Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.mft
File: lbheWsBVoSGIrlDNsAf6SItqqIs.mft (raw, json)
Hash identifier: dkBjYou7W5CCF1FCsdFdZ0dDsK5jE+n4sr+mTzj+65c=
Subject key identifier: 52:74:FC:FB:16:2F:7D:EE:B4:A5:68:17:8C:A2:53:7A:A6:5E:95:36
Authority key identifier: 95:B8:5E:5A:C0:55:A1:21:88:AE:50:CD:B0:07:FA:48:8B:6A:A8:8B
Certificate issuer: /CN=95b85e5ac055a12188ae50cdb007fa488b6aa88b
Certificate serial: 019A2478D23B1B1FDFC92315BE9E4C10BDA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbheWsBVoSGIrlDNsAf6SItqqIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.mft
Manifest number: 16F6
Signing time: Mon 27 Oct 2025 07:01:29 +0000
Manifest this update: Mon 27 Oct 2025 07:01:29 +0000
Manifest next update: Tue 28 Oct 2025 07:01:29 +0000
Files and hashes: 1: 6LbIgFJwzpH2Qf0sirzfHYuw_a4.roa (hash: yVSc0ifnnPwL8H5EwEXT2iNnCkvEaZBn7yh2JV9dabc=)
2: lbheWsBVoSGIrlDNsAf6SItqqIs.crl (hash: 6rs+JfmuuKD14EzOMT/nVYpnYGDqiqtbHeMpggVJDnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/lbheWsBVoSGIrlDNsAf6SItqqIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 07:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:78:d2:3b:1b:1f:df:c9:23:15:be:9e:4c:10:bd:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b85e5ac055a12188ae50cdb007fa488b6aa88b
Validity
Not Before: Oct 27 07:01:29 2025 GMT
Not After : Oct 28 07:01:29 2025 GMT
Subject: CN=5274fcfb162f7deeb4a568178ca2537aa65e9536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:95:21:95:c5:8b:f4:f0:dd:b9:f5:41:b5:55:
04:b5:ef:eb:ca:65:91:14:e5:09:f3:d0:83:2a:8f:
1d:c4:1b:4f:3f:4a:aa:b5:8e:e0:bc:94:ed:25:eb:
1e:82:90:bd:8e:4a:43:f6:1a:0c:88:6b:fe:78:a5:
ae:c7:45:30:4d:81:e3:4d:30:c9:71:e1:9a:30:4c:
95:43:b0:7c:50:89:31:4f:ea:5d:a6:ca:02:23:5e:
de:08:73:59:3b:bb:89:c9:d2:f2:ef:5c:2d:d9:12:
cf:19:6e:65:26:90:3d:cd:2e:02:87:2a:9f:2a:48:
1d:77:86:4c:55:c2:0b:ee:69:b5:7d:00:3a:77:43:
12:04:39:91:63:f6:c0:05:4a:1b:d4:ed:24:ef:6d:
cb:72:88:49:5a:bd:de:70:22:02:36:45:9b:b3:c1:
25:cf:82:9f:60:2b:c3:49:03:1d:81:c0:fb:21:6c:
8d:f3:9e:85:b9:83:27:b2:e1:f7:3d:b2:cd:61:e6:
20:01:bd:5e:0b:45:19:84:ff:cf:c2:90:cd:4a:07:
41:8b:43:3c:48:2c:43:2f:65:97:44:95:d4:95:bd:
b6:d1:b5:3c:fc:96:54:07:23:f4:ba:0c:a3:67:a9:
95:19:8c:9c:2f:e4:28:d8:eb:ad:dd:61:41:36:14:
49:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:74:FC:FB:16:2F:7D:EE:B4:A5:68:17:8C:A2:53:7A:A6:5E:95:36
X509v3 Authority Key Identifier:
keyid:95:B8:5E:5A:C0:55:A1:21:88:AE:50:CD:B0:07:FA:48:8B:6A:A8:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbheWsBVoSGIrlDNsAf6SItqqIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:00:0f:2c:53:a0:9c:9c:9f:ae:9e:4b:5c:21:2b:86:3b:cc:
8e:ad:fb:9f:e5:24:b3:43:fb:c3:55:c3:21:e3:29:48:02:9c:
17:60:19:76:74:80:4c:ea:a3:17:5a:46:77:27:9b:a9:ee:a2:
44:d9:df:bb:3f:27:8a:35:ce:c8:1b:cd:70:b1:d0:e8:39:f7:
80:ed:7a:e2:95:2e:f5:d7:e4:df:ce:e9:42:cc:0c:1a:df:88:
2e:c7:ff:76:8c:c9:c5:b0:dd:ab:d6:46:1d:0d:3a:24:85:55:
00:5b:e7:09:e1:99:fd:92:ad:50:b9:29:cd:fa:70:ed:82:aa:
15:77:c3:c2:e6:a8:8b:b1:0b:e3:0b:7f:e8:5a:a0:d9:bd:30:
7c:63:96:98:f8:8f:e8:f5:39:0b:e1:10:87:b6:59:14:5d:5e:
64:11:5b:a9:12:27:e5:eb:d9:a5:c4:55:72:05:a3:06:75:66:
8d:6e:14:fd:2c:29:c6:f8:59:e8:5b:1f:87:20:0c:7b:0d:25:
18:08:d0:32:a1:64:77:b0:71:68:48:d1:f5:5f:f4:0c:1b:e9:
8d:76:38:ec:74:67:35:5e:cb:00:ad:fa:7f:e8:de:41:bb:51:
a5:10:44:f8:4f:95:4d:19:22:68:73:b0:83:01:4c:9c:8d:70:
22:a7:65:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 17:03:05 2025 by rpki-client