Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.mft
File: lbheWsBVoSGIrlDNsAf6SItqqIs.mft (raw, json)
Hash identifier: GSjcQvtH5elQxKGiTwUISycJF0ojN7JHvYeWgFnjeOQ=
Subject key identifier: 9D:C4:86:89:AE:1F:1C:84:10:F3:F7:45:12:17:02:34:E9:08:D6:FC
Authority key identifier: 95:B8:5E:5A:C0:55:A1:21:88:AE:50:CD:B0:07:FA:48:8B:6A:A8:8B
Certificate issuer: /CN=95b85e5ac055a12188ae50cdb007fa488b6aa88b
Certificate serial: 019A50E2A8078380FD7BF7AA81A17F52F5EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbheWsBVoSGIrlDNsAf6SItqqIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 22:00:22 +0000
Manifest this update: Tue 04 Nov 2025 22:00:22 +0000
Manifest next update: Wed 05 Nov 2025 22:00:22 +0000
Files and hashes: 1: 6LbIgFJwzpH2Qf0sirzfHYuw_a4.roa (hash: yVSc0ifnnPwL8H5EwEXT2iNnCkvEaZBn7yh2JV9dabc=)
2: lbheWsBVoSGIrlDNsAf6SItqqIs.crl (hash: 8EE/38zpN7XDLCkbH0wZB11fOpshrPtQrfDirTQ02HA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/lbheWsBVoSGIrlDNsAf6SItqqIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e2:a8:07:83:80:fd:7b:f7:aa:81:a1:7f:52:f5:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b85e5ac055a12188ae50cdb007fa488b6aa88b
Validity
Not Before: Nov 4 22:00:22 2025 GMT
Not After : Nov 5 22:00:22 2025 GMT
Subject: CN=9dc48689ae1f1c8410f3f74512170234e908d6fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:0d:20:be:90:37:4d:9d:01:24:5c:d4:eb:03:
53:03:fe:0f:43:57:05:25:36:ec:98:7d:32:8a:2e:
9f:89:34:23:80:85:f3:97:63:ee:01:08:1e:9b:57:
80:55:6e:ee:df:72:26:61:c6:7e:f6:72:b1:2c:57:
29:6d:69:d3:95:a6:6a:f7:33:bb:f3:52:cc:2d:95:
0e:91:d3:4f:70:41:13:c8:10:8a:8f:1a:8a:fc:a2:
06:bb:40:c1:6a:ee:29:c2:b9:bc:f1:9c:f1:4b:9f:
48:5d:ea:03:fb:ac:9c:88:a9:9f:2e:84:12:df:dd:
cc:72:50:85:fd:f4:65:25:af:b4:0d:bb:63:43:11:
79:55:ea:b5:91:0c:07:ee:01:60:a1:fc:2b:ea:53:
76:34:71:81:d0:e0:9c:5b:b3:4c:8a:00:fa:16:9c:
f7:3e:4c:fe:cd:ab:89:cc:c5:84:3c:97:57:76:b2:
e7:56:3f:35:65:60:3d:86:27:45:70:b7:a4:62:35:
d3:93:85:d5:f6:79:17:2d:61:4d:f3:77:5d:53:cb:
ce:c9:5c:64:50:91:c8:be:61:02:7c:a0:3e:52:96:
15:85:4a:4a:5e:7c:9c:3f:da:76:b7:3b:95:a6:db:
d0:2a:f0:d1:2c:be:26:b8:5d:6d:7e:e7:84:4c:07:
e7:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:C4:86:89:AE:1F:1C:84:10:F3:F7:45:12:17:02:34:E9:08:D6:FC
X509v3 Authority Key Identifier:
keyid:95:B8:5E:5A:C0:55:A1:21:88:AE:50:CD:B0:07:FA:48:8B:6A:A8:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbheWsBVoSGIrlDNsAf6SItqqIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:ac:ea:85:df:41:30:d0:b7:63:62:1c:42:03:5c:68:1b:06:
0b:88:09:b3:53:53:82:fd:0b:f0:4e:4d:60:41:76:5a:9f:42:
64:a9:40:d9:f0:8b:59:46:e3:3f:93:35:54:1a:4d:3a:3e:c4:
bb:fa:17:e1:da:a2:8e:15:ee:9b:70:03:30:74:bd:bb:7d:1d:
74:81:2c:2e:31:7a:73:f7:b7:0d:de:e7:e6:d9:fd:f0:b3:ed:
f5:6c:3d:2f:3a:52:9a:88:c6:fb:c4:5c:66:a3:8a:63:a2:d2:
62:25:06:96:cd:09:a2:e3:94:82:69:56:96:00:f8:16:bb:2f:
99:b6:78:20:6d:00:ca:fd:72:94:95:87:e4:04:10:49:e9:7c:
88:0e:32:09:c6:21:56:f0:8a:4a:ca:af:7f:a9:dd:1c:c6:a7:
f8:02:33:47:95:0b:86:75:c1:5f:e3:6a:81:f9:de:80:1f:f5:
1c:c5:7d:da:fd:26:0c:38:72:e4:c3:c2:8f:67:c4:72:ef:f5:
dd:a4:36:4f:44:4b:40:b6:fa:bc:f5:3c:52:5f:16:eb:1c:d8:
f6:00:67:7e:10:8a:83:ff:08:1b:30:de:1e:32:fc:a1:3f:9f:
b0:5c:5c:06:f4:f9:ed:fc:93:9e:e5:0a:77:18:ce:8d:97:47:
ea:94:6a:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQ4qgHg4D9e/eqgaF/UvXsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1Yjg1ZTVhYzA1NWExMjE4OGFlNTBjZGIwMDdmYTQ4OGI2
YWE4OGIwHhcNMjUxMTA0MjIwMDIyWhcNMjUxMTA1MjIwMDIyWjAzMTEwLwYDVQQD
Eyg5ZGM0ODY4OWFlMWYxYzg0MTBmM2Y3NDUxMjE3MDIzNGU5MDhkNmZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5A0gvpA3TZ0BJFzU6wNTA/4PQ1cF
JTbsmH0yii6fiTQjgIXzl2PuAQgem1eAVW7u33ImYcZ+9nKxLFcpbWnTlaZq9zO7
81LMLZUOkdNPcEETyBCKjxqK/KIGu0DBau4pwrm88ZzxS59IXeoD+6yciKmfLoQS
393MclCF/fRlJa+0DbtjQxF5Veq1kQwH7gFgofwr6lN2NHGB0OCcW7NMigD6Fpz3
Pkz+zauJzMWEPJdXdrLnVj81ZWA9hidFcLekYjXTk4XV9nkXLWFN83ddU8vOyVxk
UJHIvmECfKA+UpYVhUpKXnycP9p2tzuVptvQKvDRLL4muF1tfueETAfn4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ3EhomuHxyEEPP3RRIXAjTpCNb8MB8GA1UdIwQY
MBaAFJW4XlrAVaEhiK5QzbAH+kiLaqiLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGJoZVdzQlZvU0dJcmxETnNBZjZTSXRxcUlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83NGFlZTgtNDFhOC00ZWU3LWFlNGMt
MjE4M2JjMzg0NGQyLzEvbGJoZVdzQlZvU0dJcmxETnNBZjZTSXRxcUlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS83NGFlZTgtNDFhOC00ZWU3LWFlNGMtMjE4M2JjMzg0NGQy
LzEvbGJoZVdzQlZvU0dJcmxETnNBZjZTSXRxcUlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjazqhd9B
MNC3Y2IcQgNcaBsGC4gJs1NTgv0L8E5NYEF2Wp9CZKlA2fCLWUbjP5M1VBpNOj7E
u/oX4dqijhXum3ADMHS9u30ddIEsLjF6c/e3Dd7n5tn98LPt9Ww9LzpSmojG+8Rc
ZqOKY6LSYiUGls0JouOUgmlWlgD4FrsvmbZ4IG0Ayv1ylJWH5AQQSel8iA4yCcYh
VvCKSsqvf6ndHMan+AIzR5ULhnXBX+NqgfnegB/1HMV92v0mDDhy5MPCj2fEcu/1
3aQ2T0RLQLb6vPU8Ul8W6xzY9gBnfhCKg/8IGzDeHjL8oT+fsFxcBvT57fyTnuUK
dxjOjZdH6pRqmQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 08:18:50 2025 by rpki-client