Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/ecbffa-1166-4d1e-9f55-11575db64fbe/1/LBKCZbgJkXiNhuImLpM5A4tO-oI.mft
File: LBKCZbgJkXiNhuImLpM5A4tO-oI.mft (raw, json)
Hash identifier: Y6XP70Rfpoo0/rVnAb6WTFXckUG5wjiZJidO+hbsPZY=
Subject key identifier: 04:87:C2:B0:14:B1:A4:25:F3:16:62:69:1D:39:8A:CC:0A:88:27:F4
Authority key identifier: 2C:12:82:65:B8:09:91:78:8D:86:E2:26:2E:93:39:03:8B:4E:FA:82
Certificate issuer: /CN=2c128265b80991788d86e2262e9339038b4efa82
Certificate serial: 0197B6325F6A5320D45CBEE140C147FF54F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LBKCZbgJkXiNhuImLpM5A4tO-oI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/ecbffa-1166-4d1e-9f55-11575db64fbe/1/LBKCZbgJkXiNhuImLpM5A4tO-oI.mft
Manifest number: 0144
Signing time: Sat 28 Jun 2025 11:00:43 +0000
Manifest this update: Sat 28 Jun 2025 11:00:43 +0000
Manifest next update: Sun 29 Jun 2025 11:00:43 +0000
Files and hashes: 1: AUJAohDb7gvWp2PAn2xH3z3Zx8I.roa (hash: Px2ndw4EQ+qkKAfeVMR+LtAp8KsmOxSR4KCS0rfVjWc=)
2: LBKCZbgJkXiNhuImLpM5A4tO-oI.crl (hash: MF8XCOZVXR5Sr7MvdqkMxx9dchqcxZryF8AF1hpaay4=)
3: LTEzdR9zUquR1ggUmA4_QHu2p50.roa (hash: uNuzvFRDaCwMPWv1CbBVSxROhTe6dbQ9XSUinppVNcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/ecbffa-1166-4d1e-9f55-11575db64fbe/1/LBKCZbgJkXiNhuImLpM5A4tO-oI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/ecbffa-1166-4d1e-9f55-11575db64fbe/1/LBKCZbgJkXiNhuImLpM5A4tO-oI.mft
rsync://rpki.ripe.net/repository/DEFAULT/LBKCZbgJkXiNhuImLpM5A4tO-oI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 11:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:5f:6a:53:20:d4:5c:be:e1:40:c1:47:ff:54:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c128265b80991788d86e2262e9339038b4efa82
Validity
Not Before: Jun 28 11:00:43 2025 GMT
Not After : Jun 29 11:00:43 2025 GMT
Subject: CN=0487c2b014b1a425f31662691d398acc0a8827f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6f:9b:0a:7c:cf:86:34:0f:74:ff:68:51:7f:
b8:76:40:3f:60:1c:eb:0d:57:d1:29:db:0e:11:d3:
ed:fa:33:0c:19:53:03:d7:e7:bf:96:24:72:d7:6e:
6c:ae:b4:97:5d:ad:ed:18:4f:bd:5f:56:ef:36:da:
c7:f9:f9:5d:98:b9:1c:0d:97:0c:63:e4:fb:12:33:
72:3f:42:dc:57:9e:76:4f:54:5d:33:19:23:62:24:
88:1d:55:26:ee:93:99:3d:e4:83:ee:55:91:43:ff:
cc:90:eb:e6:df:eb:4b:41:00:42:21:ec:32:2b:dc:
a8:a9:e8:02:5e:98:65:d8:c8:a3:59:ed:ca:f2:c2:
c1:b4:5c:95:00:a6:04:ef:d0:93:ed:25:6d:b8:5b:
2b:a9:45:20:97:36:45:a3:74:d8:41:27:2b:84:a8:
2c:2e:a4:a9:eb:66:d0:c0:f1:a1:85:c6:dc:8f:ff:
26:eb:c1:70:c0:d1:ab:e0:4e:8d:8c:81:7b:9b:c9:
49:8b:1e:c4:9c:cf:54:4c:49:b3:d8:0f:1e:60:80:
e3:bd:21:3c:b9:89:cc:b4:33:80:72:e0:e6:05:7e:
4a:60:3f:db:01:6b:e4:64:d6:5a:e4:b1:36:70:22:
b7:de:ed:cf:20:a8:29:ed:df:d6:da:c1:fc:15:dc:
bd:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:87:C2:B0:14:B1:A4:25:F3:16:62:69:1D:39:8A:CC:0A:88:27:F4
X509v3 Authority Key Identifier:
keyid:2C:12:82:65:B8:09:91:78:8D:86:E2:26:2E:93:39:03:8B:4E:FA:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LBKCZbgJkXiNhuImLpM5A4tO-oI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ecbffa-1166-4d1e-9f55-11575db64fbe/1/LBKCZbgJkXiNhuImLpM5A4tO-oI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ecbffa-1166-4d1e-9f55-11575db64fbe/1/LBKCZbgJkXiNhuImLpM5A4tO-oI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:67:52:e4:13:03:3d:41:0f:50:bd:92:ed:a8:51:f9:f5:ef:
d6:9b:6e:e8:67:27:17:94:ff:e9:ab:fb:1b:76:be:19:fd:a6:
bb:34:e8:8c:37:46:ca:ee:74:9c:c9:6a:e3:9f:a1:2d:2e:e8:
5a:04:63:14:15:dd:24:96:c3:b4:87:85:9a:ca:a5:7d:c6:b9:
97:4a:43:d9:a3:ca:d7:f3:15:3b:e1:d0:37:22:16:a4:86:31:
d2:4d:fa:2d:22:fa:9c:5e:e8:94:9d:d3:1c:7b:54:b0:51:c4:
63:a9:a7:2a:f7:9a:0d:f4:be:eb:20:c7:61:09:17:cc:9a:17:
74:8a:9e:9b:8e:fc:3a:4f:b0:5f:49:eb:4f:2c:b5:b1:9d:56:
13:85:5e:74:5d:2a:ab:45:4c:17:ed:4a:eb:4d:36:d2:d9:bd:
6d:da:9e:36:32:d0:82:25:0d:c6:fc:5b:97:48:a1:05:ee:9e:
ff:8f:92:f9:81:47:02:fe:73:81:95:92:0b:12:a1:f6:7e:05:
05:58:f6:e2:fe:8a:95:6e:a5:32:28:e7:82:be:67:e8:31:aa:
c0:b4:2c:c3:79:e5:a9:9a:e4:9f:c4:b2:72:a6:35:2e:f6:66:
ba:21:b6:be:f8:61:7e:a9:c8:f4:e0:22:af:8b:cb:9b:51:2b:
10:d5:19:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:23:50 2025 by rpki-client