Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.mft
File: lbheWsBVoSGIrlDNsAf6SItqqIs.mft (raw, json)
Hash identifier: aAPPB+6IVilHu9Bp5QgWCVNokp3QJquLtbKiObspgfU=
Subject key identifier: F9:B5:E0:8F:EA:6A:45:B5:A6:2B:0D:70:29:D6:9A:57:61:8A:B9:36
Authority key identifier: 95:B8:5E:5A:C0:55:A1:21:88:AE:50:CD:B0:07:FA:48:8B:6A:A8:8B
Certificate issuer: /CN=95b85e5ac055a12188ae50cdb007fa488b6aa88b
Certificate serial: 0197488C3229C966844BEBDE77EB0E24D7EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbheWsBVoSGIrlDNsAf6SItqqIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.mft
Manifest number: 157B
Signing time: Sat 07 Jun 2025 04:00:36 +0000
Manifest this update: Sat 07 Jun 2025 04:00:36 +0000
Manifest next update: Sun 08 Jun 2025 04:00:36 +0000
Files and hashes: 1: 6LbIgFJwzpH2Qf0sirzfHYuw_a4.roa (hash: yVSc0ifnnPwL8H5EwEXT2iNnCkvEaZBn7yh2JV9dabc=)
2: lbheWsBVoSGIrlDNsAf6SItqqIs.crl (hash: 5qy2C+KhyK7xOAvXdfjKcgIE2oYuZpgb7tRVp6t/xjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/lbheWsBVoSGIrlDNsAf6SItqqIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:32:29:c9:66:84:4b:eb:de:77:eb:0e:24:d7:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b85e5ac055a12188ae50cdb007fa488b6aa88b
Validity
Not Before: Jun 7 04:00:36 2025 GMT
Not After : Jun 8 04:00:36 2025 GMT
Subject: CN=f9b5e08fea6a45b5a62b0d7029d69a57618ab936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ca:36:93:54:ea:fc:d3:88:62:bd:f2:c8:42:
64:ef:d7:cf:d9:69:45:76:37:64:59:ce:88:52:f4:
63:8a:29:cb:33:7d:9d:27:33:34:18:11:bd:75:23:
fd:fa:e7:ca:66:f6:61:bb:a0:ca:8d:dd:c2:8e:01:
5a:fb:4c:a2:64:1c:26:36:b9:20:db:cd:c1:9a:fe:
ff:3a:60:51:a1:e9:67:14:b0:ca:76:84:31:05:db:
0e:80:ee:43:7c:b1:61:f0:91:3d:a4:9a:ca:4d:b4:
39:77:2f:62:b4:24:3d:19:34:8d:9a:d2:4e:8b:68:
97:05:d9:0d:6b:9a:d1:74:b3:71:47:df:1b:25:59:
1d:8f:3f:4b:a4:b0:80:c6:70:59:a6:f6:1a:d3:bf:
a7:00:9f:b5:14:4c:c4:ff:1e:31:60:5e:eb:31:9f:
6a:9b:89:2e:da:39:3b:90:38:ba:47:85:64:01:b1:
e7:f9:0e:0d:6e:1f:41:92:ff:43:b0:22:95:1a:bc:
11:39:3e:d5:7f:d3:25:8e:90:db:3e:d2:8f:8f:82:
6d:a4:8e:f1:2b:2b:1a:d9:4f:cb:a9:97:89:9c:ed:
21:0e:a2:68:c6:17:0e:14:2d:2e:e9:40:cb:8c:b9:
a1:51:90:ea:6a:93:61:99:f1:42:59:84:67:df:70:
93:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:B5:E0:8F:EA:6A:45:B5:A6:2B:0D:70:29:D6:9A:57:61:8A:B9:36
X509v3 Authority Key Identifier:
keyid:95:B8:5E:5A:C0:55:A1:21:88:AE:50:CD:B0:07:FA:48:8B:6A:A8:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbheWsBVoSGIrlDNsAf6SItqqIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:8d:d0:68:d8:5a:5d:22:b4:fc:28:ef:7f:00:5b:8e:a7:16:
0f:d7:02:00:d9:33:67:37:19:d6:93:59:47:8f:50:79:b2:62:
40:b5:38:89:02:bf:3b:c6:6e:6a:67:c8:81:e7:0b:ab:be:11:
3f:89:3b:bb:c7:38:16:44:04:73:60:bf:cd:16:7f:fe:4c:35:
c8:e3:5c:bd:af:61:ec:4f:07:74:50:e3:9d:de:a8:fa:fd:b3:
00:44:2a:2e:fd:ae:06:78:f6:63:56:0d:e8:98:d8:72:97:37:
87:9a:01:40:b7:64:37:39:c6:f0:3b:e7:65:e1:d2:5a:f1:21:
e7:2b:a0:a9:d9:41:0b:b8:f3:47:82:99:56:ee:1e:e3:1c:6b:
20:20:b3:27:f1:40:97:fe:4c:6a:e2:9a:4e:96:84:a7:3c:4e:
e9:ef:85:a4:74:ed:1f:06:f6:ef:a1:9c:ab:62:02:bb:57:7b:
20:e9:ab:d3:36:81:05:45:1e:b0:9b:6d:46:5a:56:f7:ef:8e:
b6:bc:0c:60:21:ea:c5:42:f2:43:52:13:e7:44:74:fd:ec:b4:
2e:21:b4:76:30:5c:57:6c:c0:ef:81:62:c3:9e:99:32:e9:58:
74:56:0f:41:c7:59:f2:4c:7e:c0:93:c9:6c:2e:d3:15:6a:bb:
80:74:07:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIjDIpyWaES+ved+sOJNfsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1Yjg1ZTVhYzA1NWExMjE4OGFlNTBjZGIwMDdmYTQ4OGI2
YWE4OGIwHhcNMjUwNjA3MDQwMDM2WhcNMjUwNjA4MDQwMDM2WjAzMTEwLwYDVQQD
EyhmOWI1ZTA4ZmVhNmE0NWI1YTYyYjBkNzAyOWQ2OWE1NzYxOGFiOTM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMo2k1Tq/NOIYr3yyEJk79fP2WlF
djdkWc6IUvRjiinLM32dJzM0GBG9dSP9+ufKZvZhu6DKjd3CjgFa+0yiZBwmNrkg
283Bmv7/OmBRoelnFLDKdoQxBdsOgO5DfLFh8JE9pJrKTbQ5dy9itCQ9GTSNmtJO
i2iXBdkNa5rRdLNxR98bJVkdjz9LpLCAxnBZpvYa07+nAJ+1FEzE/x4xYF7rMZ9q
m4ku2jk7kDi6R4VkAbHn+Q4Nbh9Bkv9DsCKVGrwROT7Vf9MljpDbPtKPj4JtpI7x
Kysa2U/LqZeJnO0hDqJoxhcOFC0u6UDLjLmhUZDqapNhmfFCWYRn33CT2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPm14I/qakW1pisNcCnWmldhirk2MB8GA1UdIwQY
MBaAFJW4XlrAVaEhiK5QzbAH+kiLaqiLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGJoZVdzQlZvU0dJcmxETnNBZjZTSXRxcUlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83NGFlZTgtNDFhOC00ZWU3LWFlNGMt
MjE4M2JjMzg0NGQyLzEvbGJoZVdzQlZvU0dJcmxETnNBZjZTSXRxcUlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS83NGFlZTgtNDFhOC00ZWU3LWFlNGMtMjE4M2JjMzg0NGQy
LzEvbGJoZVdzQlZvU0dJcmxETnNBZjZTSXRxcUlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeY3QaNha
XSK0/CjvfwBbjqcWD9cCANkzZzcZ1pNZR49QebJiQLU4iQK/O8ZuamfIgecLq74R
P4k7u8c4FkQEc2C/zRZ//kw1yONcva9h7E8HdFDjnd6o+v2zAEQqLv2uBnj2Y1YN
6JjYcpc3h5oBQLdkNznG8DvnZeHSWvEh5yugqdlBC7jzR4KZVu4e4xxrICCzJ/FA
l/5MauKaTpaEpzxO6e+FpHTtHwb276Gcq2ICu1d7IOmr0zaBBUUesJttRlpW9++O
trwMYCHqxULyQ1IT50R0/ey0LiG0djBcV2zA74Fiw56ZMulYdFYPQcdZ8kx+wJPJ
bC7TFWq7gHQHcw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 09:01:28 2025 by rpki-client