Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/5557fc-7653-40a9-99c3-7ea9905c3fbd/1/lhzPqdAsvwWWDjovkHmFnM1urW0.mft
File: lhzPqdAsvwWWDjovkHmFnM1urW0.mft (raw, json)
Hash identifier: NTvWl2IOi4hZWnVFr4jKx6Q/najJXin7hjYrkCze7Nc=
Subject key identifier: 65:B5:5E:BB:35:38:D3:73:4B:E6:F9:E8:7C:2D:CE:41:EE:69:90:30
Authority key identifier: 96:1C:CF:A9:D0:2C:BF:05:96:0E:3A:2F:90:79:85:9C:CD:6E:AD:6D
Certificate issuer: /CN=961ccfa9d02cbf05960e3a2f9079859ccd6ead6d
Certificate serial: 01987C406F647E921415F79FD4655A8673E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lhzPqdAsvwWWDjovkHmFnM1urW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/5557fc-7653-40a9-99c3-7ea9905c3fbd/1/lhzPqdAsvwWWDjovkHmFnM1urW0.mft
Manifest number: 161C
Signing time: Tue 05 Aug 2025 22:00:54 +0000
Manifest this update: Tue 05 Aug 2025 22:00:54 +0000
Manifest next update: Wed 06 Aug 2025 22:00:54 +0000
Files and hashes: 1: lhzPqdAsvwWWDjovkHmFnM1urW0.crl (hash: EaANn+bFCNX3k01aGvx5NvYxff6fKV04JOxnzsasols=)
2: qTElxIuYhBq2Kr2moM3xQmQlUEA.roa (hash: 6HA56HJcMMODNW40FbLFvKXa1rIMDv54m0DX5YcNqN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/5557fc-7653-40a9-99c3-7ea9905c3fbd/1/lhzPqdAsvwWWDjovkHmFnM1urW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/5557fc-7653-40a9-99c3-7ea9905c3fbd/1/lhzPqdAsvwWWDjovkHmFnM1urW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lhzPqdAsvwWWDjovkHmFnM1urW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 22:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:40:6f:64:7e:92:14:15:f7:9f:d4:65:5a:86:73:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=961ccfa9d02cbf05960e3a2f9079859ccd6ead6d
Validity
Not Before: Aug 5 22:00:54 2025 GMT
Not After : Aug 6 22:00:54 2025 GMT
Subject: CN=65b55ebb3538d3734be6f9e87c2dce41ee699030
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ef:5c:31:d8:53:88:7f:ee:be:7c:f2:ca:49:
97:3e:b6:3a:5d:4b:45:92:1c:dc:86:aa:9b:27:41:
51:89:47:4a:02:51:fe:13:71:7d:26:79:bc:5b:cc:
61:34:7f:28:85:ec:75:2a:c4:64:47:75:c6:be:4e:
1c:b0:ad:72:44:46:e8:be:be:0f:f1:40:e1:15:c3:
69:0b:a8:aa:8f:8a:6d:9d:8b:af:56:b5:78:9d:e7:
9d:f1:47:57:dc:fb:4f:52:d9:fb:3a:b5:75:5a:69:
f8:69:d3:41:0e:01:1a:d4:4d:de:79:28:aa:cc:39:
4d:73:3e:be:42:e6:17:db:89:0d:b8:06:1d:cd:73:
1b:f2:86:25:5c:8d:79:fd:b8:3c:c2:9e:dc:32:f3:
f5:c1:b1:23:ae:51:30:2e:a7:35:1b:3d:c7:b0:88:
64:f0:36:49:cb:97:6f:67:19:6a:f8:2b:f4:a0:bd:
79:4d:46:2b:82:89:33:56:13:64:16:d0:1a:00:14:
ff:07:b6:2f:0c:92:e5:65:7f:e9:bc:6d:a1:b3:6d:
67:17:48:08:07:a7:e2:7d:38:6f:4d:09:d7:ce:b1:
ac:7b:cf:e0:02:9c:12:e5:ee:58:56:4d:94:6f:51:
7a:8a:f6:db:44:5e:40:77:9b:5c:f4:4d:a5:38:4d:
a2:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:B5:5E:BB:35:38:D3:73:4B:E6:F9:E8:7C:2D:CE:41:EE:69:90:30
X509v3 Authority Key Identifier:
keyid:96:1C:CF:A9:D0:2C:BF:05:96:0E:3A:2F:90:79:85:9C:CD:6E:AD:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhzPqdAsvwWWDjovkHmFnM1urW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5557fc-7653-40a9-99c3-7ea9905c3fbd/1/lhzPqdAsvwWWDjovkHmFnM1urW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5557fc-7653-40a9-99c3-7ea9905c3fbd/1/lhzPqdAsvwWWDjovkHmFnM1urW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:df:66:6b:10:12:81:14:fe:09:b9:08:d0:2f:b4:20:a8:09:
ee:52:64:e5:f0:d0:2b:2e:d9:89:d7:81:0d:81:d4:57:e2:6e:
31:5f:08:44:57:9b:48:d1:7e:9b:38:d2:10:b7:c0:11:91:fc:
c9:3d:71:6a:dd:5f:0b:0b:85:2e:22:91:04:20:9a:48:2d:52:
90:2b:25:40:84:db:f2:7c:75:bd:73:c8:e3:95:9b:4b:d3:87:
30:16:66:0c:d5:39:b3:28:a4:30:5e:e7:fd:21:47:73:c2:cc:
34:75:28:a8:20:ea:62:a4:e1:46:09:e3:82:01:10:bb:82:b4:
79:34:c2:78:e7:80:49:ad:70:16:51:f3:72:5f:17:7b:0d:29:
15:f3:17:d3:39:18:84:89:40:20:04:1a:28:99:d0:21:9d:98:
b0:1f:d7:0a:cd:5e:10:40:a1:52:64:08:96:d8:69:05:b2:0c:
17:33:2f:40:82:69:e8:91:18:66:20:13:da:90:a4:e0:91:51:
24:d9:0f:40:a3:49:a2:6f:30:60:40:fb:ad:ef:d5:78:7e:f1:
e7:53:d3:eb:f3:71:c4:ab:8c:da:a1:4c:af:b5:6f:bd:77:8c:
37:49:44:25:13:a3:10:25:ff:c4:15:8b:7a:58:e1:8d:68:0c:
ef:f7:ab:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:11:45 2025 by rpki-client