Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/6c4c26-e34a-4336-90c8-f90ae9966428/1/lH4-X564CJtcqU845lF8-8WyAGM.mft
File: lH4-X564CJtcqU845lF8-8WyAGM.mft (raw, json)
Hash identifier: 0zGPeatXBZgfEPSzoSgtYAVxYu72J44tPMoxEP4xcpA=
Subject key identifier: 9F:19:65:CB:13:F1:0C:71:44:BB:E1:78:F9:19:1D:CF:87:5A:98:10
Authority key identifier: 94:7E:3E:5F:9E:B8:08:9B:5C:A9:4F:38:E6:51:7C:FB:C5:B2:00:63
Certificate issuer: /CN=947e3e5f9eb8089b5ca94f38e6517cfbc5b20063
Certificate serial: 01989749B4EC6547C720399C2C89D06CB3CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lH4-X564CJtcqU845lF8-8WyAGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4c26-e34a-4336-90c8-f90ae9966428/1/lH4-X564CJtcqU845lF8-8WyAGM.mft
Manifest number: 04B8
Signing time: Mon 11 Aug 2025 04:00:46 +0000
Manifest this update: Mon 11 Aug 2025 04:00:46 +0000
Manifest next update: Tue 12 Aug 2025 04:00:46 +0000
Files and hashes: 1: 8JJmvRAktSEG3OdLUZKBNwR6ws0.roa (hash: TC8WkMj5LqYLotUQsIJXNU0W5IJEuyjKyKXTJdzLmbM=)
2: lH4-X564CJtcqU845lF8-8WyAGM.crl (hash: +a01w4E1q4nc7jM8M2yff9nou9csVyqLAev5eJ87r5Y=)
3: zozOOHZMPpO8TU7R7OlzFjX6nTU.roa (hash: DO9vuDN/M4q7UhQA8k+ziHqB7tX/m/+CIduSaenQLlY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4c26-e34a-4336-90c8-f90ae9966428/1/lH4-X564CJtcqU845lF8-8WyAGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4c26-e34a-4336-90c8-f90ae9966428/1/lH4-X564CJtcqU845lF8-8WyAGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lH4-X564CJtcqU845lF8-8WyAGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:49:b4:ec:65:47:c7:20:39:9c:2c:89:d0:6c:b3:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=947e3e5f9eb8089b5ca94f38e6517cfbc5b20063
Validity
Not Before: Aug 11 04:00:46 2025 GMT
Not After : Aug 12 04:00:46 2025 GMT
Subject: CN=9f1965cb13f10c7144bbe178f9191dcf875a9810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8a:67:b7:8a:74:0b:60:04:b8:5b:7d:bd:d1:
c4:68:0b:c4:0e:53:f4:2f:05:ac:1c:a1:92:f0:93:
58:d2:34:26:eb:46:42:4b:c2:f9:c9:d7:fd:54:88:
55:86:5c:cf:b2:da:83:a5:8d:41:1e:b0:d2:ea:cc:
6b:99:88:ea:64:8e:5c:32:82:80:b6:04:be:cb:b7:
17:ac:d7:36:7a:65:62:c7:55:82:44:ce:59:28:17:
54:1f:1a:21:86:f0:7f:18:fe:31:bf:e1:8e:fd:9d:
53:d8:c6:4c:75:2f:99:b0:11:92:5c:87:ba:6d:e1:
f1:0b:7b:a1:90:56:6a:26:ff:11:dd:f2:64:f3:2d:
dd:07:b1:1c:38:f4:4a:3a:09:f3:2c:9a:3d:72:a3:
e3:b8:cd:d8:48:67:c3:2e:b3:28:e5:12:2b:43:90:
a1:0e:d5:68:ed:6b:d0:f7:39:17:b1:f5:2f:12:d6:
cf:c4:a7:72:9e:7e:56:64:bd:03:e1:d8:31:63:69:
c8:ad:ec:5a:09:17:9d:af:64:b2:f6:0d:4e:e9:9f:
f6:70:65:56:d3:a4:3d:ef:d8:09:13:32:8c:8c:19:
0b:53:a1:41:da:0d:71:41:15:8e:a7:b0:22:3c:78:
46:d8:51:88:41:7f:20:b6:bd:9c:36:3e:b7:2f:39:
08:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:19:65:CB:13:F1:0C:71:44:BB:E1:78:F9:19:1D:CF:87:5A:98:10
X509v3 Authority Key Identifier:
keyid:94:7E:3E:5F:9E:B8:08:9B:5C:A9:4F:38:E6:51:7C:FB:C5:B2:00:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lH4-X564CJtcqU845lF8-8WyAGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4c26-e34a-4336-90c8-f90ae9966428/1/lH4-X564CJtcqU845lF8-8WyAGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4c26-e34a-4336-90c8-f90ae9966428/1/lH4-X564CJtcqU845lF8-8WyAGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:c2:41:02:b7:5e:7c:80:98:22:1e:07:b3:05:18:d1:c7:01:
5b:46:0c:ef:16:f3:a7:39:51:44:36:16:91:08:56:df:69:77:
80:d4:05:97:bf:dd:17:26:ec:9d:c8:5f:c3:26:ed:63:e4:55:
8e:d1:3d:52:ee:55:12:ce:7b:d7:4e:65:af:fb:6e:cc:df:db:
52:56:77:66:1c:35:df:41:91:71:ba:f7:ab:fa:b2:98:0b:8e:
38:82:20:a0:74:24:dd:a7:27:3d:30:45:73:66:29:d2:fa:d5:
64:75:44:8d:24:2e:b8:41:71:08:e8:73:bf:9e:f4:b6:cc:ac:
c4:34:18:26:1f:c4:c3:80:be:c4:c0:f8:93:e2:0b:9b:7e:c4:
20:61:2c:78:51:22:60:be:47:20:72:f3:8f:2f:6a:b6:55:49:
f5:16:40:74:25:3e:88:fb:61:54:c2:5d:b6:0c:3f:c6:68:58:
bb:34:d9:0d:e8:58:c5:ca:94:54:59:71:d1:a1:8b:c2:68:d7:
47:50:7f:3d:fe:0e:5d:26:7c:aa:78:e3:9f:b8:34:12:9b:ae:
cf:ce:e9:77:d6:2d:7b:ac:70:3e:d2:d0:19:10:c3:e1:d4:f4:
25:c2:d8:ea:db:0c:c6:39:94:dd:04:a8:c9:de:ca:d5:b5:89:
19:3c:a4:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 05:52:25 2025 by rpki-client