Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/1df8e1-6e80-443c-b6e8-d9f905fdc89a/1/LBGlP232MAtJEs4T9vqbEA_OJIg.mft
File: LBGlP232MAtJEs4T9vqbEA_OJIg.mft (raw, json)
Hash identifier: UXJmdsckJAdhwljzXNKJ25ll7IXEGLvSo/01b5B2B1w=
Subject key identifier: 19:D4:7B:25:A5:81:7C:DD:D2:10:B4:3E:47:39:BE:74:C6:59:D0:A9
Authority key identifier: 2C:11:A5:3F:6D:F6:30:0B:49:12:CE:13:F6:FA:9B:10:0F:CE:24:88
Certificate issuer: /CN=2c11a53f6df6300b4912ce13f6fa9b100fce2488
Certificate serial: 019A288BA35624CAE0EA94AB2C914F96DB20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LBGlP232MAtJEs4T9vqbEA_OJIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/1df8e1-6e80-443c-b6e8-d9f905fdc89a/1/LBGlP232MAtJEs4T9vqbEA_OJIg.mft
Manifest number: 1407
Signing time: Tue 28 Oct 2025 02:00:31 +0000
Manifest this update: Tue 28 Oct 2025 02:00:31 +0000
Manifest next update: Wed 29 Oct 2025 02:00:31 +0000
Files and hashes: 1: 54SDy2hBAf60rRk7Cn2SENdLnF0.roa (hash: W4T7JvYJiD5Kubx3/xyHkSB0zOGjx+2ez3Dgx71rGrg=)
2: LBGlP232MAtJEs4T9vqbEA_OJIg.crl (hash: P+blfAFIpo9j5nIThWoqtqoQEt4gAxsQtSRvHe4Xtf0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/1df8e1-6e80-443c-b6e8-d9f905fdc89a/1/LBGlP232MAtJEs4T9vqbEA_OJIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/1df8e1-6e80-443c-b6e8-d9f905fdc89a/1/LBGlP232MAtJEs4T9vqbEA_OJIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LBGlP232MAtJEs4T9vqbEA_OJIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 02:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:28:8b:a3:56:24:ca:e0:ea:94:ab:2c:91:4f:96:db:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c11a53f6df6300b4912ce13f6fa9b100fce2488
Validity
Not Before: Oct 28 02:00:31 2025 GMT
Not After : Oct 29 02:00:31 2025 GMT
Subject: CN=19d47b25a5817cddd210b43e4739be74c659d0a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:f8:91:64:19:85:9f:9c:67:aa:5d:c6:08:aa:
49:3b:a5:f2:b8:b4:46:4f:5c:c2:36:36:bb:36:8c:
c2:95:dd:5a:c2:fe:fe:06:bc:2f:fd:e3:f9:02:9b:
50:1a:75:8f:c5:9c:46:c6:89:aa:5a:3f:06:0c:c5:
a1:8e:d8:ef:76:14:18:63:36:aa:4c:52:eb:e5:7a:
4b:61:5c:90:f7:48:4a:2a:ac:71:79:b3:70:d3:5f:
23:99:0e:b6:70:1b:c2:7d:5b:07:71:d8:8a:70:c4:
d1:e7:81:0c:9d:80:1b:b7:30:0c:5f:71:42:34:9e:
98:90:f2:de:d7:50:c2:3b:20:56:ad:64:60:6d:53:
a2:f8:f9:74:dc:79:98:1c:2f:d3:8e:62:56:eb:88:
b2:0e:84:9a:66:e7:c4:66:5b:06:11:f0:9e:a7:3e:
d3:f1:20:3b:3c:d8:6a:1f:93:9e:a5:a5:dd:40:f5:
6c:08:65:08:67:ff:fa:56:59:f6:4f:32:0e:a8:c6:
ad:9e:6f:4c:13:d2:32:19:f5:26:73:c1:ae:07:61:
38:df:a7:d6:6f:7c:d8:b4:f7:80:52:9b:0d:7e:8d:
25:21:d6:0a:29:e1:66:de:60:1d:20:9f:06:ca:5a:
58:9a:8a:83:22:28:7c:d7:4d:5d:bd:fb:98:f3:54:
29:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:D4:7B:25:A5:81:7C:DD:D2:10:B4:3E:47:39:BE:74:C6:59:D0:A9
X509v3 Authority Key Identifier:
keyid:2C:11:A5:3F:6D:F6:30:0B:49:12:CE:13:F6:FA:9B:10:0F:CE:24:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LBGlP232MAtJEs4T9vqbEA_OJIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1df8e1-6e80-443c-b6e8-d9f905fdc89a/1/LBGlP232MAtJEs4T9vqbEA_OJIg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1df8e1-6e80-443c-b6e8-d9f905fdc89a/1/LBGlP232MAtJEs4T9vqbEA_OJIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:cf:d2:0e:55:25:1a:fc:ff:3d:91:cd:c1:00:b6:41:ea:8f:
11:7a:82:06:28:59:af:f9:a7:03:0c:b6:09:9d:6a:82:81:ac:
05:c8:6f:bc:33:09:a9:2b:45:a1:ce:42:e3:ac:a0:d5:48:f1:
fb:19:9d:c2:70:7b:b3:d8:b5:c8:46:22:a2:43:34:7e:97:ff:
1f:32:c2:d6:b2:83:71:a0:ce:2e:b4:56:1f:85:f9:4f:9c:21:
1d:cc:02:6f:1a:6c:ea:f3:3b:ad:e9:b5:b3:07:66:6d:6c:e0:
48:9e:a7:3e:4e:2a:2d:5a:07:b2:fc:48:cf:84:a0:ec:6e:8f:
73:c5:ec:bb:70:84:d0:75:4d:46:3c:3b:1b:ed:4e:a3:9f:ec:
85:30:ac:07:35:b5:69:04:e4:a5:fd:b8:fe:1c:a4:d8:cf:2c:
27:c3:0a:d9:6e:8b:2a:2c:b1:7a:4d:6d:86:fe:a8:34:55:bf:
33:f1:d8:1a:98:e4:a9:3b:ac:63:21:5d:09:58:16:fe:8e:33:
2b:12:a1:ac:5c:ca:29:f0:77:61:66:02:63:60:54:b0:4b:1d:
f9:2f:98:cf:7d:02:47:eb:9d:3c:f1:78:e1:1c:5e:2f:99:ff:
85:05:04:75:80:cb:60:14:07:98:11:e1:78:bf:73:78:5a:73:
c0:56:17:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZooi6NWJMrg6pSrLJFPltsgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjMTFhNTNmNmRmNjMwMGI0OTEyY2UxM2Y2ZmE5YjEwMGZj
ZTI0ODgwHhcNMjUxMDI4MDIwMDMxWhcNMjUxMDI5MDIwMDMxWjAzMTEwLwYDVQQD
EygxOWQ0N2IyNWE1ODE3Y2RkZDIxMGI0M2U0NzM5YmU3NGM2NTlkMGE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjviRZBmFn5xnql3GCKpJO6XyuLRG
T1zCNja7NozCld1awv7+Brwv/eP5AptQGnWPxZxGxomqWj8GDMWhjtjvdhQYYzaq
TFLr5XpLYVyQ90hKKqxxebNw018jmQ62cBvCfVsHcdiKcMTR54EMnYAbtzAMX3FC
NJ6YkPLe11DCOyBWrWRgbVOi+Pl03HmYHC/TjmJW64iyDoSaZufEZlsGEfCepz7T
8SA7PNhqH5OepaXdQPVsCGUIZ//6Vln2TzIOqMatnm9ME9IyGfUmc8GuB2E436fW
b3zYtPeAUpsNfo0lIdYKKeFm3mAdIJ8GylpYmoqDIih8101dvfuY81QpBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBnUeyWlgXzd0hC0Pkc5vnTGWdCpMB8GA1UdIwQY
MBaAFCwRpT9t9jALSRLOE/b6mxAPziSIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTEJHbFAyMzJNQXRKRXM0VDl2cWJFQV9PSklnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni8xZGY4ZTEtNmU4MC00NDNjLWI2ZTgt
ZDlmOTA1ZmRjODlhLzEvTEJHbFAyMzJNQXRKRXM0VDl2cWJFQV9PSklnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni8xZGY4ZTEtNmU4MC00NDNjLWI2ZTgtZDlmOTA1ZmRjODlh
LzEvTEJHbFAyMzJNQXRKRXM0VDl2cWJFQV9PSklnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZM/SDlUl
Gvz/PZHNwQC2QeqPEXqCBihZr/mnAwy2CZ1qgoGsBchvvDMJqStFoc5C46yg1Ujx
+xmdwnB7s9i1yEYiokM0fpf/HzLC1rKDcaDOLrRWH4X5T5whHcwCbxps6vM7rem1
swdmbWzgSJ6nPk4qLVoHsvxIz4Sg7G6Pc8Xsu3CE0HVNRjw7G+1Oo5/shTCsBzW1
aQTkpf24/hyk2M8sJ8MK2W6LKiyxek1thv6oNFW/M/HYGpjkqTusYyFdCVgW/o4z
KxKhrFzKKfB3YWYCY2BUsEsd+S+Yz30CR+udPPF44RxeL5n/hQUEdYDLYBQHmBHh
eL9zeFpzwFYXug==
-----END CERTIFICATE-----
Generated at Tue Oct 28 11:04:03 2025 by rpki-client