Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.mft
File: lbheWsBVoSGIrlDNsAf6SItqqIs.mft (raw, json)
Hash identifier: nItUz9+T4cY1Qj3ePDhL/DHICH+PyHhJBYuDQ4f4eGQ=
Subject key identifier: 6D:71:FC:CC:88:58:26:01:7F:50:4E:7F:75:74:E9:7C:00:FE:33:E7
Authority key identifier: 95:B8:5E:5A:C0:55:A1:21:88:AE:50:CD:B0:07:FA:48:8B:6A:A8:8B
Certificate issuer: /CN=95b85e5ac055a12188ae50cdb007fa488b6aa88b
Certificate serial: 0197B6A07CE518FB2B14613DDE48308A001D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbheWsBVoSGIrlDNsAf6SItqqIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 13:01:00 +0000
Manifest this update: Sat 28 Jun 2025 13:01:00 +0000
Manifest next update: Sun 29 Jun 2025 13:01:00 +0000
Files and hashes: 1: 6LbIgFJwzpH2Qf0sirzfHYuw_a4.roa (hash: yVSc0ifnnPwL8H5EwEXT2iNnCkvEaZBn7yh2JV9dabc=)
2: lbheWsBVoSGIrlDNsAf6SItqqIs.crl (hash: kqKWt9TyV2Z4lnVoolDZUn6hM891QcsIJLX9l9svEKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/lbheWsBVoSGIrlDNsAf6SItqqIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:7c:e5:18:fb:2b:14:61:3d:de:48:30:8a:00:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b85e5ac055a12188ae50cdb007fa488b6aa88b
Validity
Not Before: Jun 28 13:01:00 2025 GMT
Not After : Jun 29 13:01:00 2025 GMT
Subject: CN=6d71fccc885826017f504e7f7574e97c00fe33e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:66:36:da:34:5a:2e:d2:a4:03:16:39:2d:1d:
1f:bd:fe:c8:ad:0c:e4:5e:19:54:6e:92:56:dd:ce:
73:d6:45:07:16:82:a8:17:66:38:3d:0d:79:02:a3:
86:fe:b2:89:fa:73:db:e3:88:16:19:80:05:64:32:
cd:88:f7:41:45:0b:10:ae:16:af:61:88:c6:1c:a1:
5a:1a:68:05:b5:19:c0:aa:61:f4:bd:68:88:8b:4e:
e4:29:48:f0:37:50:3e:d9:43:14:60:6a:76:ac:2c:
e8:31:3e:7c:b6:df:7e:54:1b:dc:44:25:6b:ee:ad:
7e:e3:0b:e3:1a:be:3a:b3:36:0d:65:bc:82:78:57:
c0:3b:29:c0:1f:63:33:87:5d:8b:cc:55:f9:56:e4:
2a:f4:81:54:44:42:09:5b:a8:88:7c:a8:c7:d1:3d:
de:83:dd:80:db:80:d2:09:6c:97:03:07:a2:7a:21:
c7:af:93:4e:89:14:ec:e3:57:e5:97:a2:f0:b1:d3:
d6:a9:e5:9e:7c:1a:87:cc:33:9f:ae:48:00:9f:eb:
87:fd:b2:24:0a:7e:27:58:78:40:b2:dd:74:13:a6:
c0:b1:58:7a:67:63:32:03:08:86:66:5c:20:4e:31:
e7:a3:e2:69:0c:42:6a:89:30:dd:95:5e:08:62:8e:
af:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:71:FC:CC:88:58:26:01:7F:50:4E:7F:75:74:E9:7C:00:FE:33:E7
X509v3 Authority Key Identifier:
keyid:95:B8:5E:5A:C0:55:A1:21:88:AE:50:CD:B0:07:FA:48:8B:6A:A8:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbheWsBVoSGIrlDNsAf6SItqqIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:db:cc:9a:0b:f1:54:ca:8d:55:dc:26:cc:7e:cb:2c:3a:48:
f8:19:b0:80:0e:90:e8:0c:fd:d0:12:4f:53:61:d6:17:ba:03:
72:b2:91:60:c4:e6:92:37:c6:68:93:2d:25:b3:da:d7:d9:44:
73:6a:71:47:63:9a:6c:b6:c4:cb:b8:de:3a:d7:37:32:8f:4c:
b9:2f:cd:c3:c1:70:45:aa:d0:2c:2f:20:d5:95:f0:cd:02:1f:
fe:d5:9f:39:dd:ef:d6:67:c3:ed:b0:18:7e:b4:15:29:44:2a:
40:ef:2d:f1:57:26:1e:75:71:2f:5a:54:bf:f7:a7:43:42:5a:
ee:ac:91:70:cb:0a:33:d0:da:a4:50:41:cb:84:1e:e1:e5:2e:
1d:63:79:9a:a6:d7:f1:7a:69:96:2d:ec:c8:6f:b5:b3:af:9a:
2f:91:af:7b:86:a6:9d:7d:29:53:4f:b6:e5:7b:0b:aa:b7:55:
2c:5f:b3:ab:ee:3c:a4:c3:2b:f7:97:60:4b:41:56:15:1d:5c:
9e:35:e8:62:ec:f7:08:73:03:21:19:5d:cd:38:35:b6:1c:03:
ac:25:e8:2a:cc:ef:24:78:fc:4c:cc:db:f0:27:de:59:d1:e4:
5a:ed:8a:73:a8:a3:b9:60:dc:06:dc:69:b5:1f:da:af:61:e1:
d0:c9:9f:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:38:05 2025 by rpki-client