Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/1df8e1-6e80-443c-b6e8-d9f905fdc89a/1/LBGlP232MAtJEs4T9vqbEA_OJIg.mft
File: LBGlP232MAtJEs4T9vqbEA_OJIg.mft (raw, json)
Hash identifier: rvPG8ETk3hGfrTOft4PVXCEdKg4C7eWzvBj91hBiFwI=
Subject key identifier: 20:B7:85:40:17:59:B1:01:7A:59:4E:11:09:06:A2:A4:A0:4D:3E:BE
Authority key identifier: 2C:11:A5:3F:6D:F6:30:0B:49:12:CE:13:F6:FA:9B:10:0F:CE:24:88
Certificate issuer: /CN=2c11a53f6df6300b4912ce13f6fa9b100fce2488
Certificate serial: 019847E4F41C07A9CC31C10EED2A6647D03B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LBGlP232MAtJEs4T9vqbEA_OJIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/1df8e1-6e80-443c-b6e8-d9f905fdc89a/1/LBGlP232MAtJEs4T9vqbEA_OJIg.mft
Manifest number: 130E
Signing time: Sat 26 Jul 2025 18:00:43 +0000
Manifest this update: Sat 26 Jul 2025 18:00:43 +0000
Manifest next update: Sun 27 Jul 2025 18:00:43 +0000
Files and hashes: 1: 54SDy2hBAf60rRk7Cn2SENdLnF0.roa (hash: W4T7JvYJiD5Kubx3/xyHkSB0zOGjx+2ez3Dgx71rGrg=)
2: LBGlP232MAtJEs4T9vqbEA_OJIg.crl (hash: udOOIx7iWpYIys7WIxgagdJk+0AUr29uhl8F426HU1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/1df8e1-6e80-443c-b6e8-d9f905fdc89a/1/LBGlP232MAtJEs4T9vqbEA_OJIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/1df8e1-6e80-443c-b6e8-d9f905fdc89a/1/LBGlP232MAtJEs4T9vqbEA_OJIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LBGlP232MAtJEs4T9vqbEA_OJIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:e4:f4:1c:07:a9:cc:31:c1:0e:ed:2a:66:47:d0:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c11a53f6df6300b4912ce13f6fa9b100fce2488
Validity
Not Before: Jul 26 18:00:43 2025 GMT
Not After : Jul 27 18:00:43 2025 GMT
Subject: CN=20b785401759b1017a594e110906a2a4a04d3ebe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:2a:d8:b8:39:23:84:c3:c9:8a:30:14:bc:40:
3a:d1:f2:67:cd:9a:f6:70:cc:ab:17:74:d2:b8:18:
e6:eb:79:85:4e:35:22:2d:f8:cf:8a:fa:df:a1:47:
1c:dc:29:76:39:93:2a:86:2e:f7:c0:34:80:38:e3:
cc:71:a9:a3:ca:91:fb:42:f3:5a:53:d3:ed:83:87:
cc:2c:de:09:38:2c:2c:84:09:01:2c:bb:83:d1:c1:
3a:e4:05:c6:f3:be:bf:1b:52:ae:d0:d0:15:45:60:
2f:f9:fe:3c:74:72:00:51:9b:42:b9:ab:95:54:1a:
3c:62:c5:9a:2f:83:40:27:d0:fe:00:4f:03:92:8d:
58:f9:36:3b:4b:e6:d5:c1:f9:b9:b2:29:33:ba:00:
ea:fa:33:39:ad:8e:d8:b5:99:55:b6:41:c9:13:cb:
a7:4f:ae:a1:c7:e8:60:97:12:08:4b:6c:33:8a:a3:
cc:5e:54:ed:e1:03:e6:23:11:84:31:4b:4d:17:ec:
d0:a6:16:3c:e3:5a:98:17:55:5a:34:4f:23:f1:49:
21:fa:c0:f4:09:32:09:64:38:14:98:1b:2f:29:ab:
b1:6f:77:86:9a:98:aa:54:1e:8d:66:11:35:69:c0:
be:61:d5:6d:22:ed:ad:bf:75:f8:13:65:d9:a9:d7:
32:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:B7:85:40:17:59:B1:01:7A:59:4E:11:09:06:A2:A4:A0:4D:3E:BE
X509v3 Authority Key Identifier:
keyid:2C:11:A5:3F:6D:F6:30:0B:49:12:CE:13:F6:FA:9B:10:0F:CE:24:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LBGlP232MAtJEs4T9vqbEA_OJIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1df8e1-6e80-443c-b6e8-d9f905fdc89a/1/LBGlP232MAtJEs4T9vqbEA_OJIg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1df8e1-6e80-443c-b6e8-d9f905fdc89a/1/LBGlP232MAtJEs4T9vqbEA_OJIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:ae:ab:b9:eb:8f:ef:2c:c3:89:3c:7c:63:23:b0:f1:bc:5b:
2a:7c:d4:96:ba:52:59:82:7c:8e:ba:7a:f5:d1:a4:b8:07:07:
e0:a3:b5:6d:a3:d2:93:e6:cd:40:d5:15:24:a9:57:60:b1:cd:
f7:c6:54:4c:64:c0:50:00:06:62:e4:b3:f3:e6:7f:ad:d3:15:
d0:a4:34:8e:27:85:ea:d3:65:2b:26:45:9b:56:0c:cb:c1:bd:
19:07:0a:c0:f1:b4:33:07:56:83:d2:63:38:25:75:0e:dc:1b:
5d:be:ce:6e:f6:c4:a4:ea:2f:a1:8e:35:12:70:08:1b:42:53:
f2:77:73:af:41:8b:06:c5:e7:23:92:30:e1:8d:f6:db:8e:74:
fe:56:c6:6d:6b:1b:87:52:04:75:ac:53:65:df:a8:5b:05:e3:
3d:79:29:cf:71:0a:fd:a0:a4:e6:fd:0d:7a:40:38:82:47:df:
fb:8d:4f:3d:4d:90:aa:08:06:4a:b2:cd:8c:fc:50:87:df:a2:
f3:48:37:75:33:97:bc:58:fa:ab:63:03:35:65:96:ad:f5:8a:
ea:8c:bf:7e:c4:aa:51:70:fe:5a:fd:60:56:58:cd:d7:09:87:
c5:1d:00:58:c8:89:3c:ac:f3:e4:41:b6:ec:31:f7:84:91:39:
45:1c:78:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:45:55 2025 by rpki-client