Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft
File: LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft (raw, json)
Hash identifier: 2u0NW9u0/cck3LvcdVMl0UfiFWS9FxgvXumzR1S6BwY=
Subject key identifier: 72:1A:5B:AB:B2:3A:56:87:5D:8F:58:C3:A6:5B:67:0A:61:50:2E:A6
Authority key identifier: 2C:75:4A:E4:73:D9:C1:54:B8:04:B7:0E:D3:18:81:E0:25:D9:26:AA
Certificate issuer: /CN=2c754ae473d9c154b804b70ed31881e025d926aa
Certificate serial: 0197C914BF2B2CEFF541BA783CE93B1B88F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHVK5HPZwVS4BLcO0xiB4CXZJqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft
Manifest number: 0B9A
Signing time: Wed 02 Jul 2025 03:01:09 +0000
Manifest this update: Wed 02 Jul 2025 03:01:09 +0000
Manifest next update: Thu 03 Jul 2025 03:01:09 +0000
Files and hashes: 1: LHVK5HPZwVS4BLcO0xiB4CXZJqo.crl (hash: hA1QH4xsN+/dfgPHBZ/Ys/l93Rjw4qTxkaEhpgCaq3E=)
2: RIso09h5--_F82YqfcCEAd3EpSw.roa (hash: dWlymz3qci5T5aLh2Je4Ec71LNxokFg1VFDedEjsW+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/LHVK5HPZwVS4BLcO0xiB4CXZJqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 03:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c9:14:bf:2b:2c:ef:f5:41:ba:78:3c:e9:3b:1b:88:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c754ae473d9c154b804b70ed31881e025d926aa
Validity
Not Before: Jul 2 03:01:09 2025 GMT
Not After : Jul 3 03:01:09 2025 GMT
Subject: CN=721a5babb23a56875d8f58c3a65b670a61502ea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c8:a9:cd:38:32:06:ed:22:a4:53:2b:14:8e:
97:62:50:b6:50:53:b6:a9:75:41:f2:d0:a3:ba:83:
34:51:b4:53:17:0a:f0:56:3c:43:b9:ac:e9:e6:7c:
04:f7:41:9c:47:0e:74:f8:b0:fc:5e:f5:34:65:9f:
91:f2:f1:ab:8a:85:5d:62:ea:48:58:45:a8:91:5e:
76:f0:47:ee:f9:8c:ac:bb:76:c1:7b:15:b3:26:b8:
59:dd:35:9c:d0:96:ed:f7:80:27:23:ba:3d:06:34:
10:07:ff:7e:b1:23:08:2d:f7:00:26:f8:80:96:24:
4c:7e:ac:73:e8:1e:30:0e:d3:71:4e:ab:a0:dd:4e:
0f:f6:5f:84:60:6a:17:df:32:c0:2b:ad:22:19:f6:
3c:b2:a1:e9:7e:ee:2a:70:9f:f4:36:66:99:80:8f:
55:a9:32:1b:b3:3a:9f:15:2a:49:f7:ed:06:bb:1b:
56:93:5a:4f:bd:54:21:7b:d5:58:6e:ca:93:e5:b0:
cc:83:19:d2:16:8f:61:d5:5e:2a:b8:71:1f:6d:20:
85:db:c7:b0:67:c0:c0:5e:b5:06:81:8b:a0:2c:ed:
f0:2a:95:08:07:ae:76:00:66:31:4f:32:2c:2a:c6:
11:52:a0:d4:4a:29:ca:de:00:0c:4b:8a:8e:3f:fa:
3d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:1A:5B:AB:B2:3A:56:87:5D:8F:58:C3:A6:5B:67:0A:61:50:2E:A6
X509v3 Authority Key Identifier:
keyid:2C:75:4A:E4:73:D9:C1:54:B8:04:B7:0E:D3:18:81:E0:25:D9:26:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHVK5HPZwVS4BLcO0xiB4CXZJqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:24:83:c9:c0:75:34:26:74:7c:2b:df:76:2f:86:3a:68:c1:
2b:56:cb:e0:69:3f:e6:40:df:f6:e9:54:e0:c6:9c:c1:d3:32:
17:2b:87:51:16:12:79:9e:3c:e9:78:bc:07:90:8f:10:ec:bf:
21:aa:fd:a4:cf:ab:9f:30:e8:c4:26:da:7f:b9:3c:61:52:82:
35:6b:de:14:e2:d3:73:ec:f9:0c:67:cc:58:5d:f2:04:42:72:
ec:da:e6:b9:67:28:ea:77:e6:8f:bd:57:19:da:ac:0a:ca:f0:
8e:ee:e7:a6:dd:7a:02:74:5a:61:9e:12:3e:c7:14:90:24:e3:
07:47:0e:2c:3e:91:cc:59:12:b0:18:2a:62:4e:41:41:1d:53:
88:b7:10:20:25:22:eb:d8:e6:8d:a6:7d:45:4a:d5:9b:aa:7f:
ec:e4:7e:89:5e:4a:c6:01:cf:ba:94:3f:25:c7:0e:56:4f:25:
56:52:8f:f2:12:c3:62:ec:6f:5e:55:39:3e:f0:96:e6:4c:e5:
a7:93:77:7f:1c:fc:1a:72:13:1c:9e:d1:af:d2:d4:13:f6:f1:
cb:72:3b:50:7d:ac:af:fe:9b:0f:a9:96:68:e7:5d:de:f2:ad:
cf:f1:cd:6a:7d:36:f7:21:5b:98:9e:a5:28:ee:d7:2f:df:fa:
7b:87:05:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 13:11:40 2025 by rpki-client