Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/0aab78-66de-444c-a843-0b3cb4c6b79a/1/lbgfTkXXEdoMFI3Cuq0VBN27Qns.mft
File: lbgfTkXXEdoMFI3Cuq0VBN27Qns.mft (raw, json)
Hash identifier: D0VZ4GvCeNuxXe5X5b2ksyF2a5V5+Rx8d8IKyfpaFCA=
Subject key identifier: DE:81:60:10:96:EF:31:B6:05:0D:F6:6A:DD:84:C4:F7:8A:4A:40:AA
Authority key identifier: 95:B8:1F:4E:45:D7:11:DA:0C:14:8D:C2:BA:AD:15:04:DD:BB:42:7B
Certificate issuer: /CN=95b81f4e45d711da0c148dc2baad1504ddbb427b
Certificate serial: 01974AE883834C7119056AE1F63D5C051F7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbgfTkXXEdoMFI3Cuq0VBN27Qns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/0aab78-66de-444c-a843-0b3cb4c6b79a/1/lbgfTkXXEdoMFI3Cuq0VBN27Qns.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 15:00:41 +0000
Manifest this update: Sat 07 Jun 2025 15:00:41 +0000
Manifest next update: Sun 08 Jun 2025 15:00:41 +0000
Files and hashes: 1: 7akWYjQwsX6a6HhUzkzvmpveN9o.roa (hash: NaXDBHO9cOnr/DrruhF4XLx1P8skQ7ZIYlWJ7+sC7iA=)
2: lbgfTkXXEdoMFI3Cuq0VBN27Qns.crl (hash: SLc0MT179qEGdyxlpEKS0X6HeWjhrXV7k4bM2M/UfrM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/0aab78-66de-444c-a843-0b3cb4c6b79a/1/lbgfTkXXEdoMFI3Cuq0VBN27Qns.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/0aab78-66de-444c-a843-0b3cb4c6b79a/1/lbgfTkXXEdoMFI3Cuq0VBN27Qns.mft
rsync://rpki.ripe.net/repository/DEFAULT/lbgfTkXXEdoMFI3Cuq0VBN27Qns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 15:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e8:83:83:4c:71:19:05:6a:e1:f6:3d:5c:05:1f:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b81f4e45d711da0c148dc2baad1504ddbb427b
Validity
Not Before: Jun 7 15:00:41 2025 GMT
Not After : Jun 8 15:00:41 2025 GMT
Subject: CN=de81601096ef31b6050df66add84c4f78a4a40aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d6:ff:7c:2b:e5:32:c4:05:f3:04:b2:d5:5a:
82:30:54:1e:d7:89:c1:e8:36:9b:e0:1f:26:3e:82:
29:9d:4b:44:df:0e:50:67:8c:51:a3:ef:c0:15:ad:
bf:1c:b2:d2:8d:5c:5f:95:1f:9a:9c:e9:2a:76:56:
7c:6e:d1:d1:4c:9d:d6:ac:a5:44:6a:09:0d:7d:29:
16:37:b6:29:a6:57:21:fc:95:b2:d9:25:02:59:48:
1b:6d:87:95:30:96:3f:dc:e1:5f:33:46:63:ee:32:
e7:25:a4:be:51:67:0a:6a:da:e2:14:7e:02:c0:a9:
cb:5d:ed:18:21:9f:66:9a:87:94:ac:de:ea:6b:f7:
a0:8c:ea:08:d2:40:ff:d2:f2:c9:a9:74:5a:e3:b7:
7d:8a:b2:36:f6:ea:3d:da:30:38:17:94:6d:a4:54:
7a:47:02:71:0c:83:2d:1a:9c:e4:30:b2:e0:c3:b1:
71:ae:43:d0:77:96:17:83:12:7b:c5:cd:e1:11:a3:
7b:6b:4f:75:ac:d1:ac:02:61:ed:bc:2c:a2:e0:f6:
02:94:0d:4a:42:4b:65:82:34:f3:c1:91:b1:10:e5:
c4:83:e8:51:d2:35:8f:08:54:52:ca:b6:35:0b:24:
30:48:14:64:d6:42:74:71:db:5a:84:5a:11:f5:df:
86:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:81:60:10:96:EF:31:B6:05:0D:F6:6A:DD:84:C4:F7:8A:4A:40:AA
X509v3 Authority Key Identifier:
keyid:95:B8:1F:4E:45:D7:11:DA:0C:14:8D:C2:BA:AD:15:04:DD:BB:42:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbgfTkXXEdoMFI3Cuq0VBN27Qns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0aab78-66de-444c-a843-0b3cb4c6b79a/1/lbgfTkXXEdoMFI3Cuq0VBN27Qns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0aab78-66de-444c-a843-0b3cb4c6b79a/1/lbgfTkXXEdoMFI3Cuq0VBN27Qns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:80:56:f8:0e:e3:d0:63:98:42:b5:2c:1f:5f:5b:41:6c:c4:
8f:76:99:4d:33:f6:68:bd:83:24:c1:fe:00:f6:d3:42:73:ac:
d7:fd:be:e9:8d:f0:b3:1b:7f:8c:dc:c7:63:66:17:8c:43:17:
bf:8d:09:dd:46:2a:b4:af:09:68:a5:bc:47:b6:04:11:92:c9:
24:d9:57:45:3d:2d:25:ca:a7:66:5e:86:84:44:7d:b0:3e:29:
9f:b8:94:3f:21:76:3a:6c:a5:60:32:2a:68:91:8a:50:80:3b:
5b:25:a7:2e:8d:64:89:fd:a7:96:b9:90:db:80:51:1c:27:6a:
8f:2a:95:74:b6:bc:15:fc:7e:8c:75:88:13:79:5f:e8:74:fb:
e4:7a:77:b5:6e:ca:59:5d:a8:dc:80:e9:72:a8:a6:ee:83:db:
d2:72:1a:be:6c:99:14:fe:2f:40:1d:3f:f5:f3:00:60:5b:1d:
0e:b5:21:dc:64:d6:ef:58:e4:75:ad:5e:65:1b:b2:75:c8:e4:
97:f3:91:1a:67:b2:18:96:ee:57:77:22:b4:fe:87:26:6e:c3:
90:40:46:42:61:32:9f:78:5c:28:96:b8:d3:49:26:8f:55:eb:
a2:a3:82:6b:7b:4c:58:34:68:4d:0f:c6:d8:f5:99:24:d3:3a:
6d:93:e9:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 01:07:16 2025 by rpki-client