Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/6c4c26-e34a-4336-90c8-f90ae9966428/1/lH4-X564CJtcqU845lF8-8WyAGM.mft
File: lH4-X564CJtcqU845lF8-8WyAGM.mft (raw, json)
Hash identifier: FmOkEMPPjIzrtKERW9h8Asqd8NygbHmjQqqpkUqJIBE=
Subject key identifier: AA:B9:3F:66:7E:33:AD:E2:5D:AA:08:E5:CC:FD:F1:11:7D:04:FE:D4
Authority key identifier: 94:7E:3E:5F:9E:B8:08:9B:5C:A9:4F:38:E6:51:7C:FB:C5:B2:00:63
Certificate issuer: /CN=947e3e5f9eb8089b5ca94f38e6517cfbc5b20063
Certificate serial: 01974EFC2D549753A1CBCBE5F8809E1EA2AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lH4-X564CJtcqU845lF8-8WyAGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4c26-e34a-4336-90c8-f90ae9966428/1/lH4-X564CJtcqU845lF8-8WyAGM.mft
Manifest number: 040E
Signing time: Sun 08 Jun 2025 10:00:38 +0000
Manifest this update: Sun 08 Jun 2025 10:00:38 +0000
Manifest next update: Mon 09 Jun 2025 10:00:38 +0000
Files and hashes: 1: 8JJmvRAktSEG3OdLUZKBNwR6ws0.roa (hash: TC8WkMj5LqYLotUQsIJXNU0W5IJEuyjKyKXTJdzLmbM=)
2: lH4-X564CJtcqU845lF8-8WyAGM.crl (hash: 3k2jY3TxUsnjf05gkwKGLuXAG03myCV0M/1RS4GO6QQ=)
3: zozOOHZMPpO8TU7R7OlzFjX6nTU.roa (hash: DO9vuDN/M4q7UhQA8k+ziHqB7tX/m/+CIduSaenQLlY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4c26-e34a-4336-90c8-f90ae9966428/1/lH4-X564CJtcqU845lF8-8WyAGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4c26-e34a-4336-90c8-f90ae9966428/1/lH4-X564CJtcqU845lF8-8WyAGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lH4-X564CJtcqU845lF8-8WyAGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:fc:2d:54:97:53:a1:cb:cb:e5:f8:80:9e:1e:a2:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=947e3e5f9eb8089b5ca94f38e6517cfbc5b20063
Validity
Not Before: Jun 8 10:00:38 2025 GMT
Not After : Jun 9 10:00:38 2025 GMT
Subject: CN=aab93f667e33ade25daa08e5ccfdf1117d04fed4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9e:cc:ed:4b:96:b1:f9:e3:8a:d7:a5:c8:d2:
18:e5:d7:5a:b8:11:30:29:c1:ed:21:19:43:5b:8b:
7f:d1:f8:d5:5c:3e:7f:2c:31:b8:3e:1a:8b:55:a4:
a7:b5:c4:4a:55:91:43:67:48:e3:da:9b:14:d9:42:
23:4b:7e:6a:83:5a:2b:e9:88:51:10:bb:ee:8c:60:
b0:5e:5b:13:86:68:3c:8a:bb:9d:c6:b1:68:80:9a:
93:1f:e8:8e:3d:c2:af:8b:96:b6:c4:4a:94:04:a4:
73:84:cb:34:30:e5:f2:f4:c0:64:fb:9e:a1:dd:01:
ab:21:35:d6:44:f0:18:28:d3:97:b3:ce:86:db:04:
c0:6c:11:1a:2a:b2:93:38:fa:ef:60:29:9e:4d:d5:
36:f9:97:27:6e:12:ff:f3:72:a2:f1:1d:50:60:04:
0f:5b:db:38:7f:61:7e:d8:69:66:15:f1:15:f2:a1:
6c:fb:cf:d8:d3:a8:23:db:e1:0d:f3:fb:85:88:fa:
4b:15:12:35:c3:eb:bd:bf:8f:dd:0c:6f:03:89:43:
ea:b9:d2:27:5d:e1:0a:98:a5:b1:d8:65:41:f6:74:
3f:07:77:0d:f8:dd:f4:a9:30:0c:98:2d:a6:6b:d9:
f2:74:61:e1:da:09:0d:af:f7:28:15:4b:5a:2d:c7:
a6:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:B9:3F:66:7E:33:AD:E2:5D:AA:08:E5:CC:FD:F1:11:7D:04:FE:D4
X509v3 Authority Key Identifier:
keyid:94:7E:3E:5F:9E:B8:08:9B:5C:A9:4F:38:E6:51:7C:FB:C5:B2:00:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lH4-X564CJtcqU845lF8-8WyAGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4c26-e34a-4336-90c8-f90ae9966428/1/lH4-X564CJtcqU845lF8-8WyAGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4c26-e34a-4336-90c8-f90ae9966428/1/lH4-X564CJtcqU845lF8-8WyAGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:16:ec:09:7f:04:f4:23:ab:64:30:6c:82:be:05:d0:7b:9c:
7f:41:ef:e1:e7:e7:ca:d3:70:e6:36:9f:68:74:ea:f1:bf:fd:
cb:c5:2d:50:ca:55:9e:b8:02:4b:ae:7d:90:d7:d2:d6:0e:c8:
05:94:00:ab:0e:d5:fa:72:57:6a:44:95:a5:fc:74:5c:f7:24:
13:1d:f2:2e:c9:f8:0b:bc:2b:11:d2:3f:fe:49:5c:ca:b1:d3:
a3:b3:46:a4:31:ae:ab:43:e2:1c:6f:11:8b:fc:fb:ce:15:42:
d3:7c:69:d4:1a:b8:b5:42:bf:4a:5c:3f:0c:94:a2:7f:7f:dd:
71:75:4d:21:37:19:19:ef:12:49:7c:f6:93:0e:9e:5a:b2:b2:
41:07:ea:c7:31:52:be:74:5f:f9:e2:71:fb:48:04:38:51:c1:
74:6f:19:e2:ac:60:8f:6f:05:2f:f5:69:63:57:16:19:57:a2:
4d:53:6f:c9:8f:f6:cf:a7:33:90:20:40:47:4b:c7:24:04:a3:
b4:49:a1:49:55:b9:78:d2:4b:32:c0:f1:ef:32:26:a2:c6:83:
6d:69:29:3a:d7:d4:9e:69:a7:0e:b8:33:3a:52:45:86:75:f3:
61:d7:80:b0:43:68:f8:d5:34:b4:97:c5:ac:45:4d:a1:90:6f:
30:21:bd:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:26:31 2025 by rpki-client