Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.mft
File: lbheWsBVoSGIrlDNsAf6SItqqIs.mft (raw, json)
Hash identifier: OQ3nrhZl8ABhyvsfRkQPdh6etETFwNDQcSC7CpXhfA0=
Subject key identifier: E6:52:B6:94:8E:6F:9D:05:73:D3:D4:4A:B1:69:97:5A:C2:66:EE:08
Authority key identifier: 95:B8:5E:5A:C0:55:A1:21:88:AE:50:CD:B0:07:FA:48:8B:6A:A8:8B
Certificate issuer: /CN=95b85e5ac055a12188ae50cdb007fa488b6aa88b
Certificate serial: 01976D3DDA84E0D3D9A833DE47239D89B116
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbheWsBVoSGIrlDNsAf6SItqqIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.mft
Manifest number: 158E
Signing time: Sat 14 Jun 2025 07:00:59 +0000
Manifest this update: Sat 14 Jun 2025 07:00:59 +0000
Manifest next update: Sun 15 Jun 2025 07:00:59 +0000
Files and hashes: 1: 6LbIgFJwzpH2Qf0sirzfHYuw_a4.roa (hash: yVSc0ifnnPwL8H5EwEXT2iNnCkvEaZBn7yh2JV9dabc=)
2: lbheWsBVoSGIrlDNsAf6SItqqIs.crl (hash: pF6jpPazIiMAehf1kmRpO2vNOrV59D+DtwipdfUtqEs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/lbheWsBVoSGIrlDNsAf6SItqqIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:da:84:e0:d3:d9:a8:33:de:47:23:9d:89:b1:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b85e5ac055a12188ae50cdb007fa488b6aa88b
Validity
Not Before: Jun 14 07:00:59 2025 GMT
Not After : Jun 15 07:00:59 2025 GMT
Subject: CN=e652b6948e6f9d0573d3d44ab169975ac266ee08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0b:71:d4:28:d7:40:06:a4:b9:2a:5c:8a:36:
9c:0c:53:ac:62:48:02:cb:16:c1:41:cf:47:33:61:
20:9b:6e:5a:51:7f:46:f0:15:8d:60:4d:cf:1b:a6:
af:f3:bb:15:63:f0:9c:4d:50:2e:cb:ab:92:c1:3b:
d0:61:74:d3:bb:63:bd:93:cc:6d:36:f0:b9:1f:39:
29:b3:98:25:12:65:cc:32:db:29:6d:bf:36:2b:a5:
98:95:83:d0:3c:c6:9e:3d:42:b5:df:96:38:80:f3:
09:d3:d5:b2:0a:4f:4d:e8:60:da:f5:2d:0d:74:64:
1b:ec:c3:78:ad:6f:51:41:f3:1f:f2:a1:9b:26:ab:
19:4d:22:25:a9:17:38:ad:ab:3e:d5:19:5f:2f:ce:
13:6c:8e:79:2a:42:c0:db:1d:51:6c:fb:e6:c5:6b:
25:16:4a:df:4f:e3:05:df:23:73:76:9b:a9:ab:de:
d6:38:12:7c:0d:42:52:e3:11:eb:8c:fa:dd:83:74:
15:90:7e:0b:99:cf:96:93:51:28:57:12:cf:84:2b:
53:a0:83:f1:f9:61:88:24:38:46:25:35:7e:51:ec:
fa:0d:ee:12:64:87:2f:98:b1:99:c6:57:0f:82:91:
b6:03:15:9f:23:c9:9b:12:3b:03:a8:4d:c4:9f:fa:
35:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:52:B6:94:8E:6F:9D:05:73:D3:D4:4A:B1:69:97:5A:C2:66:EE:08
X509v3 Authority Key Identifier:
keyid:95:B8:5E:5A:C0:55:A1:21:88:AE:50:CD:B0:07:FA:48:8B:6A:A8:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbheWsBVoSGIrlDNsAf6SItqqIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:03:be:30:ff:be:d8:24:e8:c8:4e:b4:0f:49:b3:9d:f7:0a:
ee:de:56:c0:46:ab:da:7b:7f:cb:27:39:e8:7c:01:6d:ef:e5:
b2:15:5e:52:16:ab:b0:12:ee:a4:a8:39:3d:90:e6:a1:71:4c:
79:3d:f2:53:dc:56:06:09:4d:5c:a5:45:8c:c6:ae:70:1f:e2:
aa:5b:46:dc:fe:3c:37:d5:4a:f9:37:c4:b6:d5:ef:e5:eb:02:
58:16:37:ac:7b:f1:68:14:65:a2:2f:ed:b0:51:17:36:68:50:
db:d0:1a:19:10:c8:03:56:28:ef:0f:be:49:84:66:09:19:d0:
ea:44:7d:62:46:b9:9a:63:8f:4a:f5:96:a1:e0:91:9b:46:a4:
cd:ae:d4:fb:46:67:c7:89:22:90:10:f8:bf:69:d4:8a:49:9a:
60:bf:86:93:36:26:d3:23:9b:d0:a0:c8:fa:ec:c7:8f:2d:80:
9b:04:4f:9a:16:89:f5:65:ce:91:61:5b:48:52:0f:9c:9c:b5:
4e:11:6b:30:55:61:a1:0f:4a:8d:6a:87:dc:c3:f8:16:a3:cd:
00:47:60:9c:6a:2d:6a:6e:6a:32:a6:3e:c2:93:44:34:1e:4f:
23:24:f0:2c:92:80:03:97:76:74:6b:11:6e:a1:f7:f4:5e:67:
33:ac:7f:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:16:28 2025 by rpki-client