Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/lbmAuBA5WB4NLDelEhbNeXKbDHE.mft
File: lbmAuBA5WB4NLDelEhbNeXKbDHE.mft (raw, json)
Hash identifier: xUNf3Ju8UnX+CLoR+xIuTVByW8zayBfT0A7yIATuIX4=
Subject key identifier: F3:93:04:56:A6:38:E5:AA:36:18:8E:D6:E3:2D:C4:16:D0:D9:FB:04
Authority key identifier: 95:B9:80:B8:10:39:58:1E:0D:2C:37:A5:12:16:CD:79:72:9B:0C:71
Certificate issuer: /CN=95b980b81039581e0d2c37a51216cd79729b0c71
Certificate serial: 0196B635452665AE303C827B9379E9298829
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbmAuBA5WB4NLDelEhbNeXKbDHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/lbmAuBA5WB4NLDelEhbNeXKbDHE.mft
Manifest number: 1530
Signing time: Fri 09 May 2025 18:01:06 +0000
Manifest this update: Fri 09 May 2025 18:01:06 +0000
Manifest next update: Sat 10 May 2025 18:01:06 +0000
Files and hashes: 1: ANSAYrE9HNntD61TvEpJUmG8rgw.roa (hash: 4+iM21UqhAp7nE5c7mZKQw9TVqg+SMBpGm5UpV8V8dc=)
2: PJ5ra5RQEPuenhUZKqA-ySi8au4.roa (hash: HAE/ZYsuA8aESklvJ9Rn5+/ozrtEQRVx0jFM8lv6NbI=)
3: lbmAuBA5WB4NLDelEhbNeXKbDHE.crl (hash: j4SnFyPs3oJZIVdG+wZki2Kw7rizNUOLUmTRbTSKs14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/lbmAuBA5WB4NLDelEhbNeXKbDHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/lbmAuBA5WB4NLDelEhbNeXKbDHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lbmAuBA5WB4NLDelEhbNeXKbDHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 18:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b6:35:45:26:65:ae:30:3c:82:7b:93:79:e9:29:88:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b980b81039581e0d2c37a51216cd79729b0c71
Validity
Not Before: May 9 18:01:06 2025 GMT
Not After : May 10 18:01:06 2025 GMT
Subject: CN=f3930456a638e5aa36188ed6e32dc416d0d9fb04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:2a:95:a4:1a:16:99:1c:1f:b5:bd:d5:10:02:
19:3e:f9:73:b0:84:9a:95:82:5a:a3:65:45:35:7d:
66:3a:d1:96:58:d7:dd:29:02:00:b4:1c:a1:ac:1c:
9a:1f:af:0b:25:87:05:93:cb:16:4f:37:0a:b6:dd:
94:39:31:03:77:1a:07:54:4d:ab:d9:41:56:33:c3:
e0:be:b0:c6:00:c3:12:96:52:2c:91:2f:93:b3:e4:
f6:7d:2a:81:e3:c6:d3:63:1b:2d:9f:ee:2a:c4:8b:
58:a4:57:fa:d7:6d:1c:39:a5:be:82:8d:b0:55:12:
e1:f6:e3:fb:83:a7:4f:4c:cf:d4:fa:00:fa:19:91:
06:86:de:17:e7:99:c2:4c:93:12:e8:6d:26:72:d8:
ef:a1:b4:74:62:8d:fa:e5:d3:74:41:df:d0:17:50:
cb:04:93:9d:50:dd:73:18:ab:82:53:7d:64:13:6d:
75:35:9a:e6:99:3d:bb:d7:82:da:b8:8a:28:af:56:
cb:ec:d8:53:5a:83:cd:87:f0:8d:c0:b7:6f:71:2b:
70:09:d3:37:cd:f8:96:00:87:35:16:f2:f8:6b:ff:
90:29:fb:59:7f:b8:ac:4e:30:92:d8:7e:7c:ae:83:
d3:c3:49:89:1b:eb:ea:04:21:e8:58:68:e1:d2:6f:
94:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:93:04:56:A6:38:E5:AA:36:18:8E:D6:E3:2D:C4:16:D0:D9:FB:04
X509v3 Authority Key Identifier:
keyid:95:B9:80:B8:10:39:58:1E:0D:2C:37:A5:12:16:CD:79:72:9B:0C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbmAuBA5WB4NLDelEhbNeXKbDHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/lbmAuBA5WB4NLDelEhbNeXKbDHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/lbmAuBA5WB4NLDelEhbNeXKbDHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:7e:38:4d:b3:2b:c8:87:ae:ad:3c:d2:96:ab:8e:ad:f0:49:
85:c8:46:37:c1:47:99:5f:82:3e:90:93:09:f2:6f:5e:32:1d:
88:30:71:b0:80:1c:4c:ba:44:9b:97:34:15:4c:69:86:c7:25:
90:2a:d6:23:12:64:e4:36:7c:56:93:45:2c:54:ba:11:05:a0:
a9:95:5b:60:59:7e:2c:dc:85:66:41:c5:25:c0:2a:4d:ca:db:
e7:eb:73:87:fa:eb:66:1d:0b:c2:da:b3:b0:56:8f:a7:7e:9f:
1c:eb:59:f3:68:dc:71:28:1f:1f:8d:64:8b:88:85:24:fd:f0:
58:7d:87:dc:fe:90:c7:cd:ca:d0:60:d3:ac:63:48:d3:37:36:
24:91:e0:89:34:4d:c0:6e:32:f1:e6:6d:34:6d:82:dc:66:4b:
f9:a0:71:74:11:8c:64:d9:70:e4:6c:50:a2:78:71:86:ce:56:
b6:c7:79:fb:f4:22:89:b1:c6:f7:81:ba:5e:e4:e8:33:5f:66:
c5:db:88:24:c0:23:46:00:2e:6f:71:09:e4:cc:be:06:e3:a9:
04:aa:4d:9f:f3:7c:f4:5f:c9:20:64:2b:74:b6:24:cd:02:2c:
95:a8:10:66:27:b1:d7:04:a3:aa:cf:58:f8:98:e2:fe:22:e1:
d0:bd:f5:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 03:33:34 2025 by rpki-client