Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/lbmAuBA5WB4NLDelEhbNeXKbDHE.mft
File: lbmAuBA5WB4NLDelEhbNeXKbDHE.mft (raw, json)
Hash identifier: R6D6r9KQ3cVQ0rSoHI8LvuzxNF+WW4GHp1M8Iop0MoQ=
Subject key identifier: 54:8D:7F:84:7F:09:4F:5C:C5:8E:BE:CD:5D:20:05:60:05:73:73:AD
Authority key identifier: 95:B9:80:B8:10:39:58:1E:0D:2C:37:A5:12:16:CD:79:72:9B:0C:71
Certificate issuer: /CN=95b980b81039581e0d2c37a51216cd79729b0c71
Certificate serial: 0197B70EEE9251FED94A11E4E4B9BE099D3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbmAuBA5WB4NLDelEhbNeXKbDHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/lbmAuBA5WB4NLDelEhbNeXKbDHE.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 15:01:38 +0000
Manifest this update: Sat 28 Jun 2025 15:01:38 +0000
Manifest next update: Sun 29 Jun 2025 15:01:38 +0000
Files and hashes: 1: ANSAYrE9HNntD61TvEpJUmG8rgw.roa (hash: 4+iM21UqhAp7nE5c7mZKQw9TVqg+SMBpGm5UpV8V8dc=)
2: PJ5ra5RQEPuenhUZKqA-ySi8au4.roa (hash: HAE/ZYsuA8aESklvJ9Rn5+/ozrtEQRVx0jFM8lv6NbI=)
3: lbmAuBA5WB4NLDelEhbNeXKbDHE.crl (hash: JLwpMBoOF6GrV6vkfIlzpTqCg24/atmnVlCidS5eHNY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/lbmAuBA5WB4NLDelEhbNeXKbDHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/lbmAuBA5WB4NLDelEhbNeXKbDHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lbmAuBA5WB4NLDelEhbNeXKbDHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:ee:92:51:fe:d9:4a:11:e4:e4:b9:be:09:9d:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b980b81039581e0d2c37a51216cd79729b0c71
Validity
Not Before: Jun 28 15:01:38 2025 GMT
Not After : Jun 29 15:01:38 2025 GMT
Subject: CN=548d7f847f094f5cc58ebecd5d200560057373ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ba:b3:bb:9b:9f:32:b2:ec:49:cc:ac:7b:f8:
f1:33:d7:05:e0:97:45:fe:ba:0b:41:79:c4:ba:ce:
2e:d0:6e:f3:10:7b:68:5d:4f:e0:8a:84:20:f6:eb:
13:6d:56:9e:cf:b3:5f:6f:d0:76:dc:90:ab:c1:b2:
e3:5c:67:77:cd:31:2c:0b:f9:46:08:12:68:96:b5:
43:d6:1d:4b:af:41:85:34:ef:bc:c2:ad:fe:d1:5e:
da:35:86:f0:97:9f:5d:24:61:2c:99:0d:e4:53:72:
2f:e5:b5:1c:1b:99:29:04:75:e1:67:e2:a3:f3:c1:
22:8c:e3:c0:e0:35:14:e8:8b:bb:ec:07:3f:e1:8b:
cf:82:47:ec:bb:97:36:80:7d:1c:e6:6f:36:3b:73:
d2:52:67:79:50:95:31:0e:d1:63:d2:77:9d:df:f8:
cf:e3:24:9a:cd:3f:f0:36:b7:b5:8d:8b:12:c1:24:
f2:7b:71:55:06:56:0e:ff:23:4c:f7:83:22:b8:dc:
c8:82:8d:14:60:15:37:ef:7d:91:15:a7:b6:3b:4e:
98:7b:2d:89:aa:25:10:46:89:82:95:27:cf:62:1b:
51:d0:55:05:8b:77:86:18:f9:1a:04:ae:75:64:e1:
95:ce:6a:a5:f7:46:42:36:f4:19:1a:0a:90:d2:44:
10:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:8D:7F:84:7F:09:4F:5C:C5:8E:BE:CD:5D:20:05:60:05:73:73:AD
X509v3 Authority Key Identifier:
keyid:95:B9:80:B8:10:39:58:1E:0D:2C:37:A5:12:16:CD:79:72:9B:0C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbmAuBA5WB4NLDelEhbNeXKbDHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/lbmAuBA5WB4NLDelEhbNeXKbDHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/lbmAuBA5WB4NLDelEhbNeXKbDHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:57:46:3c:5c:e8:d0:ea:3a:5c:0f:35:af:88:a2:93:a0:b9:
74:87:65:90:34:96:13:03:f1:da:a5:a1:71:fd:c9:b7:10:9a:
94:25:b2:b3:56:5e:55:08:4e:47:c6:38:c9:10:14:28:6c:90:
30:ec:00:7c:c9:56:50:b4:35:98:06:c8:fb:4a:c0:cf:20:d2:
f2:19:e9:0b:51:4e:e4:af:b5:75:5a:db:a4:83:7b:68:60:b5:
52:e5:b7:3d:aa:08:e0:a4:bd:a2:33:21:0d:9d:bf:a9:8e:16:
3e:f8:e6:f7:49:1f:ab:d2:7d:e9:b3:7a:46:d9:5d:35:29:22:
9b:22:d7:c0:4c:d7:6f:13:86:11:0e:fe:a7:7e:b0:a1:a0:17:
f5:08:f9:97:01:1d:a5:c2:e5:62:79:80:c1:ac:6e:9b:01:9f:
68:91:60:54:4a:b3:ac:61:9f:6b:ff:f2:49:b3:ff:5a:7c:f1:
a0:0a:d0:1f:1d:33:c4:b3:e4:19:60:c1:eb:47:24:37:43:1c:
10:2d:c3:26:f4:ee:3f:06:f7:c7:20:09:be:5b:34:45:ee:0f:
12:2f:87:2e:1c:d2:75:70:a7:ed:49:f7:b3:80:32:53:1f:40:
e9:af:a0:27:c5:56:a2:c7:a2:b0:3c:18:d5:d0:40:a7:09:da:
98:43:93:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3Du6SUf7ZShHk5Lm+CZ0+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1Yjk4MGI4MTAzOTU4MWUwZDJjMzdhNTEyMTZjZDc5NzI5
YjBjNzEwHhcNMjUwNjI4MTUwMTM4WhcNMjUwNjI5MTUwMTM4WjAzMTEwLwYDVQQD
Eyg1NDhkN2Y4NDdmMDk0ZjVjYzU4ZWJlY2Q1ZDIwMDU2MDA1NzM3M2FkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz7qzu5ufMrLsScyse/jxM9cF4JdF
/roLQXnEus4u0G7zEHtoXU/gioQg9usTbVaez7Nfb9B23JCrwbLjXGd3zTEsC/lG
CBJolrVD1h1Lr0GFNO+8wq3+0V7aNYbwl59dJGEsmQ3kU3Iv5bUcG5kpBHXhZ+Kj
88EijOPA4DUU6Iu77Ac/4YvPgkfsu5c2gH0c5m82O3PSUmd5UJUxDtFj0ned3/jP
4ySazT/wNre1jYsSwSTye3FVBlYO/yNM94MiuNzIgo0UYBU3732RFae2O06Yey2J
qiUQRomClSfPYhtR0FUFi3eGGPkaBK51ZOGVzmql90ZCNvQZGgqQ0kQQGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFSNf4R/CU9cxY6+zV0gBWAFc3OtMB8GA1UdIwQY
MBaAFJW5gLgQOVgeDSw3pRIWzXlymwxxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGJtQXVCQTVXQjROTERlbEVoYk5lWEtiREhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC82MzQxNzItYmIzNy00ZDgyLTg4YTIt
OTQyZDJjNmM1ODU2LzEvbGJtQXVCQTVXQjROTERlbEVoYk5lWEtiREhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC82MzQxNzItYmIzNy00ZDgyLTg4YTItOTQyZDJjNmM1ODU2
LzEvbGJtQXVCQTVXQjROTERlbEVoYk5lWEtiREhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgldGPFzo
0Oo6XA81r4iik6C5dIdlkDSWEwPx2qWhcf3JtxCalCWys1ZeVQhOR8Y4yRAUKGyQ
MOwAfMlWULQ1mAbI+0rAzyDS8hnpC1FO5K+1dVrbpIN7aGC1UuW3PaoI4KS9ojMh
DZ2/qY4WPvjm90kfq9J96bN6RtldNSkimyLXwEzXbxOGEQ7+p36woaAX9Qj5lwEd
pcLlYnmAwaxumwGfaJFgVEqzrGGfa//ySbP/WnzxoArQHx0zxLPkGWDB60ckN0Mc
EC3DJvTuPwb3xyAJvls0Re4PEi+HLhzSdXCn7Un3s4AyUx9A6a+gJ8VWoseisDwY
1dBApwnamEOTGA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:26:33 2025 by rpki-client