Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/LhmWbA6l3zqYf4NlUktRKMun_JA.mft
File: LhmWbA6l3zqYf4NlUktRKMun_JA.mft (raw, json)
Hash identifier: dMBJOItTNu2BXGtLvtm2RWZ5dcaWpDw1NDHP/PjPUKw=
Subject key identifier: 51:32:74:B2:E3:6B:90:74:4F:CE:38:AC:2D:B2:B5:D8:63:76:7D:50
Authority key identifier: 2E:19:96:6C:0E:A5:DF:3A:98:7F:83:65:52:4B:51:28:CB:A7:FC:90
Certificate issuer: /CN=2e19966c0ea5df3a987f8365524b5128cba7fc90
Certificate serial: 0197741BA0B776C2AE07E0A01801B96818CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhmWbA6l3zqYf4NlUktRKMun_JA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/LhmWbA6l3zqYf4NlUktRKMun_JA.mft
Manifest number: 1593
Signing time: Sun 15 Jun 2025 15:00:56 +0000
Manifest this update: Sun 15 Jun 2025 15:00:56 +0000
Manifest next update: Mon 16 Jun 2025 15:00:56 +0000
Files and hashes: 1: EB2pKsJqEpEjhB4YuLKeyjkIp9Q.roa (hash: ruDUWZ/Fl5sEVfjlgGOsVStJ3zZdJ/uyG7EZiN/zjl0=)
2: LhmWbA6l3zqYf4NlUktRKMun_JA.crl (hash: IkyLTLIozQIhMVTvbN5Tnujz3sVVMUqdMwG4T36dJWc=)
3: iOSgDas4E473RISs54ZCqJXEL1Y.roa (hash: cm025SWzl2vuQDv4U8M4vf0+/0CnnGay76ie0c/nESQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/LhmWbA6l3zqYf4NlUktRKMun_JA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/LhmWbA6l3zqYf4NlUktRKMun_JA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LhmWbA6l3zqYf4NlUktRKMun_JA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:74:1b:a0:b7:76:c2:ae:07:e0:a0:18:01:b9:68:18:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e19966c0ea5df3a987f8365524b5128cba7fc90
Validity
Not Before: Jun 15 15:00:56 2025 GMT
Not After : Jun 16 15:00:56 2025 GMT
Subject: CN=513274b2e36b90744fce38ac2db2b5d863767d50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:c2:ba:87:12:3a:11:34:32:4a:69:da:71:55:
aa:bb:fe:78:7f:4a:10:1e:12:3a:89:60:a2:6b:cf:
27:83:7b:d7:74:14:67:6e:f3:ff:b3:8e:fd:d9:19:
56:a7:d6:04:dc:7d:50:2f:31:c0:e4:d9:f2:a4:cd:
84:cb:db:b5:63:dd:60:42:21:b8:18:0d:55:96:02:
f4:69:23:e5:77:92:d0:dc:73:dc:0c:19:1e:e6:2d:
8f:13:73:05:44:97:16:78:31:16:70:97:41:3b:63:
49:fb:e5:d8:0d:00:b8:fb:8f:e0:f0:b5:e2:d5:27:
fd:c0:49:5a:c6:b9:6f:e1:58:d9:68:68:a0:51:42:
83:c3:39:28:58:5b:f6:5d:93:21:9c:7b:33:5d:00:
ee:0e:0d:1d:6c:cb:07:b8:0f:c1:ea:25:15:d5:7f:
48:5c:87:8d:b6:8d:57:e5:98:53:92:2a:be:6d:c8:
3d:7e:de:1c:8e:60:92:ac:a8:4b:bb:89:7a:dc:7a:
1b:4e:4a:2b:1f:d1:77:9b:56:1d:43:b8:02:75:f6:
16:dc:c2:1d:d8:7b:e8:01:9e:b9:a7:d1:de:02:59:
74:ec:20:49:06:ce:00:86:02:74:8a:91:1a:34:53:
59:b6:f8:5e:64:81:45:48:da:e4:4f:be:88:84:ae:
06:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:32:74:B2:E3:6B:90:74:4F:CE:38:AC:2D:B2:B5:D8:63:76:7D:50
X509v3 Authority Key Identifier:
keyid:2E:19:96:6C:0E:A5:DF:3A:98:7F:83:65:52:4B:51:28:CB:A7:FC:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhmWbA6l3zqYf4NlUktRKMun_JA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/LhmWbA6l3zqYf4NlUktRKMun_JA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/LhmWbA6l3zqYf4NlUktRKMun_JA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:d2:10:26:59:e3:82:4d:d3:d8:dc:b4:aa:36:9f:52:df:91:
b3:0b:2e:9b:d3:4b:b4:de:ba:76:44:40:3a:50:de:e6:20:ec:
e8:b6:a9:1f:19:fd:aa:59:f7:bc:32:34:d6:4f:8e:79:01:ba:
37:6d:79:65:6f:95:89:25:ed:02:c8:82:45:bf:74:70:c4:e0:
d0:7f:05:d8:78:e8:33:e8:e7:77:f4:ac:cb:b2:77:5b:e7:96:
65:27:4f:07:25:4c:aa:3e:5c:d3:83:51:b6:c0:26:26:0a:59:
41:91:fc:34:3c:8d:44:fe:de:1b:5c:bc:6c:4a:2a:18:e9:00:
b5:9a:8e:a4:7c:e6:e2:ef:23:57:e3:85:83:10:b0:88:e7:fd:
3c:b3:e5:1d:0b:c1:60:a4:c2:cb:cc:67:04:07:78:3c:00:be:
fa:11:96:6d:71:b0:da:da:88:87:21:99:6a:ab:17:0d:2e:89:
ab:72:7e:fe:dd:57:0d:d8:33:dd:53:71:a5:ca:87:b7:d6:99:
f2:3e:96:a7:a0:86:88:ee:53:8e:60:72:52:22:8e:21:82:7f:
7e:e7:07:78:73:7d:28:0a:a1:4c:18:0f:36:ac:30:ee:15:8a:
dd:04:66:ef:2c:55:5a:40:9d:39:1a:31:82:cd:b6:0c:4c:42:
ab:a6:d9:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:37:30 2025 by rpki-client