Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/6c4c26-e34a-4336-90c8-f90ae9966428/1/lH4-X564CJtcqU845lF8-8WyAGM.mft
File: lH4-X564CJtcqU845lF8-8WyAGM.mft (raw, json)
Hash identifier: fb6j1A6T5pO3KJLkJnULfPgl76rdDWqUA8BB6izT5Eg=
Subject key identifier: 87:E4:8B:22:78:74:CF:20:64:BA:F2:67:60:CD:0E:96:D2:14:29:3E
Authority key identifier: 94:7E:3E:5F:9E:B8:08:9B:5C:A9:4F:38:E6:51:7C:FB:C5:B2:00:63
Certificate issuer: /CN=947e3e5f9eb8089b5ca94f38e6517cfbc5b20063
Certificate serial: 01977978C27AA2DAACBF3A9B1E0B9BB02AFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lH4-X564CJtcqU845lF8-8WyAGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4c26-e34a-4336-90c8-f90ae9966428/1/lH4-X564CJtcqU845lF8-8WyAGM.mft
Manifest number: 0424
Signing time: Mon 16 Jun 2025 16:00:46 +0000
Manifest this update: Mon 16 Jun 2025 16:00:46 +0000
Manifest next update: Tue 17 Jun 2025 16:00:46 +0000
Files and hashes: 1: 8JJmvRAktSEG3OdLUZKBNwR6ws0.roa (hash: TC8WkMj5LqYLotUQsIJXNU0W5IJEuyjKyKXTJdzLmbM=)
2: lH4-X564CJtcqU845lF8-8WyAGM.crl (hash: f4AJZ08VzjgQpqRPJ/ZKZHRC0Ggjial7ZAG1A63B4cM=)
3: zozOOHZMPpO8TU7R7OlzFjX6nTU.roa (hash: DO9vuDN/M4q7UhQA8k+ziHqB7tX/m/+CIduSaenQLlY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4c26-e34a-4336-90c8-f90ae9966428/1/lH4-X564CJtcqU845lF8-8WyAGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4c26-e34a-4336-90c8-f90ae9966428/1/lH4-X564CJtcqU845lF8-8WyAGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lH4-X564CJtcqU845lF8-8WyAGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 14:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:79:78:c2:7a:a2:da:ac:bf:3a:9b:1e:0b:9b:b0:2a:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=947e3e5f9eb8089b5ca94f38e6517cfbc5b20063
Validity
Not Before: Jun 16 16:00:46 2025 GMT
Not After : Jun 17 16:00:46 2025 GMT
Subject: CN=87e48b227874cf2064baf26760cd0e96d214293e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:a4:0a:d5:1d:60:ef:76:47:68:9c:a1:5f:bf:
d3:55:9d:50:c6:f2:bf:f8:2d:c5:da:58:f0:b2:c0:
21:f9:86:39:bc:15:dc:a1:1b:b9:23:07:2c:74:a9:
e1:f2:5f:94:dc:af:08:75:95:67:13:cd:83:34:49:
9f:a6:e7:c5:fe:e1:03:32:0f:32:6c:2d:16:9b:72:
af:73:0d:68:0e:f4:a6:a2:0b:3c:b1:0b:28:c4:c8:
05:6e:95:01:14:5f:b5:48:3d:2b:c8:79:76:fb:d4:
59:b9:26:13:2e:b8:a7:e1:1b:c0:24:4a:eb:da:59:
d5:08:23:11:30:76:22:2b:a4:03:7b:1c:f5:5b:cc:
95:7a:cb:a2:78:ed:69:02:23:02:4b:35:e7:04:2f:
d8:f1:e5:49:e7:00:a1:0b:6a:70:0f:4c:88:37:02:
12:c0:a6:e3:6c:e7:24:a6:f7:2d:d1:67:b0:5d:a3:
5d:3d:bf:82:a2:88:d9:fd:ce:65:1e:02:d4:f1:3a:
50:61:15:77:a3:46:71:f9:b9:a9:c5:c4:35:52:b9:
d5:4a:74:cd:09:48:6e:00:25:ab:e0:dd:6b:ff:a9:
20:49:4d:74:72:f9:48:98:84:f5:15:79:52:50:4c:
88:87:e9:c5:06:41:e3:af:b6:e4:18:0c:d6:a0:a8:
fb:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:E4:8B:22:78:74:CF:20:64:BA:F2:67:60:CD:0E:96:D2:14:29:3E
X509v3 Authority Key Identifier:
keyid:94:7E:3E:5F:9E:B8:08:9B:5C:A9:4F:38:E6:51:7C:FB:C5:B2:00:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lH4-X564CJtcqU845lF8-8WyAGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4c26-e34a-4336-90c8-f90ae9966428/1/lH4-X564CJtcqU845lF8-8WyAGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4c26-e34a-4336-90c8-f90ae9966428/1/lH4-X564CJtcqU845lF8-8WyAGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:5e:49:3d:3f:e7:15:da:59:be:a6:aa:c3:25:c9:f7:c6:04:
18:4d:4d:b6:da:9c:64:78:94:fb:12:52:7f:a5:33:87:58:6b:
cf:b9:87:21:14:cd:a6:2d:32:12:1a:02:46:26:94:7a:e0:77:
69:16:75:d4:e4:0a:90:2c:bb:ba:6e:f1:f9:4a:54:c6:ce:30:
83:f0:e1:56:f4:8e:52:6a:dd:9e:0a:ab:7a:ff:e5:92:6b:c5:
1c:80:55:cc:64:0f:1b:9f:c7:3b:15:dd:c4:29:75:15:dc:12:
cb:7e:50:4d:01:4c:c6:9c:4c:d3:cf:52:df:bd:33:6e:ce:aa:
8f:93:9b:5b:08:84:52:da:d0:05:5e:8d:c0:1c:a9:c7:f2:4f:
c9:de:a7:72:82:e0:ed:57:28:59:81:15:7d:ec:08:6d:6c:4b:
19:0a:ef:2c:db:ae:ed:b8:7d:21:96:b2:14:f2:c1:a7:fe:f5:
10:d1:8c:5d:ef:58:a3:1b:d6:e2:2c:f5:35:e9:75:46:ec:fc:
9f:0f:0d:6c:59:cf:fc:5c:c0:d0:6c:57:26:4e:37:86:18:c9:
cf:37:78:c4:8d:34:59:c1:9a:e1:25:f7:f2:3a:b3:d3:d8:ee:
6d:4e:b1:82:8a:4e:7b:f7:fd:bf:80:05:ed:0a:ac:88:64:c7:
19:cd:6c:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 20:08:19 2025 by rpki-client