Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/d5f801-4426-4f45-8f26-9ccdd3c873a6/1/LHwKdxsw0nQoUIDdxC42eYOW8iw.mft
File: LHwKdxsw0nQoUIDdxC42eYOW8iw.mft (raw, json)
Hash identifier: 1Lw89h7IH0ploIqX9DYg+YLsqureKElfp60CuoRvlgY=
Subject key identifier: 81:99:B2:1C:A6:4A:6E:39:0F:8A:03:92:9B:73:9C:8B:AD:7B:52:F0
Authority key identifier: 2C:7C:0A:77:1B:30:D2:74:28:50:80:DD:C4:2E:36:79:83:96:F2:2C
Certificate issuer: /CN=2c7c0a771b30d274285080ddc42e36798396f22c
Certificate serial: 0197688511916E42155A0B8B831376A11D58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHwKdxsw0nQoUIDdxC42eYOW8iw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/d5f801-4426-4f45-8f26-9ccdd3c873a6/1/LHwKdxsw0nQoUIDdxC42eYOW8iw.mft
Manifest number: 12AF
Signing time: Fri 13 Jun 2025 09:00:40 +0000
Manifest this update: Fri 13 Jun 2025 09:00:40 +0000
Manifest next update: Sat 14 Jun 2025 09:00:40 +0000
Files and hashes: 1: LHwKdxsw0nQoUIDdxC42eYOW8iw.crl (hash: HTZ1sz7Olbyzh5dx/Lu0LVQTJrqXLl+Cd6JMv8JO6hU=)
2: _wYBYYAWsBdIPcz67gJjf_cpxBc.roa (hash: WT5EAFrH+ID6hV4wr/zaJ0InnDxoXdrcj+f2kf7QcuM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/d5f801-4426-4f45-8f26-9ccdd3c873a6/1/LHwKdxsw0nQoUIDdxC42eYOW8iw.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/d5f801-4426-4f45-8f26-9ccdd3c873a6/1/LHwKdxsw0nQoUIDdxC42eYOW8iw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LHwKdxsw0nQoUIDdxC42eYOW8iw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 09:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:85:11:91:6e:42:15:5a:0b:8b:83:13:76:a1:1d:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c7c0a771b30d274285080ddc42e36798396f22c
Validity
Not Before: Jun 13 09:00:40 2025 GMT
Not After : Jun 14 09:00:40 2025 GMT
Subject: CN=8199b21ca64a6e390f8a03929b739c8bad7b52f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2d:00:d1:b4:f9:fb:c7:89:53:68:c7:68:d3:
10:b1:dc:d4:3a:64:7e:5f:02:f5:eb:30:48:ab:7f:
6e:5a:e0:c5:9d:61:0f:8d:b1:6a:72:6c:78:3c:d8:
07:46:42:8c:af:4a:91:c9:97:ec:d2:5c:61:36:eb:
50:da:18:9c:a4:cf:22:78:db:43:e6:c0:2b:44:60:
e1:33:48:3e:43:cd:bf:4e:5f:10:58:f2:01:f0:0e:
9c:59:57:0b:8d:2d:ad:b8:6a:9c:04:de:4b:a0:f6:
2b:66:1e:60:22:72:6b:78:34:61:c9:98:4d:5c:27:
39:48:57:aa:07:14:4f:5a:4b:fe:13:ba:65:4e:be:
6b:71:d2:73:13:11:0b:dc:ba:7a:4c:2a:72:d5:ec:
3e:15:52:71:77:94:23:e8:02:7f:57:08:20:07:9d:
52:bf:3f:82:5e:25:9a:91:fb:e4:92:bc:c5:9a:05:
e5:f4:86:83:b3:1f:bc:40:da:cf:64:a2:a1:55:41:
e4:6e:2c:c3:f0:0f:93:bc:29:cd:0a:0e:05:e4:73:
44:ab:b9:92:15:89:9e:8e:db:23:f8:32:56:ce:df:
25:f4:9e:da:0a:8b:d8:40:b8:a3:07:9d:cd:8f:9e:
1a:45:1f:5c:80:a8:b8:b2:6a:c0:7f:7e:da:21:6c:
c5:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:99:B2:1C:A6:4A:6E:39:0F:8A:03:92:9B:73:9C:8B:AD:7B:52:F0
X509v3 Authority Key Identifier:
keyid:2C:7C:0A:77:1B:30:D2:74:28:50:80:DD:C4:2E:36:79:83:96:F2:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHwKdxsw0nQoUIDdxC42eYOW8iw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d5f801-4426-4f45-8f26-9ccdd3c873a6/1/LHwKdxsw0nQoUIDdxC42eYOW8iw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d5f801-4426-4f45-8f26-9ccdd3c873a6/1/LHwKdxsw0nQoUIDdxC42eYOW8iw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:a1:51:c2:b0:15:9f:a5:9e:7b:23:98:5d:8d:61:70:3a:65:
ee:6c:32:31:8c:5d:d5:3a:61:00:34:ab:db:d0:6d:a0:18:e2:
e7:ed:03:55:bc:e0:7c:20:5f:a5:2d:ee:21:d9:fc:78:1c:b7:
af:96:d0:e8:72:1b:1b:eb:d2:aa:29:41:43:97:a6:86:e5:af:
2b:e5:9b:59:7e:cd:bd:9c:9f:59:f5:21:ba:82:71:04:85:2c:
4f:58:ee:50:59:71:6b:d3:0c:06:81:d3:a5:2c:b8:8b:f1:69:
9f:76:56:33:4c:ad:2b:d3:13:48:3d:3c:51:ed:28:98:b7:68:
ee:84:18:7e:c8:3e:c4:09:80:67:20:23:78:df:01:97:06:4c:
5c:59:2e:1c:0f:9b:28:50:bc:71:ea:45:ef:ae:37:10:cd:40:
09:a1:73:5c:5c:7f:47:5f:9c:79:27:e5:6f:a5:5d:fb:fb:64:
e7:e4:05:0b:57:ea:3b:65:f3:57:ea:98:1a:4e:6e:cc:52:5c:
80:29:4f:b1:5b:47:77:37:6d:61:02:84:5d:a4:bf:26:5d:b5:
e0:e3:d2:97:68:6a:84:d1:95:96:cc:98:32:9f:54:05:ef:1c:
41:5f:62:38:c1:77:fd:8e:1e:e5:a3:2d:d5:40:25:3b:7e:59:
d6:f1:c4:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:02:30 2025 by rpki-client