Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.mft
File: lakErGCT4eIpoHTFBQb_7NoBDM8.mft (raw, json)
Hash identifier: saZEOf7VkY9RHLWN+XF5nzfF7ejgWJaFtAph3pcMlqQ=
Subject key identifier: B3:EC:86:90:83:F6:04:0B:3D:EC:C1:4A:B0:58:1E:99:2D:AD:83:00
Authority key identifier: 95:A9:04:AC:60:93:E1:E2:29:A0:74:C5:05:06:FF:EC:DA:01:0C:CF
Certificate issuer: /CN=95a904ac6093e1e229a074c50506ffecda010ccf
Certificate serial: 01974C68E5E92F81C8683E22449782E253DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lakErGCT4eIpoHTFBQb_7NoBDM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.mft
Manifest number: 0AF5
Signing time: Sat 07 Jun 2025 22:00:32 +0000
Manifest this update: Sat 07 Jun 2025 22:00:32 +0000
Manifest next update: Sun 08 Jun 2025 22:00:32 +0000
Files and hashes: 1: EYwLNQ0R_Ied-v-mXvUH_vf6GVA.roa (hash: TajJUilMmDGZNmoTd4v8tDuWl6eHYmByCynqf999DBU=)
2: lakErGCT4eIpoHTFBQb_7NoBDM8.crl (hash: mLPbKcJ9b1uvNXeRtbI05ZYuSBLB96beQOXveE+Omfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/lakErGCT4eIpoHTFBQb_7NoBDM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:68:e5:e9:2f:81:c8:68:3e:22:44:97:82:e2:53:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95a904ac6093e1e229a074c50506ffecda010ccf
Validity
Not Before: Jun 7 22:00:32 2025 GMT
Not After : Jun 8 22:00:32 2025 GMT
Subject: CN=b3ec869083f6040b3decc14ab0581e992dad8300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:93:12:cc:de:5c:9b:aa:45:b3:37:b9:c6:d9:
ac:99:86:b5:29:38:c6:24:d0:af:e4:0d:56:50:7f:
9b:4f:3e:a0:db:1a:15:7b:aa:0f:1c:c7:31:14:04:
1c:c1:7f:14:63:d5:6c:3d:e9:0f:6c:1e:30:b7:02:
7a:1d:87:6a:65:aa:6e:2c:15:4d:b7:92:30:f1:85:
af:d8:e0:e8:c0:3e:c9:28:04:9b:2f:c1:a5:5a:c1:
fb:ec:6b:f7:aa:f4:5b:9e:0f:5a:49:80:4a:97:0c:
3c:e3:64:ee:7a:3c:ee:85:52:c2:a2:23:24:21:80:
6e:4c:aa:6d:2f:53:d4:5e:2d:9c:de:f1:2a:29:4d:
c3:a0:5a:73:2e:ac:06:4b:d9:3b:6d:08:53:3d:0c:
a1:55:49:c4:10:8f:7b:c7:1b:9d:aa:72:d4:74:d2:
2b:73:2e:79:87:33:1d:4c:72:9c:16:c1:c0:74:7d:
87:42:87:a7:ce:bf:da:ed:ae:ae:84:8a:02:0d:7c:
23:85:ed:27:01:b1:84:1a:6b:45:55:7e:a2:1a:c3:
2b:a9:61:ba:53:c7:a4:a3:4f:25:19:7d:fa:6e:5a:
e7:4a:31:c0:be:35:b2:04:92:8a:50:9c:12:be:56:
30:c6:89:e4:35:52:1f:1a:0f:54:08:43:2a:0b:e9:
a3:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:EC:86:90:83:F6:04:0B:3D:EC:C1:4A:B0:58:1E:99:2D:AD:83:00
X509v3 Authority Key Identifier:
keyid:95:A9:04:AC:60:93:E1:E2:29:A0:74:C5:05:06:FF:EC:DA:01:0C:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lakErGCT4eIpoHTFBQb_7NoBDM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:87:22:40:b6:91:4a:9e:04:02:b6:4b:b6:09:f6:cd:cc:3e:
9e:1d:ed:19:01:46:25:42:83:c5:2e:da:52:46:4a:95:6d:ab:
75:61:02:4f:10:0f:a2:89:4e:92:45:7a:44:1d:4a:67:f4:f9:
5f:b7:2c:6c:46:9c:9a:b5:3d:88:ec:0e:ed:aa:fa:bd:30:d7:
30:f3:ca:3d:c4:21:d9:f7:30:92:b8:a6:f8:08:ba:a6:24:7a:
e8:6d:00:7e:76:17:1f:2a:f6:f1:84:4d:55:a8:89:84:a7:af:
b0:48:77:1f:73:ef:7e:95:e9:4d:52:73:35:4c:0c:37:85:2d:
16:0e:93:13:4c:34:88:f9:c2:02:3f:98:7f:0a:84:dd:91:39:
e9:cd:9f:82:7b:df:d9:46:9c:94:46:d6:b9:e4:2d:17:4d:32:
e5:17:a6:76:3f:3a:76:20:52:3e:36:7c:48:4c:1d:12:b3:87:
44:ba:c4:40:01:72:9c:7d:fe:8c:f7:05:88:b0:5e:16:a8:e9:
e0:a6:15:4d:40:17:5f:2b:26:61:34:bf:85:f8:88:75:07:eb:
97:40:43:c0:f4:04:04:eb:f6:83:5b:80:b3:f5:76:eb:ec:3b:
16:05:46:ac:02:f2:30:0c:a0:d3:11:e1:57:9d:d4:e8:76:89:
32:42:6e:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 03:30:20 2025 by rpki-client