Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.mft
File: lbheWsBVoSGIrlDNsAf6SItqqIs.mft (raw, json)
Hash identifier: cu88ifLX5q1AmNLISPr4kMAHfrOpVtRoApI0mRPKvEg=
Subject key identifier: D0:CB:6C:C9:C7:30:50:26:84:74:EC:72:D0:C3:50:C9:D8:B9:51:05
Authority key identifier: 95:B8:5E:5A:C0:55:A1:21:88:AE:50:CD:B0:07:FA:48:8B:6A:A8:8B
Certificate issuer: /CN=95b85e5ac055a12188ae50cdb007fa488b6aa88b
Certificate serial: 019873E4068287E6B95CE44AD7C3A76E1EA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbheWsBVoSGIrlDNsAf6SItqqIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.mft
Manifest number: 1616
Signing time: Mon 04 Aug 2025 07:03:00 +0000
Manifest this update: Mon 04 Aug 2025 07:03:00 +0000
Manifest next update: Tue 05 Aug 2025 07:03:00 +0000
Files and hashes: 1: 6LbIgFJwzpH2Qf0sirzfHYuw_a4.roa (hash: yVSc0ifnnPwL8H5EwEXT2iNnCkvEaZBn7yh2JV9dabc=)
2: lbheWsBVoSGIrlDNsAf6SItqqIs.crl (hash: WMZGtVcmY8JBeZDpuBH7yFEzuZTuOfkB9NM1AJrp0n8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/lbheWsBVoSGIrlDNsAf6SItqqIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e4:06:82:87:e6:b9:5c:e4:4a:d7:c3:a7:6e:1e:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b85e5ac055a12188ae50cdb007fa488b6aa88b
Validity
Not Before: Aug 4 07:03:00 2025 GMT
Not After : Aug 5 07:03:00 2025 GMT
Subject: CN=d0cb6cc9c73050268474ec72d0c350c9d8b95105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:00:c6:25:49:9a:5d:b7:92:8b:c6:7a:12:22:
e5:93:6d:d2:b2:af:31:de:73:10:3a:0f:8b:ef:a6:
4b:9e:90:76:f8:79:6b:3d:30:63:e8:11:2b:8f:1c:
60:da:82:49:c1:e5:01:ab:4b:c7:48:da:d6:d3:a8:
1e:2d:43:4f:2f:27:1b:a0:26:55:9a:1a:de:0a:f8:
99:e3:bf:fd:4a:f6:a6:44:2c:b9:b6:fc:c2:0c:01:
42:d7:2f:fa:22:4a:c4:b1:47:f5:4f:ff:fe:a6:30:
34:f3:a8:49:b3:d5:8d:35:71:a0:46:ca:70:5b:49:
7a:04:89:e2:79:d5:75:fa:65:5e:a5:49:96:4c:1e:
82:88:68:3c:c7:60:f5:8e:a8:1c:39:93:9b:35:cd:
03:a3:27:0c:3b:2f:f3:bd:ab:2a:c7:b3:3d:5e:1b:
1f:85:4a:ed:0a:cb:e2:e5:a8:1c:9b:54:51:a3:77:
67:70:6f:24:c2:2b:97:a6:1f:c1:23:fa:02:62:13:
66:0e:2e:73:e9:f7:35:16:07:80:2c:d7:fa:c6:1f:
83:f0:1d:15:fb:26:df:af:17:dd:d6:bb:67:85:66:
35:a4:13:49:5c:c4:91:4a:09:79:b8:ac:19:5d:99:
c5:12:54:c5:84:31:c0:88:0f:6f:7d:d7:fc:ac:11:
39:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:CB:6C:C9:C7:30:50:26:84:74:EC:72:D0:C3:50:C9:D8:B9:51:05
X509v3 Authority Key Identifier:
keyid:95:B8:5E:5A:C0:55:A1:21:88:AE:50:CD:B0:07:FA:48:8B:6A:A8:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbheWsBVoSGIrlDNsAf6SItqqIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:71:01:4a:70:0c:05:2e:60:dd:4b:b7:10:47:c2:68:a5:fb:
a4:36:f3:f1:4a:8e:c6:1f:12:3f:05:f8:b4:f1:ce:e7:89:97:
df:20:18:54:47:de:95:83:a5:00:8c:2e:05:1c:88:52:8a:b0:
8e:b5:d8:10:0b:34:84:33:b2:84:40:fc:33:12:a2:29:21:d2:
3e:1e:74:db:1d:90:d9:a9:59:e6:e8:5a:9b:cd:73:b6:4b:6a:
d9:9e:a9:f9:c0:91:fb:7d:dc:d7:5f:2b:54:f7:5e:a9:86:27:
78:81:a3:47:a9:e4:21:dd:54:67:13:82:93:8f:61:ee:92:5f:
84:36:b2:ec:67:4c:9d:d9:43:bc:d7:a5:82:36:72:19:c7:de:
8c:dd:1f:f4:ab:3c:a9:3b:26:81:d2:c1:a1:fb:01:48:de:28:
01:50:de:7f:66:37:62:83:16:e4:72:61:c0:fd:21:c2:dc:aa:
06:43:15:49:60:6d:18:d2:ee:4b:46:ad:d5:7f:f8:4f:6e:07:
cc:c7:96:9f:49:aa:4a:5e:d3:99:f8:d6:7d:47:be:48:30:4c:
ce:0a:df:79:bd:f9:bc:1a:99:61:ca:68:b9:88:33:84:6c:45:
ae:f5:5b:a2:c1:a8:31:a2:4b:9e:89:67:86:05:d5:3b:b5:3f:
da:7c:92:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:27:12 2025 by rpki-client