Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.mft
File: lakErGCT4eIpoHTFBQb_7NoBDM8.mft (raw, json)
Hash identifier: STZPBnT2PmMLJf/GZPwiQaKF0FcDDqma++teTZcO62I=
Subject key identifier: 3A:31:89:4E:5E:63:D7:DD:DE:B1:B0:09:4F:1A:A0:59:DD:26:0A:91
Authority key identifier: 95:A9:04:AC:60:93:E1:E2:29:A0:74:C5:05:06:FF:EC:DA:01:0C:CF
Certificate issuer: /CN=95a904ac6093e1e229a074c50506ffecda010ccf
Certificate serial: 0198A617F839C850EF62587587451F88DA18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lakErGCT4eIpoHTFBQb_7NoBDM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.mft
Manifest number: 0BA8
Signing time: Thu 14 Aug 2025 01:00:45 +0000
Manifest this update: Thu 14 Aug 2025 01:00:45 +0000
Manifest next update: Fri 15 Aug 2025 01:00:45 +0000
Files and hashes: 1: EYwLNQ0R_Ied-v-mXvUH_vf6GVA.roa (hash: TajJUilMmDGZNmoTd4v8tDuWl6eHYmByCynqf999DBU=)
2: lakErGCT4eIpoHTFBQb_7NoBDM8.crl (hash: ZQfSCdXC81jts9D4tkrqXQX/xY+a4aa5bDHofDmVD8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/lakErGCT4eIpoHTFBQb_7NoBDM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 15 Aug 2025 01:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a6:17:f8:39:c8:50:ef:62:58:75:87:45:1f:88:da:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95a904ac6093e1e229a074c50506ffecda010ccf
Validity
Not Before: Aug 14 01:00:45 2025 GMT
Not After : Aug 15 01:00:45 2025 GMT
Subject: CN=3a31894e5e63d7dddeb1b0094f1aa059dd260a91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:23:97:bc:c0:36:09:ea:4b:86:94:a5:24:2e:
e4:73:67:ac:3c:9a:03:63:48:1b:cf:90:95:7f:cc:
b5:2b:a9:e9:84:17:20:39:b5:d0:4f:9a:13:31:f4:
1e:c1:54:19:ef:24:ae:0e:e2:82:85:81:89:50:68:
b2:0e:10:11:f0:70:ac:79:34:ab:ea:d5:40:4e:7f:
ad:85:bf:4c:ff:8d:8c:ed:fd:13:e1:81:b4:78:ce:
3b:60:09:a9:19:b8:fe:ad:fa:f7:b1:ae:9a:f4:e5:
8b:59:8d:cb:81:f2:45:a3:b7:4e:6c:60:34:0e:c9:
87:18:1c:0d:aa:7d:85:ec:cd:84:df:c5:41:7b:d1:
a0:93:eb:df:9e:9d:7f:29:31:f3:78:38:81:0b:8c:
db:9b:66:78:8a:52:b6:f8:ff:2b:fc:4d:9f:0d:b4:
c9:ae:15:eb:23:bd:b1:0e:89:09:2e:38:40:f0:a6:
27:b5:64:37:c4:3f:b4:9c:db:83:2b:d9:e1:39:53:
b3:fb:b4:e7:c4:45:e7:16:85:08:be:2a:88:eb:43:
11:7e:ff:8a:e9:ac:32:80:b8:98:06:bf:a3:06:83:
8b:ad:e4:84:a0:ec:b3:d1:9d:4e:bd:6b:17:67:e2:
50:a0:1b:ed:18:12:ce:3f:4f:54:85:e4:52:bf:c0:
52:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:31:89:4E:5E:63:D7:DD:DE:B1:B0:09:4F:1A:A0:59:DD:26:0A:91
X509v3 Authority Key Identifier:
keyid:95:A9:04:AC:60:93:E1:E2:29:A0:74:C5:05:06:FF:EC:DA:01:0C:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lakErGCT4eIpoHTFBQb_7NoBDM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:c9:7d:74:a4:29:7f:34:a6:9c:7c:15:43:bd:fb:85:3f:68:
2b:6c:8b:db:d8:0a:8a:9c:42:63:c9:5f:21:74:88:e7:41:24:
da:4b:39:80:fa:73:0c:27:44:22:37:d1:7c:3f:41:a2:6b:99:
44:55:55:f0:9b:c7:10:3c:3d:7f:af:7f:0c:58:e5:98:9e:aa:
2c:0b:16:be:3d:c5:34:ba:07:14:ff:ec:c9:eb:52:53:2b:41:
51:42:85:7d:87:2f:59:54:de:e5:67:7c:1b:c4:77:fe:89:74:
c4:bf:0d:fa:3f:e9:8c:99:0b:65:04:49:d7:db:17:eb:7d:8c:
d2:43:e5:a2:69:6f:c7:08:ec:21:0f:03:80:25:46:c1:92:be:
d1:fa:c3:f7:2b:8b:d2:74:14:39:8d:e6:06:b0:6a:91:51:d0:
f1:83:a4:9d:8c:57:3f:b6:e4:ba:ff:3a:44:a3:13:9e:b9:7d:
08:38:52:a4:b6:26:27:ab:61:ea:cc:6c:05:4e:3c:62:91:ef:
84:5c:c4:e8:7e:cf:e4:96:39:82:93:19:e8:bb:b0:e3:80:f8:
69:35:45:9a:88:08:6c:9f:1d:ef:2d:c9:c2:ac:dc:6f:3e:75:
a8:4c:8b:0c:37:94:68:bc:94:26:ff:73:b3:ff:f5:6d:40:a6:
80:b4:40:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 14 11:01:42 2025 by rpki-client