Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/063658-8262-4965-9661-0542427b02b9/1/lLHL_0vZcPon_e_Uv2iwLWjSud0.mft
File: lLHL_0vZcPon_e_Uv2iwLWjSud0.mft (raw, json)
Hash identifier: yIITBTzTeKnwIe/xd64S5RiljW6447fsaLQ2858o3Zw=
Subject key identifier: D0:43:E0:99:D0:1E:BC:13:3B:CB:8A:F4:F1:A7:F6:D9:6C:DE:B1:3A
Authority key identifier: 94:B1:CB:FF:4B:D9:70:FA:27:FD:EF:D4:BF:68:B0:2D:68:D2:B9:DD
Certificate issuer: /CN=94b1cbff4bd970fa27fdefd4bf68b02d68d2b9dd
Certificate serial: 0197647163C04855C27283DAC4E835C1F29C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lLHL_0vZcPon_e_Uv2iwLWjSud0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/063658-8262-4965-9661-0542427b02b9/1/lLHL_0vZcPon_e_Uv2iwLWjSud0.mft
Manifest number: 1546
Signing time: Thu 12 Jun 2025 14:00:42 +0000
Manifest this update: Thu 12 Jun 2025 14:00:42 +0000
Manifest next update: Fri 13 Jun 2025 14:00:42 +0000
Files and hashes: 1: 1-tC0rjZV1jihIqCSqr691PhK46c.roa (hash: OZRRaNXEuVkMUwrYkvaXW28rMwl6+wF4euV4WCbSFTw=)
2: lLHL_0vZcPon_e_Uv2iwLWjSud0.crl (hash: zc1tYnClNeZ4rJ7/2RP7ORN842H+RtZr2hR7DgVlmjc=)
3: wXXOQ9H2b6IyrY2B0lg-XuD_B8I.roa (hash: cgMdX3AAi5D4nzcU3HSWbT0lY1xCqmK5843fX99UXkY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/063658-8262-4965-9661-0542427b02b9/1/lLHL_0vZcPon_e_Uv2iwLWjSud0.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/063658-8262-4965-9661-0542427b02b9/1/lLHL_0vZcPon_e_Uv2iwLWjSud0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lLHL_0vZcPon_e_Uv2iwLWjSud0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:64:71:63:c0:48:55:c2:72:83:da:c4:e8:35:c1:f2:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94b1cbff4bd970fa27fdefd4bf68b02d68d2b9dd
Validity
Not Before: Jun 12 14:00:42 2025 GMT
Not After : Jun 13 14:00:42 2025 GMT
Subject: CN=d043e099d01ebc133bcb8af4f1a7f6d96cdeb13a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1e:37:46:91:7d:55:a8:0d:ec:ef:ff:6e:4a:
7b:2e:56:42:b8:a4:f4:9c:57:07:99:d8:73:c3:68:
b0:34:11:d7:77:88:d7:ba:28:22:9a:8b:47:a4:fb:
cd:6d:eb:bd:34:37:ef:19:54:b2:ff:78:3f:21:91:
e7:50:73:9e:72:74:30:b0:24:41:cc:04:eb:c5:76:
21:6f:ea:56:7c:13:79:fb:66:93:f7:1f:d8:e5:4f:
03:1f:f6:e2:13:eb:6e:9d:8c:83:48:60:fb:26:5c:
f9:de:c1:cb:05:df:24:0c:46:b6:91:ef:04:4b:20:
c5:29:4e:4e:1b:79:66:3b:58:7e:62:f8:ea:d4:f3:
4b:02:d3:7f:06:20:57:dd:71:61:e1:7b:77:7d:66:
05:ec:ce:54:26:ff:75:9c:04:6d:41:76:6c:66:37:
8f:8f:0b:f6:3b:cc:44:41:9a:fe:95:3f:8b:bd:d4:
76:1c:bc:c6:dd:3a:55:87:83:d4:9a:78:0a:30:cc:
e4:ce:2a:c1:71:1a:a7:69:f2:1b:87:f3:65:23:38:
0b:d2:dc:ef:5b:f7:69:67:8e:2f:f1:3a:b8:2a:4f:
c0:71:ee:8a:5c:99:bd:4e:96:f8:85:33:2a:96:49:
f5:1d:bf:7f:14:a8:9b:3d:22:94:3f:f1:4f:58:5e:
8b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:43:E0:99:D0:1E:BC:13:3B:CB:8A:F4:F1:A7:F6:D9:6C:DE:B1:3A
X509v3 Authority Key Identifier:
keyid:94:B1:CB:FF:4B:D9:70:FA:27:FD:EF:D4:BF:68:B0:2D:68:D2:B9:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lLHL_0vZcPon_e_Uv2iwLWjSud0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/063658-8262-4965-9661-0542427b02b9/1/lLHL_0vZcPon_e_Uv2iwLWjSud0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/063658-8262-4965-9661-0542427b02b9/1/lLHL_0vZcPon_e_Uv2iwLWjSud0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:c3:f4:17:1b:e6:ee:4c:0e:a3:f7:12:6f:6f:3f:24:4a:58:
92:8b:83:3e:95:8f:07:3e:83:ff:7c:2f:83:4b:d4:73:64:d2:
1a:98:e7:8f:dd:37:5c:29:9e:9e:83:b6:95:8f:8e:49:40:55:
ee:39:02:31:24:69:55:50:cc:0d:b8:9a:7c:b0:47:cf:5f:eb:
50:5a:68:18:eb:d3:8a:60:ea:af:93:1a:f2:b5:43:15:d9:b9:
27:d4:15:9c:bb:9a:3a:22:06:ab:26:49:2b:4c:cf:55:70:fd:
49:67:b5:8f:3f:79:e6:8d:a6:e3:4f:d2:81:24:cd:f1:a7:b7:
0f:66:4e:df:a3:17:b4:f0:d2:5c:05:66:d0:12:96:15:54:2c:
9e:67:6a:6f:e4:74:28:27:30:d8:4b:52:cd:69:18:10:a1:67:
75:90:7b:7a:fb:c5:c4:da:c6:d8:06:77:67:ea:09:6b:2d:51:
97:a5:20:56:9b:75:29:b7:b2:c4:26:e6:cb:1f:a8:9d:93:9f:
df:6a:5d:e2:b0:3d:3e:d4:2b:04:f0:f6:24:a6:99:62:91:88:
8d:f1:73:69:97:49:4f:4f:7c:af:3d:c7:e2:72:9a:f7:67:30:
a0:36:68:98:52:76:c5:66:c4:94:bf:5b:63:72:59:7d:a1:d8:
15:a5:9a:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdkcWPASFXCcoPaxOg1wfKcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0YjFjYmZmNGJkOTcwZmEyN2ZkZWZkNGJmNjhiMDJkNjhk
MmI5ZGQwHhcNMjUwNjEyMTQwMDQyWhcNMjUwNjEzMTQwMDQyWjAzMTEwLwYDVQQD
EyhkMDQzZTA5OWQwMWViYzEzM2JjYjhhZjRmMWE3ZjZkOTZjZGViMTNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqh43RpF9VagN7O//bkp7LlZCuKT0
nFcHmdhzw2iwNBHXd4jXuigimotHpPvNbeu9NDfvGVSy/3g/IZHnUHOecnQwsCRB
zATrxXYhb+pWfBN5+2aT9x/Y5U8DH/biE+tunYyDSGD7Jlz53sHLBd8kDEa2ke8E
SyDFKU5OG3lmO1h+Yvjq1PNLAtN/BiBX3XFh4Xt3fWYF7M5UJv91nARtQXZsZjeP
jwv2O8xEQZr+lT+LvdR2HLzG3TpVh4PUmngKMMzkzirBcRqnafIbh/NlIzgL0tzv
W/dpZ44v8Tq4Kk/Ace6KXJm9Tpb4hTMqlkn1Hb9/FKibPSKUP/FPWF6LlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNBD4JnQHrwTO8uK9PGn9tls3rE6MB8GA1UdIwQY
MBaAFJSxy/9L2XD6J/3v1L9osC1o0rndMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbExITF8wdlpjUG9uX2VfVXYyaXdMV2pTdWQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny8wNjM2NTgtODI2Mi00OTY1LTk2NjEt
MDU0MjQyN2IwMmI5LzEvbExITF8wdlpjUG9uX2VfVXYyaXdMV2pTdWQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny8wNjM2NTgtODI2Mi00OTY1LTk2NjEtMDU0MjQyN2IwMmI5
LzEvbExITF8wdlpjUG9uX2VfVXYyaXdMV2pTdWQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFsP0Fxvm
7kwOo/cSb28/JEpYkouDPpWPBz6D/3wvg0vUc2TSGpjnj903XCmenoO2lY+OSUBV
7jkCMSRpVVDMDbiafLBHz1/rUFpoGOvTimDqr5Ma8rVDFdm5J9QVnLuaOiIGqyZJ
K0zPVXD9SWe1jz955o2m40/SgSTN8ae3D2ZO36MXtPDSXAVm0BKWFVQsnmdqb+R0
KCcw2EtSzWkYEKFndZB7evvFxNrG2AZ3Z+oJay1Rl6UgVpt1KbeyxCbmyx+onZOf
32pd4rA9PtQrBPD2JKaZYpGIjfFzaZdJT098rz3H4nKa92cwoDZomFJ2xWbElL9b
Y3JZfaHYFaWajA==
-----END CERTIFICATE-----
Generated at Fri Jun 13 00:15:44 2025 by rpki-client