Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/ecbffa-1166-4d1e-9f55-11575db64fbe/1/LBKCZbgJkXiNhuImLpM5A4tO-oI.mft
File: LBKCZbgJkXiNhuImLpM5A4tO-oI.mft (raw, json)
Hash identifier: TGhnX14SMFxkgHnWxuW0OArBA/7Vb+xmrH1vobmmINk=
Subject key identifier: AA:19:1C:64:BE:90:83:3C:2E:AE:FF:3F:95:60:46:FB:7C:4B:43:F5
Authority key identifier: 2C:12:82:65:B8:09:91:78:8D:86:E2:26:2E:93:39:03:8B:4E:FA:82
Certificate issuer: /CN=2c128265b80991788d86e2262e9339038b4efa82
Certificate serial: 0197462FC20196E987BAC34A3AEDDAC7513D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LBKCZbgJkXiNhuImLpM5A4tO-oI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/ecbffa-1166-4d1e-9f55-11575db64fbe/1/LBKCZbgJkXiNhuImLpM5A4tO-oI.mft
Manifest number: 010A
Signing time: Fri 06 Jun 2025 17:00:24 +0000
Manifest this update: Fri 06 Jun 2025 17:00:24 +0000
Manifest next update: Sat 07 Jun 2025 17:00:24 +0000
Files and hashes: 1: AUJAohDb7gvWp2PAn2xH3z3Zx8I.roa (hash: Px2ndw4EQ+qkKAfeVMR+LtAp8KsmOxSR4KCS0rfVjWc=)
2: LBKCZbgJkXiNhuImLpM5A4tO-oI.crl (hash: V+DTFLK20Z59ogX0v/PubVH9Hzj+gaXsgZBr2LWOGw8=)
3: LTEzdR9zUquR1ggUmA4_QHu2p50.roa (hash: uNuzvFRDaCwMPWv1CbBVSxROhTe6dbQ9XSUinppVNcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/ecbffa-1166-4d1e-9f55-11575db64fbe/1/LBKCZbgJkXiNhuImLpM5A4tO-oI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/ecbffa-1166-4d1e-9f55-11575db64fbe/1/LBKCZbgJkXiNhuImLpM5A4tO-oI.mft
rsync://rpki.ripe.net/repository/DEFAULT/LBKCZbgJkXiNhuImLpM5A4tO-oI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:2f:c2:01:96:e9:87:ba:c3:4a:3a:ed:da:c7:51:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c128265b80991788d86e2262e9339038b4efa82
Validity
Not Before: Jun 6 17:00:24 2025 GMT
Not After : Jun 7 17:00:24 2025 GMT
Subject: CN=aa191c64be90833c2eaeff3f956046fb7c4b43f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:86:cc:5b:b2:68:b6:cf:3a:f3:b9:0f:cf:4b:
3d:93:ba:64:cb:34:04:9e:e6:98:f4:b2:1b:85:a6:
21:fa:1b:e1:94:f5:82:9c:a3:c6:a0:fe:16:f0:79:
c2:42:d5:31:f7:6a:16:25:88:ed:a9:23:28:6f:d1:
14:f4:34:47:7a:df:da:3d:b7:cf:17:bd:f8:79:d3:
90:99:19:73:5b:79:f5:f9:92:ff:1a:f3:77:a7:81:
e9:fe:88:65:67:28:5a:a5:b1:3a:ce:4e:17:43:85:
20:14:8c:1b:e5:d1:8b:9a:13:85:a1:47:0f:35:fe:
21:ca:90:01:2a:d2:b6:41:e5:c2:ad:94:ee:6d:37:
5a:42:0f:92:ff:7e:a9:60:ac:e8:e1:1a:b8:86:b1:
b7:69:ae:86:96:a1:d6:fa:95:a0:1f:ac:46:cb:09:
92:88:19:c8:9a:3f:18:f2:6c:d9:76:04:8e:86:7a:
9d:44:98:fc:15:0e:e3:09:1c:50:f2:49:77:f7:fb:
17:38:55:f9:78:86:7e:d2:c1:e6:b5:2c:e0:26:04:
57:47:71:af:58:f3:89:25:4a:fb:f9:4e:43:e4:72:
1c:50:c4:98:b2:fd:d4:bb:8d:6c:60:54:a2:98:4e:
9d:97:82:d4:ea:34:95:b8:60:5f:ce:81:59:e3:81:
15:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:19:1C:64:BE:90:83:3C:2E:AE:FF:3F:95:60:46:FB:7C:4B:43:F5
X509v3 Authority Key Identifier:
keyid:2C:12:82:65:B8:09:91:78:8D:86:E2:26:2E:93:39:03:8B:4E:FA:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LBKCZbgJkXiNhuImLpM5A4tO-oI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ecbffa-1166-4d1e-9f55-11575db64fbe/1/LBKCZbgJkXiNhuImLpM5A4tO-oI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ecbffa-1166-4d1e-9f55-11575db64fbe/1/LBKCZbgJkXiNhuImLpM5A4tO-oI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:19:6e:37:0b:a7:c2:60:46:07:6b:c1:c6:b1:65:42:8e:46:
8c:d4:1d:97:fc:ae:05:f8:b6:74:e7:43:a1:b9:00:09:a6:73:
cd:f0:ea:59:a8:11:3e:7c:2c:c5:00:fe:30:f8:27:47:2d:92:
a6:9a:58:c2:4d:f4:b6:bb:44:82:5c:fc:84:fe:97:a9:4e:9c:
be:96:cc:18:71:8c:4a:f7:7c:7f:e4:37:d7:0e:f4:cb:f1:fa:
f9:3c:cf:16:af:43:33:c4:80:32:c3:3d:7a:1f:8c:31:cd:07:
b3:d5:6d:f1:6b:fb:22:c9:d6:f8:c8:ac:c6:41:83:18:a0:a5:
81:04:b7:07:4b:83:cd:a9:3f:b0:06:4f:8f:ea:71:c2:a1:f1:
66:05:54:29:d8:74:b9:d2:44:4a:1a:fa:a6:2a:e0:95:f7:eb:
9d:05:60:cb:a4:80:f9:74:04:b0:6f:8c:99:3e:de:55:0c:42:
28:cc:14:6e:12:07:66:46:41:2c:f0:5e:ce:70:57:c0:02:bd:
32:6a:3c:2c:86:f3:de:94:35:2f:9c:b7:99:1b:0a:f2:29:76:
7f:a6:7a:ba:18:8c:e0:48:11:c4:98:2b:86:36:36:8b:2c:d1:
14:ea:3f:73:ee:eb:98:2f:d0:2f:44:2b:cd:a2:b9:7b:74:d3:
13:9e:ff:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:17:48 2025 by rpki-client