Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/c58c8c-5c6e-44e0-82af-e96de3112dea/1/LBMiAg7k5Zy1zT3nFlDGKv1MAic.mft
File: LBMiAg7k5Zy1zT3nFlDGKv1MAic.mft (raw, json)
Hash identifier: ycwWyknRqqpvXivbIDS8XIK5LvMWkMJwab60WQL0f1g=
Subject key identifier: 0F:FA:08:8C:A5:66:52:2C:03:58:0A:9B:E1:77:4E:43:B7:A9:85:D3
Authority key identifier: 2C:13:22:02:0E:E4:E5:9C:B5:CD:3D:E7:16:50:C6:2A:FD:4C:02:27
Certificate issuer: /CN=2c1322020ee4e59cb5cd3de71650c62afd4c0227
Certificate serial: 019A4EF56B183CEE88B49EA87EFF3339435C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LBMiAg7k5Zy1zT3nFlDGKv1MAic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/c58c8c-5c6e-44e0-82af-e96de3112dea/1/LBMiAg7k5Zy1zT3nFlDGKv1MAic.mft
Manifest number: 0A22
Signing time: Tue 04 Nov 2025 13:01:37 +0000
Manifest this update: Tue 04 Nov 2025 13:01:37 +0000
Manifest next update: Wed 05 Nov 2025 13:01:37 +0000
Files and hashes: 1: LBMiAg7k5Zy1zT3nFlDGKv1MAic.crl (hash: fWgFoXrR3ZsAvCiDHR8QTNDWVY2kDhC+0JBURsGSB5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/c58c8c-5c6e-44e0-82af-e96de3112dea/1/LBMiAg7k5Zy1zT3nFlDGKv1MAic.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/c58c8c-5c6e-44e0-82af-e96de3112dea/1/LBMiAg7k5Zy1zT3nFlDGKv1MAic.mft
rsync://rpki.ripe.net/repository/DEFAULT/LBMiAg7k5Zy1zT3nFlDGKv1MAic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:6b:18:3c:ee:88:b4:9e:a8:7e:ff:33:39:43:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c1322020ee4e59cb5cd3de71650c62afd4c0227
Validity
Not Before: Nov 4 13:01:37 2025 GMT
Not After : Nov 5 13:01:37 2025 GMT
Subject: CN=0ffa088ca566522c03580a9be1774e43b7a985d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:af:ab:c3:f9:ff:33:00:bf:cd:55:7e:f1:ea:
d5:c5:06:99:5e:d0:b4:68:69:c7:8b:0c:d4:36:46:
14:d7:8b:5b:ec:bf:46:52:e9:34:d9:17:56:00:4c:
30:07:50:e9:b6:fc:e6:7f:0d:d3:f9:57:9a:75:4a:
06:6b:48:4c:32:80:14:1c:d3:2a:0a:87:42:93:a5:
b2:01:6e:b6:11:dd:82:3f:ab:79:42:79:7f:a8:de:
d3:91:0f:69:07:f5:f8:96:bb:bc:55:34:1c:98:00:
0d:ad:c2:3a:ff:68:78:9a:38:94:f2:6a:e8:5f:5a:
e2:77:2b:9f:da:75:6b:7c:ae:aa:2b:6a:02:42:43:
2e:98:2d:10:c4:ad:c3:39:ee:46:f2:a0:d0:f9:ed:
c2:09:96:80:aa:79:e5:9b:33:27:d4:10:09:d7:1a:
3e:35:a8:1b:30:a7:50:56:ef:b8:03:70:99:83:76:
42:91:bb:87:be:58:79:a9:95:49:90:15:ae:0f:0b:
22:45:23:03:37:59:c1:56:8c:f4:56:1d:68:07:e7:
1d:91:6a:a1:52:18:c1:00:7a:a1:32:5f:0d:f4:74:
00:7d:09:38:84:06:b2:9b:c6:89:82:a2:56:57:64:
e0:68:8f:00:eb:d3:62:4b:67:7e:ae:62:17:77:f0:
12:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:FA:08:8C:A5:66:52:2C:03:58:0A:9B:E1:77:4E:43:B7:A9:85:D3
X509v3 Authority Key Identifier:
keyid:2C:13:22:02:0E:E4:E5:9C:B5:CD:3D:E7:16:50:C6:2A:FD:4C:02:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LBMiAg7k5Zy1zT3nFlDGKv1MAic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c58c8c-5c6e-44e0-82af-e96de3112dea/1/LBMiAg7k5Zy1zT3nFlDGKv1MAic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c58c8c-5c6e-44e0-82af-e96de3112dea/1/LBMiAg7k5Zy1zT3nFlDGKv1MAic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:ae:31:3a:da:dd:f0:2c:b9:db:aa:54:01:9c:12:65:42:79:
87:5d:ae:dd:df:9c:14:f6:37:e8:37:77:ca:81:8d:86:72:42:
fe:ed:2d:fb:a1:8e:09:d0:56:d6:15:42:76:d9:91:a8:8d:ca:
51:5f:b8:4f:5b:56:cf:70:7e:46:90:89:da:98:36:17:96:a7:
92:5f:c1:1d:86:af:00:9a:5c:c6:3b:62:23:d0:e7:9a:31:31:
79:0b:e0:93:d0:1e:85:66:8f:23:23:8a:8f:fb:cc:ea:81:fb:
f5:62:39:f2:a3:0a:69:35:d4:ec:8b:9c:33:a8:b7:80:2c:a4:
7b:b7:66:dd:cc:ff:8b:86:16:70:2e:bb:56:cd:11:f0:8b:5f:
04:b9:b6:bc:24:4f:e0:3b:89:46:3a:60:ab:51:70:5f:59:c0:
07:fb:78:c5:9d:0a:c6:34:99:05:0a:4a:da:e5:17:0d:8b:e6:
f4:92:53:43:d0:c8:ca:ab:f3:19:aa:f9:ae:d9:1f:14:55:ce:
a6:b9:7d:8a:f0:34:ed:55:94:ac:0b:6b:0c:50:ba:b3:6b:fc:
16:f4:10:49:87:58:b0:d5:a3:c8:04:33:68:71:01:69:ba:da:
df:53:86:ab:67:10:bf:8a:bc:52:0e:59:49:b2:ba:89:e5:bc:
7b:70:47:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9WsYPO6ItJ6ofv8zOUNcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjMTMyMjAyMGVlNGU1OWNiNWNkM2RlNzE2NTBjNjJhZmQ0
YzAyMjcwHhcNMjUxMTA0MTMwMTM3WhcNMjUxMTA1MTMwMTM3WjAzMTEwLwYDVQQD
EygwZmZhMDg4Y2E1NjY1MjJjMDM1ODBhOWJlMTc3NGU0M2I3YTk4NWQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAra+rw/n/MwC/zVV+8erVxQaZXtC0
aGnHiwzUNkYU14tb7L9GUuk02RdWAEwwB1Dptvzmfw3T+VeadUoGa0hMMoAUHNMq
CodCk6WyAW62Ed2CP6t5Qnl/qN7TkQ9pB/X4lru8VTQcmAANrcI6/2h4mjiU8mro
X1ridyuf2nVrfK6qK2oCQkMumC0QxK3DOe5G8qDQ+e3CCZaAqnnlmzMn1BAJ1xo+
NagbMKdQVu+4A3CZg3ZCkbuHvlh5qZVJkBWuDwsiRSMDN1nBVoz0Vh1oB+cdkWqh
UhjBAHqhMl8N9HQAfQk4hAaym8aJgqJWV2TgaI8A69NiS2d+rmIXd/AS7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA/6CIylZlIsA1gKm+F3TkO3qYXTMB8GA1UdIwQY
MBaAFCwTIgIO5OWctc095xZQxir9TAInMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTEJNaUFnN2s1WnkxelQzbkZsREdLdjFNQWljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9jNThjOGMtNWM2ZS00NGUwLTgyYWYt
ZTk2ZGUzMTEyZGVhLzEvTEJNaUFnN2s1WnkxelQzbkZsREdLdjFNQWljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS9jNThjOGMtNWM2ZS00NGUwLTgyYWYtZTk2ZGUzMTEyZGVh
LzEvTEJNaUFnN2s1WnkxelQzbkZsREdLdjFNQWljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjK4xOtrd
8Cy526pUAZwSZUJ5h12u3d+cFPY36Dd3yoGNhnJC/u0t+6GOCdBW1hVCdtmRqI3K
UV+4T1tWz3B+RpCJ2pg2F5ankl/BHYavAJpcxjtiI9DnmjExeQvgk9AehWaPIyOK
j/vM6oH79WI58qMKaTXU7IucM6i3gCyke7dm3cz/i4YWcC67Vs0R8ItfBLm2vCRP
4DuJRjpgq1FwX1nAB/t4xZ0KxjSZBQpK2uUXDYvm9JJTQ9DIyqvzGar5rtkfFFXO
prl9ivA07VWUrAtrDFC6s2v8FvQQSYdYsNWjyAQzaHEBabra31OGq2cQv4q8Ug5Z
SbK6ieW8e3BHPg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:31:00 2025 by rpki-client