Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/5557fc-7653-40a9-99c3-7ea9905c3fbd/1/lhzPqdAsvwWWDjovkHmFnM1urW0.mft
File: lhzPqdAsvwWWDjovkHmFnM1urW0.mft (raw, json)
Hash identifier: WvgOLTFJFHvD1Lr4PwGUdgnh3AXpVDg6QGpVznlOmKM=
Subject key identifier: 41:C6:3D:A6:64:22:9A:3B:46:F0:AB:A3:C8:F7:7E:DB:74:99:4D:EB
Authority key identifier: 96:1C:CF:A9:D0:2C:BF:05:96:0E:3A:2F:90:79:85:9C:CD:6E:AD:6D
Certificate issuer: /CN=961ccfa9d02cbf05960e3a2f9079859ccd6ead6d
Certificate serial: 019771BF3EDE344902F8EF71C0B6CB626B04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lhzPqdAsvwWWDjovkHmFnM1urW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/5557fc-7653-40a9-99c3-7ea9905c3fbd/1/lhzPqdAsvwWWDjovkHmFnM1urW0.mft
Manifest number: 1592
Signing time: Sun 15 Jun 2025 04:00:48 +0000
Manifest this update: Sun 15 Jun 2025 04:00:48 +0000
Manifest next update: Mon 16 Jun 2025 04:00:48 +0000
Files and hashes: 1: lhzPqdAsvwWWDjovkHmFnM1urW0.crl (hash: NirpwuLf/RmMLd8kBd5ej3FoFTJFZS9ZzfVlDyS79Zc=)
2: qTElxIuYhBq2Kr2moM3xQmQlUEA.roa (hash: 6HA56HJcMMODNW40FbLFvKXa1rIMDv54m0DX5YcNqN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/5557fc-7653-40a9-99c3-7ea9905c3fbd/1/lhzPqdAsvwWWDjovkHmFnM1urW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/5557fc-7653-40a9-99c3-7ea9905c3fbd/1/lhzPqdAsvwWWDjovkHmFnM1urW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lhzPqdAsvwWWDjovkHmFnM1urW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:bf:3e:de:34:49:02:f8:ef:71:c0:b6:cb:62:6b:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=961ccfa9d02cbf05960e3a2f9079859ccd6ead6d
Validity
Not Before: Jun 15 04:00:48 2025 GMT
Not After : Jun 16 04:00:48 2025 GMT
Subject: CN=41c63da664229a3b46f0aba3c8f77edb74994deb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b0:18:08:c8:d9:83:cf:61:1e:66:df:08:9f:
9c:93:47:e6:fd:60:48:39:07:5f:c2:33:c2:7d:9b:
4a:17:41:cf:5a:0a:79:ae:6b:0d:aa:35:3f:d9:f1:
db:35:72:a3:96:27:8b:07:94:a7:cd:16:d7:29:d9:
5f:77:ab:90:4c:1d:59:ab:90:24:7b:f9:2e:6b:99:
46:28:4b:12:47:67:14:ca:9f:e6:6f:ee:a3:4a:9e:
f3:19:f6:09:59:f5:0d:5f:57:cd:00:20:f0:b4:63:
9c:54:ed:b3:08:46:65:6a:3d:ac:07:b3:80:64:4c:
51:1c:34:52:20:8e:3a:68:fb:16:61:39:3d:05:3f:
66:c7:0e:4c:60:90:18:ed:b0:73:15:32:f2:31:80:
ab:b7:63:39:ad:37:f9:6e:d9:89:8c:cf:0f:c8:1b:
96:33:c1:72:41:9c:f8:4b:a4:fe:47:35:4c:8b:78:
c5:36:21:73:88:0e:70:50:ed:9f:a8:0d:47:8d:d3:
74:60:b0:20:db:bb:f4:1d:33:82:14:ca:c2:a4:e4:
6e:95:15:6b:21:0f:f9:50:33:3a:cf:de:27:11:1d:
c7:0e:87:cc:9b:d8:45:17:90:4b:64:96:0b:5d:27:
68:0e:64:3a:05:5c:de:1e:de:59:28:69:5c:94:16:
ac:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:C6:3D:A6:64:22:9A:3B:46:F0:AB:A3:C8:F7:7E:DB:74:99:4D:EB
X509v3 Authority Key Identifier:
keyid:96:1C:CF:A9:D0:2C:BF:05:96:0E:3A:2F:90:79:85:9C:CD:6E:AD:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhzPqdAsvwWWDjovkHmFnM1urW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5557fc-7653-40a9-99c3-7ea9905c3fbd/1/lhzPqdAsvwWWDjovkHmFnM1urW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5557fc-7653-40a9-99c3-7ea9905c3fbd/1/lhzPqdAsvwWWDjovkHmFnM1urW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:5b:ed:65:8b:ac:ed:eb:66:64:89:e8:75:32:02:5d:ab:2f:
b6:63:30:a8:f0:8f:90:90:26:37:f7:37:ab:4d:18:75:7b:05:
3b:4c:2b:96:c7:ad:db:1b:6d:65:eb:e4:bd:fc:66:13:6c:32:
08:7d:74:9d:0e:04:2b:81:9b:b6:c1:29:ff:ed:17:00:dd:d4:
16:fa:c5:57:2c:48:5a:94:30:2e:31:a1:1f:fe:73:ef:b0:73:
bd:dd:07:e5:c5:da:25:5c:c8:96:48:26:ca:95:d8:22:88:e6:
f3:66:d4:d0:fc:e3:3b:9c:d4:33:12:ef:be:6f:1d:0d:8d:7e:
72:42:7e:0a:67:55:6a:bf:4e:1d:a5:42:17:d8:d2:89:fe:f8:
d5:bf:b8:4e:96:40:25:26:e4:a9:06:fd:00:0c:ba:dd:ff:a0:
3f:de:32:29:1e:5e:ae:40:90:da:62:65:9a:97:6c:1a:9b:54:
db:e2:ae:09:92:b7:a6:c3:cc:22:64:8b:f6:2b:57:e7:48:a8:
72:13:ba:33:06:31:0a:66:58:f6:1f:59:27:05:6d:1a:22:b6:
ae:68:aa:89:da:fc:43:ac:ee:48:b8:45:60:9e:3c:55:51:d0:
e0:73:7f:4e:b5:53:fb:1e:18:b2:50:9b:89:0a:9c:0d:ea:d8:
dc:b6:c2:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:06:57 2025 by rpki-client