Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/79c5bb-619d-4beb-8649-a2f425600db3/1/lHEhWA7QLt309eWofTfgF7Mt9xs.mft
File: lHEhWA7QLt309eWofTfgF7Mt9xs.mft (raw, json)
Hash identifier: 81d2PNfUei3EMv0BGuEl32xi/HSRtNQhV5SbROIkfmA=
Subject key identifier: ED:55:1F:F4:BC:51:AF:3E:97:8E:88:81:71:8F:52:A6:FA:BE:84:18
Authority key identifier: 94:71:21:58:0E:D0:2E:DD:F4:F5:E5:A8:7D:37:E0:17:B3:2D:F7:1B
Certificate issuer: /CN=947121580ed02eddf4f5e5a87d37e017b32df71b
Certificate serial: 019921B06A325D54E490114AF5A3950BF1FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lHEhWA7QLt309eWofTfgF7Mt9xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/79c5bb-619d-4beb-8649-a2f425600db3/1/lHEhWA7QLt309eWofTfgF7Mt9xs.mft
Manifest number: 1671
Signing time: Sun 07 Sep 2025 01:00:33 +0000
Manifest this update: Sun 07 Sep 2025 01:00:33 +0000
Manifest next update: Mon 08 Sep 2025 01:00:33 +0000
Files and hashes: 1: lHEhWA7QLt309eWofTfgF7Mt9xs.crl (hash: HQfnuUdnSxt/hI4OlNeZzvK611SKaA0wLM43UCuWkAI=)
2: qxUZWESkWfPvrh5nMLtmisJ-xm0.roa (hash: QiH9IyXND+kMiLoL1S1ImhCqyZcezaR+0IjNSX+Zg6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/79c5bb-619d-4beb-8649-a2f425600db3/1/lHEhWA7QLt309eWofTfgF7Mt9xs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/79c5bb-619d-4beb-8649-a2f425600db3/1/lHEhWA7QLt309eWofTfgF7Mt9xs.mft
rsync://rpki.ripe.net/repository/DEFAULT/lHEhWA7QLt309eWofTfgF7Mt9xs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b0:6a:32:5d:54:e4:90:11:4a:f5:a3:95:0b:f1:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=947121580ed02eddf4f5e5a87d37e017b32df71b
Validity
Not Before: Sep 7 01:00:33 2025 GMT
Not After : Sep 8 01:00:33 2025 GMT
Subject: CN=ed551ff4bc51af3e978e8881718f52a6fabe8418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:69:cb:3e:7f:01:c9:6f:70:6a:20:df:7c:e2:
2d:55:2a:c4:1d:a9:db:83:c7:d4:44:24:02:54:b7:
26:c2:eb:e4:a3:b3:9b:8d:5e:32:88:85:fe:71:d6:
74:e9:58:c1:8a:6e:1d:33:df:75:85:55:5e:3e:d0:
f8:b4:7f:b5:54:37:65:2e:94:84:ba:16:bd:e1:58:
ea:b6:e5:1c:40:be:4d:e6:43:dc:42:73:59:e5:9e:
a2:90:f3:48:85:0f:07:8f:1a:b3:e7:7d:b6:f1:fc:
bb:7b:77:69:ca:ac:e6:db:3f:da:37:ec:4b:b2:58:
5b:80:de:16:87:74:a3:f8:74:90:6d:4c:44:fa:03:
00:cc:ab:a0:41:47:16:5d:d0:a4:6f:25:be:35:ca:
9d:4c:c7:ff:76:3b:cb:7d:46:74:5b:41:67:43:8a:
47:e9:13:4d:5f:37:7c:fb:d2:06:e9:01:67:6a:2c:
90:7f:26:63:f8:20:9b:94:ae:3e:40:b8:ce:4b:15:
63:19:13:e2:85:3c:90:17:6d:20:af:1c:ea:19:a2:
94:d3:76:b0:62:af:87:81:45:d5:3b:6c:8f:f6:f1:
06:e4:cf:8e:32:f2:02:5f:d1:76:97:e2:b0:04:76:
24:b5:62:ee:bb:12:60:32:31:05:e7:a1:39:76:48:
cd:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:55:1F:F4:BC:51:AF:3E:97:8E:88:81:71:8F:52:A6:FA:BE:84:18
X509v3 Authority Key Identifier:
keyid:94:71:21:58:0E:D0:2E:DD:F4:F5:E5:A8:7D:37:E0:17:B3:2D:F7:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lHEhWA7QLt309eWofTfgF7Mt9xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/79c5bb-619d-4beb-8649-a2f425600db3/1/lHEhWA7QLt309eWofTfgF7Mt9xs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/79c5bb-619d-4beb-8649-a2f425600db3/1/lHEhWA7QLt309eWofTfgF7Mt9xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:1d:92:65:38:b6:63:2f:fc:8b:69:f8:55:3d:c4:6f:eb:b0:
0c:a3:d8:63:28:f8:dc:1d:76:da:89:65:0d:9c:81:ef:a0:46:
0a:ff:7e:41:f4:17:e9:91:cb:33:0d:9c:87:68:95:27:f2:a5:
7e:a2:2a:0e:3d:79:e5:bb:67:a4:0b:92:e2:e6:38:bc:ae:a7:
7c:3b:80:dd:e4:78:a0:67:ec:85:c4:89:db:ce:2f:31:9f:55:
07:41:94:70:e7:e4:f5:5c:b2:3c:cf:39:8b:b4:38:46:19:7c:
fd:9c:a0:76:05:7f:17:07:02:dc:78:1c:14:d9:9e:53:3a:97:
78:d0:07:ce:3e:10:c2:b5:fd:29:f1:d6:a4:56:a4:dd:58:1d:
f5:d8:f5:33:cc:39:e9:c8:9d:4d:af:34:8e:62:8f:dc:a4:03:
fa:f6:b3:30:c2:ad:9c:60:4c:3b:19:3f:c5:9e:b0:96:2b:e1:
d5:eb:a8:95:a9:81:9d:b3:9d:d4:a3:94:20:7b:c4:ed:6a:80:
d4:c2:0e:f1:69:30:1a:1c:62:80:c6:5a:09:ed:d8:89:3b:54:
e6:3b:b2:e5:07:16:d8:62:3c:8d:17:6f:42:c8:6f:c4:dc:5e:
ca:8b:a1:cb:7e:9b:90:e6:89:ea:21:21:12:08:61:a0:91:20:
c4:2d:79:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:12:10 2025 by rpki-client