Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/54e78c-5dd0-4f26-b56e-eb306a8d4ab5/1/LSb-mn4hp3P2HWUSP4Pigo_QQp8.mft
File: LSb-mn4hp3P2HWUSP4Pigo_QQp8.mft (raw, json)
Hash identifier: XN/mi3CwvYlKwKROAE4MX4MGjo2oYWNqDKBQCqLMsk8=
Subject key identifier: 4D:E0:AD:FD:82:C4:23:C0:8D:38:32:2A:57:46:92:D3:4F:34:B8:07
Authority key identifier: 2D:26:FE:9A:7E:21:A7:73:F6:1D:65:12:3F:83:E2:82:8F:D0:42:9F
Certificate issuer: /CN=2d26fe9a7e21a773f61d65123f83e2828fd0429f
Certificate serial: 0197B632B396596652542573BBD074F92CD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LSb-mn4hp3P2HWUSP4Pigo_QQp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/54e78c-5dd0-4f26-b56e-eb306a8d4ab5/1/LSb-mn4hp3P2HWUSP4Pigo_QQp8.mft
Manifest number: 01BB
Signing time: Sat 28 Jun 2025 11:01:05 +0000
Manifest this update: Sat 28 Jun 2025 11:01:05 +0000
Manifest next update: Sun 29 Jun 2025 11:01:05 +0000
Files and hashes: 1: 0XZQM4HI3XhlmYvdoGd0b4phC5w.roa (hash: U0I63h+zWa/76rG6uJx/JmYr6Xgzo7IgH0GTSgv+Tfg=)
2: LSb-mn4hp3P2HWUSP4Pigo_QQp8.crl (hash: TuBnEFGfTE7nlIEOvUkjV9TDzIJo8wXYAUoJbuk5sMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/54e78c-5dd0-4f26-b56e-eb306a8d4ab5/1/LSb-mn4hp3P2HWUSP4Pigo_QQp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/54e78c-5dd0-4f26-b56e-eb306a8d4ab5/1/LSb-mn4hp3P2HWUSP4Pigo_QQp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/LSb-mn4hp3P2HWUSP4Pigo_QQp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:b3:96:59:66:52:54:25:73:bb:d0:74:f9:2c:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d26fe9a7e21a773f61d65123f83e2828fd0429f
Validity
Not Before: Jun 28 11:01:05 2025 GMT
Not After : Jun 29 11:01:05 2025 GMT
Subject: CN=4de0adfd82c423c08d38322a574692d34f34b807
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:93:26:b8:80:cf:d5:0c:59:08:c8:8e:72:5b:
ff:59:7e:65:3d:3c:d1:26:5d:a7:be:b1:ed:91:aa:
eb:31:97:8f:50:f8:90:a3:df:d9:8f:0f:36:27:16:
1d:ed:8a:b5:93:17:26:c6:14:62:43:b4:4a:7d:58:
0e:34:8e:60:2a:e7:68:aa:b1:72:9a:08:81:f4:20:
db:19:ba:93:00:58:4b:91:71:02:19:72:aa:aa:17:
bf:e5:a3:c9:d8:c5:1e:9b:c7:49:9f:9f:f1:39:40:
a7:24:f1:e5:d4:df:48:3e:f2:fd:70:db:44:3e:63:
e7:bc:9f:4e:57:9a:8a:1b:7f:dd:28:bb:02:2a:58:
32:6c:18:97:ed:99:d6:da:06:cc:1a:cf:51:e3:81:
75:18:a2:0a:b6:02:a2:54:20:0c:fc:b6:d6:fe:e4:
a8:f3:aa:fc:f6:a4:1a:f9:a3:5d:eb:1e:b8:6f:8f:
1c:05:6f:03:70:cc:02:fc:b6:ce:37:e0:27:e9:9c:
f0:cc:b1:5f:92:46:5f:40:db:80:7e:d3:c7:3b:b9:
fe:14:8b:c6:a1:f6:18:fa:6e:6f:b1:83:3c:48:d4:
5f:5a:10:27:9f:da:e2:01:e8:56:f9:49:42:83:bb:
66:f7:ca:d0:b4:80:0c:54:e5:c9:6f:92:64:0d:3b:
88:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:E0:AD:FD:82:C4:23:C0:8D:38:32:2A:57:46:92:D3:4F:34:B8:07
X509v3 Authority Key Identifier:
keyid:2D:26:FE:9A:7E:21:A7:73:F6:1D:65:12:3F:83:E2:82:8F:D0:42:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LSb-mn4hp3P2HWUSP4Pigo_QQp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/54e78c-5dd0-4f26-b56e-eb306a8d4ab5/1/LSb-mn4hp3P2HWUSP4Pigo_QQp8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/54e78c-5dd0-4f26-b56e-eb306a8d4ab5/1/LSb-mn4hp3P2HWUSP4Pigo_QQp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:44:4f:4a:16:45:03:d7:98:4a:55:50:61:83:ba:06:14:f6:
82:d3:9b:b1:8d:6a:ef:a3:0e:4f:1a:5f:fe:f4:2f:79:fe:ed:
10:dc:87:b3:94:23:b1:0f:a6:89:22:54:77:27:15:c2:78:9a:
ba:d6:95:a2:b8:9d:24:20:54:d1:30:9b:ae:a6:43:c7:9f:29:
8f:7b:bf:f3:33:b0:fa:72:09:d7:25:19:b5:a9:69:c7:3e:f4:
b3:c8:ed:2a:a1:28:51:f4:00:c0:32:4c:dc:e0:8c:3b:63:d2:
5a:17:8a:94:91:9a:bc:7c:48:e3:8f:45:5c:c5:e7:20:27:30:
0e:77:14:15:c3:ec:c8:39:d1:c1:7e:47:2e:84:28:52:68:b1:
5a:19:bb:25:f9:37:ab:e6:ca:08:e4:16:a2:91:2f:59:e6:12:
47:4f:46:18:97:54:14:43:67:bb:83:fc:8d:4d:56:04:c8:29:
32:08:ac:c8:c2:b4:7e:ae:bf:16:4b:68:e5:5e:d1:c5:4b:1e:
ed:96:7c:92:35:9b:4f:4d:50:19:59:90:8e:38:0c:14:dc:84:
6d:80:56:6f:ef:6b:62:59:7a:f0:d7:67:ae:77:a9:91:31:e6:
ba:bb:17:8f:54:eb:ed:7c:1a:0c:6e:ed:27:37:06:76:4e:81:
f8:46:7c:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:54:39 2025 by rpki-client