Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.mft
File: lhud90XDLfJ98z68_VNvGeE0dP4.mft (raw, json)
Hash identifier: z7t/GbsZsoL59PCox7DWUYpIg9cL/01eMOf81y1w4zg=
Subject key identifier: 8F:68:1B:98:5D:F9:89:15:56:96:2A:45:26:01:DB:6D:10:F0:ED:5A
Authority key identifier: 96:1B:9D:F7:45:C3:2D:F2:7D:F3:3E:BC:FD:53:6F:19:E1:34:74:FE
Certificate issuer: /CN=961b9df745c32df27df33ebcfd536f19e13474fe
Certificate serial: 019874BE5714863EC3D0314AE335D8112B3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lhud90XDLfJ98z68_VNvGeE0dP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.mft
Manifest number: 0F31
Signing time: Mon 04 Aug 2025 11:01:27 +0000
Manifest this update: Mon 04 Aug 2025 11:01:27 +0000
Manifest next update: Tue 05 Aug 2025 11:01:27 +0000
Files and hashes: 1: 3LMtRmONGNLMLTZbv-22SKS_G_A.roa (hash: pio5aJGvlnIF4jwmfbABDVK+nPuVznK9IHAqeg47uOI=)
2: 8cYySboA2VaDBExXOdn2f8YI2Iw.roa (hash: XrQTlxZOLpNHFd8Q5dqkWIouJ0kbCEk8FXuJ6lAGYRM=)
3: AW_xXvWFujKuLbVm-SnUT_Zjgxw.roa (hash: nFG/6G17wzGxW8RG1K73vy6beJj5zW9L3o6YXtPyInc=)
4: lhud90XDLfJ98z68_VNvGeE0dP4.crl (hash: zfEimEVaAcaG38gGPl8nvMcuazf7AwMsal+QHLneOHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lhud90XDLfJ98z68_VNvGeE0dP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:be:57:14:86:3e:c3:d0:31:4a:e3:35:d8:11:2b:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=961b9df745c32df27df33ebcfd536f19e13474fe
Validity
Not Before: Aug 4 11:01:27 2025 GMT
Not After : Aug 5 11:01:27 2025 GMT
Subject: CN=8f681b985df9891556962a452601db6d10f0ed5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f2:e0:4e:83:12:ed:11:3f:40:2b:1b:e0:10:
01:a4:95:9a:67:74:9a:dd:c9:cb:cd:72:cc:83:59:
b0:cc:a2:6a:fd:60:ba:1f:2d:cb:21:f5:ad:d6:e2:
bb:44:22:7c:d3:ab:c0:43:77:0c:d2:b1:2d:1b:c9:
78:eb:3d:1b:2c:10:85:0b:c5:c5:07:0e:d8:d2:53:
fd:d7:e5:23:df:ee:2d:be:3c:28:06:9f:03:c1:b1:
3c:0c:25:cd:b1:ac:ea:80:b1:e8:7a:db:a2:51:51:
b3:78:16:84:dd:aa:3a:bf:e8:05:ae:22:61:56:7b:
68:c3:dd:38:4a:44:ad:79:41:97:f9:47:6b:17:0e:
14:28:f3:eb:4e:ee:a1:4c:6c:bb:d6:52:1a:4a:aa:
14:0e:cf:4d:a4:30:86:ba:c2:d1:da:cd:92:14:ad:
da:27:0b:7f:c3:8c:db:4f:e7:19:b6:a2:eb:37:a4:
db:94:4c:b7:03:9f:ce:b7:fe:6b:af:a0:6b:24:5a:
02:0b:4a:2a:1e:c4:60:19:01:62:f0:d3:59:d2:ef:
8c:8b:83:a3:6f:88:39:76:c9:15:16:08:54:81:46:
36:8e:26:4c:4b:c5:b2:c9:4d:6a:19:9f:35:e8:da:
11:7b:69:1d:5f:94:41:53:c8:82:f2:45:cc:6e:cd:
db:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:68:1B:98:5D:F9:89:15:56:96:2A:45:26:01:DB:6D:10:F0:ED:5A
X509v3 Authority Key Identifier:
keyid:96:1B:9D:F7:45:C3:2D:F2:7D:F3:3E:BC:FD:53:6F:19:E1:34:74:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhud90XDLfJ98z68_VNvGeE0dP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:8c:84:60:95:49:33:58:c0:84:55:6e:b0:a3:6c:1d:7c:71:
53:85:59:da:5e:24:94:a6:a1:f2:e6:f9:f8:06:f7:c0:3d:15:
a9:d7:70:f8:f4:5f:a9:3a:7e:b2:5e:cf:d8:92:70:b0:e6:9d:
d8:35:70:2b:f2:3b:7e:3c:eb:65:25:b2:04:74:a8:09:8f:ef:
73:a4:6e:b3:63:31:7c:19:9c:8b:ca:55:8a:47:9f:7b:b0:b7:
bc:39:17:78:49:dc:96:17:45:83:b4:ff:b8:80:dd:e0:c0:1e:
87:e9:2a:d1:53:b4:a6:2b:37:f1:85:80:ee:b0:12:0a:87:4a:
cd:64:12:eb:8c:e7:f4:bc:f0:57:3c:2a:14:29:a3:48:ec:c5:
5d:ad:bf:00:24:fb:e0:06:0f:2f:c3:17:12:ca:65:d5:97:b0:
92:a8:e5:db:bc:33:19:22:07:b6:86:ab:64:02:8b:94:28:36:
7a:bd:49:26:fe:ea:ec:d5:de:f8:c0:f9:c3:7e:6c:f7:cd:b9:
48:16:a9:1e:0b:c0:f9:c5:53:8d:b0:52:f5:8d:7f:64:d3:0b:
e8:f0:29:6d:39:f9:b8:10:42:e1:65:51:26:6f:11:27:61:3f:
75:eb:a6:30:80:18:41:0d:71:5c:1e:59:db:e2:cc:d1:4f:62:
bd:e3:d5:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:12:45 2025 by rpki-client