Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/2b5ed6-3a7c-4631-b49d-bf55b8b1669c/1/LM5dUfp1u7btlipBZu9vhjCgJYE.mft
File: LM5dUfp1u7btlipBZu9vhjCgJYE.mft (raw, json)
Hash identifier: 7mB2d/uoiL4cuC7irMVeJfy1PYqEHjzhQ0xikgOG/Fk=
Subject key identifier: 04:40:29:83:6C:8D:1F:6D:F6:F3:F4:AE:9B:0E:50:7C:F3:7D:5D:D0
Authority key identifier: 2C:CE:5D:51:FA:75:BB:B6:ED:96:2A:41:66:EF:6F:86:30:A0:25:81
Certificate issuer: /CN=2cce5d51fa75bbb6ed962a4166ef6f8630a02581
Certificate serial: 019A4EF43437E3352DF65D93A67A63A9D7C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LM5dUfp1u7btlipBZu9vhjCgJYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/2b5ed6-3a7c-4631-b49d-bf55b8b1669c/1/LM5dUfp1u7btlipBZu9vhjCgJYE.mft
Manifest number: 13AB
Signing time: Tue 04 Nov 2025 13:00:18 +0000
Manifest this update: Tue 04 Nov 2025 13:00:18 +0000
Manifest next update: Wed 05 Nov 2025 13:00:18 +0000
Files and hashes: 1: LM5dUfp1u7btlipBZu9vhjCgJYE.crl (hash: EZZFvzxmgHAmo4776EaSwmwYWnIy+Um3JZS1hN4biRc=)
2: gwJ9hMltFlWaOeN-R_fhzG-JI24.roa (hash: wuy2X0I9Yx6e8bAqg0gf/bu0yRoRH3AWoeZNQfjdFoc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/2b5ed6-3a7c-4631-b49d-bf55b8b1669c/1/LM5dUfp1u7btlipBZu9vhjCgJYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/2b5ed6-3a7c-4631-b49d-bf55b8b1669c/1/LM5dUfp1u7btlipBZu9vhjCgJYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LM5dUfp1u7btlipBZu9vhjCgJYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:34:37:e3:35:2d:f6:5d:93:a6:7a:63:a9:d7:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cce5d51fa75bbb6ed962a4166ef6f8630a02581
Validity
Not Before: Nov 4 13:00:18 2025 GMT
Not After : Nov 5 13:00:18 2025 GMT
Subject: CN=044029836c8d1f6df6f3f4ae9b0e507cf37d5dd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f8:0e:bf:3d:0c:2c:70:f8:c9:be:e2:93:a4:
27:e5:97:3a:3b:3a:5d:c7:07:03:14:f2:1a:27:16:
98:43:d8:18:13:70:c4:7d:c7:b8:56:51:20:4b:08:
d3:b2:0a:40:fc:a9:93:02:46:70:d0:66:72:d2:14:
7d:25:7c:a8:b4:03:b6:49:7d:73:18:bf:94:5d:5d:
95:46:80:19:c9:93:39:b8:29:e2:a9:51:8a:9a:c4:
d6:a1:86:bc:b5:50:ac:61:69:55:cb:a6:e6:89:1b:
ab:a8:4b:ab:99:74:97:6d:4a:27:e1:2f:d0:c1:b4:
3a:29:8c:f2:48:9e:ac:51:a1:30:97:f0:44:b8:09:
0e:2c:b4:63:7c:dc:d7:de:5c:03:de:59:a4:6e:61:
49:e9:09:3e:a9:ca:34:23:6c:60:a7:b1:41:cb:35:
19:2d:d8:7f:96:d5:2c:94:84:e9:ca:2e:ba:ab:e8:
cf:fe:b3:31:31:d0:2f:c4:32:d3:94:c9:0c:71:89:
3e:fa:6b:64:ae:2b:4c:91:5d:43:18:e8:7e:d8:20:
01:a6:59:18:da:d4:86:d8:fa:84:36:91:ea:52:e4:
b3:99:d7:49:4d:0b:b3:51:19:f8:64:c2:10:47:cf:
db:a9:ab:ba:68:17:fb:09:d2:d5:4a:0c:3c:c8:13:
4b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:40:29:83:6C:8D:1F:6D:F6:F3:F4:AE:9B:0E:50:7C:F3:7D:5D:D0
X509v3 Authority Key Identifier:
keyid:2C:CE:5D:51:FA:75:BB:B6:ED:96:2A:41:66:EF:6F:86:30:A0:25:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LM5dUfp1u7btlipBZu9vhjCgJYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2b5ed6-3a7c-4631-b49d-bf55b8b1669c/1/LM5dUfp1u7btlipBZu9vhjCgJYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2b5ed6-3a7c-4631-b49d-bf55b8b1669c/1/LM5dUfp1u7btlipBZu9vhjCgJYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:70:79:93:a7:75:48:72:e8:5d:56:0d:a6:c5:24:f0:ad:16:
80:9b:b2:ac:96:a0:0f:61:08:06:b4:96:aa:de:3a:59:7d:e2:
ae:6a:0c:5a:db:95:84:f2:96:47:67:a5:1e:38:49:ed:59:c3:
0a:55:71:a6:ee:0f:b9:40:55:6b:67:04:a7:e8:5e:79:64:b3:
c7:69:f1:3a:ed:84:9a:f4:18:61:4a:8b:6a:3d:8c:90:4e:8b:
de:88:3f:4b:12:2f:9b:db:61:87:d9:50:4b:e3:dc:f6:ce:a3:
d2:40:7f:e9:f2:be:3c:5c:cf:f9:5c:5f:fb:94:5f:63:74:55:
4c:ce:ef:27:1f:ea:72:10:9f:a4:bc:63:d0:31:75:17:64:b1:
99:e9:3b:07:60:18:92:8d:c5:ff:3f:9e:c9:d0:1c:42:c5:80:
fc:e7:3b:9c:42:e1:8d:d4:22:5c:ee:1f:fa:7d:24:97:f4:3e:
f3:4b:e4:df:84:9b:bd:2a:fb:2c:6b:84:97:82:18:a6:5a:b3:
ce:37:aa:9a:15:1d:de:8c:08:90:77:e6:29:35:ae:1f:14:c6:
76:4a:f2:af:b4:ce:76:28:5a:de:02:15:78:dc:e7:a8:75:f5:
9c:9b:e8:ae:c1:17:e6:14:41:72:16:55:bd:08:02:f8:ed:46:
3d:84:6f:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9DQ34zUt9l2TpnpjqdfBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjY2U1ZDUxZmE3NWJiYjZlZDk2MmE0MTY2ZWY2Zjg2MzBh
MDI1ODEwHhcNMjUxMTA0MTMwMDE4WhcNMjUxMTA1MTMwMDE4WjAzMTEwLwYDVQQD
EygwNDQwMjk4MzZjOGQxZjZkZjZmM2Y0YWU5YjBlNTA3Y2YzN2Q1ZGQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0PgOvz0MLHD4yb7ik6Qn5Zc6Ozpd
xwcDFPIaJxaYQ9gYE3DEfce4VlEgSwjTsgpA/KmTAkZw0GZy0hR9JXyotAO2SX1z
GL+UXV2VRoAZyZM5uCniqVGKmsTWoYa8tVCsYWlVy6bmiRurqEurmXSXbUon4S/Q
wbQ6KYzySJ6sUaEwl/BEuAkOLLRjfNzX3lwD3lmkbmFJ6Qk+qco0I2xgp7FByzUZ
Ldh/ltUslITpyi66q+jP/rMxMdAvxDLTlMkMcYk++mtkritMkV1DGOh+2CABplkY
2tSG2PqENpHqUuSzmddJTQuzURn4ZMIQR8/bqau6aBf7CdLVSgw8yBNLCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFARAKYNsjR9t9vP0rpsOUHzzfV3QMB8GA1UdIwQY
MBaAFCzOXVH6dbu27ZYqQWbvb4YwoCWBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTE01ZFVmcDF1N2J0bGlwQlp1OXZoakNnSllFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy8yYjVlZDYtM2E3Yy00NjMxLWI0OWQt
YmY1NWI4YjE2NjljLzEvTE01ZFVmcDF1N2J0bGlwQlp1OXZoakNnSllFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy8yYjVlZDYtM2E3Yy00NjMxLWI0OWQtYmY1NWI4YjE2Njlj
LzEvTE01ZFVmcDF1N2J0bGlwQlp1OXZoakNnSllFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFnB5k6d1
SHLoXVYNpsUk8K0WgJuyrJagD2EIBrSWqt46WX3irmoMWtuVhPKWR2elHjhJ7VnD
ClVxpu4PuUBVa2cEp+heeWSzx2nxOu2EmvQYYUqLaj2MkE6L3og/SxIvm9thh9lQ
S+Pc9s6j0kB/6fK+PFzP+Vxf+5RfY3RVTM7vJx/qchCfpLxj0DF1F2Sxmek7B2AY
ko3F/z+eydAcQsWA/Oc7nELhjdQiXO4f+n0kl/Q+80vk34SbvSr7LGuEl4IYplqz
zjeqmhUd3owIkHfmKTWuHxTGdkryr7TOdiha3gIVeNznqHX1nJvorsEX5hRBchZV
vQgC+O1GPYRv6A==
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:09:23 2025 by rpki-client