Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/lbmAuBA5WB4NLDelEhbNeXKbDHE.mft
File: lbmAuBA5WB4NLDelEhbNeXKbDHE.mft (raw, json)
Hash identifier: iO9eIk9meC/WHOEpEIHCMcjzjpu3+pR6m75JslC+Ums=
Subject key identifier: 3C:19:23:99:F6:2B:A9:3F:ED:B8:BF:5D:D4:31:30:21:33:CD:D0:97
Authority key identifier: 95:B9:80:B8:10:39:58:1E:0D:2C:37:A5:12:16:CD:79:72:9B:0C:71
Certificate issuer: /CN=95b980b81039581e0d2c37a51216cd79729b0c71
Certificate serial: 019642557ED56449A2F7211306AAE8B77BB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbmAuBA5WB4NLDelEhbNeXKbDHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/lbmAuBA5WB4NLDelEhbNeXKbDHE.mft
Manifest number: 14F4
Signing time: Thu 17 Apr 2025 06:00:21 +0000
Manifest this update: Thu 17 Apr 2025 06:00:21 +0000
Manifest next update: Fri 18 Apr 2025 06:00:21 +0000
Files and hashes: 1: ANSAYrE9HNntD61TvEpJUmG8rgw.roa (hash: 4+iM21UqhAp7nE5c7mZKQw9TVqg+SMBpGm5UpV8V8dc=)
2: PJ5ra5RQEPuenhUZKqA-ySi8au4.roa (hash: HAE/ZYsuA8aESklvJ9Rn5+/ozrtEQRVx0jFM8lv6NbI=)
3: lbmAuBA5WB4NLDelEhbNeXKbDHE.crl (hash: 2yJqEYgm9649wZeH0TLFz2aCR9he8iW93vrqn6ErB98=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/lbmAuBA5WB4NLDelEhbNeXKbDHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/lbmAuBA5WB4NLDelEhbNeXKbDHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lbmAuBA5WB4NLDelEhbNeXKbDHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:42:55:7e:d5:64:49:a2:f7:21:13:06:aa:e8:b7:7b:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b980b81039581e0d2c37a51216cd79729b0c71
Validity
Not Before: Apr 17 06:00:21 2025 GMT
Not After : Apr 18 06:00:21 2025 GMT
Subject: CN=3c192399f62ba93fedb8bf5dd431302133cdd097
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1b:05:92:9d:53:9c:c6:5d:2b:0a:c2:18:4a:
5a:11:e4:1f:67:c3:33:07:f5:b9:4d:46:cb:a9:03:
1a:d3:c9:1e:d8:f5:e7:90:17:19:a8:69:84:ec:a0:
82:5e:8f:e6:1e:60:ad:c7:aa:f4:14:f9:64:07:6b:
fa:ec:1c:fc:32:21:30:e5:e6:14:24:aa:63:5c:17:
e6:53:42:82:cc:c9:97:1b:30:02:15:a2:45:03:5c:
5f:73:6a:8e:c4:f6:2a:39:30:8c:28:98:34:51:93:
83:ff:a2:eb:6c:9f:a3:3b:c0:a1:b7:f5:4e:c1:d3:
98:e0:21:f1:2d:2d:6f:88:2c:6c:6d:6b:f2:e9:01:
bd:8c:d4:5e:eb:a8:85:ca:c8:5c:dc:42:18:d7:3a:
9d:02:bc:62:5f:43:7c:64:a6:2d:9a:52:b3:5c:29:
df:ee:69:f1:0d:f6:02:6f:98:74:f7:e8:b1:9c:cb:
98:4b:74:60:43:75:5f:18:53:2a:e4:2e:ee:20:f6:
dd:ad:11:b7:db:e1:de:77:cd:1d:89:76:88:b3:0b:
6c:83:1b:93:a2:2c:9c:7b:00:82:28:9d:08:f9:98:
27:ed:c7:20:d9:c2:b1:5a:40:52:5c:bb:6c:71:96:
7c:15:2d:bb:78:80:8d:4f:c6:e9:7c:6e:89:b1:c0:
eb:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:19:23:99:F6:2B:A9:3F:ED:B8:BF:5D:D4:31:30:21:33:CD:D0:97
X509v3 Authority Key Identifier:
keyid:95:B9:80:B8:10:39:58:1E:0D:2C:37:A5:12:16:CD:79:72:9B:0C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbmAuBA5WB4NLDelEhbNeXKbDHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/lbmAuBA5WB4NLDelEhbNeXKbDHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/lbmAuBA5WB4NLDelEhbNeXKbDHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:91:76:7b:66:25:16:e6:36:d3:cd:07:4a:71:de:54:91:df:
87:3f:b9:fc:bf:23:46:d4:80:2b:2b:26:24:26:cf:b5:9b:3b:
5e:a2:55:89:ba:94:99:c9:aa:4a:b6:76:c2:d4:c7:f4:83:8e:
ac:22:81:aa:a7:04:d7:58:f2:eb:e8:fe:e6:af:ff:75:72:f5:
64:0d:6d:81:4a:c4:62:25:b9:a9:b7:93:f8:d8:14:4e:00:5b:
00:6d:4d:48:40:38:a6:98:35:83:57:35:24:d9:1b:7f:5d:35:
91:14:80:e5:3d:a6:62:cf:c4:22:ae:9b:7e:f6:82:95:b6:76:
6a:67:83:15:26:53:9a:01:d2:f5:f4:32:ce:7c:33:96:c1:38:
d7:03:84:0d:66:08:48:1c:f8:b6:7c:fc:5e:30:ee:d5:21:a8:
c3:42:81:e9:20:f2:bc:3d:23:50:b5:11:7d:43:2a:fb:14:25:
2c:f2:9e:b9:45:04:e8:7d:99:89:55:b7:9e:42:17:41:72:45:
1c:48:c9:57:c9:61:f1:57:ae:0d:10:7a:5a:f0:65:cc:32:ac:
64:b9:41:f6:da:cb:ea:76:8f:69:ad:d3:fc:ac:a6:c1:e0:6f:
8a:db:a2:c3:ea:db:94:f2:e8:97:17:42:47:1f:5c:4f:0e:b2:
34:5c:dc:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZCVX7VZEmi9yETBqrot3uzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1Yjk4MGI4MTAzOTU4MWUwZDJjMzdhNTEyMTZjZDc5NzI5
YjBjNzEwHhcNMjUwNDE3MDYwMDIxWhcNMjUwNDE4MDYwMDIxWjAzMTEwLwYDVQQD
EygzYzE5MjM5OWY2MmJhOTNmZWRiOGJmNWRkNDMxMzAyMTMzY2RkMDk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBsFkp1TnMZdKwrCGEpaEeQfZ8Mz
B/W5TUbLqQMa08ke2PXnkBcZqGmE7KCCXo/mHmCtx6r0FPlkB2v67Bz8MiEw5eYU
JKpjXBfmU0KCzMmXGzACFaJFA1xfc2qOxPYqOTCMKJg0UZOD/6LrbJ+jO8Cht/VO
wdOY4CHxLS1viCxsbWvy6QG9jNRe66iFyshc3EIY1zqdArxiX0N8ZKYtmlKzXCnf
7mnxDfYCb5h09+ixnMuYS3RgQ3VfGFMq5C7uIPbdrRG32+Hed80diXaIswtsgxuT
oiycewCCKJ0I+Zgn7ccg2cKxWkBSXLtscZZ8FS27eICNT8bpfG6JscDrgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDwZI5n2K6k/7bi/XdQxMCEzzdCXMB8GA1UdIwQY
MBaAFJW5gLgQOVgeDSw3pRIWzXlymwxxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGJtQXVCQTVXQjROTERlbEVoYk5lWEtiREhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC82MzQxNzItYmIzNy00ZDgyLTg4YTIt
OTQyZDJjNmM1ODU2LzEvbGJtQXVCQTVXQjROTERlbEVoYk5lWEtiREhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC82MzQxNzItYmIzNy00ZDgyLTg4YTItOTQyZDJjNmM1ODU2
LzEvbGJtQXVCQTVXQjROTERlbEVoYk5lWEtiREhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfJF2e2Yl
FuY2080HSnHeVJHfhz+5/L8jRtSAKysmJCbPtZs7XqJVibqUmcmqSrZ2wtTH9IOO
rCKBqqcE11jy6+j+5q//dXL1ZA1tgUrEYiW5qbeT+NgUTgBbAG1NSEA4ppg1g1c1
JNkbf101kRSA5T2mYs/EIq6bfvaClbZ2ameDFSZTmgHS9fQyznwzlsE41wOEDWYI
SBz4tnz8XjDu1SGow0KB6SDyvD0jULURfUMq+xQlLPKeuUUE6H2ZiVW3nkIXQXJF
HEjJV8lh8VeuDRB6WvBlzDKsZLlB9trL6naPaa3T/KymweBvituiw+rblPLolxdC
Rx9cTw6yNFzcLg==
-----END CERTIFICATE-----
Generated at Thu Apr 17 09:03:21 2025 by rpki-client