
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/lbmAuBA5WB4NLDelEhbNeXKbDHE.mft
File: lbmAuBA5WB4NLDelEhbNeXKbDHE.mft (raw, json)
Hash identifier: 34/tUcO6Vua7S9iO4275BO0vVKpuqUa7vIy9K5u6hLw=
Subject key identifier: D2:8B:C0:E7:2F:AE:56:36:EF:98:20:79:EB:FC:5F:EE:F3:69:05:F7
Authority key identifier: 95:B9:80:B8:10:39:58:1E:0D:2C:37:A5:12:16:CD:79:72:9B:0C:71
Certificate issuer: /CN=95b980b81039581e0d2c37a51216cd79729b0c71
Certificate serial: 01987FE65F1C66295DB9745C3A608A3D98AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbmAuBA5WB4NLDelEhbNeXKbDHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/lbmAuBA5WB4NLDelEhbNeXKbDHE.mft
Manifest number: 161D
Signing time: Wed 06 Aug 2025 15:01:00 +0000
Manifest this update: Wed 06 Aug 2025 15:01:00 +0000
Manifest next update: Thu 07 Aug 2025 15:01:00 +0000
Files and hashes: 1: ANSAYrE9HNntD61TvEpJUmG8rgw.roa (hash: 4+iM21UqhAp7nE5c7mZKQw9TVqg+SMBpGm5UpV8V8dc=)
2: PJ5ra5RQEPuenhUZKqA-ySi8au4.roa (hash: HAE/ZYsuA8aESklvJ9Rn5+/ozrtEQRVx0jFM8lv6NbI=)
3: lbmAuBA5WB4NLDelEhbNeXKbDHE.crl (hash: oFHsec7BlUn1mTtAMAQCzDyJ7Fsb3cw3bY87QgRsaH8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/lbmAuBA5WB4NLDelEhbNeXKbDHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/lbmAuBA5WB4NLDelEhbNeXKbDHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lbmAuBA5WB4NLDelEhbNeXKbDHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 14:26:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7f:e6:5f:1c:66:29:5d:b9:74:5c:3a:60:8a:3d:98:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b980b81039581e0d2c37a51216cd79729b0c71
Validity
Not Before: Aug 6 15:01:00 2025 GMT
Not After : Aug 7 15:01:00 2025 GMT
Subject: CN=d28bc0e72fae5636ef982079ebfc5feef36905f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:70:31:05:92:fe:18:f6:af:60:8b:14:39:82:
14:6a:ef:df:fc:a3:27:62:1a:31:e9:01:05:95:51:
96:4f:6d:08:2c:82:13:57:a1:fe:4c:02:2a:08:e3:
fb:03:ab:3f:4f:15:0b:5f:59:0c:67:f2:81:16:68:
1e:01:59:9d:96:ca:1a:ab:df:b7:2c:36:44:63:e5:
87:68:a5:22:40:c8:f8:4a:87:f5:a5:b5:91:12:aa:
8d:a0:4d:fa:91:d4:55:f1:be:aa:37:94:da:2f:09:
71:0a:5e:67:79:33:ea:b7:12:e1:cb:87:9c:82:b4:
55:a0:2f:56:f5:3d:f0:bd:21:94:8a:02:72:a2:cf:
42:f4:be:bf:10:8f:f1:48:ca:cf:c8:69:00:06:15:
fd:1a:63:c6:1c:c4:a7:06:47:fb:38:10:46:8a:77:
30:dd:87:bd:b1:99:30:3c:48:6f:21:da:ad:d2:0a:
8c:21:09:80:9b:13:7b:9f:ed:49:5d:6a:4b:b9:b3:
dc:27:1e:e4:50:21:81:4c:a8:a6:66:f4:ff:7d:e1:
39:a4:22:d6:72:e9:02:b2:ef:a8:52:88:0d:a7:b0:
00:5d:3a:57:c9:69:6e:90:13:49:93:40:db:1c:9f:
82:d4:72:1d:12:b8:4a:65:26:c3:12:48:1f:ad:f2:
11:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:8B:C0:E7:2F:AE:56:36:EF:98:20:79:EB:FC:5F:EE:F3:69:05:F7
X509v3 Authority Key Identifier:
keyid:95:B9:80:B8:10:39:58:1E:0D:2C:37:A5:12:16:CD:79:72:9B:0C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbmAuBA5WB4NLDelEhbNeXKbDHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/lbmAuBA5WB4NLDelEhbNeXKbDHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/lbmAuBA5WB4NLDelEhbNeXKbDHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:48:75:76:28:fb:04:41:db:82:64:5f:d0:1d:72:6c:6b:df:
3b:cd:66:7c:e3:92:96:b6:b8:a7:47:2c:6e:93:13:41:c6:9e:
89:ea:a5:f1:0f:39:ec:c9:e5:4a:cd:2f:4b:23:af:56:93:a4:
9c:0e:cf:99:43:bd:88:81:fe:5c:d0:db:b3:38:ad:91:7a:7d:
2f:bf:10:c0:a6:be:10:18:48:c4:58:9a:43:0b:62:a1:5d:10:
e6:8a:cd:55:7e:84:f0:be:77:71:76:00:7a:0b:38:f0:cd:b7:
06:8b:a2:96:86:8c:29:51:b9:3c:ec:22:65:92:fe:24:98:30:
6d:d9:ed:79:ec:1d:13:28:c5:eb:c9:4a:d8:79:a9:6f:af:11:
16:b8:7d:cf:c5:f3:72:ab:04:d9:e3:91:a6:92:c0:a9:f4:d2:
08:0b:42:5a:62:20:ee:2a:cc:dc:6f:d1:aa:79:19:7d:32:80:
46:fc:b2:23:fe:0e:17:47:d2:73:e9:c0:64:b2:37:53:a3:0e:
db:85:2b:bd:3d:43:f3:57:a5:93:eb:64:2f:8d:73:a3:15:6b:
7e:d2:86:26:9b:e2:7a:a9:9f:a9:8e:3b:e4:38:5c:66:4c:de:
45:13:e3:04:85:41:ff:8d:08:f8:cb:82:91:a2:94:f3:d3:1b:
5a:36:ae:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 18:31:02 2025 by rpki-client