Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.mft
File: lHMg0DCTAXjm987vkdKrh4TT3BY.mft (raw, json)
Hash identifier: QzKnuKC3is+xwFMNRdaMb2G/m8+/32IQ25TZoGRc5Vg=
Subject key identifier: A0:F7:84:FE:9F:FE:44:BD:56:25:60:66:F1:1A:8D:70:29:88:27:07
Authority key identifier: 94:73:20:D0:30:93:01:78:E6:F7:CE:EF:91:D2:AB:87:84:D3:DC:16
Certificate issuer: /CN=947320d030930178e6f7ceef91d2ab8784d3dc16
Certificate serial: 01987BD2746576B4EAB3AF06BB56D9A8813F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lHMg0DCTAXjm987vkdKrh4TT3BY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.mft
Manifest number: 1248
Signing time: Tue 05 Aug 2025 20:00:46 +0000
Manifest this update: Tue 05 Aug 2025 20:00:46 +0000
Manifest next update: Wed 06 Aug 2025 20:00:46 +0000
Files and hashes: 1: 5QMHmJgfqvSExR78QZoDl1UWmsA.roa (hash: Dbmsjz6HJzMNQXjckNup+UFifmkcVaFAdGg2/Xlr06g=)
2: 9Hm8EAVuf4tqOcHaH0y7y-1Ym9k.roa (hash: FodBXOCVdl5JGOEkTl9E8+4jK0F+A6PAABCoahGBKds=)
3: ChcX6dEQMX7PgnkGnKeX9TQTPSU.roa (hash: 9GX5XaBmVeFjM4n7HjAG7e5pB9imRwZnEdAGfd1ulvc=)
4: I2s0NE0e0ldLesJa5IwWq_3YoQY.roa (hash: 32nxkp+mnSpxawrjeJdAmkwgRYzly761fgfPTbswaVo=)
5: Sx4GrZjuWgu9iofcfquhW4vyGIs.roa (hash: Klrfo3hpXP5vl7y24egIgTTHUAXo1XLHGZTsrjfNBg8=)
6: lHMg0DCTAXjm987vkdKrh4TT3BY.crl (hash: Cs8Mj4vl5VsbUQOby32kZ/t/N67pxV4G8Bu93SAlvi8=)
7: wV_UPXPoWr2rMigTEJujKEPHkRU.roa (hash: sWrQ1dC0i8v5NdCh/KJb/CYIzz2swLex9WzWGoX8cPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lHMg0DCTAXjm987vkdKrh4TT3BY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 20:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:d2:74:65:76:b4:ea:b3:af:06:bb:56:d9:a8:81:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=947320d030930178e6f7ceef91d2ab8784d3dc16
Validity
Not Before: Aug 5 20:00:46 2025 GMT
Not After : Aug 6 20:00:46 2025 GMT
Subject: CN=a0f784fe9ffe44bd56256066f11a8d7029882707
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a2:a7:9d:a1:29:23:31:d7:79:35:7f:c6:9f:
76:20:c4:a6:f9:3a:eb:9d:eb:ff:1a:b3:eb:17:63:
84:76:3d:de:7c:30:e8:78:4c:c1:f9:a4:ed:11:76:
6a:84:e6:d6:6d:c5:38:18:78:05:b9:83:8f:7d:8e:
f6:dc:9b:4b:c3:08:37:4d:ae:7b:6a:2d:ed:b6:d3:
11:51:f7:82:fb:80:5d:0c:da:0e:a2:98:c5:4a:1d:
61:7a:97:3c:01:bc:7c:bc:30:0e:98:4e:85:6c:dd:
48:82:1d:74:0f:5a:79:a3:60:50:3b:61:c5:10:8b:
f9:d3:4c:99:9c:97:f4:8d:95:9a:7f:27:1b:0d:b2:
88:99:5a:a1:92:c0:4a:10:14:b1:96:e7:dc:07:8d:
83:8b:d2:a7:ed:88:83:a4:99:07:38:13:74:d5:b3:
a0:14:4b:d2:b5:5d:ee:3b:60:06:d2:ff:82:c8:07:
ed:25:0d:77:7f:80:71:5a:b2:f0:aa:ba:44:eb:fd:
5d:42:99:ac:b6:e7:f4:2d:cc:37:c1:44:5d:72:a8:
ad:89:74:c4:28:60:d2:09:c0:d6:ee:1d:2f:e9:c7:
d1:8b:bc:81:f9:ea:1e:8a:32:71:91:e5:eb:2f:76:
f1:e8:cc:79:91:21:e9:89:48:c8:f2:2f:2f:e2:90:
f1:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:F7:84:FE:9F:FE:44:BD:56:25:60:66:F1:1A:8D:70:29:88:27:07
X509v3 Authority Key Identifier:
keyid:94:73:20:D0:30:93:01:78:E6:F7:CE:EF:91:D2:AB:87:84:D3:DC:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lHMg0DCTAXjm987vkdKrh4TT3BY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:c1:4f:1f:39:fe:e8:22:b4:ee:1b:b6:e7:b8:1f:94:66:49:
90:3f:06:95:bc:05:18:d3:ff:57:ea:39:60:38:b2:b3:41:87:
44:42:ff:76:d2:7e:f8:99:a9:71:ed:d4:78:44:49:d0:97:26:
9d:eb:4b:63:eb:14:0c:54:c9:35:99:2f:db:a7:db:ee:a2:86:
e2:e3:3d:ff:9c:1c:ed:b8:7b:00:77:9b:3b:52:f8:32:84:d0:
a1:a4:78:81:9c:f5:e4:6e:e5:20:95:3a:fe:aa:4d:75:31:7f:
3d:a6:64:80:43:e6:6a:bc:72:0b:6e:c4:bf:e6:c7:92:08:cd:
ba:ac:2c:e1:89:d3:1e:9a:92:af:ae:13:67:5d:ef:e8:ab:98:
21:6c:b8:6a:50:e3:bf:a6:bf:15:c1:10:1a:a6:3a:47:04:66:
29:27:0f:3b:7b:4e:d2:ad:5d:5e:86:85:69:77:86:14:3f:d1:
3a:f4:dd:32:2c:26:4e:87:c8:36:4e:68:43:9c:2d:87:fa:cb:
e6:55:b0:40:dd:04:c5:93:cf:d0:98:61:c5:56:70:9b:5e:6a:
2b:d6:62:ba:e2:76:c6:f4:fc:f5:41:d0:5b:1c:4c:60:42:18:
57:bf:d5:01:5b:14:cc:19:40:06:d9:52:d8:3a:54:6f:c0:cb:
52:77:4e:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:55:09 2025 by rpki-client