Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.mft
File: lbheWsBVoSGIrlDNsAf6SItqqIs.mft (raw, json)
Hash identifier: V00S2hA1HN6R6aRvXxQMKWSu0dGt8QiCN2Kx18zzyzg=
Subject key identifier: 87:6B:FB:87:CD:B1:BE:26:A3:A5:8A:B8:85:32:0D:D3:50:50:4D:FE
Authority key identifier: 95:B8:5E:5A:C0:55:A1:21:88:AE:50:CD:B0:07:FA:48:8B:6A:A8:8B
Certificate issuer: /CN=95b85e5ac055a12188ae50cdb007fa488b6aa88b
Certificate serial: 0198D472E01882C6F49B6BAE4D613A957083
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbheWsBVoSGIrlDNsAf6SItqqIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 01:02:34 +0000
Manifest this update: Sat 23 Aug 2025 01:02:34 +0000
Manifest next update: Sun 24 Aug 2025 01:02:34 +0000
Files and hashes: 1: 6LbIgFJwzpH2Qf0sirzfHYuw_a4.roa (hash: yVSc0ifnnPwL8H5EwEXT2iNnCkvEaZBn7yh2JV9dabc=)
2: lbheWsBVoSGIrlDNsAf6SItqqIs.crl (hash: yvf/aGubsMtzjkRlEAVeGIAa+OzNEVF+H6c3g1tItls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/lbheWsBVoSGIrlDNsAf6SItqqIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:e0:18:82:c6:f4:9b:6b:ae:4d:61:3a:95:70:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b85e5ac055a12188ae50cdb007fa488b6aa88b
Validity
Not Before: Aug 23 01:02:34 2025 GMT
Not After : Aug 24 01:02:34 2025 GMT
Subject: CN=876bfb87cdb1be26a3a58ab885320dd350504dfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8e:24:44:80:e0:c7:17:04:17:10:2e:3f:16:
b6:55:b1:7e:56:97:20:78:da:19:e5:2e:30:88:70:
e8:a6:5d:4c:62:8d:7a:67:b0:f1:d0:d4:29:96:14:
5a:ca:52:9b:9a:9d:f2:90:6f:df:00:67:46:04:53:
90:2f:66:a2:62:43:87:ce:e0:5e:56:90:5e:8b:b7:
d2:c5:60:1d:6b:eb:41:f8:5d:53:2d:10:6e:a7:9b:
08:e9:cc:08:b7:16:bf:55:46:01:d7:b3:0f:0a:b0:
93:03:5e:e4:fb:20:21:13:e1:2b:d5:28:4f:f0:5f:
36:5c:cf:ed:a8:91:88:54:52:5f:f3:5a:e6:c6:ec:
08:dc:21:71:04:f4:e2:44:a6:83:cf:9f:36:fe:e5:
dc:73:4d:ad:6a:33:3e:da:7b:68:73:e9:d0:3a:f4:
ae:c6:14:fe:3c:8e:f5:2a:f4:4d:b9:3d:04:ce:67:
7b:9a:f8:ec:b5:bd:8a:5e:8b:c7:38:ab:8f:9d:d4:
8b:9d:8e:2d:26:7a:1f:d4:ce:24:7a:a4:ee:08:4c:
7f:8a:6d:07:14:3c:8e:6f:af:3e:0c:cb:85:bb:99:
3e:b5:f9:e0:c5:9c:7e:e4:72:6a:c9:b6:4b:84:00:
7e:55:b5:10:fe:5d:37:c6:fe:05:52:9a:e2:45:e1:
0e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:6B:FB:87:CD:B1:BE:26:A3:A5:8A:B8:85:32:0D:D3:50:50:4D:FE
X509v3 Authority Key Identifier:
keyid:95:B8:5E:5A:C0:55:A1:21:88:AE:50:CD:B0:07:FA:48:8B:6A:A8:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbheWsBVoSGIrlDNsAf6SItqqIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:7d:35:4c:68:39:61:0e:1d:7c:d0:74:73:76:60:4e:f4:2a:
74:e2:74:3b:77:94:93:b8:bb:25:5e:60:60:23:bc:3c:c9:fa:
bb:69:b3:f4:47:c2:b1:7d:b1:f4:f1:02:67:76:0c:46:1a:69:
99:8a:bb:9e:40:42:5e:e9:ab:64:36:ec:29:22:90:c2:01:3b:
e4:12:d7:28:66:2d:2b:7a:a2:b9:96:a0:95:c2:6b:62:42:98:
4b:5f:80:fc:dc:cb:fb:9e:b6:41:b7:bb:f1:41:4c:2f:83:11:
af:28:6d:ff:a5:71:4a:1e:85:4e:41:01:bc:f6:56:41:23:95:
a0:5e:2d:64:0c:08:f1:5c:8c:ae:10:9f:9c:1d:05:12:37:ed:
15:bc:d2:f3:78:69:b6:c4:e7:1c:a4:ed:d0:60:33:1a:c7:f8:
fb:22:58:b0:dd:50:2c:41:fc:dd:e3:a5:09:14:c3:84:85:51:
0f:83:bc:77:b0:7b:44:6f:17:51:78:dc:31:80:ae:e1:9a:44:
a0:71:65:a4:a3:c3:65:e9:01:ab:35:ad:14:ac:44:65:02:dc:
d6:61:30:04:77:8c:d0:63:89:39:28:54:26:36:b1:3c:71:ff:
02:17:c0:de:ff:c5:4c:84:e9:2e:87:17:31:7b:fe:d6:20:eb:
a7:66:08:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:08:09 2025 by rpki-client