
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/0aab78-66de-444c-a843-0b3cb4c6b79a/1/lbgfTkXXEdoMFI3Cuq0VBN27Qns.mft
File: lbgfTkXXEdoMFI3Cuq0VBN27Qns.mft (raw, json)
Hash identifier: iE+Mwuj4dqYDdA9dF4fN/0tztWqqwRGQCUHgDGxso7c=
Subject key identifier: A3:C4:94:9D:02:AC:83:AE:33:D9:2F:E5:5C:32:30:A8:F0:30:1B:2D
Authority key identifier: 95:B8:1F:4E:45:D7:11:DA:0C:14:8D:C2:BA:AD:15:04:DD:BB:42:7B
Certificate issuer: /CN=95b81f4e45d711da0c148dc2baad1504ddbb427b
Certificate serial: 01988B7CD061B95E8FEB1FBCCD7E09362E71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbgfTkXXEdoMFI3Cuq0VBN27Qns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/0aab78-66de-444c-a843-0b3cb4c6b79a/1/lbgfTkXXEdoMFI3Cuq0VBN27Qns.mft
Manifest number: 1623
Signing time: Fri 08 Aug 2025 21:01:09 +0000
Manifest this update: Fri 08 Aug 2025 21:01:09 +0000
Manifest next update: Sat 09 Aug 2025 21:01:09 +0000
Files and hashes: 1: 7akWYjQwsX6a6HhUzkzvmpveN9o.roa (hash: NaXDBHO9cOnr/DrruhF4XLx1P8skQ7ZIYlWJ7+sC7iA=)
2: lbgfTkXXEdoMFI3Cuq0VBN27Qns.crl (hash: Qo7tYH7z/N2e/eiMSReMtV1tKB01kykq5vnLPtDzhXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/0aab78-66de-444c-a843-0b3cb4c6b79a/1/lbgfTkXXEdoMFI3Cuq0VBN27Qns.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/0aab78-66de-444c-a843-0b3cb4c6b79a/1/lbgfTkXXEdoMFI3Cuq0VBN27Qns.mft
rsync://rpki.ripe.net/repository/DEFAULT/lbgfTkXXEdoMFI3Cuq0VBN27Qns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:7c:d0:61:b9:5e:8f:eb:1f:bc:cd:7e:09:36:2e:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b81f4e45d711da0c148dc2baad1504ddbb427b
Validity
Not Before: Aug 8 21:01:09 2025 GMT
Not After : Aug 9 21:01:09 2025 GMT
Subject: CN=a3c4949d02ac83ae33d92fe55c3230a8f0301b2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:01:06:ae:4c:cf:5a:2a:13:b0:25:77:d0:11:
4a:d0:f8:16:33:65:aa:76:b9:24:8d:2b:9d:3a:30:
e9:b2:71:1a:1f:d7:8a:78:3f:10:28:4d:93:19:12:
f1:96:35:99:0c:cb:b7:38:d9:37:41:be:15:af:ab:
58:f8:3e:37:97:1e:5d:dd:9e:07:ca:75:a9:fa:c7:
56:62:03:cd:17:0a:12:d1:0c:6a:d7:12:c5:4f:fa:
aa:4c:78:93:aa:71:1c:8d:28:48:d9:66:6d:a2:f2:
ac:11:91:64:14:d8:a7:c9:00:b3:a7:b3:bf:ad:c9:
39:6a:2f:b2:01:3b:43:d4:d4:e6:85:57:86:df:5f:
9e:2c:3b:5b:80:c5:4d:a4:c0:49:7a:e5:81:80:fc:
89:e9:6e:15:25:80:ee:8c:92:e2:89:23:b2:83:69:
1d:2d:55:04:e5:6e:c2:0f:2e:2f:0e:f0:ca:f9:1b:
18:5c:f4:ae:1f:05:f9:42:44:d1:d8:a5:3f:2b:ff:
28:88:17:b4:2a:03:cd:86:01:38:63:c3:3b:ab:8a:
9b:31:5d:ab:c1:d2:b8:fc:75:92:6a:22:30:18:da:
f5:06:78:ca:72:60:21:d6:d5:ac:b1:71:30:77:7e:
8b:9a:c7:7e:47:59:ed:9e:2e:a1:06:1b:95:7b:12:
15:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:C4:94:9D:02:AC:83:AE:33:D9:2F:E5:5C:32:30:A8:F0:30:1B:2D
X509v3 Authority Key Identifier:
keyid:95:B8:1F:4E:45:D7:11:DA:0C:14:8D:C2:BA:AD:15:04:DD:BB:42:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbgfTkXXEdoMFI3Cuq0VBN27Qns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0aab78-66de-444c-a843-0b3cb4c6b79a/1/lbgfTkXXEdoMFI3Cuq0VBN27Qns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0aab78-66de-444c-a843-0b3cb4c6b79a/1/lbgfTkXXEdoMFI3Cuq0VBN27Qns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:28:53:f4:4d:50:93:7a:ff:3f:de:11:df:a1:22:34:24:ef:
ef:ed:e1:40:a4:fc:88:c5:35:4d:9b:a7:3a:1d:61:80:1c:00:
2c:43:97:8e:d6:1f:c8:4a:0d:2d:c3:5c:b2:06:51:1a:c4:0d:
f8:c1:f9:aa:2b:ad:a7:ab:69:98:2d:ba:76:17:64:c0:73:56:
3d:3b:0d:e8:5b:09:9c:48:9b:47:bd:72:8f:74:40:de:68:b9:
9c:b6:ea:9b:d0:32:bb:b5:3a:2a:16:10:c1:c2:00:22:74:75:
1b:4e:2a:14:b0:36:18:4a:43:52:e9:e9:b9:ab:c9:7c:79:55:
91:96:dd:e4:44:2d:6d:c5:5e:f3:4e:07:88:4e:1e:92:de:b2:
4c:24:75:c9:ae:16:39:f6:59:59:5e:b2:2a:38:04:6c:d0:32:
a5:34:fa:f3:b7:5e:ed:9f:af:18:1b:8a:ff:75:67:58:a4:b2:
61:4c:01:42:a1:31:67:1d:74:cc:b1:cc:3c:9e:5b:60:8f:76:
a6:87:0e:04:84:d0:b6:23:c2:21:6b:a5:b4:41:04:92:93:43:
10:3f:2a:e2:9c:34:58:06:85:c4:29:e2:2e:35:d7:87:16:20:
d1:f6:bd:ea:82:0a:25:45:f0:b6:d3:08:53:6d:3d:6d:68:39:
75:cc:67:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:00:39 2025 by rpki-client