Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/0aab78-66de-444c-a843-0b3cb4c6b79a/1/lbgfTkXXEdoMFI3Cuq0VBN27Qns.mft
File: lbgfTkXXEdoMFI3Cuq0VBN27Qns.mft (raw, json)
Hash identifier: 5FT7vhHSStpn07j+FrANPHNRxj1McOQDKrfLh9Cwb5Q=
Subject key identifier: 89:BB:48:53:9D:96:68:C6:C8:3A:AD:08:4D:03:B5:CC:59:72:17:12
Authority key identifier: 95:B8:1F:4E:45:D7:11:DA:0C:14:8D:C2:BA:AD:15:04:DD:BB:42:7B
Certificate issuer: /CN=95b81f4e45d711da0c148dc2baad1504ddbb427b
Certificate serial: 019849D344997361BF6E3EBAD4FAC556D1BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbgfTkXXEdoMFI3Cuq0VBN27Qns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/0aab78-66de-444c-a843-0b3cb4c6b79a/1/lbgfTkXXEdoMFI3Cuq0VBN27Qns.mft
Manifest number: 1601
Signing time: Sun 27 Jul 2025 03:00:39 +0000
Manifest this update: Sun 27 Jul 2025 03:00:39 +0000
Manifest next update: Mon 28 Jul 2025 03:00:39 +0000
Files and hashes: 1: 7akWYjQwsX6a6HhUzkzvmpveN9o.roa (hash: NaXDBHO9cOnr/DrruhF4XLx1P8skQ7ZIYlWJ7+sC7iA=)
2: lbgfTkXXEdoMFI3Cuq0VBN27Qns.crl (hash: 3+2nbbHL3WozfcKfZCvMwLzATC2322WuCG6nlGesA9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/0aab78-66de-444c-a843-0b3cb4c6b79a/1/lbgfTkXXEdoMFI3Cuq0VBN27Qns.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/0aab78-66de-444c-a843-0b3cb4c6b79a/1/lbgfTkXXEdoMFI3Cuq0VBN27Qns.mft
rsync://rpki.ripe.net/repository/DEFAULT/lbgfTkXXEdoMFI3Cuq0VBN27Qns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 03:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:44:99:73:61:bf:6e:3e:ba:d4:fa:c5:56:d1:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b81f4e45d711da0c148dc2baad1504ddbb427b
Validity
Not Before: Jul 27 03:00:39 2025 GMT
Not After : Jul 28 03:00:39 2025 GMT
Subject: CN=89bb48539d9668c6c83aad084d03b5cc59721712
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:20:77:99:6a:3a:96:7b:be:ca:b4:f7:62:e1:
88:54:51:c1:ba:c7:6c:11:9f:a7:b1:7b:e9:07:7b:
d6:c2:88:f5:86:0b:02:ce:a1:d1:63:ee:7d:0c:5b:
84:11:44:20:84:a9:05:49:a0:bd:fb:02:3f:92:c5:
3b:50:ad:4e:2e:0a:8f:0c:ce:d2:25:9b:b6:ea:c6:
30:39:c1:42:e4:3f:4e:36:90:3b:93:22:d7:72:05:
70:76:ec:f9:de:a0:65:db:8a:b4:df:76:a3:bf:c0:
a2:f1:03:b6:82:95:90:76:1f:62:d6:27:30:7b:1f:
8c:1b:7d:a1:8f:a4:ed:40:3c:58:c8:5e:76:08:eb:
b0:40:61:e5:42:bc:5c:79:9a:14:e2:f9:4b:fb:b4:
eb:34:a1:d4:b0:46:04:ba:4f:29:40:01:43:29:78:
cc:05:7f:fa:35:2a:7f:21:5a:62:86:ee:9c:99:3f:
b0:7d:5c:51:f6:b2:dc:f6:af:43:19:ab:04:40:67:
f4:46:e6:ac:79:01:78:72:fa:23:93:33:92:58:2b:
f9:91:36:81:03:63:a1:5d:92:9d:bb:2e:50:19:c3:
0b:7f:6b:0e:15:03:b9:ed:8a:f4:3e:3e:1a:4d:cb:
6e:a5:4e:7c:79:ba:df:64:73:e2:65:38:77:20:32:
bc:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:BB:48:53:9D:96:68:C6:C8:3A:AD:08:4D:03:B5:CC:59:72:17:12
X509v3 Authority Key Identifier:
keyid:95:B8:1F:4E:45:D7:11:DA:0C:14:8D:C2:BA:AD:15:04:DD:BB:42:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbgfTkXXEdoMFI3Cuq0VBN27Qns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0aab78-66de-444c-a843-0b3cb4c6b79a/1/lbgfTkXXEdoMFI3Cuq0VBN27Qns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0aab78-66de-444c-a843-0b3cb4c6b79a/1/lbgfTkXXEdoMFI3Cuq0VBN27Qns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:9d:27:84:29:66:0a:85:7c:7f:3b:03:7e:8e:5c:fd:68:4f:
16:8f:f6:aa:e6:16:6d:ad:93:57:0d:01:e0:b2:a1:fa:c6:83:
3d:55:e0:74:3d:93:c5:46:61:4c:11:e3:21:c7:a7:a6:94:53:
7d:bd:d1:b8:ee:3c:cc:29:60:f3:7e:62:2b:08:98:9c:94:06:
10:da:eb:ee:17:36:9e:d3:59:91:28:8d:b3:77:14:2f:2f:40:
3f:32:3b:ca:67:09:ae:b6:97:52:67:24:5e:4b:fa:bb:28:d7:
ef:e6:36:25:f5:c6:97:08:d1:f5:7e:22:3c:20:92:a9:c0:eb:
8c:68:ec:de:91:4d:dd:65:36:09:00:b0:c3:d1:79:4b:22:c0:
f5:ed:bc:11:a2:0a:37:a3:fc:95:05:3a:ef:c1:b4:a6:8d:dc:
c6:fb:6f:7d:63:37:fd:2a:22:d8:93:13:47:ba:0a:e7:1e:e6:
17:37:2e:7b:3b:4f:f3:63:d3:f3:16:3d:eb:5b:13:e3:ce:3d:
3e:42:2e:01:05:e4:38:f1:0d:77:d7:c2:ad:74:7c:4d:d2:36:
5f:39:4e:30:dc:70:13:46:ad:65:fe:5a:53:a7:5c:a2:a9:9a:
f0:3c:e0:43:91:4a:84:59:41:e1:1a:4e:11:99:4a:7e:09:88:
f9:ba:41:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:05:29 2025 by rpki-client