Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft
File: LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft (raw, json)
Hash identifier: 3YblsqjPRuOmNgYu8wjQX3QOX+/Z4zJmzz640wuUWvo=
Subject key identifier: 1D:66:92:AE:B9:F6:09:D7:A2:87:90:AC:7B:77:D2:C2:41:91:32:6F
Authority key identifier: 2C:75:4A:E4:73:D9:C1:54:B8:04:B7:0E:D3:18:81:E0:25:D9:26:AA
Certificate issuer: /CN=2c754ae473d9c154b804b70ed31881e025d926aa
Certificate serial: 01989D82ED3DD77608112785C6F73D6A625A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHVK5HPZwVS4BLcO0xiB4CXZJqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft
Manifest number: 0C08
Signing time: Tue 12 Aug 2025 09:00:59 +0000
Manifest this update: Tue 12 Aug 2025 09:00:59 +0000
Manifest next update: Wed 13 Aug 2025 09:00:59 +0000
Files and hashes: 1: LHVK5HPZwVS4BLcO0xiB4CXZJqo.crl (hash: Vsgd8STFF5mhg+3A8t/HSstG7TcEGP6dJcGN3IofzSs=)
2: RIso09h5--_F82YqfcCEAd3EpSw.roa (hash: dWlymz3qci5T5aLh2Je4Ec71LNxokFg1VFDedEjsW+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/LHVK5HPZwVS4BLcO0xiB4CXZJqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9d:82:ed:3d:d7:76:08:11:27:85:c6:f7:3d:6a:62:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c754ae473d9c154b804b70ed31881e025d926aa
Validity
Not Before: Aug 12 09:00:59 2025 GMT
Not After : Aug 13 09:00:59 2025 GMT
Subject: CN=1d6692aeb9f609d7a28790ac7b77d2c24191326f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:22:95:b1:66:f2:02:20:f7:c1:6b:74:38:b2:
27:d9:7b:94:bd:ab:76:22:15:96:93:29:21:c7:81:
12:4d:b1:3d:f3:55:a6:cd:9c:ca:50:00:78:33:89:
76:dd:7a:ee:8e:15:ab:f8:04:67:2a:19:bf:bc:ad:
ae:c7:72:a5:00:bf:c3:73:4e:d9:25:a6:0c:40:07:
a1:e5:ef:7d:df:6b:9b:54:c6:55:58:af:17:8a:2c:
12:43:91:10:b8:09:5a:f7:a3:64:7d:ab:75:af:74:
68:0e:c3:66:42:2e:0d:dc:7b:35:ef:ee:cc:18:c7:
97:da:2a:3f:8c:b5:7b:ee:58:81:e3:2a:d1:99:f9:
02:8e:3b:72:1c:60:14:d0:2d:3e:be:e7:74:b2:ba:
f7:a2:5e:8c:af:b9:76:0c:d6:37:f4:32:9f:1c:2f:
4e:fa:8c:5d:78:3f:88:8c:7d:f4:2a:32:3b:50:02:
c6:7c:ca:9c:96:f7:fa:38:f8:e4:2f:40:de:b6:92:
72:ac:cf:ba:f3:78:31:3a:2e:a4:bc:a8:c0:58:7f:
ca:61:25:f8:73:40:69:2e:1e:d8:38:59:c3:0e:a4:
bb:ff:fe:39:d4:51:0d:2c:cc:f6:5a:d6:c4:d3:9a:
e4:4f:92:85:ab:19:41:d2:c0:dc:a5:d5:d2:bf:ec:
97:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:66:92:AE:B9:F6:09:D7:A2:87:90:AC:7B:77:D2:C2:41:91:32:6F
X509v3 Authority Key Identifier:
keyid:2C:75:4A:E4:73:D9:C1:54:B8:04:B7:0E:D3:18:81:E0:25:D9:26:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHVK5HPZwVS4BLcO0xiB4CXZJqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:a5:ca:98:10:16:2b:72:20:2c:fe:00:e8:d5:52:56:89:30:
53:fc:91:5c:5d:0c:16:e5:3b:e2:05:62:ba:fb:e8:46:49:03:
9d:e3:fe:40:ec:34:97:8d:8d:8f:75:c7:a1:67:e2:56:ce:f2:
49:08:ca:42:b7:bc:16:ce:be:a0:23:3f:84:e6:67:34:ad:b3:
9e:e1:18:43:7d:6b:56:31:09:47:3b:e6:f2:68:e4:83:d5:20:
f4:3c:47:20:ab:04:9a:15:8f:12:70:ba:81:f0:75:43:4a:50:
6c:c4:dd:8e:80:a5:8a:d6:9b:c5:20:fe:82:fc:8e:5e:1d:53:
e1:dd:cc:df:10:a6:99:c4:21:b6:83:7e:cc:41:03:ef:c6:8b:
f4:b0:4a:4d:24:df:e8:ea:5c:1c:10:bb:d7:5f:9b:34:62:cc:
6b:5e:9b:a4:56:51:2e:97:37:58:b2:70:ab:a0:02:d9:05:a6:
9a:53:46:ca:04:4b:b2:e2:9c:da:72:88:68:c4:a9:15:7c:d6:
fd:4b:1e:e1:2c:49:8f:ea:d3:6b:4e:41:b7:bb:3b:14:07:af:
b7:32:6d:4b:10:90:ff:61:dd:92:10:60:87:0f:8f:cb:9a:51:
18:99:60:ec:81:d4:ca:36:60:bb:c6:b5:82:4e:3f:40:36:76:
ec:68:2b:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 13:45:39 2025 by rpki-client