Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/bf3eca-171f-401c-9b5d-ccc4f1e00990/1/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.mft
File: LHJ9Cfuxmn-YXXUaIDEcG61LBx8.mft (raw, json)
Hash identifier: Vdf2UkuBMcPSChbCHnpFdhCverIQEV5lK+XfMLeyxhg=
Subject key identifier: 94:43:EA:5B:EA:FE:FE:BB:A1:33:82:EF:A1:CB:CC:93:38:54:A7:78
Authority key identifier: 2C:72:7D:09:FB:B1:9A:7F:98:5D:75:1A:20:31:1C:1B:AD:4B:07:1F
Certificate issuer: /CN=2c727d09fbb19a7f985d751a20311c1bad4b071f
Certificate serial: 01988B7C7C61ABD03481753755B997EC64F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/bf3eca-171f-401c-9b5d-ccc4f1e00990/1/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.mft
Manifest number: 1623
Signing time: Fri 08 Aug 2025 21:00:47 +0000
Manifest this update: Fri 08 Aug 2025 21:00:47 +0000
Manifest next update: Sat 09 Aug 2025 21:00:47 +0000
Files and hashes: 1: 9phsu2p4WF8NqnfUkSWWdnt6zzA.roa (hash: f41MILFdl6rcNDj7+ORCxwVOJlnjfxd2bAX97uHKrtw=)
2: LHJ9Cfuxmn-YXXUaIDEcG61LBx8.crl (hash: UgmyLnZGvoQhvp1AGAdbe3W24r1Xd3twmvQeOHgGwPA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/bf3eca-171f-401c-9b5d-ccc4f1e00990/1/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/bf3eca-171f-401c-9b5d-ccc4f1e00990/1/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:7c:7c:61:ab:d0:34:81:75:37:55:b9:97:ec:64:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c727d09fbb19a7f985d751a20311c1bad4b071f
Validity
Not Before: Aug 8 21:00:47 2025 GMT
Not After : Aug 9 21:00:47 2025 GMT
Subject: CN=9443ea5beafefebba13382efa1cbcc933854a778
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:42:f4:8f:84:77:ec:01:cd:c7:78:1a:ca:a4:
68:4b:80:78:9d:00:6d:ad:d6:5e:d1:d2:f1:65:43:
75:81:fd:25:ed:fa:74:2a:46:9f:30:94:d9:c5:2a:
b0:3e:4f:54:5a:95:9f:69:79:f8:d7:c1:37:6d:0b:
02:7c:bf:12:64:66:da:f2:5c:4a:e6:94:a1:67:92:
48:4c:10:e7:a4:63:0d:f1:f1:45:73:56:59:b5:9c:
06:c6:8a:5b:9b:a3:de:6e:6c:31:2c:fe:30:49:07:
5b:b9:4d:ce:75:42:70:9b:7f:a4:6d:bf:7d:4f:8a:
2a:f8:9a:f3:fe:f8:8e:9f:f5:02:fc:24:09:08:06:
83:ae:25:97:17:a5:da:7b:3f:c2:38:ef:6d:07:8c:
5d:66:07:c9:9f:86:a9:10:ff:70:f3:a6:ed:9b:e9:
4a:f3:99:42:79:85:47:34:e2:dd:b5:ec:20:63:4d:
ee:c5:d5:31:f2:e6:79:e5:06:b0:26:fd:f4:fc:d0:
8d:dd:3a:3a:a7:dc:b8:61:21:db:1a:67:55:63:98:
d3:2c:ed:be:3e:ad:5a:72:13:fc:5b:f7:a1:6c:9e:
aa:ed:40:52:ef:c6:34:ec:93:67:13:2b:1a:3e:e7:
87:c8:89:17:13:4f:5b:29:e9:07:35:92:15:0e:63:
1c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:43:EA:5B:EA:FE:FE:BB:A1:33:82:EF:A1:CB:CC:93:38:54:A7:78
X509v3 Authority Key Identifier:
keyid:2C:72:7D:09:FB:B1:9A:7F:98:5D:75:1A:20:31:1C:1B:AD:4B:07:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/bf3eca-171f-401c-9b5d-ccc4f1e00990/1/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/bf3eca-171f-401c-9b5d-ccc4f1e00990/1/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:d8:ae:70:e6:ec:5e:50:bd:5b:d6:cb:74:db:59:cf:dd:0b:
08:01:ec:07:db:d5:c9:21:43:5c:35:54:48:0a:1d:32:f6:9e:
92:22:28:d6:10:bb:9d:be:e9:b1:25:a6:22:62:b0:83:7c:6f:
d3:da:b8:75:53:28:fb:43:e4:79:b5:32:c8:79:62:7a:8c:87:
4d:a3:ec:de:6c:e3:d9:77:8e:01:c9:87:76:ce:d3:45:b4:7e:
f6:07:fe:45:4f:23:a6:a8:94:3b:3d:e8:61:14:89:ea:3b:90:
66:73:c4:cd:6e:02:03:55:93:65:c4:bd:1d:1b:58:ef:72:ab:
5e:4a:b6:7c:6e:9a:78:0f:ce:73:5b:af:c4:48:f3:5f:d1:83:
c6:cf:78:42:d3:f3:b6:ff:2e:23:65:5a:f1:cb:cd:38:c7:42:
b4:30:3e:df:02:c0:fc:1a:0d:53:e3:2e:b1:62:97:41:32:91:
99:c9:33:a9:37:db:26:87:6d:82:7b:e4:43:2e:06:92:9b:94:
5d:6d:49:84:07:82:f4:30:03:ea:2c:33:22:c0:21:a5:5e:15:
42:ea:65:7a:d3:ed:47:82:04:4e:f4:96:df:a4:25:dc:11:04:
05:23:9a:b3:fb:25:19:5d:c5:19:25:1e:0d:28:07:8c:b1:81:
e5:b0:09:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:00:53 2025 by rpki-client