Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/lbmAuBA5WB4NLDelEhbNeXKbDHE.mft
File: lbmAuBA5WB4NLDelEhbNeXKbDHE.mft (raw, json)
Hash identifier: uzyey/EbiHoLlIjI0BLNfxQW1Znn++bvlgLZnVCh1zI=
Subject key identifier: 76:4F:6B:2C:5A:2A:0D:26:E2:A0:40:C9:46:84:D0:60:75:F2:8F:53
Authority key identifier: 95:B9:80:B8:10:39:58:1E:0D:2C:37:A5:12:16:CD:79:72:9B:0C:71
Certificate issuer: /CN=95b980b81039581e0d2c37a51216cd79729b0c71
Certificate serial: 019A5150A41D4B7D9470D7BCA7432F051C2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbmAuBA5WB4NLDelEhbNeXKbDHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/lbmAuBA5WB4NLDelEhbNeXKbDHE.mft
Manifest number: 170E
Signing time: Wed 05 Nov 2025 00:00:30 +0000
Manifest this update: Wed 05 Nov 2025 00:00:30 +0000
Manifest next update: Thu 06 Nov 2025 00:00:30 +0000
Files and hashes: 1: ANSAYrE9HNntD61TvEpJUmG8rgw.roa (hash: 4+iM21UqhAp7nE5c7mZKQw9TVqg+SMBpGm5UpV8V8dc=)
2: PJ5ra5RQEPuenhUZKqA-ySi8au4.roa (hash: HAE/ZYsuA8aESklvJ9Rn5+/ozrtEQRVx0jFM8lv6NbI=)
3: lbmAuBA5WB4NLDelEhbNeXKbDHE.crl (hash: WK5DHVM4YJzIxKGTrG49KjSsVU/+XHIFgyIdx2cPink=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/lbmAuBA5WB4NLDelEhbNeXKbDHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/lbmAuBA5WB4NLDelEhbNeXKbDHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lbmAuBA5WB4NLDelEhbNeXKbDHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:a4:1d:4b:7d:94:70:d7:bc:a7:43:2f:05:1c:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b980b81039581e0d2c37a51216cd79729b0c71
Validity
Not Before: Nov 5 00:00:30 2025 GMT
Not After : Nov 6 00:00:30 2025 GMT
Subject: CN=764f6b2c5a2a0d26e2a040c94684d06075f28f53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7d:dd:01:fd:0b:34:ed:00:33:85:04:79:77:
6b:6d:d7:9a:95:ee:fa:73:ce:4c:2a:57:b0:ae:26:
ee:c9:a2:a6:75:ed:73:9e:ca:2a:ed:df:40:66:49:
7a:25:54:49:fd:a9:d0:68:3c:77:3e:e4:0f:7a:02:
bd:dc:b5:96:6d:02:e3:aa:ed:1f:db:1c:2c:21:38:
ec:04:07:81:de:da:c4:38:b4:29:3c:94:b2:c3:a1:
7d:78:58:11:59:ff:bb:16:fa:bb:42:e4:9b:44:05:
67:84:52:8d:91:f3:b7:28:5a:47:55:50:39:4f:43:
26:3a:fc:9d:0d:ee:76:b7:45:d9:25:60:64:e6:0e:
8e:dd:af:18:1e:97:74:c3:d0:2f:b6:ce:07:2a:58:
aa:18:92:88:1b:d0:14:ed:89:3e:67:b4:df:f4:69:
1e:97:d6:03:77:cd:3d:11:8b:09:0e:e6:39:9c:7a:
75:b4:c0:df:0e:75:5a:78:40:34:e3:c6:93:e1:e9:
0e:05:d7:e8:bf:71:44:f8:ae:8a:03:c3:be:cb:aa:
67:21:2e:6c:3a:61:55:48:81:f1:3c:31:39:62:08:
01:f7:7f:0a:e1:53:84:4c:94:f2:af:c7:24:74:3e:
35:d9:99:1d:ea:4b:b8:1a:f0:75:e0:e5:21:a4:73:
d8:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:4F:6B:2C:5A:2A:0D:26:E2:A0:40:C9:46:84:D0:60:75:F2:8F:53
X509v3 Authority Key Identifier:
keyid:95:B9:80:B8:10:39:58:1E:0D:2C:37:A5:12:16:CD:79:72:9B:0C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbmAuBA5WB4NLDelEhbNeXKbDHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/lbmAuBA5WB4NLDelEhbNeXKbDHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/lbmAuBA5WB4NLDelEhbNeXKbDHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:a2:88:24:98:52:9a:24:bc:b9:24:b1:6c:78:cb:ad:d8:67:
4e:43:38:0d:ee:0a:0c:a5:9a:f0:5a:49:d1:8f:7c:d8:d6:03:
2c:e7:0a:1a:2a:a6:d9:a1:4d:da:27:bd:77:5b:43:ac:57:19:
6a:e8:3e:26:b1:6b:1b:97:5b:b8:00:96:d3:1b:b1:9c:ae:65:
5f:c7:79:a2:7e:2a:19:d1:91:37:af:2c:33:d7:f9:91:52:02:
dd:e4:60:3f:78:38:82:cb:9d:55:50:fb:9d:f3:a4:84:bf:46:
af:17:52:62:58:4b:66:f4:86:fc:04:31:38:94:0c:4b:77:ca:
88:7f:09:95:78:24:33:49:10:ff:d6:6e:ae:78:7b:2a:cf:80:
24:38:09:7e:57:d7:2b:68:2b:00:d5:81:b0:8f:5f:9d:f3:6b:
54:57:55:02:b7:58:fe:33:99:19:61:61:4a:a6:a6:e8:fe:57:
f9:99:6c:fb:2f:4b:5e:db:26:a0:cd:9f:2e:2d:c6:46:f9:53:
3f:46:a2:90:39:f3:e7:a0:b7:08:62:dc:d8:5e:be:30:4f:82:
f9:e9:cb:60:7a:48:46:2d:14:d0:85:c5:f9:ad:b6:57:36:14:
ec:4c:fd:a3:2c:32:1f:f3:b8:15:21:1c:97:df:33:d0:2b:87:
c9:da:8a:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:52:29 2025 by rpki-client