Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.mft
File: lbheWsBVoSGIrlDNsAf6SItqqIs.mft (raw, json)
Hash identifier: xvBx90amFDawL1FpklpDHx56kwT9+e6OGLkZ0EC5878=
Subject key identifier: 43:82:51:B9:4C:B1:60:CF:57:EE:5F:4D:29:01:6F:38:33:95:13:93
Authority key identifier: 95:B8:5E:5A:C0:55:A1:21:88:AE:50:CD:B0:07:FA:48:8B:6A:A8:8B
Certificate issuer: /CN=95b85e5ac055a12188ae50cdb007fa488b6aa88b
Certificate serial: 0198477862D0DCBE95A69DFDC5ADB7824BA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbheWsBVoSGIrlDNsAf6SItqqIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.mft
Manifest number: 15FF
Signing time: Sat 26 Jul 2025 16:02:08 +0000
Manifest this update: Sat 26 Jul 2025 16:02:08 +0000
Manifest next update: Sun 27 Jul 2025 16:02:08 +0000
Files and hashes: 1: 6LbIgFJwzpH2Qf0sirzfHYuw_a4.roa (hash: yVSc0ifnnPwL8H5EwEXT2iNnCkvEaZBn7yh2JV9dabc=)
2: lbheWsBVoSGIrlDNsAf6SItqqIs.crl (hash: /CADAVSxENMOpWbvXzzP/QbSfa0ThbjrYS4fZmwNZwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/lbheWsBVoSGIrlDNsAf6SItqqIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:78:62:d0:dc:be:95:a6:9d:fd:c5:ad:b7:82:4b:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b85e5ac055a12188ae50cdb007fa488b6aa88b
Validity
Not Before: Jul 26 16:02:08 2025 GMT
Not After : Jul 27 16:02:08 2025 GMT
Subject: CN=438251b94cb160cf57ee5f4d29016f3833951393
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3a:8d:ff:ce:29:7c:7f:0e:71:62:ee:a9:76:
2c:53:33:4f:26:14:fa:d7:2b:67:d3:77:e9:35:7e:
b5:4a:6e:ea:bd:ee:eb:ae:fe:b9:6e:f8:4d:ba:fc:
7f:89:ed:da:b4:4a:12:5e:1e:b8:27:75:26:d0:bd:
0b:e1:70:f0:80:7d:ad:fd:06:41:09:f6:d4:2e:5f:
f2:09:45:f3:c0:2c:98:6b:57:15:03:45:57:4b:8d:
99:b0:dd:af:e4:8c:e4:97:0a:54:ad:ee:d5:b1:04:
34:34:31:ed:9e:7e:b8:6a:fb:1b:41:f1:70:47:2d:
b5:c9:2c:a9:c8:67:2b:e4:2b:72:38:91:71:93:2d:
74:75:fb:b9:66:7c:8e:11:52:59:44:57:1f:cb:3f:
40:20:4a:7c:3d:14:e1:08:1c:84:e0:0f:42:92:fe:
2e:78:bf:cd:a8:e8:05:97:13:2b:66:46:4d:29:35:
94:ff:69:4b:29:a1:e3:31:7f:29:54:17:0c:1a:90:
54:a5:ee:3a:71:fb:f1:46:dd:48:ff:e0:af:2b:a5:
70:5f:bd:e3:a3:89:29:4b:9e:21:b7:fa:c0:cb:d8:
02:0e:77:eb:64:05:17:e5:36:1a:33:fa:5a:f7:77:
81:36:70:42:5b:27:57:da:11:d0:9b:d1:89:bd:68:
be:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:82:51:B9:4C:B1:60:CF:57:EE:5F:4D:29:01:6F:38:33:95:13:93
X509v3 Authority Key Identifier:
keyid:95:B8:5E:5A:C0:55:A1:21:88:AE:50:CD:B0:07:FA:48:8B:6A:A8:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbheWsBVoSGIrlDNsAf6SItqqIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:5b:fb:90:f7:e3:aa:3b:95:9f:a4:6d:c4:ad:c4:c3:2f:45:
c6:11:db:a7:87:c6:40:e5:e4:07:f7:23:89:36:c2:86:3e:5b:
50:29:26:c0:40:7a:2d:bd:b2:f6:2b:1f:84:78:68:92:66:3f:
29:af:13:9c:15:e0:6b:cf:39:c0:a8:e6:59:57:14:b3:58:97:
53:fd:3e:9b:3f:be:7e:84:85:fe:9a:e8:7f:48:fa:9d:91:85:
cc:7a:fb:b4:fb:fe:06:4e:1a:76:48:59:96:c0:07:38:1a:46:
a5:05:6f:e2:10:9e:5a:90:c5:8c:e7:1c:ef:ff:f0:44:89:2f:
a6:0b:27:de:1e:e4:5a:44:f8:43:5f:78:8f:f0:ff:82:eb:7f:
9c:f8:a2:e8:3a:dc:e3:33:11:2a:56:27:4d:7b:41:ff:38:a8:
21:4b:4d:a4:bd:e6:13:b9:e2:bc:8f:f6:1a:02:e2:09:db:7b:
d2:26:c9:01:6e:6c:74:03:ed:1e:de:7a:ed:f5:17:89:aa:a6:
f0:5e:e8:f5:5b:52:f0:56:67:29:b9:f8:9b:86:c4:87:66:08:
c7:b5:65:8f:99:e6:6d:e7:76:e9:58:1e:6d:a8:83:d0:1b:c7:
d1:c3:71:1a:4b:de:05:cf:77:0a:35:b7:2c:62:a5:f9:94:2c:
73:f2:0e:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:45:52 2025 by rpki-client