36:43:de:12:92:ba:2e:80:9a:84:72:b0:d5:85:
16:93:29:60:03:55:82:31:37:1f:a1:ae:5d:3f:83:37:76:59:
3c:fb:eb:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 14:09:04 2025 by rpki-client