Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/2a226d-c72c-4c12-bbba-a4b55a71c228/1/LbYW860DY-cmnMLrWNG8CGzJdfI.mft
File: LbYW860DY-cmnMLrWNG8CGzJdfI.mft (raw, json)
Hash identifier: 35rqnyegokQxnTQwIpuEoUuzMIlSMH+/N4nfABwoeS8=
Subject key identifier: 7F:51:59:0F:74:BD:6C:5F:E5:34:B7:99:08:4C:CD:96:7C:DF:E0:70
Authority key identifier: 2D:B6:16:F3:AD:03:63:E7:26:9C:C2:EB:58:D1:BC:08:6C:C9:75:F2
Certificate issuer: /CN=2db616f3ad0363e7269cc2eb58d1bc086cc975f2
Certificate serial: 019A71B7FE09FE7DDB21A7442FEE622C9570
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LbYW860DY-cmnMLrWNG8CGzJdfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/2a226d-c72c-4c12-bbba-a4b55a71c228/1/LbYW860DY-cmnMLrWNG8CGzJdfI.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 07:01:14 +0000
Manifest this update: Tue 11 Nov 2025 07:01:14 +0000
Manifest next update: Wed 12 Nov 2025 07:01:14 +0000
Files and hashes: 1: LbYW860DY-cmnMLrWNG8CGzJdfI.crl (hash: 5szbDSlN2xMArD2MPruMbX3Tf361LtuLEriC+LJfTHI=)
2: TtiFva0B7nBQnunu1qXuQVvAjRk.roa (hash: BCLtQWteuqq7HD+J7kkS4GO2lBhow7GRQ0k6IwJXdnM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/2a226d-c72c-4c12-bbba-a4b55a71c228/1/LbYW860DY-cmnMLrWNG8CGzJdfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/2a226d-c72c-4c12-bbba-a4b55a71c228/1/LbYW860DY-cmnMLrWNG8CGzJdfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/LbYW860DY-cmnMLrWNG8CGzJdfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:fe:09:fe:7d:db:21:a7:44:2f:ee:62:2c:95:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2db616f3ad0363e7269cc2eb58d1bc086cc975f2
Validity
Not Before: Nov 11 07:01:14 2025 GMT
Not After : Nov 12 07:01:14 2025 GMT
Subject: CN=7f51590f74bd6c5fe534b799084ccd967cdfe070
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3d:73:8e:40:1d:e6:69:9c:3e:62:b3:e8:b6:
68:aa:1c:4a:23:b6:e3:44:0c:a2:ce:14:88:ac:e6:
eb:58:a1:90:76:f2:ab:c3:c3:7e:3b:a2:5f:aa:6f:
26:3a:59:6b:57:5f:b7:b3:4d:fc:2d:50:91:bb:f8:
83:29:25:6d:ab:1e:45:d2:fb:3b:95:1a:4c:24:36:
56:62:b7:4a:39:8e:69:f7:c7:c1:0e:34:f2:34:46:
c7:48:d6:d9:ed:00:2a:71:1b:7d:b4:ca:5d:1d:19:
fa:f1:bd:37:47:f2:dd:f7:31:5f:a2:79:0c:92:88:
87:2a:ed:78:6d:82:44:e6:33:3b:6a:87:4a:0e:2c:
f6:8d:05:c1:86:ce:7f:0a:85:17:27:24:a0:c2:58:
10:2e:63:b0:10:82:2f:a1:27:63:ae:2a:7e:f4:96:
c1:45:a3:52:d1:cf:f2:74:ec:cb:e9:ef:7e:b1:dd:
4a:3c:06:da:7b:cd:8d:f8:d7:65:67:f4:66:5e:2b:
a3:f2:78:60:8e:7a:6e:e7:df:30:61:2c:59:e2:3a:
af:de:bd:14:94:d9:b8:6e:d4:36:b6:6a:81:58:12:
39:98:a2:06:53:1c:9a:f9:cd:53:19:74:77:60:b3:
de:aa:8d:dd:7c:6a:32:6b:cd:c5:80:33:98:cf:a5:
cb:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:51:59:0F:74:BD:6C:5F:E5:34:B7:99:08:4C:CD:96:7C:DF:E0:70
X509v3 Authority Key Identifier:
keyid:2D:B6:16:F3:AD:03:63:E7:26:9C:C2:EB:58:D1:BC:08:6C:C9:75:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LbYW860DY-cmnMLrWNG8CGzJdfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/2a226d-c72c-4c12-bbba-a4b55a71c228/1/LbYW860DY-cmnMLrWNG8CGzJdfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/2a226d-c72c-4c12-bbba-a4b55a71c228/1/LbYW860DY-cmnMLrWNG8CGzJdfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:d6:f2:1a:14:08:3d:bf:76:7a:20:4e:a9:8c:22:ab:9e:fd:
7f:1f:ed:d2:fd:b4:17:4d:5c:ee:dc:7c:39:5f:2e:0b:8a:81:
60:08:01:f5:f5:5b:0e:54:ad:c5:dd:6a:c2:f1:36:19:e2:e7:
7c:c9:d7:df:8b:7e:60:68:1f:ad:74:e0:6d:07:1c:e3:7b:11:
5c:6f:98:fe:46:3b:b2:2a:28:57:e5:a4:9e:61:ca:7d:68:58:
07:e9:68:81:50:f0:8d:f0:3a:cf:a0:2f:54:51:a6:9d:ee:f0:
7f:39:6e:03:18:14:25:fa:69:4e:cd:db:e5:42:7f:50:aa:ef:
4d:fc:f5:ec:74:82:0f:b0:09:73:66:83:95:e3:e1:a8:42:05:
a5:c2:14:8a:1a:27:8e:fe:26:88:08:fb:55:62:1d:90:12:09:
ed:4e:af:c9:b6:ae:97:07:a1:df:01:27:bc:e5:cc:2a:75:83:
fa:f9:73:94:42:28:62:63:9e:7e:b7:17:7d:83:de:32:4d:0f:
3b:d5:e7:55:d8:7b:2b:0b:90:ae:2d:9b:61:b4:ed:50:a4:e4:
ec:44:4f:df:4d:ef:ef:fc:0c:26:73:3d:2a:88:ea:aa:16:5c:
3f:d0:20:e4:c4:e1:56:73:bd:8c:38:1f:31:ca:16:3a:90:20:
f7:66:d6:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxt/4J/n3bIadEL+5iLJVwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkYjYxNmYzYWQwMzYzZTcyNjljYzJlYjU4ZDFiYzA4NmNj
OTc1ZjIwHhcNMjUxMTExMDcwMTE0WhcNMjUxMTEyMDcwMTE0WjAzMTEwLwYDVQQD
Eyg3ZjUxNTkwZjc0YmQ2YzVmZTUzNGI3OTkwODRjY2Q5NjdjZGZlMDcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoj1zjkAd5mmcPmKz6LZoqhxKI7bj
RAyizhSIrObrWKGQdvKrw8N+O6Jfqm8mOllrV1+3s038LVCRu/iDKSVtqx5F0vs7
lRpMJDZWYrdKOY5p98fBDjTyNEbHSNbZ7QAqcRt9tMpdHRn68b03R/Ld9zFfonkM
koiHKu14bYJE5jM7aodKDiz2jQXBhs5/CoUXJySgwlgQLmOwEIIvoSdjrip+9JbB
RaNS0c/ydOzL6e9+sd1KPAbae82N+NdlZ/RmXiuj8nhgjnpu598wYSxZ4jqv3r0U
lNm4btQ2tmqBWBI5mKIGUxya+c1TGXR3YLPeqo3dfGoya83FgDOYz6XLawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH9RWQ90vWxf5TS3mQhMzZZ83+BwMB8GA1UdIwQY
MBaAFC22FvOtA2PnJpzC61jRvAhsyXXyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGJZVzg2MERZLWNtbk1McldORzhDR3pKZGZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi8yYTIyNmQtYzcyYy00YzEyLWJiYmEt
YTRiNTVhNzFjMjI4LzEvTGJZVzg2MERZLWNtbk1McldORzhDR3pKZGZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi8yYTIyNmQtYzcyYy00YzEyLWJiYmEtYTRiNTVhNzFjMjI4
LzEvTGJZVzg2MERZLWNtbk1McldORzhDR3pKZGZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlNbyGhQI
Pb92eiBOqYwiq579fx/t0v20F01c7tx8OV8uC4qBYAgB9fVbDlStxd1qwvE2GeLn
fMnX34t+YGgfrXTgbQcc43sRXG+Y/kY7siooV+WknmHKfWhYB+logVDwjfA6z6Av
VFGmne7wfzluAxgUJfppTs3b5UJ/UKrvTfz17HSCD7AJc2aDlePhqEIFpcIUihon
jv4miAj7VWIdkBIJ7U6vybaulweh3wEnvOXMKnWD+vlzlEIoYmOefrcXfYPeMk0P
O9XnVdh7KwuQri2bYbTtUKTk7ERP303v7/wMJnM9KojqqhZcP9Ag5MThVnO9jDgf
McoWOpAg92bWLw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:04:46 2025 by rpki-client