Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/2a226d-c72c-4c12-bbba-a4b55a71c228/1/LbYW860DY-cmnMLrWNG8CGzJdfI.mft
File: LbYW860DY-cmnMLrWNG8CGzJdfI.mft (raw, json)
Hash identifier: pUbGJs5tnDjsO+fngZEIWI8sRAO8Ew38Sw02bWYUvzo=
Subject key identifier: AB:AA:20:1F:93:A8:42:6B:D9:DC:45:0D:13:0D:80:E1:31:97:5A:41
Authority key identifier: 2D:B6:16:F3:AD:03:63:E7:26:9C:C2:EB:58:D1:BC:08:6C:C9:75:F2
Certificate issuer: /CN=2db616f3ad0363e7269cc2eb58d1bc086cc975f2
Certificate serial: 019A4EF5947D3D38791AB0280BF6805796FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LbYW860DY-cmnMLrWNG8CGzJdfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/2a226d-c72c-4c12-bbba-a4b55a71c228/1/LbYW860DY-cmnMLrWNG8CGzJdfI.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 13:01:48 +0000
Manifest this update: Tue 04 Nov 2025 13:01:48 +0000
Manifest next update: Wed 05 Nov 2025 13:01:48 +0000
Files and hashes: 1: LbYW860DY-cmnMLrWNG8CGzJdfI.crl (hash: uU0lUCdp+1IDvhJNZDLd6kjQMcmmRgKo93W0fvFTVa0=)
2: TtiFva0B7nBQnunu1qXuQVvAjRk.roa (hash: BCLtQWteuqq7HD+J7kkS4GO2lBhow7GRQ0k6IwJXdnM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/2a226d-c72c-4c12-bbba-a4b55a71c228/1/LbYW860DY-cmnMLrWNG8CGzJdfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/2a226d-c72c-4c12-bbba-a4b55a71c228/1/LbYW860DY-cmnMLrWNG8CGzJdfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/LbYW860DY-cmnMLrWNG8CGzJdfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:94:7d:3d:38:79:1a:b0:28:0b:f6:80:57:96:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2db616f3ad0363e7269cc2eb58d1bc086cc975f2
Validity
Not Before: Nov 4 13:01:48 2025 GMT
Not After : Nov 5 13:01:48 2025 GMT
Subject: CN=abaa201f93a8426bd9dc450d130d80e131975a41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:7c:70:d2:62:c9:3e:e6:9f:26:ef:f7:61:e2:
1b:36:eb:70:3f:0b:2e:f0:ea:1c:9e:ef:e8:66:ee:
39:d5:0d:4e:cb:ee:4a:c1:2c:d3:1b:b9:43:3a:24:
fe:30:cf:17:f9:a1:22:12:cf:6c:16:9e:02:3b:2d:
76:5e:98:89:0b:93:d7:ca:6b:25:bb:6c:2a:d9:8d:
18:d9:a2:0a:d6:a8:fc:15:8c:a5:ad:15:6c:43:1e:
e0:fe:44:92:fc:e3:07:22:84:64:bc:09:0b:3a:7f:
5c:af:58:a3:85:43:bc:33:c4:8e:11:5d:4a:55:ad:
1b:3e:fa:45:81:cc:f5:60:da:1d:86:14:0c:db:43:
7d:5a:9d:ce:73:44:a3:8e:ea:24:81:31:bc:80:a8:
22:20:77:0a:6e:b5:11:8a:26:e4:f5:e0:2e:5f:16:
2a:a8:00:b0:a1:6c:16:e1:67:6d:2e:6a:79:e2:62:
96:b5:78:b5:b3:eb:b7:d2:e4:be:c4:ee:88:c1:b3:
54:a0:f4:8f:77:3b:73:f7:53:6d:c8:f2:ff:fe:7a:
6b:26:ff:94:4a:ae:1c:76:57:29:a5:d2:c2:6d:30:
80:8a:bd:ba:15:e5:aa:27:97:48:75:b9:83:6e:69:
4f:cd:2b:a1:c5:59:4a:21:59:d8:92:b1:28:b5:a9:
14:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:AA:20:1F:93:A8:42:6B:D9:DC:45:0D:13:0D:80:E1:31:97:5A:41
X509v3 Authority Key Identifier:
keyid:2D:B6:16:F3:AD:03:63:E7:26:9C:C2:EB:58:D1:BC:08:6C:C9:75:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LbYW860DY-cmnMLrWNG8CGzJdfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/2a226d-c72c-4c12-bbba-a4b55a71c228/1/LbYW860DY-cmnMLrWNG8CGzJdfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/2a226d-c72c-4c12-bbba-a4b55a71c228/1/LbYW860DY-cmnMLrWNG8CGzJdfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:57:a4:ee:27:69:71:2a:c1:f1:08:ce:cc:17:04:da:99:a4:
41:67:25:5c:c2:4a:2a:13:96:18:7b:40:c1:4a:75:c3:2d:bd:
53:fb:ec:4c:b4:b6:c1:af:76:59:83:6a:e8:39:e8:53:d3:f1:
c4:fe:21:27:53:66:3f:39:a8:fb:c7:62:b9:eb:ef:f2:de:23:
6a:fb:4b:5c:e1:6b:1e:92:7e:07:ec:40:ed:3b:34:42:e6:10:
dc:76:6c:d4:f9:26:06:4f:f8:90:b5:ba:ee:9f:b1:6d:f8:69:
9b:70:2d:36:76:76:88:5a:fc:72:de:6d:73:bd:dd:d5:b9:b1:
43:d7:8b:0a:b9:85:9c:08:14:7e:1c:5f:27:bb:b2:84:4c:0a:
52:1e:58:3c:e3:46:0f:f3:45:e9:e0:7e:51:74:9a:f8:8b:7e:
c1:38:fb:ce:fb:01:a2:32:60:59:0b:fa:a1:1f:54:cb:03:49:
9f:2e:62:0f:28:28:0d:31:7b:d5:70:8d:be:d8:5f:80:9a:71:
2f:d9:4c:2a:77:75:f9:63:08:41:a5:24:f8:c7:92:57:92:ba:
98:41:1a:4b:52:6d:85:bc:5c:c1:d9:c3:c8:1f:c2:ea:ee:ed:
d3:62:9d:36:6a:99:03:15:88:37:c1:ec:0b:a2:7d:ad:8c:0b:
34:2c:5f:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:38:42 2025 by rpki-client