Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/LhmWbA6l3zqYf4NlUktRKMun_JA.mft
File: LhmWbA6l3zqYf4NlUktRKMun_JA.mft (raw, json)
Hash identifier: ZLn9aZ7YMRwZY0cSzJf86jOqzY/esdFjQD7pdNEK3vA=
Subject key identifier: C3:D9:80:94:2D:B1:9F:CD:FE:42:E2:E2:E7:33:E9:9F:09:EB:2C:24
Authority key identifier: 2E:19:96:6C:0E:A5:DF:3A:98:7F:83:65:52:4B:51:28:CB:A7:FC:90
Certificate issuer: /CN=2e19966c0ea5df3a987f8365524b5128cba7fc90
Certificate serial: 01987CAE40A625CC6BF117C5DB3AB340BE8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhmWbA6l3zqYf4NlUktRKMun_JA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/LhmWbA6l3zqYf4NlUktRKMun_JA.mft
Manifest number: 161C
Signing time: Wed 06 Aug 2025 00:00:51 +0000
Manifest this update: Wed 06 Aug 2025 00:00:51 +0000
Manifest next update: Thu 07 Aug 2025 00:00:51 +0000
Files and hashes: 1: EB2pKsJqEpEjhB4YuLKeyjkIp9Q.roa (hash: ruDUWZ/Fl5sEVfjlgGOsVStJ3zZdJ/uyG7EZiN/zjl0=)
2: LhmWbA6l3zqYf4NlUktRKMun_JA.crl (hash: y7cHt1ghao9Lg2jEO6ELAPuBdIeAsWvGG5HKD5pnifU=)
3: iOSgDas4E473RISs54ZCqJXEL1Y.roa (hash: cm025SWzl2vuQDv4U8M4vf0+/0CnnGay76ie0c/nESQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/LhmWbA6l3zqYf4NlUktRKMun_JA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/LhmWbA6l3zqYf4NlUktRKMun_JA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LhmWbA6l3zqYf4NlUktRKMun_JA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:ae:40:a6:25:cc:6b:f1:17:c5:db:3a:b3:40:be:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e19966c0ea5df3a987f8365524b5128cba7fc90
Validity
Not Before: Aug 6 00:00:51 2025 GMT
Not After : Aug 7 00:00:51 2025 GMT
Subject: CN=c3d980942db19fcdfe42e2e2e733e99f09eb2c24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ca:84:d0:08:52:38:59:af:9c:d9:00:a7:c8:
b7:c9:b2:dc:a8:74:64:2e:6a:3d:25:a7:52:86:b5:
2d:8a:88:df:ce:1e:c7:6e:61:e2:84:31:20:c3:3a:
44:ed:bc:f5:86:44:80:83:01:a3:2a:47:6e:1c:e2:
cc:51:ca:e6:e3:e1:41:40:61:95:41:43:c2:f0:a7:
4e:73:97:df:83:10:23:94:59:f8:d6:03:41:57:33:
4d:0d:91:4d:c4:87:82:00:73:fd:cd:0e:55:41:a3:
45:76:16:3d:d1:bf:48:ef:05:71:60:87:a0:75:95:
78:85:29:9d:c5:34:29:89:f8:ab:ee:82:46:b7:cb:
ec:73:5b:97:75:9b:c7:98:57:b7:86:1f:0c:60:1c:
83:9c:b9:18:8c:e1:c4:9c:b7:ec:df:fd:44:cb:a6:
9a:ea:22:b6:d0:60:24:54:39:d4:a3:42:02:9b:5a:
5b:9f:1b:23:8b:a5:7c:99:85:53:76:16:24:e7:ed:
bd:7d:13:73:1c:c1:d1:4c:92:bb:dd:01:68:5e:92:
e1:a7:59:43:3a:2b:95:6f:36:ec:f1:f1:47:85:a8:
6a:c6:90:fc:32:61:e8:5c:ad:fc:95:3c:76:f7:a7:
7b:ef:0c:f6:41:e5:f2:b9:ad:d8:bd:fb:64:6d:6b:
37:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:D9:80:94:2D:B1:9F:CD:FE:42:E2:E2:E7:33:E9:9F:09:EB:2C:24
X509v3 Authority Key Identifier:
keyid:2E:19:96:6C:0E:A5:DF:3A:98:7F:83:65:52:4B:51:28:CB:A7:FC:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhmWbA6l3zqYf4NlUktRKMun_JA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/LhmWbA6l3zqYf4NlUktRKMun_JA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/LhmWbA6l3zqYf4NlUktRKMun_JA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:2d:1c:38:bb:09:9b:71:da:0d:00:92:18:70:f7:a1:dc:37:
82:78:be:a8:6b:9b:0b:ad:01:76:59:07:15:d2:e5:30:63:58:
fd:24:64:81:ef:dc:e3:c6:67:6b:09:c6:d5:61:97:f7:75:3b:
74:2a:6f:1f:e4:fb:54:9c:a5:7c:a7:43:f6:ed:e1:b2:1f:6e:
69:a6:3f:76:21:d4:36:aa:a8:65:91:9c:ba:76:91:fc:ef:bd:
31:73:42:8d:ea:55:05:12:57:13:79:ea:86:a2:c5:90:cf:9b:
2e:a7:0d:7b:2a:98:a4:af:06:86:47:b0:da:04:e1:e8:4c:17:
df:d1:1b:d6:cd:9b:c6:d0:ca:de:30:6e:61:e1:c8:fa:56:57:
72:00:97:f2:76:6c:ee:e5:db:11:e5:20:7a:5a:0c:64:0d:80:
3a:a2:4f:54:88:2f:95:50:39:83:16:0f:2b:3e:fe:36:7c:7a:
07:d5:25:7c:fe:62:ed:72:0b:fa:aa:31:66:42:b5:ab:42:4e:
81:0d:c2:f6:4d:11:07:60:60:57:f6:41:a6:61:dd:c2:4d:9b:
97:71:cc:3a:3a:21:f1:6c:2a:67:11:c6:79:32:63:9f:5f:82:
82:96:8e:9e:bc:82:6e:fc:05:57:2f:f3:63:c5:85:c7:1e:cc:
7a:48:32:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:54:52 2025 by rpki-client