Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/0aab78-66de-444c-a843-0b3cb4c6b79a/1/lbgfTkXXEdoMFI3Cuq0VBN27Qns.mft
File: lbgfTkXXEdoMFI3Cuq0VBN27Qns.mft (raw, json)
Hash identifier: 1h0MSQ6mO/kGlvYA4srh9xeGQVKP1Z7MOUUjSjdV7zk=
Subject key identifier: 99:3D:72:5E:6E:54:E2:D4:85:2D:97:D4:7C:65:42:09:8D:2D:16:4C
Authority key identifier: 95:B8:1F:4E:45:D7:11:DA:0C:14:8D:C2:BA:AD:15:04:DD:BB:42:7B
Certificate issuer: /CN=95b81f4e45d711da0c148dc2baad1504ddbb427b
Certificate serial: 019A4D7445331CA16C4F7921E317B9D0CB58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbgfTkXXEdoMFI3Cuq0VBN27Qns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/0aab78-66de-444c-a843-0b3cb4c6b79a/1/lbgfTkXXEdoMFI3Cuq0VBN27Qns.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 06:00:56 +0000
Manifest this update: Tue 04 Nov 2025 06:00:56 +0000
Manifest next update: Wed 05 Nov 2025 06:00:56 +0000
Files and hashes: 1: 7akWYjQwsX6a6HhUzkzvmpveN9o.roa (hash: NaXDBHO9cOnr/DrruhF4XLx1P8skQ7ZIYlWJ7+sC7iA=)
2: lbgfTkXXEdoMFI3Cuq0VBN27Qns.crl (hash: HJStyREBrjiXqsETksVKANIUhjqhz4rVgt16zzXanoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/0aab78-66de-444c-a843-0b3cb4c6b79a/1/lbgfTkXXEdoMFI3Cuq0VBN27Qns.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/0aab78-66de-444c-a843-0b3cb4c6b79a/1/lbgfTkXXEdoMFI3Cuq0VBN27Qns.mft
rsync://rpki.ripe.net/repository/DEFAULT/lbgfTkXXEdoMFI3Cuq0VBN27Qns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:45:33:1c:a1:6c:4f:79:21:e3:17:b9:d0:cb:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b81f4e45d711da0c148dc2baad1504ddbb427b
Validity
Not Before: Nov 4 06:00:56 2025 GMT
Not After : Nov 5 06:00:56 2025 GMT
Subject: CN=993d725e6e54e2d4852d97d47c6542098d2d164c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f3:e4:68:b1:9e:ae:a1:5b:fb:06:ef:4b:41:
5f:a6:51:91:8c:b1:81:8c:dd:ef:2c:e6:ee:18:6f:
99:76:4f:e5:13:73:01:f3:03:27:0b:82:73:52:30:
84:7b:a5:2c:3a:aa:89:43:99:dd:55:b7:7e:94:0b:
c9:49:07:22:54:3e:fa:06:84:81:2d:1e:34:f6:6f:
b7:17:6a:03:d5:ad:5e:eb:3f:9a:37:41:07:c7:36:
3c:73:3e:d9:2a:6f:55:03:4c:45:bf:9c:b7:26:8f:
1b:f3:7a:28:c6:79:b8:e5:84:50:83:4b:b6:af:87:
93:15:08:b2:fc:ec:7b:6c:d2:c7:04:c6:22:93:51:
2a:56:85:c2:3d:7b:6f:91:69:fe:24:c9:ee:fc:aa:
29:68:2d:45:46:bb:31:89:0f:42:db:5d:eb:5c:72:
65:a1:ea:54:5f:d3:3c:03:92:74:25:43:3c:a2:26:
4f:db:93:f9:d4:c9:07:2e:54:aa:e9:f9:3c:8e:20:
05:3d:f5:21:6f:71:5a:b6:98:0c:56:b6:e8:d3:66:
15:29:98:f6:c6:8a:04:86:c3:a6:08:fe:c4:69:0e:
46:d0:48:91:ab:8e:38:2c:27:3b:55:49:0c:77:10:
a2:93:a3:92:38:f0:81:4e:ff:d5:2e:50:6c:66:77:
ac:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:3D:72:5E:6E:54:E2:D4:85:2D:97:D4:7C:65:42:09:8D:2D:16:4C
X509v3 Authority Key Identifier:
keyid:95:B8:1F:4E:45:D7:11:DA:0C:14:8D:C2:BA:AD:15:04:DD:BB:42:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbgfTkXXEdoMFI3Cuq0VBN27Qns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0aab78-66de-444c-a843-0b3cb4c6b79a/1/lbgfTkXXEdoMFI3Cuq0VBN27Qns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0aab78-66de-444c-a843-0b3cb4c6b79a/1/lbgfTkXXEdoMFI3Cuq0VBN27Qns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:a3:3b:e6:7e:98:3e:34:37:aa:2b:38:71:a1:78:71:09:fd:
f2:ba:a3:5b:9b:76:c4:17:14:74:09:6a:88:33:5e:e6:21:fc:
06:5c:ad:39:c9:f5:16:22:60:e4:2e:9b:98:5f:ac:42:6f:5c:
80:22:cd:3a:55:69:5d:5b:99:e1:8f:64:20:61:29:e9:5d:6e:
4b:1e:bd:e9:6a:56:64:85:b1:c0:f1:02:d9:38:ab:4b:51:e0:
76:07:65:ec:58:cf:aa:09:5c:47:6e:30:03:4d:74:b5:99:f3:
97:ff:dd:a2:5c:8a:85:c6:5a:59:30:50:34:fb:1c:79:ea:af:
4a:02:f1:9b:20:76:82:9e:94:42:39:9a:59:90:22:ab:3a:2b:
b6:58:f3:a1:92:e7:aa:98:a1:19:9d:2d:f1:ed:4c:41:d6:bb:
87:1f:a0:7e:c1:a5:68:6b:0f:47:1f:3e:57:41:d4:63:ff:40:
03:9a:47:c9:49:d9:d6:21:1d:65:c5:f3:7d:df:32:d9:c1:88:
ee:b9:49:d8:7e:32:8a:4a:b6:6a:17:54:a9:0e:70:c9:b5:83:
92:8b:ac:15:13:11:0a:1e:1b:c8:3d:bc:07:97:dc:29:be:a9:
46:f6:57:e2:cd:e5:bb:7a:1b:06:2a:f1:fd:54:60:08:20:87:
3a:42:66:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNdEUzHKFsT3kh4xe50MtYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1YjgxZjRlNDVkNzExZGEwYzE0OGRjMmJhYWQxNTA0ZGRi
YjQyN2IwHhcNMjUxMTA0MDYwMDU2WhcNMjUxMTA1MDYwMDU2WjAzMTEwLwYDVQQD
Eyg5OTNkNzI1ZTZlNTRlMmQ0ODUyZDk3ZDQ3YzY1NDIwOThkMmQxNjRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPPkaLGerqFb+wbvS0FfplGRjLGB
jN3vLObuGG+Zdk/lE3MB8wMnC4JzUjCEe6UsOqqJQ5ndVbd+lAvJSQciVD76BoSB
LR409m+3F2oD1a1e6z+aN0EHxzY8cz7ZKm9VA0xFv5y3Jo8b83ooxnm45YRQg0u2
r4eTFQiy/Ox7bNLHBMYik1EqVoXCPXtvkWn+JMnu/KopaC1FRrsxiQ9C213rXHJl
oepUX9M8A5J0JUM8oiZP25P51MkHLlSq6fk8jiAFPfUhb3FatpgMVrbo02YVKZj2
xooEhsOmCP7EaQ5G0EiRq444LCc7VUkMdxCik6OSOPCBTv/VLlBsZnes0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJk9cl5uVOLUhS2X1HxlQgmNLRZMMB8GA1UdIwQY
MBaAFJW4H05F1xHaDBSNwrqtFQTdu0J7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGJnZlRrWFhFZG9NRkkzQ3VxMFZCTjI3UW5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8wYWFiNzgtNjZkZS00NDRjLWE4NDMt
MGIzY2I0YzZiNzlhLzEvbGJnZlRrWFhFZG9NRkkzQ3VxMFZCTjI3UW5zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS8wYWFiNzgtNjZkZS00NDRjLWE4NDMtMGIzY2I0YzZiNzlh
LzEvbGJnZlRrWFhFZG9NRkkzQ3VxMFZCTjI3UW5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv6M75n6Y
PjQ3qis4caF4cQn98rqjW5t2xBcUdAlqiDNe5iH8BlytOcn1FiJg5C6bmF+sQm9c
gCLNOlVpXVuZ4Y9kIGEp6V1uSx696WpWZIWxwPEC2TirS1Hgdgdl7FjPqglcR24w
A010tZnzl//dolyKhcZaWTBQNPsceeqvSgLxmyB2gp6UQjmaWZAiqzortljzoZLn
qpihGZ0t8e1MQda7hx+gfsGlaGsPRx8+V0HUY/9AA5pHyUnZ1iEdZcXzfd8y2cGI
7rlJ2H4yikq2ahdUqQ5wybWDkousFRMRCh4byD28B5fcKb6pRvZX4s3lu3obBirx
/VRgCCCHOkJmCQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:47 2025 by rpki-client