Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft
File: LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft (raw, json)
Hash identifier: nfmuFrLF/NXWFhTduG+750ZfThsny9bB2MK03JNoM9s=
Subject key identifier: 94:13:4D:F5:1A:98:21:DC:26:38:05:47:C8:2A:51:3B:23:1D:F5:9F
Authority key identifier: 2C:75:4A:E4:73:D9:C1:54:B8:04:B7:0E:D3:18:81:E0:25:D9:26:AA
Certificate issuer: /CN=2c754ae473d9c154b804b70ed31881e025d926aa
Certificate serial: 0197722CCB489DEEEB22BB18D0A439808884
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHVK5HPZwVS4BLcO0xiB4CXZJqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft
Manifest number: 0B6D
Signing time: Sun 15 Jun 2025 06:00:27 +0000
Manifest this update: Sun 15 Jun 2025 06:00:27 +0000
Manifest next update: Mon 16 Jun 2025 06:00:27 +0000
Files and hashes: 1: LHVK5HPZwVS4BLcO0xiB4CXZJqo.crl (hash: 8gSughRJ1UOGHMsSwOq1pZI8wgdHgn7+c1eDe5Xbco0=)
2: RIso09h5--_F82YqfcCEAd3EpSw.roa (hash: dWlymz3qci5T5aLh2Je4Ec71LNxokFg1VFDedEjsW+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/LHVK5HPZwVS4BLcO0xiB4CXZJqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:72:2c:cb:48:9d:ee:eb:22:bb:18:d0:a4:39:80:88:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c754ae473d9c154b804b70ed31881e025d926aa
Validity
Not Before: Jun 15 06:00:27 2025 GMT
Not After : Jun 16 06:00:27 2025 GMT
Subject: CN=94134df51a9821dc26380547c82a513b231df59f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a7:29:19:ae:fd:20:1d:fc:0c:1b:8a:a5:68:
9b:01:02:ad:43:aa:3d:1e:10:9d:8c:f8:e0:ce:de:
0b:5a:cc:85:7c:36:c0:0b:ef:aa:8e:df:87:4e:82:
ee:b8:7b:75:34:bf:47:d1:fb:8b:9d:57:b0:f4:dd:
cb:72:49:4e:55:12:17:7b:79:b2:2f:fd:24:af:cb:
63:de:14:a0:28:75:18:c6:ea:12:6a:7b:0f:23:f2:
d7:9a:f4:a7:ea:b7:c6:52:0c:2d:5e:97:4d:83:27:
48:b8:19:57:27:4b:2e:ba:c2:5c:86:b9:a3:39:4b:
10:ae:bf:d2:a0:2a:4c:d4:34:0f:6e:29:26:5b:61:
c1:ea:7c:6f:3c:d3:18:18:d3:93:b0:3e:68:d7:00:
ee:ec:1a:d6:55:6b:05:c7:34:bf:b9:e4:ce:1c:89:
16:5a:7c:0d:59:35:9b:24:45:79:e7:2e:4d:19:02:
ae:9c:c1:b6:55:c7:43:d0:5f:61:37:42:9f:bd:6f:
99:b7:52:21:03:e4:49:b3:7b:84:31:9c:3d:ac:e4:
0c:c1:25:f4:36:76:6a:04:74:dd:63:e3:63:9a:f9:
e0:39:d4:9a:bb:54:74:7c:75:08:66:5a:3f:bf:4b:
04:ba:38:e5:7e:17:dc:ba:b3:59:12:b0:8f:a4:49:
07:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:13:4D:F5:1A:98:21:DC:26:38:05:47:C8:2A:51:3B:23:1D:F5:9F
X509v3 Authority Key Identifier:
keyid:2C:75:4A:E4:73:D9:C1:54:B8:04:B7:0E:D3:18:81:E0:25:D9:26:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHVK5HPZwVS4BLcO0xiB4CXZJqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:0a:c4:4a:fb:54:c9:49:7c:72:b7:f1:5a:5c:7c:36:58:bf:
11:51:f3:8d:16:98:96:47:31:0d:c7:df:04:03:a9:6b:73:6b:
dc:a7:5b:e7:f5:b7:1e:91:0e:a0:91:42:77:4f:ae:9a:6f:dd:
60:0a:3f:99:b4:37:6a:98:23:d3:94:b9:e2:ff:63:f0:00:25:
c9:58:b4:f3:99:d0:73:d9:75:a2:11:45:da:82:aa:e7:cc:a8:
ee:b0:00:91:58:67:35:33:21:9c:9f:4d:2a:dd:e5:77:f5:38:
71:f4:e1:58:a5:68:a8:55:b0:53:18:30:38:5f:c6:8a:e3:85:
25:dc:14:1e:42:ad:a4:e2:f7:5a:41:97:e0:8b:dd:a7:38:6b:
28:81:d0:76:12:68:a9:d5:9f:31:5f:e4:bd:7f:53:83:46:72:
3c:fc:b3:c4:65:16:a5:5c:64:86:c0:30:34:e9:7f:7d:83:e2:
c7:3a:c2:ca:93:a4:be:30:43:9c:2b:8d:de:31:f1:89:b7:90:
f7:72:22:6a:37:b3:4c:14:63:cd:fb:3a:11:77:1f:79:4c:f9:
17:9a:c3:87:f4:7e:5f:40:70:0f:ad:b1:06:4e:79:d2:c7:59:
f8:58:cd:31:83:3e:8e:99:db:44:28:02:4f:e2:52:73:91:bf:
78:77:b0:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:40:43 2025 by rpki-client