Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/cddf94-8d51-41cd-8a5b-a0b4930cbd1e/1/lhebOdHB0o9QY8qSHWAH42Phxgs.mft
File: lhebOdHB0o9QY8qSHWAH42Phxgs.mft (raw, json)
Hash identifier: wO5ONsGaV6NmEqbfPcprUMWVJds7ZqTAoe6SFiBzAr8=
Subject key identifier: DF:14:CB:BC:69:09:2B:92:D5:4F:A3:DF:60:23:E9:4A:B5:FC:04:75
Authority key identifier: 96:17:9B:39:D1:C1:D2:8F:50:63:CA:92:1D:60:07:E3:63:E1:C6:0B
Certificate issuer: /CN=96179b39d1c1d28f5063ca921d6007e363e1c60b
Certificate serial: 01988CFD3033AEA91E8937F9F6188247215B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lhebOdHB0o9QY8qSHWAH42Phxgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/cddf94-8d51-41cd-8a5b-a0b4930cbd1e/1/lhebOdHB0o9QY8qSHWAH42Phxgs.mft
Manifest number: 1624
Signing time: Sat 09 Aug 2025 04:00:59 +0000
Manifest this update: Sat 09 Aug 2025 04:00:59 +0000
Manifest next update: Sun 10 Aug 2025 04:00:59 +0000
Files and hashes: 1: lhebOdHB0o9QY8qSHWAH42Phxgs.crl (hash: BT0ZYLrffyRqY0BwMQerGqq/n2191TsgvTClr7fz470=)
2: zIbC2a3NLstRoJ1KbSzBvFb6vZ0.roa (hash: YltSOQHV02hFJedVO9/8WLk8TMz1RedE7tGsvMysOE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/cddf94-8d51-41cd-8a5b-a0b4930cbd1e/1/lhebOdHB0o9QY8qSHWAH42Phxgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/cddf94-8d51-41cd-8a5b-a0b4930cbd1e/1/lhebOdHB0o9QY8qSHWAH42Phxgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/lhebOdHB0o9QY8qSHWAH42Phxgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 04:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:fd:30:33:ae:a9:1e:89:37:f9:f6:18:82:47:21:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96179b39d1c1d28f5063ca921d6007e363e1c60b
Validity
Not Before: Aug 9 04:00:59 2025 GMT
Not After : Aug 10 04:00:59 2025 GMT
Subject: CN=df14cbbc69092b92d54fa3df6023e94ab5fc0475
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:44:e6:52:32:25:f9:70:2a:3e:57:ca:86:22:
cb:6e:a5:9d:90:25:e3:d6:2b:eb:25:d7:e5:7c:ef:
6a:c8:1a:88:ad:36:9a:e2:ae:c4:a9:ed:c4:62:09:
99:ab:92:93:30:1e:04:14:90:d1:7a:7a:94:bc:a2:
dc:92:2f:89:39:6d:ce:00:f3:88:a3:37:35:30:d4:
08:f6:a5:52:e7:68:d7:73:c7:44:48:89:be:54:df:
79:77:43:be:2e:fb:39:c7:94:fe:62:a8:a0:ae:77:
de:d2:c6:4b:13:28:ac:7c:67:e8:f6:18:fb:23:3c:
13:fe:29:ad:ad:65:b1:3c:84:91:6b:60:08:7a:40:
2a:65:7c:dc:70:55:1a:e7:8b:05:b1:3d:b0:b0:0b:
90:99:92:2e:5c:8a:cd:f0:5e:29:f7:ee:55:04:bc:
9e:07:67:f1:ee:15:14:77:e6:fd:63:57:07:24:ad:
4f:ca:83:2f:b9:4b:f7:08:83:f4:da:fe:55:5b:95:
f2:6e:71:b4:d4:d9:10:34:fa:07:c8:3d:a7:d8:42:
0c:20:00:15:b8:2d:92:cf:52:22:d2:a6:36:da:a6:
57:e4:24:71:b1:26:54:87:18:de:28:f1:7e:a6:d6:
4e:5d:49:33:79:96:b6:90:76:ae:62:32:d1:cb:b9:
3f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:14:CB:BC:69:09:2B:92:D5:4F:A3:DF:60:23:E9:4A:B5:FC:04:75
X509v3 Authority Key Identifier:
keyid:96:17:9B:39:D1:C1:D2:8F:50:63:CA:92:1D:60:07:E3:63:E1:C6:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhebOdHB0o9QY8qSHWAH42Phxgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/cddf94-8d51-41cd-8a5b-a0b4930cbd1e/1/lhebOdHB0o9QY8qSHWAH42Phxgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/cddf94-8d51-41cd-8a5b-a0b4930cbd1e/1/lhebOdHB0o9QY8qSHWAH42Phxgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:91:92:1a:77:1a:55:95:ee:d3:c0:23:73:c8:d2:05:61:be:
90:06:15:f5:ca:2c:f3:4f:b8:ab:96:77:7e:1a:ea:45:70:56:
e1:99:53:86:54:39:24:13:6e:88:c7:55:4e:36:d0:65:fe:7f:
f0:66:50:4d:48:94:40:50:a5:38:73:a5:78:42:68:91:cd:f1:
bd:e9:2c:57:7a:c2:7d:6e:ba:82:27:78:2b:59:71:b7:79:2b:
37:64:12:73:1d:20:6f:67:d3:2b:cc:1b:aa:47:d6:8a:23:4c:
45:7f:46:c0:0e:df:b7:42:5d:34:20:a5:cd:01:e3:50:ac:a1:
ec:cc:82:ca:76:2a:f4:0f:c6:27:f6:66:ec:45:9b:5a:a7:f7:
86:5c:4b:93:41:21:20:5d:77:0f:d6:d8:39:03:56:bf:54:47:
f2:df:c9:96:f8:5d:68:00:c7:ff:33:7e:bd:f9:0a:77:a5:aa:
6a:4b:9e:c7:38:60:8e:7b:4a:de:6d:22:a6:ac:7b:2b:78:70:
3f:68:eb:0e:60:cd:8a:2c:b0:3e:62:09:cd:52:ac:a8:c5:9d:
31:dc:12:48:dc:6f:8a:bb:c5:42:35:56:ad:95:b2:9f:86:37:
87:bf:a5:7a:f7:6b:6c:8d:83:f3:c9:94:da:63:d8:cb:b3:68:
db:ec:26:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:32:04 2025 by rpki-client