Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/1df8e1-6e80-443c-b6e8-d9f905fdc89a/1/LBGlP232MAtJEs4T9vqbEA_OJIg.mft
File: LBGlP232MAtJEs4T9vqbEA_OJIg.mft (raw, json)
Hash identifier: eKanCYZie4UbxLPoI8tozY5txrzLtVLVE7Pql4Umg4s=
Subject key identifier: C5:CC:88:7B:FB:7C:A0:23:B7:06:A4:DB:D1:5F:47:91:E0:F3:1E:C1
Authority key identifier: 2C:11:A5:3F:6D:F6:30:0B:49:12:CE:13:F6:FA:9B:10:0F:CE:24:88
Certificate issuer: /CN=2c11a53f6df6300b4912ce13f6fa9b100fce2488
Certificate serial: 01974AE9253F9414CE4AA032D30A26BA4C69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LBGlP232MAtJEs4T9vqbEA_OJIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/1df8e1-6e80-443c-b6e8-d9f905fdc89a/1/LBGlP232MAtJEs4T9vqbEA_OJIg.mft
Manifest number: 128B
Signing time: Sat 07 Jun 2025 15:01:22 +0000
Manifest this update: Sat 07 Jun 2025 15:01:22 +0000
Manifest next update: Sun 08 Jun 2025 15:01:22 +0000
Files and hashes: 1: 54SDy2hBAf60rRk7Cn2SENdLnF0.roa (hash: W4T7JvYJiD5Kubx3/xyHkSB0zOGjx+2ez3Dgx71rGrg=)
2: LBGlP232MAtJEs4T9vqbEA_OJIg.crl (hash: RLKn8ROdx6aMCWpB/sdGjG4YHJPyuy4JF4RY64L8hTk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/1df8e1-6e80-443c-b6e8-d9f905fdc89a/1/LBGlP232MAtJEs4T9vqbEA_OJIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/1df8e1-6e80-443c-b6e8-d9f905fdc89a/1/LBGlP232MAtJEs4T9vqbEA_OJIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LBGlP232MAtJEs4T9vqbEA_OJIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e9:25:3f:94:14:ce:4a:a0:32:d3:0a:26:ba:4c:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c11a53f6df6300b4912ce13f6fa9b100fce2488
Validity
Not Before: Jun 7 15:01:22 2025 GMT
Not After : Jun 8 15:01:22 2025 GMT
Subject: CN=c5cc887bfb7ca023b706a4dbd15f4791e0f31ec1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a0:6c:52:ed:db:f7:b9:99:c7:e3:8c:53:66:
0a:e4:76:6a:b7:a3:ff:8f:2e:1a:30:35:1c:9b:57:
f0:b4:1c:88:d0:78:ac:75:84:99:31:b4:47:9e:8c:
8f:8b:6f:51:c3:4f:36:09:f2:a5:21:6b:bf:59:dc:
cd:d6:10:4d:1e:5b:94:fd:63:68:db:01:2e:95:a0:
91:a0:0a:4b:90:9f:20:b7:46:21:90:7c:c4:c6:fc:
da:48:52:54:d0:7f:7e:8b:5e:61:2d:3a:b3:89:87:
60:52:85:1a:5c:a4:6c:e4:00:21:aa:ad:73:3f:81:
98:62:70:e7:0f:33:0d:84:fd:cc:79:a9:10:5a:cb:
7f:74:be:76:0e:df:26:07:fc:e0:48:c0:79:11:41:
6d:b1:dd:0c:54:3e:4a:4e:4e:b0:d8:27:d2:de:bf:
40:7b:b5:4d:b3:12:3e:12:a5:10:2b:60:3d:1c:64:
3d:21:83:d0:84:96:6e:3a:ed:d0:da:2c:e6:38:4f:
97:12:80:0f:04:56:8e:55:c3:81:88:e4:f9:b7:74:
a3:7a:c0:b5:6c:c1:7b:1d:09:12:59:4f:81:d1:1b:
14:cc:78:30:25:75:88:fe:b3:85:3b:e4:3f:0f:4d:
7e:eb:94:e0:4f:23:ee:84:cd:5d:88:c9:60:37:93:
30:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:CC:88:7B:FB:7C:A0:23:B7:06:A4:DB:D1:5F:47:91:E0:F3:1E:C1
X509v3 Authority Key Identifier:
keyid:2C:11:A5:3F:6D:F6:30:0B:49:12:CE:13:F6:FA:9B:10:0F:CE:24:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LBGlP232MAtJEs4T9vqbEA_OJIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1df8e1-6e80-443c-b6e8-d9f905fdc89a/1/LBGlP232MAtJEs4T9vqbEA_OJIg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1df8e1-6e80-443c-b6e8-d9f905fdc89a/1/LBGlP232MAtJEs4T9vqbEA_OJIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:02:7c:45:61:e0:da:58:c9:8e:90:bb:3d:24:3b:a0:12:60:
04:c8:cd:b9:28:db:76:6a:94:8d:6a:3a:1c:6e:bc:bb:46:4e:
d2:84:1f:74:97:16:c4:57:cc:32:d2:23:b7:3b:dc:47:98:4a:
f2:cb:ed:39:60:e3:ca:f7:4d:68:1d:ba:6b:e6:15:85:b1:5f:
18:f6:8e:d2:cf:24:07:63:29:1b:d6:f5:2e:66:44:27:08:b9:
0a:ed:f8:0d:72:7c:e8:07:79:1c:4d:71:c5:47:7d:c5:f9:d8:
32:31:75:d1:1d:42:25:d8:a9:48:84:94:24:cc:12:51:5e:58:
59:58:76:20:8a:af:2e:f5:a5:d4:20:49:e6:56:28:10:a4:4c:
0d:40:67:58:a6:cb:fe:41:18:1c:37:fd:8b:7d:b2:f7:cf:5c:
21:88:a0:df:0c:ca:34:4d:b5:6b:43:fc:8c:cb:b2:79:7d:7c:
30:8d:1b:c3:cb:3c:9e:f1:0f:84:da:b5:6c:f2:ff:76:fd:1b:
eb:88:9c:b3:c8:ea:73:9d:e9:2e:4a:35:0d:38:74:c3:5e:62:
36:3d:19:0f:5c:81:de:9e:70:9f:fa:b0:ff:06:07:87:61:96:
24:e4:d5:14:a3:f0:a9:47:b3:c6:c2:1c:b3:07:a4:3c:b3:1f:
92:3b:e1:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 20:38:33 2025 by rpki-client