Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/c58c8c-5c6e-44e0-82af-e96de3112dea/1/LBMiAg7k5Zy1zT3nFlDGKv1MAic.mft
File: LBMiAg7k5Zy1zT3nFlDGKv1MAic.mft (raw, json)
Hash identifier: Yyyni4tbpZW/6wp+T61KsalkkYNuR8goeufDEp3+eEk=
Subject key identifier: 2A:D7:E5:83:73:7F:65:DA:46:AC:D1:C1:14:83:06:76:D6:67:5E:84
Authority key identifier: 2C:13:22:02:0E:E4:E5:9C:B5:CD:3D:E7:16:50:C6:2A:FD:4C:02:27
Certificate issuer: /CN=2c1322020ee4e59cb5cd3de71650c62afd4c0227
Certificate serial: 0199180909C92F63E6FB2C032503813C9B52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LBMiAg7k5Zy1zT3nFlDGKv1MAic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/c58c8c-5c6e-44e0-82af-e96de3112dea/1/LBMiAg7k5Zy1zT3nFlDGKv1MAic.mft
Manifest number: 0981
Signing time: Fri 05 Sep 2025 04:01:09 +0000
Manifest this update: Fri 05 Sep 2025 04:01:09 +0000
Manifest next update: Sat 06 Sep 2025 04:01:09 +0000
Files and hashes: 1: LBMiAg7k5Zy1zT3nFlDGKv1MAic.crl (hash: LTEKSxywSb3aktjfufrG8hGGWPlrCcZh3gxVnacQLIk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/c58c8c-5c6e-44e0-82af-e96de3112dea/1/LBMiAg7k5Zy1zT3nFlDGKv1MAic.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/c58c8c-5c6e-44e0-82af-e96de3112dea/1/LBMiAg7k5Zy1zT3nFlDGKv1MAic.mft
rsync://rpki.ripe.net/repository/DEFAULT/LBMiAg7k5Zy1zT3nFlDGKv1MAic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:18:09:09:c9:2f:63:e6:fb:2c:03:25:03:81:3c:9b:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c1322020ee4e59cb5cd3de71650c62afd4c0227
Validity
Not Before: Sep 5 04:01:09 2025 GMT
Not After : Sep 6 04:01:09 2025 GMT
Subject: CN=2ad7e583737f65da46acd1c114830676d6675e84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:49:3d:c5:5a:2e:75:52:ba:65:27:64:b8:db:
b9:58:dc:35:43:4a:ef:88:c5:60:8c:d4:b4:51:bb:
54:bc:6a:0b:ac:9c:0a:55:9f:06:29:4b:35:a4:77:
c5:bd:41:f6:51:74:67:d0:a1:08:c8:6d:e4:84:58:
19:0c:1b:dc:8b:8e:20:52:1c:1b:01:0f:9f:b5:8c:
52:30:84:12:41:5d:d4:15:97:54:02:cd:91:0d:52:
e4:e8:15:65:f5:b5:1a:6a:2b:c4:d1:8f:bb:bc:f5:
cd:7e:2a:f3:19:0d:a7:2c:41:fe:60:2e:0f:cf:aa:
f6:d4:6b:cf:d2:70:05:0c:2e:93:72:f7:84:e6:50:
ef:c7:c0:dd:9f:8c:f7:f6:83:41:f3:ce:46:d1:e4:
f9:1b:ae:5d:ff:70:c0:c8:da:de:ec:34:76:d3:c4:
af:75:39:14:cd:9b:6a:53:8a:0d:12:de:00:c5:94:
88:5f:90:44:71:45:4a:ea:93:36:0a:c8:d6:94:24:
cc:ef:30:b2:80:e1:4c:57:bf:c6:7c:ab:fd:32:17:
4b:03:3c:45:e6:49:09:6e:62:f3:68:97:6a:bf:f5:
8a:14:1c:c6:7e:ce:70:6e:23:3b:32:74:57:09:1c:
c5:63:c7:37:40:3b:29:ab:d2:89:9d:ba:a2:b6:0e:
28:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:D7:E5:83:73:7F:65:DA:46:AC:D1:C1:14:83:06:76:D6:67:5E:84
X509v3 Authority Key Identifier:
keyid:2C:13:22:02:0E:E4:E5:9C:B5:CD:3D:E7:16:50:C6:2A:FD:4C:02:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LBMiAg7k5Zy1zT3nFlDGKv1MAic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c58c8c-5c6e-44e0-82af-e96de3112dea/1/LBMiAg7k5Zy1zT3nFlDGKv1MAic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c58c8c-5c6e-44e0-82af-e96de3112dea/1/LBMiAg7k5Zy1zT3nFlDGKv1MAic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:43:f6:a0:eb:e9:a8:b0:34:2a:a2:1d:54:02:74:22:19:48:
59:0b:30:00:c1:39:ef:6e:af:46:bf:9e:15:71:28:43:d4:f0:
b5:2a:02:fa:39:89:42:30:07:af:45:c4:6f:b4:94:60:24:af:
c3:d1:ed:49:0d:5b:d8:6b:23:56:7a:0c:48:34:99:a8:9a:24:
1a:ed:87:b2:46:51:ab:98:43:9e:dc:2f:d3:bd:04:a0:78:32:
ef:c9:04:d0:86:0b:22:12:5a:40:ca:fc:71:31:93:7e:66:8d:
82:47:25:a2:26:dd:14:1a:2b:61:67:57:be:f1:76:f1:13:e6:
3e:e8:27:de:e4:02:68:76:96:f1:49:4c:ca:44:d5:c1:74:3b:
f5:39:b2:0f:f7:a4:df:cd:fa:42:fa:eb:18:52:0d:db:18:14:
51:62:27:c6:44:47:cd:ec:73:49:52:3c:f8:70:60:40:43:50:
54:24:c9:c4:fd:8f:ac:29:97:a2:f1:84:e6:6c:3f:f9:65:c7:
24:5d:57:e7:f8:76:be:28:2b:d0:29:58:a1:26:b8:6c:56:8f:
f1:b6:67:71:19:37:3c:b1:7d:23:34:6f:64:fc:d5:80:2b:ae:
cc:49:0d:39:a6:e3:a6:cd:7c:c5:75:6b:32:2c:90:ef:d1:e1:
ec:8c:53:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkYCQnJL2Pm+ywDJQOBPJtSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjMTMyMjAyMGVlNGU1OWNiNWNkM2RlNzE2NTBjNjJhZmQ0
YzAyMjcwHhcNMjUwOTA1MDQwMTA5WhcNMjUwOTA2MDQwMTA5WjAzMTEwLwYDVQQD
EygyYWQ3ZTU4MzczN2Y2NWRhNDZhY2QxYzExNDgzMDY3NmQ2Njc1ZTg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukk9xVoudVK6ZSdkuNu5WNw1Q0rv
iMVgjNS0UbtUvGoLrJwKVZ8GKUs1pHfFvUH2UXRn0KEIyG3khFgZDBvci44gUhwb
AQ+ftYxSMIQSQV3UFZdUAs2RDVLk6BVl9bUaaivE0Y+7vPXNfirzGQ2nLEH+YC4P
z6r21GvP0nAFDC6TcveE5lDvx8Ddn4z39oNB885G0eT5G65d/3DAyNre7DR208Sv
dTkUzZtqU4oNEt4AxZSIX5BEcUVK6pM2CsjWlCTM7zCygOFMV7/GfKv9MhdLAzxF
5kkJbmLzaJdqv/WKFBzGfs5wbiM7MnRXCRzFY8c3QDspq9KJnbqitg4o/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCrX5YNzf2XaRqzRwRSDBnbWZ16EMB8GA1UdIwQY
MBaAFCwTIgIO5OWctc095xZQxir9TAInMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTEJNaUFnN2s1WnkxelQzbkZsREdLdjFNQWljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9jNThjOGMtNWM2ZS00NGUwLTgyYWYt
ZTk2ZGUzMTEyZGVhLzEvTEJNaUFnN2s1WnkxelQzbkZsREdLdjFNQWljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS9jNThjOGMtNWM2ZS00NGUwLTgyYWYtZTk2ZGUzMTEyZGVh
LzEvTEJNaUFnN2s1WnkxelQzbkZsREdLdjFNQWljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm0P2oOvp
qLA0KqIdVAJ0IhlIWQswAME5726vRr+eFXEoQ9TwtSoC+jmJQjAHr0XEb7SUYCSv
w9HtSQ1b2GsjVnoMSDSZqJokGu2HskZRq5hDntwv070EoHgy78kE0IYLIhJaQMr8
cTGTfmaNgkcloibdFBorYWdXvvF28RPmPugn3uQCaHaW8UlMykTVwXQ79TmyD/ek
3836QvrrGFIN2xgUUWInxkRHzexzSVI8+HBgQENQVCTJxP2PrCmXovGE5mw/+WXH
JF1X5/h2vigr0ClYoSa4bFaP8bZncRk3PLF9IzRvZPzVgCuuzEkNOabjps18xXVr
MiyQ79Hh7IxTFg==
-----END CERTIFICATE-----
Generated at Fri Sep 5 09:50:40 2025 by rpki-client