Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft
File: LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft (raw, json)
Hash identifier: BBidkCYndK5sgji4YKFMqOi/tVxvtT6QyP9Qpg/DPbE=
Subject key identifier: 78:0C:A5:42:50:75:F4:49:41:74:4D:18:4F:17:0A:43:1B:40:31:4A
Authority key identifier: 2C:75:4A:E4:73:D9:C1:54:B8:04:B7:0E:D3:18:81:E0:25:D9:26:AA
Certificate issuer: /CN=2c754ae473d9c154b804b70ed31881e025d926aa
Certificate serial: 019922C35CCAC242C2F9A5433ECCDFD7CFC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHVK5HPZwVS4BLcO0xiB4CXZJqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft
Manifest number: 0C4D
Signing time: Sun 07 Sep 2025 06:00:52 +0000
Manifest this update: Sun 07 Sep 2025 06:00:52 +0000
Manifest next update: Mon 08 Sep 2025 06:00:52 +0000
Files and hashes: 1: LHVK5HPZwVS4BLcO0xiB4CXZJqo.crl (hash: q3VY3au20s3v3DAzUyDrsuWFFgOb2ZQ4WMyzFm6grQw=)
2: RIso09h5--_F82YqfcCEAd3EpSw.roa (hash: dWlymz3qci5T5aLh2Je4Ec71LNxokFg1VFDedEjsW+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/LHVK5HPZwVS4BLcO0xiB4CXZJqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:5c:ca:c2:42:c2:f9:a5:43:3e:cc:df:d7:cf:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c754ae473d9c154b804b70ed31881e025d926aa
Validity
Not Before: Sep 7 06:00:52 2025 GMT
Not After : Sep 8 06:00:52 2025 GMT
Subject: CN=780ca5425075f44941744d184f170a431b40314a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a2:c7:8e:9b:12:6c:2e:08:a6:bf:89:37:42:
6c:20:13:ef:85:c4:8b:6f:c4:eb:cd:48:e6:d6:fe:
28:de:f6:60:16:c2:44:02:53:47:6c:66:b9:eb:73:
39:d1:6c:8b:e8:d7:e2:65:cc:47:f1:7a:15:52:4c:
c7:1a:ae:2a:63:10:6c:32:30:4a:72:64:bf:e3:88:
76:9f:86:2b:a2:da:0e:64:47:0a:52:20:f6:b9:ef:
cc:a2:96:e5:f0:70:2a:77:73:aa:d1:9b:32:cb:83:
7c:97:bd:02:b8:ba:3b:c1:ee:a8:68:69:63:36:5f:
9a:07:90:09:e3:84:19:45:20:c5:12:0f:bd:9e:79:
1a:d9:cd:a5:0d:db:79:f0:bd:28:dc:6c:da:96:e8:
a3:71:0f:f4:9b:f0:cb:14:43:c3:4e:b9:8a:e2:d5:
5b:34:54:88:7e:a7:07:63:c9:5e:19:16:ae:9a:ae:
3d:4b:24:d2:49:cd:f4:f8:d0:68:b0:b0:3a:4a:52:
2d:aa:2c:2a:df:de:2d:60:a9:97:62:cb:bb:95:01:
16:b0:25:db:75:ef:9d:b3:21:06:1a:d0:60:1e:57:
f6:dd:e5:c1:38:c7:71:0a:1c:42:93:54:a4:ee:f3:
0c:41:63:e8:3b:7f:c8:4e:ce:3f:c2:d1:fa:57:28:
dd:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:0C:A5:42:50:75:F4:49:41:74:4D:18:4F:17:0A:43:1B:40:31:4A
X509v3 Authority Key Identifier:
keyid:2C:75:4A:E4:73:D9:C1:54:B8:04:B7:0E:D3:18:81:E0:25:D9:26:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHVK5HPZwVS4BLcO0xiB4CXZJqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:d2:00:80:2e:02:0f:c3:aa:5c:7a:cb:ec:6d:ec:db:e9:7e:
2a:8c:52:69:1c:76:32:14:09:70:77:60:0b:0a:ee:ae:cf:e9:
04:d8:bf:8f:f1:c7:67:67:5c:8e:25:b9:b2:58:96:aa:4e:2c:
b2:c0:8c:0c:8f:99:86:23:32:33:23:99:e0:57:1c:4e:58:1b:
eb:15:e6:94:ff:09:ab:91:7a:e7:2c:e4:80:55:ea:ce:e5:64:
11:96:1e:1b:d0:75:8c:cf:e3:bc:0a:17:c3:35:81:49:5a:e3:
9e:72:4a:eb:f9:83:ba:38:01:35:3a:1d:7d:ca:c1:d6:50:79:
aa:28:cd:59:fe:a6:76:2f:96:d8:10:ec:d5:ef:2e:d9:39:1d:
ea:08:df:6c:59:c4:07:fa:0c:6f:46:ee:75:c4:79:f4:66:6b:
a5:57:0b:a0:1d:5a:ec:42:0a:de:cb:05:53:92:a2:6e:cd:aa:
e7:83:5b:ec:82:72:f3:6f:ff:18:9c:6c:c7:b8:81:fa:83:29:
cb:17:7f:4e:18:97:eb:8e:12:f3:94:78:06:2e:5e:0d:3e:78:
b6:dd:90:e4:6c:02:8e:1b:7d:9a:8e:c2:e3:ec:27:e2:a1:8c:
e2:b8:d8:7c:1e:71:ee:a6:83:d0:b5:3b:4e:02:8f:50:0e:44:
7a:76:bd:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:53:27 2025 by rpki-client