Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/lbmAuBA5WB4NLDelEhbNeXKbDHE.mft
File: lbmAuBA5WB4NLDelEhbNeXKbDHE.mft (raw, json)
Hash identifier: 74N2oOA+phN4ggNisXUDE277REjzDy72pxvj6M7nv+Q=
Subject key identifier: BB:DC:1F:72:AB:2C:A5:4E:AE:11:F9:75:D7:F2:DB:4C:00:B0:92:9E
Authority key identifier: 95:B9:80:B8:10:39:58:1E:0D:2C:37:A5:12:16:CD:79:72:9B:0C:71
Certificate issuer: /CN=95b980b81039581e0d2c37a51216cd79729b0c71
Certificate serial: 01974AE8DA9BCFD5D73BDF567D7D2EBD6797
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbmAuBA5WB4NLDelEhbNeXKbDHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/lbmAuBA5WB4NLDelEhbNeXKbDHE.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 15:01:03 +0000
Manifest this update: Sat 07 Jun 2025 15:01:03 +0000
Manifest next update: Sun 08 Jun 2025 15:01:03 +0000
Files and hashes: 1: ANSAYrE9HNntD61TvEpJUmG8rgw.roa (hash: 4+iM21UqhAp7nE5c7mZKQw9TVqg+SMBpGm5UpV8V8dc=)
2: PJ5ra5RQEPuenhUZKqA-ySi8au4.roa (hash: HAE/ZYsuA8aESklvJ9Rn5+/ozrtEQRVx0jFM8lv6NbI=)
3: lbmAuBA5WB4NLDelEhbNeXKbDHE.crl (hash: LokzNyVd7t4IgkT7+iM+F494uw2YvGVHzU1vVpSNOLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/lbmAuBA5WB4NLDelEhbNeXKbDHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/lbmAuBA5WB4NLDelEhbNeXKbDHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lbmAuBA5WB4NLDelEhbNeXKbDHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e8:da:9b:cf:d5:d7:3b:df:56:7d:7d:2e:bd:67:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b980b81039581e0d2c37a51216cd79729b0c71
Validity
Not Before: Jun 7 15:01:03 2025 GMT
Not After : Jun 8 15:01:03 2025 GMT
Subject: CN=bbdc1f72ab2ca54eae11f975d7f2db4c00b0929e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ef:c3:9a:8a:49:ac:1b:b0:8e:28:63:f7:ea:
1f:8d:ce:16:7c:f7:40:39:87:1d:dd:b6:e2:e4:56:
73:2c:c0:73:92:0e:d5:1f:ea:02:ed:b9:c8:c1:3f:
ce:21:3e:19:e1:03:b9:10:c8:47:9d:75:2b:37:d3:
f4:f0:a1:d1:37:e2:ee:da:c3:d1:a3:77:9a:09:73:
65:c2:c1:e2:31:ab:3f:d9:e1:10:f3:79:59:3b:89:
be:9d:58:36:77:51:c9:be:27:08:2d:53:a2:17:ec:
7a:c9:5f:88:c4:ee:28:e4:76:0b:28:d9:95:78:79:
2a:ee:89:e8:7b:df:49:41:a5:24:de:63:2f:92:3c:
da:f2:7f:fd:bf:61:42:69:eb:00:54:6e:a3:c8:39:
64:85:33:7d:88:6b:f5:cf:ab:72:6e:81:cd:9a:33:
11:ad:df:c5:fb:f3:33:49:5d:d5:14:00:7e:db:82:
0e:83:72:45:3d:1e:3e:e1:76:0d:fb:54:a3:59:27:
07:0a:03:74:b2:88:2b:c8:92:d5:1f:1a:47:08:63:
32:c1:5f:97:a8:40:7b:78:bf:b3:92:41:06:87:36:
d8:ee:58:74:d6:dd:1d:4e:bb:6f:2a:d0:53:ef:54:
a6:33:dd:33:7e:e9:45:31:29:65:f6:4c:8c:75:64:
de:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:DC:1F:72:AB:2C:A5:4E:AE:11:F9:75:D7:F2:DB:4C:00:B0:92:9E
X509v3 Authority Key Identifier:
keyid:95:B9:80:B8:10:39:58:1E:0D:2C:37:A5:12:16:CD:79:72:9B:0C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbmAuBA5WB4NLDelEhbNeXKbDHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/lbmAuBA5WB4NLDelEhbNeXKbDHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/lbmAuBA5WB4NLDelEhbNeXKbDHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:41:cb:8d:a5:31:c7:48:37:fc:5d:06:27:aa:60:da:70:2b:
3b:83:9f:95:12:3b:68:50:9f:4b:d0:d5:dd:3d:5b:27:90:d8:
35:5d:be:7f:51:6d:55:0e:f1:dc:e5:91:db:64:2d:c5:86:c4:
eb:2f:e9:29:b2:03:45:ef:e8:46:55:01:6f:7c:ed:b5:d9:81:
cd:66:d1:2d:e1:8c:ba:21:a7:9d:09:3a:69:92:62:83:20:89:
10:27:c5:37:59:e8:d0:b4:e4:b6:11:02:19:9e:13:0f:29:e5:
8f:a5:9d:89:8d:79:9c:18:4e:68:9b:f1:ae:58:98:40:52:72:
ee:77:94:7f:97:47:88:b2:71:b4:48:37:35:26:cd:79:bb:e6:
89:f5:fc:84:96:bc:85:7f:3f:e9:45:e8:34:c8:87:96:b4:30:
e8:b8:c5:75:7f:4d:04:26:da:b4:98:96:6c:f4:b2:dc:11:04:
da:84:a5:85:ef:76:0c:b3:a6:d1:3f:97:fd:6f:78:65:dd:10:
4d:ef:8f:b3:bb:c5:73:ea:26:bf:94:a8:22:32:5a:e2:be:56:
07:6c:c8:9c:1a:e1:d2:c5:fd:50:d9:79:32:c5:be:01:01:5f:
7d:e0:91:fd:18:ed:bd:07:2a:e1:d0:14:5d:13:18:58:f8:7c:
0a:7e:e2:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:56:27 2025 by rpki-client