Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/f78d7d-44f8-4099-9a12-6db826b87994/1/LHPvCB4tVzHERXQ5c6lqv96xQss.mft
File: LHPvCB4tVzHERXQ5c6lqv96xQss.mft (raw, json)
Hash identifier: MQqLvrEPzSq780Ckxgc9GiZmOgxEKEPg3UvrCJYEPj8=
Subject key identifier: 35:1A:F1:B3:C4:AC:EF:16:9C:F9:DA:27:A2:50:6D:47:3A:4A:E1:A6
Authority key identifier: 2C:73:EF:08:1E:2D:57:31:C4:45:74:39:73:A9:6A:BF:DE:B1:42:CB
Certificate issuer: /CN=2c73ef081e2d5731c445743973a96abfdeb142cb
Certificate serial: 019881673143CE78588660350B466897137B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHPvCB4tVzHERXQ5c6lqv96xQss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/f78d7d-44f8-4099-9a12-6db826b87994/1/LHPvCB4tVzHERXQ5c6lqv96xQss.mft
Manifest number: 0718
Signing time: Wed 06 Aug 2025 22:01:20 +0000
Manifest this update: Wed 06 Aug 2025 22:01:20 +0000
Manifest next update: Thu 07 Aug 2025 22:01:20 +0000
Files and hashes: 1: 47JVgVgToP2JCPCrNinv-XHW2N4.roa (hash: v4DRTra/MLLmoU83Ast19V67vrhVaOaxeHPCp8x8/Y0=)
2: CoUsP7_oLqXmI4GuJPmWe-DgrMk.roa (hash: CDiTJKYK+x288ogOQUhmmMXeMfsax3zovLJjdT/l5es=)
3: LHPvCB4tVzHERXQ5c6lqv96xQss.crl (hash: FB3gkbUHOrCisNyIT8Q3oQJweHBJS8QVUBBb2PRxKqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/f78d7d-44f8-4099-9a12-6db826b87994/1/LHPvCB4tVzHERXQ5c6lqv96xQss.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/f78d7d-44f8-4099-9a12-6db826b87994/1/LHPvCB4tVzHERXQ5c6lqv96xQss.mft
rsync://rpki.ripe.net/repository/DEFAULT/LHPvCB4tVzHERXQ5c6lqv96xQss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 22:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:67:31:43:ce:78:58:86:60:35:0b:46:68:97:13:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c73ef081e2d5731c445743973a96abfdeb142cb
Validity
Not Before: Aug 6 22:01:20 2025 GMT
Not After : Aug 7 22:01:20 2025 GMT
Subject: CN=351af1b3c4acef169cf9da27a2506d473a4ae1a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ad:5a:f5:ec:1b:73:69:35:a3:e9:4e:86:e8:
1e:f3:83:6b:3e:ba:45:4a:98:35:1a:6c:50:fe:0b:
d7:8f:c3:c1:e2:73:e1:9b:10:c5:bc:ea:96:12:0a:
f6:fb:3e:2b:e9:9c:d3:8f:72:f6:16:69:b5:1c:b8:
62:2d:b7:ce:b8:e0:0b:71:d2:85:db:b8:25:26:82:
fa:99:52:17:4b:3a:eb:87:4c:bc:e2:e2:f6:aa:e4:
cb:2b:ef:45:fc:05:44:3b:d6:62:e3:72:54:b6:71:
8c:ec:fb:2b:fb:e7:14:9f:a7:2c:8a:80:0f:7e:67:
4a:bd:11:0e:02:d4:34:0a:2a:55:66:19:c8:5b:35:
45:9a:80:60:4d:ea:30:83:4c:e7:7f:44:f2:d9:ca:
61:24:92:4a:36:f3:0d:94:10:87:de:5a:5d:66:2c:
13:38:ab:54:95:3a:7f:3b:2c:b7:61:8f:65:19:8b:
5e:e7:b2:9f:92:0c:40:80:08:6d:15:7b:d8:54:ab:
58:a3:ce:7e:b8:0c:f1:1c:97:42:96:d1:72:3d:10:
91:32:5e:c9:c1:7f:77:99:82:53:4b:d6:12:b2:c9:
36:da:3d:22:5d:fb:cd:9d:72:68:ba:30:ff:7a:d3:
90:f7:d3:68:98:55:93:f3:4b:0d:cf:75:b4:2d:ba:
c8:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:1A:F1:B3:C4:AC:EF:16:9C:F9:DA:27:A2:50:6D:47:3A:4A:E1:A6
X509v3 Authority Key Identifier:
keyid:2C:73:EF:08:1E:2D:57:31:C4:45:74:39:73:A9:6A:BF:DE:B1:42:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHPvCB4tVzHERXQ5c6lqv96xQss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/f78d7d-44f8-4099-9a12-6db826b87994/1/LHPvCB4tVzHERXQ5c6lqv96xQss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/f78d7d-44f8-4099-9a12-6db826b87994/1/LHPvCB4tVzHERXQ5c6lqv96xQss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:4b:0b:0d:cd:e1:03:bb:a1:45:08:b9:d9:25:53:42:ee:63:
dd:58:8f:73:2f:bd:e6:40:70:18:4b:c5:f6:1c:d2:6e:9b:51:
da:c0:35:19:12:cc:2a:c6:93:bb:a4:9e:eb:f2:af:15:79:89:
25:80:c0:6a:f1:8f:de:80:27:99:ed:fe:6b:b9:ea:e4:98:24:
22:52:58:e9:31:d6:bc:c7:1a:9c:51:d7:a9:a8:59:58:71:94:
ed:9a:06:3b:96:4b:09:67:b9:14:5f:6a:30:d4:e8:08:be:ce:
5f:c5:9f:ee:97:80:fc:57:bd:71:5e:9a:70:e9:ce:7f:00:6e:
7e:e2:3f:3b:58:58:81:47:9a:ef:5e:e8:12:2c:21:34:41:f7:
18:62:75:6f:4d:bd:ca:bd:db:ad:95:9c:cb:0e:de:83:56:35:
7b:29:9a:fa:c8:95:5a:7a:b9:69:78:88:df:88:98:71:3f:db:
bc:b5:da:49:fc:ac:de:1b:2e:d1:3f:13:29:69:19:37:d0:4a:
d9:d8:60:67:67:dd:71:e6:ca:0d:e9:07:4e:b5:15:67:6f:11:
82:a8:40:66:71:0a:59:cd:4c:95:ed:57:ae:d2:e3:ea:85:61:
00:1a:4b:c8:8e:d1:17:4b:0d:76:ae:bf:6c:c1:77:ae:27:dc:
ca:8c:eb:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 07:29:06 2025 by rpki-client