Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.mft
File: lakErGCT4eIpoHTFBQb_7NoBDM8.mft (raw, json)
Hash identifier: SMRQbyI204056QX/JVDl136x/0IvhaeqDuvEI+bxe+M=
Subject key identifier: A4:12:2D:47:4D:8A:91:A3:E8:9C:76:B2:F0:2B:4E:62:41:AF:84:A8
Authority key identifier: 95:A9:04:AC:60:93:E1:E2:29:A0:74:C5:05:06:FF:EC:DA:01:0C:CF
Certificate issuer: /CN=95a904ac6093e1e229a074c50506ffecda010ccf
Certificate serial: 0198D65F53D31EC9BB4291D891E791E64871
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lakErGCT4eIpoHTFBQb_7NoBDM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.mft
Manifest number: 0BC1
Signing time: Sat 23 Aug 2025 10:00:28 +0000
Manifest this update: Sat 23 Aug 2025 10:00:28 +0000
Manifest next update: Sun 24 Aug 2025 10:00:28 +0000
Files and hashes: 1: EYwLNQ0R_Ied-v-mXvUH_vf6GVA.roa (hash: TajJUilMmDGZNmoTd4v8tDuWl6eHYmByCynqf999DBU=)
2: lakErGCT4eIpoHTFBQb_7NoBDM8.crl (hash: NUG4ASjijvik6uMnCB0kzTiXkTHm5ss9peYbhs9NYc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/lakErGCT4eIpoHTFBQb_7NoBDM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:53:d3:1e:c9:bb:42:91:d8:91:e7:91:e6:48:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95a904ac6093e1e229a074c50506ffecda010ccf
Validity
Not Before: Aug 23 10:00:28 2025 GMT
Not After : Aug 24 10:00:28 2025 GMT
Subject: CN=a4122d474d8a91a3e89c76b2f02b4e6241af84a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:86:60:7b:bb:f1:f4:a6:ac:8e:35:97:f8:b3:
65:f9:0c:dd:08:f5:55:71:80:a3:e0:4a:55:e9:27:
80:dc:34:d7:bf:d4:f0:5d:1d:39:52:71:ca:a5:4c:
08:5e:f4:12:7e:7d:c1:c1:38:5e:b2:fb:c1:7e:1e:
42:82:88:67:2c:19:8f:a3:28:7d:55:0e:1e:52:44:
cd:8d:6f:34:12:d7:56:b1:f8:e8:9f:4d:d3:8f:f7:
80:bb:60:da:6a:37:e4:8a:19:8c:ce:b1:15:3b:e7:
8a:07:91:55:89:cf:85:04:1d:62:91:3b:c4:25:91:
49:a7:27:dd:c1:6a:98:3d:63:37:de:de:3f:0d:43:
20:3f:79:87:32:3a:e6:f4:64:0f:23:04:a2:43:b4:
c0:85:b7:98:0f:29:e0:80:0f:dd:91:b4:81:23:51:
f8:f9:29:a6:37:a8:92:5e:09:4d:ff:03:77:d9:5c:
a8:ec:e2:d5:b7:37:e8:77:6d:a4:2f:4d:60:e8:0d:
d3:dc:f6:b6:7b:d4:a6:6a:72:fa:cc:5c:4c:dd:ca:
85:89:fb:72:59:3e:7d:9b:de:13:7e:d4:52:d9:a5:
04:1e:a5:fc:ee:dd:18:2e:fa:e4:95:90:de:16:d1:
3b:33:40:e3:bb:e4:fd:a6:59:94:1d:12:48:69:bc:
27:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:12:2D:47:4D:8A:91:A3:E8:9C:76:B2:F0:2B:4E:62:41:AF:84:A8
X509v3 Authority Key Identifier:
keyid:95:A9:04:AC:60:93:E1:E2:29:A0:74:C5:05:06:FF:EC:DA:01:0C:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lakErGCT4eIpoHTFBQb_7NoBDM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:ca:53:bf:aa:e3:b4:8e:1d:a8:a1:29:72:b5:7f:46:c0:2d:
9f:dd:63:9c:f5:1e:95:21:0d:e1:3c:d7:86:b4:a1:bc:3a:68:
a4:a7:31:a1:e9:17:4e:27:02:01:b3:52:46:4a:79:86:6e:79:
d9:38:94:af:92:c0:b4:eb:82:dc:71:b3:99:41:a1:9c:17:22:
63:6c:df:94:43:c1:8a:38:40:8c:51:1e:32:fa:2f:00:db:20:
c3:1c:b4:4c:e5:b0:a2:6f:21:c4:bf:ce:59:5a:3d:5f:8f:14:
8b:a1:98:d8:98:25:b0:5b:b9:5c:39:a1:03:db:14:21:08:ff:
d9:34:d9:9c:d5:cc:6a:a0:1b:d8:2f:e6:0d:a8:1e:9a:0e:80:
3d:f5:db:58:b5:b4:51:21:e1:38:fd:ab:89:53:d5:e1:91:22:
a5:31:db:89:0d:e7:35:f1:60:0c:0a:89:3e:87:4b:da:39:89:
10:91:40:ba:41:b2:3b:41:5d:8d:0e:66:85:26:bc:a3:76:e8:
e5:6c:85:c3:f1:3c:67:57:db:59:67:b1:33:52:9a:c8:b7:37:
6d:4c:fc:4b:64:fe:f8:f0:45:5c:fb:41:5e:86:58:73:20:37:
29:97:74:d0:2a:50:46:23:bc:b8:35:4d:3d:98:bc:cc:09:df:
b5:6c:96:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:07:04 2025 by rpki-client