Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/1df8e1-6e80-443c-b6e8-d9f905fdc89a/1/LBGlP232MAtJEs4T9vqbEA_OJIg.mft
File: LBGlP232MAtJEs4T9vqbEA_OJIg.mft (raw, json)
Hash identifier: M6SA5dvovwqy+6n+qwa4zMGDJtpCixT0Crh6uD1jtEE=
Subject key identifier: 12:F1:50:A9:66:25:B7:E6:10:74:97:81:71:15:58:E6:AD:D6:27:E3
Authority key identifier: 2C:11:A5:3F:6D:F6:30:0B:49:12:CE:13:F6:FA:9B:10:0F:CE:24:88
Certificate issuer: /CN=2c11a53f6df6300b4912ce13f6fa9b100fce2488
Certificate serial: 0197B70EA3B8C3D9097864F661101C8A9BEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LBGlP232MAtJEs4T9vqbEA_OJIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/1df8e1-6e80-443c-b6e8-d9f905fdc89a/1/LBGlP232MAtJEs4T9vqbEA_OJIg.mft
Manifest number: 12C3
Signing time: Sat 28 Jun 2025 15:01:19 +0000
Manifest this update: Sat 28 Jun 2025 15:01:19 +0000
Manifest next update: Sun 29 Jun 2025 15:01:19 +0000
Files and hashes: 1: 54SDy2hBAf60rRk7Cn2SENdLnF0.roa (hash: W4T7JvYJiD5Kubx3/xyHkSB0zOGjx+2ez3Dgx71rGrg=)
2: LBGlP232MAtJEs4T9vqbEA_OJIg.crl (hash: Vdwq7fW6KmZHd+aLOPyuODXn3cOI4XrnuiMJbtRsjqU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/1df8e1-6e80-443c-b6e8-d9f905fdc89a/1/LBGlP232MAtJEs4T9vqbEA_OJIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/1df8e1-6e80-443c-b6e8-d9f905fdc89a/1/LBGlP232MAtJEs4T9vqbEA_OJIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LBGlP232MAtJEs4T9vqbEA_OJIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:a3:b8:c3:d9:09:78:64:f6:61:10:1c:8a:9b:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c11a53f6df6300b4912ce13f6fa9b100fce2488
Validity
Not Before: Jun 28 15:01:19 2025 GMT
Not After : Jun 29 15:01:19 2025 GMT
Subject: CN=12f150a96625b7e610749781711558e6add627e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:dd:3e:7f:8b:7f:12:1c:da:64:21:2b:21:29:
c9:70:db:92:5a:be:dd:0c:90:79:57:7b:d2:29:98:
b0:44:60:78:93:d8:0e:19:25:9c:a2:a7:4f:d8:c1:
00:8f:ae:40:c9:55:59:c9:b2:4d:78:9f:3f:92:3c:
fb:22:3d:0f:59:5a:39:e8:41:65:7e:ce:00:60:fa:
6c:14:36:06:59:88:87:64:c8:6a:a9:58:47:fa:a1:
22:30:ca:0c:9e:82:9f:f3:99:c4:f7:6b:7a:78:a9:
94:07:26:3a:28:c3:a4:0b:bd:71:7a:d5:bb:4f:59:
04:79:5e:e5:80:ab:62:14:19:17:c3:81:02:91:c8:
2c:6c:d8:f0:f3:f9:35:fb:61:97:ae:cc:aa:95:83:
e6:24:cb:7d:dc:bf:7f:ac:1b:fc:ec:6d:30:6f:15:
c3:35:7b:14:2e:9e:c9:60:43:ce:2d:f7:a3:8b:09:
41:f9:01:59:53:5a:3c:6e:da:9a:f0:39:76:50:1a:
2a:f4:9b:82:11:32:68:9d:26:cc:9c:43:d1:36:fa:
60:01:7f:48:61:e8:eb:cc:c0:b1:cc:92:2c:4a:c0:
dd:89:6f:e1:e1:18:94:74:6b:19:4b:75:26:fb:61:
6e:3d:48:c6:6b:d4:bb:c9:8d:10:ce:a5:77:1e:e8:
3b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:F1:50:A9:66:25:B7:E6:10:74:97:81:71:15:58:E6:AD:D6:27:E3
X509v3 Authority Key Identifier:
keyid:2C:11:A5:3F:6D:F6:30:0B:49:12:CE:13:F6:FA:9B:10:0F:CE:24:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LBGlP232MAtJEs4T9vqbEA_OJIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1df8e1-6e80-443c-b6e8-d9f905fdc89a/1/LBGlP232MAtJEs4T9vqbEA_OJIg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1df8e1-6e80-443c-b6e8-d9f905fdc89a/1/LBGlP232MAtJEs4T9vqbEA_OJIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:a0:a3:76:31:ce:51:70:1a:91:b3:07:99:bb:36:af:66:76:
44:c8:57:60:07:a5:55:42:ed:c5:42:b5:c1:97:05:8c:04:c4:
61:e5:5b:8b:cb:d3:76:9b:c2:da:d8:16:f2:27:bc:05:74:05:
8e:4a:86:fc:a1:d8:12:f0:b8:c1:04:9f:85:af:59:41:02:64:
f4:3f:15:ac:ef:11:ff:b7:2d:75:d2:cf:22:ca:b9:13:42:4e:
71:16:20:cd:77:de:1b:38:d2:ea:ca:7b:31:e3:67:2e:3d:51:
ae:9b:d5:32:c3:18:51:f4:a7:e2:f2:f6:f5:d7:02:bd:01:35:
4a:6f:ac:64:53:ca:3f:71:ea:67:9d:e8:de:f7:ab:09:81:17:
38:ed:2a:89:a8:d9:6d:1a:a3:29:a4:f5:25:56:4a:60:56:7e:
22:62:b5:e2:fe:1e:c8:01:ea:04:db:c1:57:ea:ee:a0:48:7b:
f4:9b:7f:60:1d:37:1c:cb:45:b3:69:64:c9:80:a4:14:3b:5a:
9f:90:40:a7:35:98:05:7c:28:16:f0:0e:39:8b:a5:a4:6a:41:
c0:a3:df:ae:57:60:89:5f:a4:d7:69:14:69:43:e0:76:6e:a5:
56:4e:27:cf:77:5c:e1:8e:a0:b4:1a:70:69:03:0a:b6:f4:80:
e6:bf:36:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:11:22 2025 by rpki-client