Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.mft
File: lhud90XDLfJ98z68_VNvGeE0dP4.mft (raw, json)
Hash identifier: sL7/ecEDNkbLi0dqPkHwdKS+EtcgZ+roynNPcaIz3O8=
Subject key identifier: 07:47:E7:23:84:7E:24:B6:5B:EC:A0:B7:B1:DE:BD:53:99:D0:04:B2
Authority key identifier: 96:1B:9D:F7:45:C3:2D:F2:7D:F3:3E:BC:FD:53:6F:19:E1:34:74:FE
Certificate issuer: /CN=961b9df745c32df27df33ebcfd536f19e13474fe
Certificate serial: 01976C2B21C89E69FB2FFCE95F38E0D4BC71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lhud90XDLfJ98z68_VNvGeE0dP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.mft
Manifest number: 0EA8
Signing time: Sat 14 Jun 2025 02:00:55 +0000
Manifest this update: Sat 14 Jun 2025 02:00:55 +0000
Manifest next update: Sun 15 Jun 2025 02:00:55 +0000
Files and hashes: 1: 3LMtRmONGNLMLTZbv-22SKS_G_A.roa (hash: pio5aJGvlnIF4jwmfbABDVK+nPuVznK9IHAqeg47uOI=)
2: 8cYySboA2VaDBExXOdn2f8YI2Iw.roa (hash: XrQTlxZOLpNHFd8Q5dqkWIouJ0kbCEk8FXuJ6lAGYRM=)
3: AW_xXvWFujKuLbVm-SnUT_Zjgxw.roa (hash: nFG/6G17wzGxW8RG1K73vy6beJj5zW9L3o6YXtPyInc=)
4: lhud90XDLfJ98z68_VNvGeE0dP4.crl (hash: 2Vy3Kn0SFfK4JBM7fdNzz6VnlnqDpHQqTrKBTxeYJaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lhud90XDLfJ98z68_VNvGeE0dP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2b:21:c8:9e:69:fb:2f:fc:e9:5f:38:e0:d4:bc:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=961b9df745c32df27df33ebcfd536f19e13474fe
Validity
Not Before: Jun 14 02:00:55 2025 GMT
Not After : Jun 15 02:00:55 2025 GMT
Subject: CN=0747e723847e24b65beca0b7b1debd5399d004b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:41:67:68:92:dc:d9:ff:87:89:7c:e8:da:cb:
d8:4f:de:47:31:95:5d:49:d3:c2:bf:8a:9b:85:46:
00:cf:4a:bd:cb:b3:67:cd:8d:e5:cd:7a:f2:41:49:
cc:12:c6:f0:00:0f:ca:f8:b1:25:6c:7d:a8:91:aa:
3b:f7:46:21:b0:d4:c5:0b:7a:69:f3:0e:5d:3e:d5:
af:de:08:28:ee:c8:87:35:b8:fb:32:24:47:c4:93:
17:ae:9f:dd:8d:a6:9e:02:26:5a:8d:c2:80:29:eb:
e2:f8:f1:d6:7d:2a:1d:82:78:f9:3a:46:29:04:b1:
34:ed:ac:09:4c:45:b1:66:c2:8d:cc:17:51:d9:e8:
91:bb:5b:e3:23:3e:25:0f:37:e7:84:8c:21:9d:83:
f9:3f:10:31:b7:fb:59:29:de:45:89:9f:ef:73:19:
14:05:fa:52:d9:c9:c1:26:b3:5b:c7:cd:47:e0:43:
4e:33:f0:5f:b2:66:40:58:bb:2e:88:92:81:65:aa:
d7:09:14:15:ee:dd:b4:c0:93:9c:99:e1:f8:65:9b:
63:8b:32:ac:a0:97:85:61:7f:12:ed:57:0b:a4:11:
07:d0:59:36:09:c2:39:73:d5:b5:71:18:d8:8f:29:
5b:60:ca:78:d7:88:e9:fd:4c:0a:88:05:23:18:9a:
10:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:47:E7:23:84:7E:24:B6:5B:EC:A0:B7:B1:DE:BD:53:99:D0:04:B2
X509v3 Authority Key Identifier:
keyid:96:1B:9D:F7:45:C3:2D:F2:7D:F3:3E:BC:FD:53:6F:19:E1:34:74:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhud90XDLfJ98z68_VNvGeE0dP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:93:cb:00:31:53:57:c0:0b:a9:a7:83:d7:f7:1a:c6:e7:ae:
1e:32:a1:98:c3:ca:a9:bf:f3:a0:ad:3b:e8:59:79:5f:5d:d1:
33:0c:8a:3d:9a:12:63:91:78:b2:7f:92:a2:7f:9b:83:14:06:
c1:ba:eb:73:d8:68:64:97:91:c4:03:d1:cb:b0:eb:e9:00:58:
6d:20:b0:0a:6e:e1:ce:81:cb:cc:8e:63:be:80:ff:86:72:a3:
29:47:5b:63:4b:d9:64:07:1c:99:67:af:65:9f:a8:2a:4c:93:
f4:27:cf:bc:1d:28:88:de:34:c2:03:a0:83:2e:c8:b5:d6:46:
be:07:d1:89:35:1a:9a:1b:93:d1:fa:83:87:7c:31:fa:e2:d2:
62:cf:27:c3:a2:1e:59:fd:5a:b4:90:fc:57:dd:30:17:da:ee:
45:62:bc:d6:c8:a1:70:fe:eb:b3:bb:fe:8d:4f:b7:72:eb:58:
3b:fd:05:e9:77:43:02:73:b6:cf:e6:93:be:f6:2b:7d:b4:34:
9a:a5:12:25:99:3e:6a:32:c6:87:2b:7e:d8:50:6c:08:74:bf:
43:6c:d8:5f:87:47:3f:f7:09:ac:d1:2a:15:58:48:a1:2a:6b:
31:c7:b6:cd:20:21:3a:09:08:b1:62:76:c2:18:99:89:09:b3:
77:5f:24:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsKyHInmn7L/zpXzjg1LxxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2MWI5ZGY3NDVjMzJkZjI3ZGYzM2ViY2ZkNTM2ZjE5ZTEz
NDc0ZmUwHhcNMjUwNjE0MDIwMDU1WhcNMjUwNjE1MDIwMDU1WjAzMTEwLwYDVQQD
EygwNzQ3ZTcyMzg0N2UyNGI2NWJlY2EwYjdiMWRlYmQ1Mzk5ZDAwNGIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0EFnaJLc2f+HiXzo2svYT95HMZVd
SdPCv4qbhUYAz0q9y7NnzY3lzXryQUnMEsbwAA/K+LElbH2okao790YhsNTFC3pp
8w5dPtWv3ggo7siHNbj7MiRHxJMXrp/djaaeAiZajcKAKevi+PHWfSodgnj5OkYp
BLE07awJTEWxZsKNzBdR2eiRu1vjIz4lDzfnhIwhnYP5PxAxt/tZKd5FiZ/vcxkU
BfpS2cnBJrNbx81H4ENOM/BfsmZAWLsuiJKBZarXCRQV7t20wJOcmeH4ZZtjizKs
oJeFYX8S7VcLpBEH0Fk2CcI5c9W1cRjYjylbYMp414jp/UwKiAUjGJoQpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAdH5yOEfiS2W+ygt7HevVOZ0ASyMB8GA1UdIwQY
MBaAFJYbnfdFwy3yffM+vP1TbxnhNHT+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGh1ZDkwWERMZko5OHo2OF9WTnZHZUUwZFA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9lODQ5MjAtZjVjYi00NmQ3LWJjOTkt
ZmU1MzIxMGI1N2I2LzEvbGh1ZDkwWERMZko5OHo2OF9WTnZHZUUwZFA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9lODQ5MjAtZjVjYi00NmQ3LWJjOTktZmU1MzIxMGI1N2I2
LzEvbGh1ZDkwWERMZko5OHo2OF9WTnZHZUUwZFA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQJPLADFT
V8ALqaeD1/caxueuHjKhmMPKqb/zoK076Fl5X13RMwyKPZoSY5F4sn+Son+bgxQG
wbrrc9hoZJeRxAPRy7Dr6QBYbSCwCm7hzoHLzI5jvoD/hnKjKUdbY0vZZAccmWev
ZZ+oKkyT9CfPvB0oiN40wgOggy7ItdZGvgfRiTUamhuT0fqDh3wx+uLSYs8nw6Ie
Wf1atJD8V90wF9ruRWK81sihcP7rs7v+jU+3cutYO/0F6XdDAnO2z+aTvvYrfbQ0
mqUSJZk+ajLGhyt+2FBsCHS/Q2zYX4dHP/cJrNEqFVhIoSprMce2zSAhOgkIsWJ2
whiZiQmzd18kVw==
-----END CERTIFICATE-----
Generated at Sat Jun 14 11:49:50 2025 by rpki-client