Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/ecbffa-1166-4d1e-9f55-11575db64fbe/1/LBKCZbgJkXiNhuImLpM5A4tO-oI.mft
File: LBKCZbgJkXiNhuImLpM5A4tO-oI.mft (raw, json)
Hash identifier: 6xqahuEYt0ToQGBhFLV9maqFscNyJoDb1NxIsEei5F8=
Subject key identifier: 9B:BD:74:2E:4F:E7:8C:27:C7:B2:7A:77:26:69:8C:A1:E4:05:D2:8D
Authority key identifier: 2C:12:82:65:B8:09:91:78:8D:86:E2:26:2E:93:39:03:8B:4E:FA:82
Certificate issuer: /CN=2c128265b80991788d86e2262e9339038b4efa82
Certificate serial: 01976CCF5A3D2AADB6B0B1F8010D9FA0B1F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LBKCZbgJkXiNhuImLpM5A4tO-oI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/ecbffa-1166-4d1e-9f55-11575db64fbe/1/LBKCZbgJkXiNhuImLpM5A4tO-oI.mft
Manifest number: 011E
Signing time: Sat 14 Jun 2025 05:00:17 +0000
Manifest this update: Sat 14 Jun 2025 05:00:17 +0000
Manifest next update: Sun 15 Jun 2025 05:00:17 +0000
Files and hashes: 1: AUJAohDb7gvWp2PAn2xH3z3Zx8I.roa (hash: Px2ndw4EQ+qkKAfeVMR+LtAp8KsmOxSR4KCS0rfVjWc=)
2: LBKCZbgJkXiNhuImLpM5A4tO-oI.crl (hash: wvpks1CwOVheLQziAjmbVdMD8HgvJXhG5vmqd5mme6g=)
3: LTEzdR9zUquR1ggUmA4_QHu2p50.roa (hash: uNuzvFRDaCwMPWv1CbBVSxROhTe6dbQ9XSUinppVNcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/ecbffa-1166-4d1e-9f55-11575db64fbe/1/LBKCZbgJkXiNhuImLpM5A4tO-oI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/ecbffa-1166-4d1e-9f55-11575db64fbe/1/LBKCZbgJkXiNhuImLpM5A4tO-oI.mft
rsync://rpki.ripe.net/repository/DEFAULT/LBKCZbgJkXiNhuImLpM5A4tO-oI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:cf:5a:3d:2a:ad:b6:b0:b1:f8:01:0d:9f:a0:b1:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c128265b80991788d86e2262e9339038b4efa82
Validity
Not Before: Jun 14 05:00:17 2025 GMT
Not After : Jun 15 05:00:17 2025 GMT
Subject: CN=9bbd742e4fe78c27c7b27a7726698ca1e405d28d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6a:de:4a:9f:10:a1:06:25:89:be:a6:19:47:
47:45:61:80:25:db:df:c4:b5:6e:f8:6d:e0:83:d6:
a8:6e:03:04:44:a0:b5:67:62:19:4a:6c:df:7d:d1:
eb:45:3a:0a:b7:d8:56:b1:6f:44:b5:e6:e4:e9:5f:
84:5b:da:68:dd:2c:af:94:1d:14:31:8b:98:0e:86:
2b:dd:7d:d1:9b:da:b0:a4:fe:e0:c5:be:b5:35:f2:
32:8f:08:18:05:94:fb:02:e1:02:5a:52:7d:10:f9:
12:a6:ba:a2:d6:7f:35:ce:21:87:13:83:30:a7:3c:
ae:1d:65:ef:b1:fc:b9:1f:3a:71:45:d1:7a:3b:77:
e7:64:39:5b:85:32:64:0e:8e:5b:07:de:1d:48:f3:
36:7a:ec:a9:93:37:82:a2:c5:a8:f6:a9:59:02:5c:
77:cd:87:32:3b:90:06:60:c4:f9:0a:d9:58:3d:88:
e8:98:d3:f6:79:b4:66:66:bb:a5:97:3a:8b:a3:61:
e5:0a:5f:1f:35:4f:7b:fe:ac:90:41:f0:89:d5:6e:
3c:b7:ec:4d:cf:68:ee:98:99:c7:ee:ca:b5:65:15:
f8:4b:c5:07:df:92:e1:cc:4f:c5:9d:89:1d:02:15:
0d:53:aa:01:cf:df:25:20:f8:01:e9:f4:1c:77:4d:
99:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:BD:74:2E:4F:E7:8C:27:C7:B2:7A:77:26:69:8C:A1:E4:05:D2:8D
X509v3 Authority Key Identifier:
keyid:2C:12:82:65:B8:09:91:78:8D:86:E2:26:2E:93:39:03:8B:4E:FA:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LBKCZbgJkXiNhuImLpM5A4tO-oI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ecbffa-1166-4d1e-9f55-11575db64fbe/1/LBKCZbgJkXiNhuImLpM5A4tO-oI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ecbffa-1166-4d1e-9f55-11575db64fbe/1/LBKCZbgJkXiNhuImLpM5A4tO-oI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:29:50:67:5e:e0:6c:b1:3e:9d:61:1f:64:10:fd:c7:a4:3e:
20:2c:2b:20:ae:df:9a:f6:ec:92:82:76:39:fe:69:6b:eb:aa:
88:f3:ce:3e:21:e8:bd:e8:d2:13:15:27:0f:7d:68:4d:b3:25:
c2:92:5f:18:39:b0:26:a4:34:e2:56:d7:40:cf:3f:7a:65:95:
bc:2f:c2:46:28:98:43:28:79:8e:ef:4f:89:36:31:f4:7f:45:
ee:21:4f:8d:74:e0:9a:be:b1:b5:e6:cc:e7:8c:27:83:b6:5a:
f2:b2:41:fb:25:c6:ea:d0:36:65:82:b5:4d:07:9f:5d:f3:09:
ec:17:68:83:0f:f6:e7:dc:5f:bb:1b:3d:08:fb:51:68:65:a3:
ed:8b:51:b9:a8:a9:1a:53:f9:0b:d7:84:b4:f2:1e:2c:aa:3a:
46:5d:e4:46:b0:7d:02:be:6c:4e:12:52:09:d1:21:ad:7c:7f:
fb:39:35:f3:a2:f7:5a:37:8f:51:60:17:6a:7a:6c:29:77:93:
12:d7:b5:2e:39:68:ff:59:14:bd:0d:1e:d4:f2:1f:bd:d9:51:
83:a1:61:0a:c9:7f:38:45:0c:d8:4b:b6:7f:ee:cc:e9:93:c6:
71:96:7f:3b:7c:d6:cd:72:29:e1:1b:c4:d7:2a:a9:1f:7e:67:
d9:31:9b:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:14:45 2025 by rpki-client