Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.mft
File: lakErGCT4eIpoHTFBQb_7NoBDM8.mft (raw, json)
Hash identifier: +XwNCZ9b0zRuJZQHKFwFX8ru2p+csUStDVrg+xN9bXg=
Subject key identifier: 5E:8E:F1:F7:4C:97:D3:0E:D5:02:D6:E5:83:48:B1:4B:9D:F2:15:64
Authority key identifier: 95:A9:04:AC:60:93:E1:E2:29:A0:74:C5:05:06:FF:EC:DA:01:0C:CF
Certificate issuer: /CN=95a904ac6093e1e229a074c50506ffecda010ccf
Certificate serial: 01976D3D7382BBB1688F4901CA127DDC2051
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lakErGCT4eIpoHTFBQb_7NoBDM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.mft
Manifest number: 0B06
Signing time: Sat 14 Jun 2025 07:00:33 +0000
Manifest this update: Sat 14 Jun 2025 07:00:33 +0000
Manifest next update: Sun 15 Jun 2025 07:00:33 +0000
Files and hashes: 1: EYwLNQ0R_Ied-v-mXvUH_vf6GVA.roa (hash: TajJUilMmDGZNmoTd4v8tDuWl6eHYmByCynqf999DBU=)
2: lakErGCT4eIpoHTFBQb_7NoBDM8.crl (hash: gy7O3SXXRirmxwFAOG+zvGU5whk5jx+fc7IsIKk3p4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/lakErGCT4eIpoHTFBQb_7NoBDM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:73:82:bb:b1:68:8f:49:01:ca:12:7d:dc:20:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95a904ac6093e1e229a074c50506ffecda010ccf
Validity
Not Before: Jun 14 07:00:33 2025 GMT
Not After : Jun 15 07:00:33 2025 GMT
Subject: CN=5e8ef1f74c97d30ed502d6e58348b14b9df21564
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c1:5b:e1:3e:17:5b:b0:b2:2d:aa:b3:4d:34:
d4:0d:68:e9:2d:7b:62:8a:31:59:30:ac:a3:06:69:
cc:12:94:5e:c2:1c:22:c7:f0:69:7d:1f:aa:74:bb:
df:bf:bf:e9:a1:94:22:25:ae:05:c8:f9:23:af:a2:
31:ce:aa:4e:fd:85:c4:aa:b4:51:9d:1a:de:c8:6e:
7b:2e:14:e3:40:bf:f9:1c:88:8a:6f:ee:75:79:44:
33:97:71:ed:9e:78:06:79:54:54:30:64:a5:e3:10:
3f:06:16:ed:bf:19:cf:13:62:e9:8c:b1:ad:10:74:
73:02:d3:e3:92:3c:ba:a8:d4:6e:f2:a3:82:12:e7:
f3:5c:b7:ea:45:75:2c:0f:07:5e:29:61:b9:80:49:
d6:b3:f8:36:72:ac:f0:03:af:54:90:38:10:38:54:
84:59:30:e1:fc:76:8d:1b:c3:2a:5b:93:c7:02:93:
4f:67:57:01:b2:a7:2d:6f:da:69:af:79:32:06:32:
2c:d5:10:45:8d:98:96:cc:c7:67:24:0b:c2:91:9b:
ce:b3:a6:a8:00:bf:75:67:68:8f:45:5e:eb:65:c0:
57:26:f3:56:6e:2d:a9:3e:ec:a5:f0:3d:8c:da:48:
32:f9:7a:be:13:a0:a3:a3:cd:51:2f:2d:f7:02:7e:
19:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:8E:F1:F7:4C:97:D3:0E:D5:02:D6:E5:83:48:B1:4B:9D:F2:15:64
X509v3 Authority Key Identifier:
keyid:95:A9:04:AC:60:93:E1:E2:29:A0:74:C5:05:06:FF:EC:DA:01:0C:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lakErGCT4eIpoHTFBQb_7NoBDM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:2c:7d:1d:5e:90:c0:6b:6f:02:03:24:74:e9:cf:71:8a:a7:
14:ef:57:f0:69:1a:8d:4a:03:63:df:63:04:1a:2b:d1:83:31:
64:25:92:dc:e4:e4:8f:61:d4:90:bb:4e:77:23:39:c0:ba:c1:
18:08:e2:12:e6:85:dc:41:f3:d1:8f:3b:c0:3b:5a:8f:64:19:
80:66:19:22:a1:bb:ee:cd:c9:59:d1:ae:be:cd:32:76:60:25:
2e:55:89:31:75:6b:9a:be:05:2f:e0:28:3f:2b:df:3d:75:2f:
2c:c6:7c:aa:0b:73:c9:68:54:5d:9f:42:69:16:81:e1:5f:1b:
38:a0:70:7b:27:9c:63:7f:2e:3a:a2:66:80:d4:56:c4:ee:d4:
5a:6e:59:d5:30:7d:43:b6:ad:4a:e7:3b:37:df:b7:00:07:e9:
2e:f6:de:cd:40:97:a2:2c:5e:d1:e3:65:72:0e:3c:8b:54:ca:
77:23:f1:b9:16:b4:d0:44:47:8b:29:67:ac:1c:f5:eb:29:bd:
cb:9f:1d:b6:2f:00:cf:b0:a6:6c:4a:27:bc:a0:84:29:7b:32:
9c:64:4a:bd:79:02:fb:0d:df:46:a3:71:a1:4e:ce:2e:6e:dd:
4c:8a:1c:b8:e5:24:76:7d:da:7e:67:5e:4c:3c:2c:af:55:b1:
e9:1d:dd:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:22:27 2025 by rpki-client