Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/063658-8262-4965-9661-0542427b02b9/1/lLHL_0vZcPon_e_Uv2iwLWjSud0.mft
File: lLHL_0vZcPon_e_Uv2iwLWjSud0.mft (raw, json)
Hash identifier: +3R9b+SgJGdJ6gwS1GqFonXlEAvKEBx4kgeaoSGYaoI=
Subject key identifier: AA:42:CC:54:6F:88:A8:E6:3D:DE:06:E3:61:2A:E1:3D:C4:11:0F:60
Authority key identifier: 94:B1:CB:FF:4B:D9:70:FA:27:FD:EF:D4:BF:68:B0:2D:68:D2:B9:DD
Certificate issuer: /CN=94b1cbff4bd970fa27fdefd4bf68b02d68d2b9dd
Certificate serial: 01976C2B6F7E05797DC8E70D27A4FC0B9583
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lLHL_0vZcPon_e_Uv2iwLWjSud0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/063658-8262-4965-9661-0542427b02b9/1/lLHL_0vZcPon_e_Uv2iwLWjSud0.mft
Manifest number: 154A
Signing time: Sat 14 Jun 2025 02:01:15 +0000
Manifest this update: Sat 14 Jun 2025 02:01:15 +0000
Manifest next update: Sun 15 Jun 2025 02:01:15 +0000
Files and hashes: 1: 1-tC0rjZV1jihIqCSqr691PhK46c.roa (hash: OZRRaNXEuVkMUwrYkvaXW28rMwl6+wF4euV4WCbSFTw=)
2: lLHL_0vZcPon_e_Uv2iwLWjSud0.crl (hash: S0y5+u+BwRhgX+mBalNa1aJxxrt9oSh8N4oAflNEVH8=)
3: wXXOQ9H2b6IyrY2B0lg-XuD_B8I.roa (hash: cgMdX3AAi5D4nzcU3HSWbT0lY1xCqmK5843fX99UXkY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/063658-8262-4965-9661-0542427b02b9/1/lLHL_0vZcPon_e_Uv2iwLWjSud0.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/063658-8262-4965-9661-0542427b02b9/1/lLHL_0vZcPon_e_Uv2iwLWjSud0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lLHL_0vZcPon_e_Uv2iwLWjSud0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2b:6f:7e:05:79:7d:c8:e7:0d:27:a4:fc:0b:95:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94b1cbff4bd970fa27fdefd4bf68b02d68d2b9dd
Validity
Not Before: Jun 14 02:01:15 2025 GMT
Not After : Jun 15 02:01:15 2025 GMT
Subject: CN=aa42cc546f88a8e63dde06e3612ae13dc4110f60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:79:59:fd:e8:d5:20:77:2d:69:8d:cb:a3:84:
fc:ac:d9:14:49:41:4c:ad:2c:67:fe:68:ff:d4:ae:
69:08:25:0e:f7:07:3b:c7:89:b0:7f:3c:68:16:cb:
69:6b:44:cd:09:46:66:dc:6f:f0:34:69:8a:d2:cb:
e1:34:ee:87:10:11:46:ee:aa:67:53:9d:47:04:c9:
c4:0c:52:31:89:b4:e7:12:91:35:f0:0f:7f:e7:25:
ac:55:5f:9f:7c:6d:be:82:1a:38:8e:b3:08:10:64:
a0:46:07:17:4f:f0:b9:4c:9c:27:bf:cf:17:13:4a:
ba:95:6e:79:99:2f:07:34:a4:01:59:6c:d5:d0:6b:
be:d6:de:f5:73:3e:c4:6c:ed:fc:38:d2:31:39:33:
1d:39:d1:c9:bf:5d:8e:b6:1f:63:d8:6f:16:a5:97:
24:94:27:e7:c6:5c:63:f2:8e:2c:7c:90:0a:24:33:
8d:40:fb:36:1b:b2:42:c1:c6:3b:37:f2:1f:77:ab:
fb:97:ac:07:7f:9a:9d:5d:f5:c2:d4:d1:da:e7:e8:
96:01:90:70:fc:82:be:7b:a2:62:4f:90:29:eb:09:
aa:6a:05:ae:8b:64:a5:c8:84:7d:40:85:39:d0:63:
11:e3:ec:8e:f5:e1:aa:67:08:50:b1:41:15:8a:ef:
19:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:42:CC:54:6F:88:A8:E6:3D:DE:06:E3:61:2A:E1:3D:C4:11:0F:60
X509v3 Authority Key Identifier:
keyid:94:B1:CB:FF:4B:D9:70:FA:27:FD:EF:D4:BF:68:B0:2D:68:D2:B9:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lLHL_0vZcPon_e_Uv2iwLWjSud0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/063658-8262-4965-9661-0542427b02b9/1/lLHL_0vZcPon_e_Uv2iwLWjSud0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/063658-8262-4965-9661-0542427b02b9/1/lLHL_0vZcPon_e_Uv2iwLWjSud0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:bd:d3:cb:c5:cc:25:5b:27:ae:ac:24:ac:35:d7:b8:95:53:
e5:12:d5:88:dc:83:fa:73:97:3b:3e:33:cf:71:21:64:95:b5:
3e:ea:3f:c3:e8:f7:c1:0e:21:b5:ba:bb:f1:28:9f:f5:dc:d9:
c8:c6:0a:3d:23:06:b5:21:e1:34:2a:dd:2b:6f:64:d5:ee:10:
dd:2f:69:a6:f5:12:0b:bc:63:13:93:1a:6d:40:6d:1a:48:49:
2e:f0:a3:85:14:d5:57:18:f6:ff:ba:33:9c:51:45:f6:25:16:
6a:03:c9:23:0e:db:6f:e9:ec:df:de:92:7d:5e:fd:d3:7c:78:
c8:e3:9e:bb:f9:e2:ff:82:d3:9e:d0:2e:ff:b7:f3:b0:19:ad:
7b:fc:b4:cf:c9:5b:9e:d3:ba:36:f0:22:65:fb:25:f9:0e:fa:
7d:1c:d2:32:d5:ec:45:44:23:5c:5d:ce:c2:8a:4f:80:31:5e:
41:80:f7:28:67:54:f6:a4:81:34:2f:99:60:0f:c3:83:85:8c:
e0:ac:d4:c2:80:b9:2b:2b:d1:63:e6:1b:d4:7e:e5:61:e8:b0:
c7:63:7a:ba:06:84:e9:48:65:1d:06:be:35:19:45:53:a5:d0:
a9:85:fa:58:7d:a1:1c:e9:49:48:da:b4:22:4e:c8:a7:d3:eb:
e0:2a:8f:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:49:34 2025 by rpki-client