Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/LhmWbA6l3zqYf4NlUktRKMun_JA.mft
File: LhmWbA6l3zqYf4NlUktRKMun_JA.mft (raw, json)
Hash identifier: asUsGneeZPofugJ3MxnchxpXKh1SvUILtrGYjE2eQlI=
Subject key identifier: 62:37:97:27:AC:7A:C8:93:E8:C7:4B:8C:43:30:E1:6B:D7:39:F8:04
Authority key identifier: 2E:19:96:6C:0E:A5:DF:3A:98:7F:83:65:52:4B:51:28:CB:A7:FC:90
Certificate issuer: /CN=2e19966c0ea5df3a987f8365524b5128cba7fc90
Certificate serial: 0197499F333E728701AB28E46EE6F78CDD42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhmWbA6l3zqYf4NlUktRKMun_JA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/LhmWbA6l3zqYf4NlUktRKMun_JA.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 09:00:59 +0000
Manifest this update: Sat 07 Jun 2025 09:00:59 +0000
Manifest next update: Sun 08 Jun 2025 09:00:59 +0000
Files and hashes: 1: EB2pKsJqEpEjhB4YuLKeyjkIp9Q.roa (hash: ruDUWZ/Fl5sEVfjlgGOsVStJ3zZdJ/uyG7EZiN/zjl0=)
2: LhmWbA6l3zqYf4NlUktRKMun_JA.crl (hash: DsSuRdX9AtPFonqW+RMB1JwC5FuRbUzfze+/FAWmpUA=)
3: iOSgDas4E473RISs54ZCqJXEL1Y.roa (hash: cm025SWzl2vuQDv4U8M4vf0+/0CnnGay76ie0c/nESQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/LhmWbA6l3zqYf4NlUktRKMun_JA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/LhmWbA6l3zqYf4NlUktRKMun_JA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LhmWbA6l3zqYf4NlUktRKMun_JA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9f:33:3e:72:87:01:ab:28:e4:6e:e6:f7:8c:dd:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e19966c0ea5df3a987f8365524b5128cba7fc90
Validity
Not Before: Jun 7 09:00:59 2025 GMT
Not After : Jun 8 09:00:59 2025 GMT
Subject: CN=62379727ac7ac893e8c74b8c4330e16bd739f804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ba:c3:3e:81:cd:4f:b7:58:b6:fc:68:59:46:
71:d6:61:88:c8:bc:45:1e:d6:40:89:20:d5:b2:7e:
bc:2b:8f:c0:01:23:03:e9:e1:c2:74:85:e7:58:fd:
be:82:b9:62:c1:c5:6a:b8:1f:c6:a3:18:98:0a:63:
d2:4b:af:82:51:9d:a9:07:b0:b3:6e:18:21:6c:1d:
d8:33:60:74:7e:53:08:42:07:91:0e:d4:37:d7:f8:
9a:17:9d:a6:b2:b8:49:05:64:bd:4a:80:f1:78:57:
48:48:1c:3e:93:91:ae:84:7e:8d:4e:c2:f0:93:a7:
6a:93:5f:27:d4:75:f2:4d:e3:70:ce:f2:2a:de:27:
29:1b:bf:c0:40:49:d2:d6:6c:3f:cd:2f:d1:81:c4:
30:44:0b:71:cd:9e:ca:6a:1b:4f:fe:ff:c0:30:3e:
15:1f:06:c0:7c:76:8c:3f:72:53:40:4c:e1:f7:25:
60:0b:49:c9:d4:f1:22:67:65:e6:3e:3c:dc:93:3a:
ea:e4:54:fe:4d:28:41:c2:89:d6:2c:00:bc:f6:a5:
eb:19:5d:bf:c4:5f:ee:df:6f:bf:95:09:3a:5b:50:
df:da:86:91:85:ab:30:b0:a0:32:49:c4:21:4d:64:
e7:e4:09:a2:99:7c:ec:ab:17:49:c0:a6:8e:5d:44:
0d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:37:97:27:AC:7A:C8:93:E8:C7:4B:8C:43:30:E1:6B:D7:39:F8:04
X509v3 Authority Key Identifier:
keyid:2E:19:96:6C:0E:A5:DF:3A:98:7F:83:65:52:4B:51:28:CB:A7:FC:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhmWbA6l3zqYf4NlUktRKMun_JA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/LhmWbA6l3zqYf4NlUktRKMun_JA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/LhmWbA6l3zqYf4NlUktRKMun_JA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:3f:60:0c:66:0f:71:64:54:6c:bb:c5:bc:46:0b:95:47:54:
b8:d9:9c:69:ea:b9:6f:97:8e:7d:f5:08:e5:78:ea:97:22:2b:
83:50:72:a0:cb:9d:15:f8:db:c7:fd:f8:ce:94:88:b2:0d:9c:
d8:a5:fe:2a:64:69:33:4c:59:1d:a9:9b:af:4d:d8:fb:fd:71:
1d:04:f5:5d:28:05:4f:91:8c:91:de:ee:c9:c8:87:35:00:7a:
86:18:ba:8b:fa:c1:dc:e7:d8:77:8a:27:3d:a7:a0:05:ab:53:
84:cf:50:fb:6b:dc:c6:1c:d9:dd:08:7e:65:46:46:29:00:50:
65:40:c6:2d:7e:0c:5b:18:48:c3:35:6e:8b:01:47:43:53:d6:
73:48:43:86:07:33:5e:5f:0e:64:aa:1d:08:23:18:01:94:32:
5c:63:02:f2:87:3a:6b:0d:80:3b:20:de:1c:14:f0:b6:f7:0a:
c6:05:5a:e3:79:25:da:40:4e:26:42:35:d5:fb:31:18:33:c0:
13:46:4b:0c:6f:0e:3e:4d:63:ad:03:46:c8:81:96:ee:7c:40:
0b:67:78:e1:1f:f8:25:d3:68:86:91:ce:70:04:7c:1d:44:eb:
f2:af:68:5f:6b:ba:73:c9:3b:b8:25:f9:6f:a5:03:05:30:92:
08:cf:3e:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:43:36 2025 by rpki-client