Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/1df8e1-6e80-443c-b6e8-d9f905fdc89a/1/LBGlP232MAtJEs4T9vqbEA_OJIg.mft
File: LBGlP232MAtJEs4T9vqbEA_OJIg.mft (raw, json)
Hash identifier: FEBBBHfIH6Xm6yGEljQ4iyUGqnaADk448xx93VWffv4=
Subject key identifier: 75:50:E5:44:A6:2B:F3:EC:28:A4:94:94:EB:9D:05:36:B8:2C:34:0B
Authority key identifier: 2C:11:A5:3F:6D:F6:30:0B:49:12:CE:13:F6:FA:9B:10:0F:CE:24:88
Certificate issuer: /CN=2c11a53f6df6300b4912ce13f6fa9b100fce2488
Certificate serial: 019782E9A4ED7FF4D5E5DCEC05E0FE675272
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LBGlP232MAtJEs4T9vqbEA_OJIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/1df8e1-6e80-443c-b6e8-d9f905fdc89a/1/LBGlP232MAtJEs4T9vqbEA_OJIg.mft
Manifest number: 12A8
Signing time: Wed 18 Jun 2025 12:00:39 +0000
Manifest this update: Wed 18 Jun 2025 12:00:39 +0000
Manifest next update: Thu 19 Jun 2025 12:00:39 +0000
Files and hashes: 1: 54SDy2hBAf60rRk7Cn2SENdLnF0.roa (hash: W4T7JvYJiD5Kubx3/xyHkSB0zOGjx+2ez3Dgx71rGrg=)
2: LBGlP232MAtJEs4T9vqbEA_OJIg.crl (hash: /rH+kcCaV5z8/Rq9bOniaDoaKeLP38rowcQ+c5KANAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/1df8e1-6e80-443c-b6e8-d9f905fdc89a/1/LBGlP232MAtJEs4T9vqbEA_OJIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/1df8e1-6e80-443c-b6e8-d9f905fdc89a/1/LBGlP232MAtJEs4T9vqbEA_OJIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LBGlP232MAtJEs4T9vqbEA_OJIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 12:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:82:e9:a4:ed:7f:f4:d5:e5:dc:ec:05:e0:fe:67:52:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c11a53f6df6300b4912ce13f6fa9b100fce2488
Validity
Not Before: Jun 18 12:00:39 2025 GMT
Not After : Jun 19 12:00:39 2025 GMT
Subject: CN=7550e544a62bf3ec28a49494eb9d0536b82c340b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8f:1d:94:c7:04:52:c9:10:5e:8d:75:2f:d2:
ff:d4:69:a0:51:40:96:14:0b:a6:c9:51:11:d8:59:
6d:2d:89:b1:64:65:5c:07:c6:d1:33:a5:ca:06:52:
11:c6:e0:ed:22:c9:41:4f:f3:71:2a:f9:dc:ec:06:
1d:ea:84:6b:78:fd:88:6e:af:c5:81:f1:8d:46:83:
14:dd:8b:41:76:ee:d4:40:bc:9f:aa:8b:b0:6a:c7:
2b:f6:51:ea:47:fa:f5:97:b9:62:91:d5:fa:4a:80:
8b:0c:f2:e0:1b:c4:04:0a:a6:bf:99:d7:02:53:d9:
44:53:f6:aa:fe:6b:a4:7c:1e:55:a8:c4:ae:8e:b7:
7f:56:d6:2e:81:cf:da:b3:d2:ff:fc:f4:d5:a7:86:
09:8d:04:58:5e:2e:e5:f5:8e:d2:d9:ee:96:52:29:
68:ea:8f:50:1c:b9:36:2f:41:1c:68:8e:af:58:74:
2a:62:1e:11:e6:be:e0:06:be:e3:a4:20:9e:1e:5c:
e2:51:1e:ee:83:30:20:2c:20:c5:67:cc:c3:35:89:
a5:80:8d:15:48:78:a3:ff:ef:c0:78:4f:c4:1f:92:
e6:f2:a6:0d:f2:dc:61:ee:45:b5:ba:83:1c:a1:e1:
b0:d9:11:60:51:46:5a:18:76:c2:06:77:56:1c:2b:
76:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:50:E5:44:A6:2B:F3:EC:28:A4:94:94:EB:9D:05:36:B8:2C:34:0B
X509v3 Authority Key Identifier:
keyid:2C:11:A5:3F:6D:F6:30:0B:49:12:CE:13:F6:FA:9B:10:0F:CE:24:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LBGlP232MAtJEs4T9vqbEA_OJIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1df8e1-6e80-443c-b6e8-d9f905fdc89a/1/LBGlP232MAtJEs4T9vqbEA_OJIg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1df8e1-6e80-443c-b6e8-d9f905fdc89a/1/LBGlP232MAtJEs4T9vqbEA_OJIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
f0:27:11:32:88:d0:a5:21:03:55:c7:07:65:90:42:84:66:ea:
c0:59:d3:34:ca:b6:22:8c:33:d6:02:2c:cc:7c:6b:4c:2f:87:
4a:de:f4:fe:25:00:17:74:63:de:6b:42:25:66:31:30:9a:05:
77:66:78:c1:6c:1f:38:8c:20:3b:ed:12:01:67:73:08:b2:f3:
9d:83:fe:0d:3c:68:f1:cd:68:41:a4:80:3a:78:88:8d:61:a8:
2a:e0:cf:44:20:5d:56:11:52:04:4e:83:52:f4:cd:df:69:1d:
d8:66:71:0a:74:a3:bb:70:36:73:5e:81:83:3c:10:82:ff:46:
0a:06:d4:d9:4c:20:2e:d7:65:c3:5e:1f:d7:7f:62:f9:28:1f:
b9:83:7f:e7:45:f1:ae:e1:09:ba:6f:77:3b:71:65:00:65:00:
62:6d:16:49:48:7c:26:7d:a8:be:fa:69:49:1b:01:82:99:f1:
33:f6:bf:d2:68:dd:5b:f9:21:b7:90:ce:b6:a9:25:ed:a2:a2:
05:d6:cc:ea:aa:15:68:f1:ed:0d:de:cb:6c:76:06:2f:34:66:
b0:29:e7:82:99:a3:79:29:dd:d4:95:4c:bb:f6:08:9c:ed:d3:
11:c5:74:2b:38:0f:e4:9d:e8:db:63:45:7e:01:91:e2:2f:a1:
c0:eb:1c:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 20:53:28 2025 by rpki-client