Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/2a226d-c72c-4c12-bbba-a4b55a71c228/1/LbYW860DY-cmnMLrWNG8CGzJdfI.mft
File: LbYW860DY-cmnMLrWNG8CGzJdfI.mft (raw, json)
Hash identifier: JAFrdN7Inf6YDbuaAOntU7lwWhCQ3hQxh0SwRld9XLc=
Subject key identifier: BA:B8:E7:11:86:48:D0:22:65:F5:A5:19:E2:CD:2D:FF:7C:15:72:7B
Authority key identifier: 2D:B6:16:F3:AD:03:63:E7:26:9C:C2:EB:58:D1:BC:08:6C:C9:75:F2
Certificate issuer: /CN=2db616f3ad0363e7269cc2eb58d1bc086cc975f2
Certificate serial: 0197469E9CDCBE6AD80C8074D2AB7D93AA6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LbYW860DY-cmnMLrWNG8CGzJdfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/2a226d-c72c-4c12-bbba-a4b55a71c228/1/LbYW860DY-cmnMLrWNG8CGzJdfI.mft
Manifest number: 157A
Signing time: Fri 06 Jun 2025 19:01:29 +0000
Manifest this update: Fri 06 Jun 2025 19:01:29 +0000
Manifest next update: Sat 07 Jun 2025 19:01:29 +0000
Files and hashes: 1: LbYW860DY-cmnMLrWNG8CGzJdfI.crl (hash: qnYKU0JEolQBmhDfp7V1Fwc0rqsfna3oL0vp9ZoM8P8=)
2: TtiFva0B7nBQnunu1qXuQVvAjRk.roa (hash: BCLtQWteuqq7HD+J7kkS4GO2lBhow7GRQ0k6IwJXdnM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/2a226d-c72c-4c12-bbba-a4b55a71c228/1/LbYW860DY-cmnMLrWNG8CGzJdfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/2a226d-c72c-4c12-bbba-a4b55a71c228/1/LbYW860DY-cmnMLrWNG8CGzJdfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/LbYW860DY-cmnMLrWNG8CGzJdfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:9e:9c:dc:be:6a:d8:0c:80:74:d2:ab:7d:93:aa:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2db616f3ad0363e7269cc2eb58d1bc086cc975f2
Validity
Not Before: Jun 6 19:01:29 2025 GMT
Not After : Jun 7 19:01:29 2025 GMT
Subject: CN=bab8e7118648d02265f5a519e2cd2dff7c15727b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1c:2e:45:07:fc:6b:72:3c:ec:f8:73:68:28:
10:c5:fb:86:c4:10:b0:7e:1d:75:ab:ac:7b:ae:f9:
9c:80:22:7a:5b:95:f0:25:fa:a2:21:89:3c:7f:62:
d3:8c:cd:1e:6e:81:e9:37:94:30:a1:47:44:9a:d5:
a3:3f:3a:a1:92:a7:2d:77:ec:a6:8d:59:c5:6e:8f:
5c:49:e5:b8:0c:1f:8d:67:dc:d4:8b:2a:66:1b:2a:
91:0d:7e:c8:9f:ab:33:5f:d7:77:57:7f:e9:37:04:
db:6c:98:4f:1b:9b:43:8b:24:11:69:55:25:5d:32:
b2:c9:05:5b:b5:6f:af:c4:55:46:27:27:f1:25:74:
c5:1c:9e:1e:f3:9b:bb:d6:0a:4e:70:0b:25:d3:30:
0a:3d:0f:97:9a:97:52:cc:1d:b3:a3:c6:f2:30:c6:
ba:a3:46:fa:97:a1:d7:a2:b3:e8:17:e1:df:c5:3d:
4c:9c:43:3d:81:cc:d5:cf:78:b7:08:43:a8:d0:e0:
cc:fb:06:bb:7d:2f:53:88:f7:55:e4:5b:58:72:a4:
4e:2f:17:86:b8:96:9a:65:4d:2a:66:15:19:93:1c:
02:ce:57:1e:b1:3f:86:45:33:b4:eb:4a:70:a1:13:
52:f5:4c:53:67:08:c6:66:10:30:2b:5b:1d:0e:df:
ff:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:B8:E7:11:86:48:D0:22:65:F5:A5:19:E2:CD:2D:FF:7C:15:72:7B
X509v3 Authority Key Identifier:
keyid:2D:B6:16:F3:AD:03:63:E7:26:9C:C2:EB:58:D1:BC:08:6C:C9:75:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LbYW860DY-cmnMLrWNG8CGzJdfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/2a226d-c72c-4c12-bbba-a4b55a71c228/1/LbYW860DY-cmnMLrWNG8CGzJdfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/2a226d-c72c-4c12-bbba-a4b55a71c228/1/LbYW860DY-cmnMLrWNG8CGzJdfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:1c:29:b6:c9:7d:a1:28:15:5b:bb:b8:97:92:ff:e4:bd:f5:
d5:4c:93:59:6f:5a:e0:13:11:56:7e:97:6a:bc:c3:a6:91:63:
d2:0b:8a:64:f0:4f:fc:57:9b:5f:8f:9c:ab:f9:78:14:5c:6f:
43:dd:30:d3:63:09:1f:be:40:8d:85:2b:4f:c3:a8:97:fe:8d:
76:2e:0b:0f:75:08:5e:b6:e5:7e:e2:be:3e:9e:7d:4b:32:72:
85:79:cd:ad:56:67:b9:ca:1a:f1:17:88:76:81:67:a2:86:f2:
69:13:97:80:43:6e:90:10:75:2a:50:d5:19:3e:22:91:6f:c1:
54:a4:b7:21:dd:44:db:ee:e8:ab:66:7c:45:76:82:61:02:76:
22:5e:79:13:05:3d:aa:ee:cd:83:25:21:40:8d:a1:a1:f4:0b:
bb:77:96:21:bb:99:8a:7b:c0:d5:ef:90:85:e8:07:70:d2:7c:
56:2f:58:d5:a5:ea:a5:66:94:01:31:42:b6:3f:a6:1a:82:f4:
db:d3:37:4e:79:4e:4a:0b:06:8a:6a:7f:ce:f2:1e:96:10:a8:
c0:29:b4:1f:2e:82:95:c9:8a:33:3f:20:73:18:17:d1:c4:cc:
95:7a:d4:f7:5b:fa:da:a1:36:4f:3a:1e:11:fe:a5:dc:09:da:
a2:8c:5c:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:08:42 2025 by rpki-client