Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/ecbffa-1166-4d1e-9f55-11575db64fbe/1/LBKCZbgJkXiNhuImLpM5A4tO-oI.mft
File: LBKCZbgJkXiNhuImLpM5A4tO-oI.mft (raw, json)
Hash identifier: +SIZLESY1VnQRgiDhJM8pxi97dRMHx43UjKE9b1LkZ4=
Subject key identifier: CE:A7:E9:A6:AA:98:A8:C6:2A:9F:1C:C1:8E:CB:1D:06:B7:5A:E2:7B
Authority key identifier: 2C:12:82:65:B8:09:91:78:8D:86:E2:26:2E:93:39:03:8B:4E:FA:82
Certificate issuer: /CN=2c128265b80991788d86e2262e9339038b4efa82
Certificate serial: 019A714999A681982FB42AEA77CC30DD7E33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LBKCZbgJkXiNhuImLpM5A4tO-oI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/ecbffa-1166-4d1e-9f55-11575db64fbe/1/LBKCZbgJkXiNhuImLpM5A4tO-oI.mft
Manifest number: 02AE
Signing time: Tue 11 Nov 2025 05:00:40 +0000
Manifest this update: Tue 11 Nov 2025 05:00:40 +0000
Manifest next update: Wed 12 Nov 2025 05:00:40 +0000
Files and hashes: 1: AUJAohDb7gvWp2PAn2xH3z3Zx8I.roa (hash: Px2ndw4EQ+qkKAfeVMR+LtAp8KsmOxSR4KCS0rfVjWc=)
2: LBKCZbgJkXiNhuImLpM5A4tO-oI.crl (hash: 3vRSCuGsij8MhIB6VWMxn0zucMXjBjNCSOcBJB2w0Ds=)
3: LTEzdR9zUquR1ggUmA4_QHu2p50.roa (hash: uNuzvFRDaCwMPWv1CbBVSxROhTe6dbQ9XSUinppVNcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/ecbffa-1166-4d1e-9f55-11575db64fbe/1/LBKCZbgJkXiNhuImLpM5A4tO-oI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/ecbffa-1166-4d1e-9f55-11575db64fbe/1/LBKCZbgJkXiNhuImLpM5A4tO-oI.mft
rsync://rpki.ripe.net/repository/DEFAULT/LBKCZbgJkXiNhuImLpM5A4tO-oI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:99:a6:81:98:2f:b4:2a:ea:77:cc:30:dd:7e:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c128265b80991788d86e2262e9339038b4efa82
Validity
Not Before: Nov 11 05:00:40 2025 GMT
Not After : Nov 12 05:00:40 2025 GMT
Subject: CN=cea7e9a6aa98a8c62a9f1cc18ecb1d06b75ae27b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:78:13:8d:71:24:94:ff:e0:8b:f7:6c:27:11:
c4:c8:d0:3d:3b:9c:66:d1:63:3b:7a:a0:45:dd:07:
cd:56:ae:7f:5f:c2:ff:9e:64:6a:34:88:6f:43:6a:
6a:41:d4:64:fd:27:6a:5f:0c:3f:c4:eb:30:29:77:
1d:a8:49:df:8d:17:c2:ba:71:8d:97:22:ec:23:b4:
34:bc:ba:b3:70:8f:3f:5c:b9:9a:27:33:c9:7e:3f:
ae:e0:a1:03:77:6f:a5:1c:57:a5:3c:f0:7a:e2:9f:
2a:93:91:b6:1a:84:31:05:7b:f8:85:f6:27:a5:58:
10:d0:d1:b2:a9:a5:6d:9b:c8:51:1c:b2:2b:dd:10:
08:35:f8:78:1e:f5:37:2c:a9:b2:1f:ef:52:b4:b3:
d2:46:c0:59:b5:bd:ee:20:ad:94:fb:aa:0f:f7:d1:
93:63:c9:66:5d:a1:d6:69:dc:cd:d6:21:75:b7:7b:
46:33:c0:4a:cf:8e:84:9f:4a:4a:11:72:fd:c4:27:
c0:09:e8:f7:13:e7:c8:36:29:44:c1:fb:fa:19:65:
cb:e7:a7:8c:a4:9f:3e:96:d8:d0:87:cf:24:83:c8:
d1:80:a3:32:30:ff:45:22:c0:4c:64:92:24:cb:29:
64:29:66:f6:4d:40:19:ca:ac:24:72:37:4f:22:41:
2f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:A7:E9:A6:AA:98:A8:C6:2A:9F:1C:C1:8E:CB:1D:06:B7:5A:E2:7B
X509v3 Authority Key Identifier:
keyid:2C:12:82:65:B8:09:91:78:8D:86:E2:26:2E:93:39:03:8B:4E:FA:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LBKCZbgJkXiNhuImLpM5A4tO-oI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ecbffa-1166-4d1e-9f55-11575db64fbe/1/LBKCZbgJkXiNhuImLpM5A4tO-oI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ecbffa-1166-4d1e-9f55-11575db64fbe/1/LBKCZbgJkXiNhuImLpM5A4tO-oI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:6d:4e:50:ed:94:ae:5d:48:f3:f7:f2:3e:7a:30:97:c2:c3:
e2:c4:49:5b:9e:84:4f:f3:ff:ed:f6:15:fb:20:05:00:38:34:
11:72:ac:58:d8:53:fc:ee:c7:76:d5:ad:3c:f0:2b:41:29:ff:
de:63:2b:2a:28:8a:51:18:c3:1d:95:bf:4a:f7:4b:68:85:93:
d3:49:c3:89:21:1f:54:43:e8:fd:bc:b9:57:82:32:14:00:0d:
ee:40:5a:09:5d:20:a9:3f:f1:5d:e1:02:9f:48:2f:01:81:56:
1c:d6:68:1d:8c:14:7b:a1:c1:32:a7:4d:a5:92:4d:c9:12:98:
e3:cc:24:20:f8:5f:26:b2:45:f3:4b:27:a3:c1:6c:4b:a1:72:
dd:53:dd:70:e0:5b:8f:1e:f5:d4:49:72:87:58:3c:22:a5:2c:
5f:a0:de:84:62:15:0a:4e:97:94:5a:03:27:91:c9:b5:94:11:
e0:df:b4:0c:7e:5b:e2:0f:9a:6a:5e:6d:72:3d:fd:8a:06:df:
bd:5f:ca:a0:72:cf:9c:f1:d8:a9:86:86:02:66:b7:70:91:03:
2a:d8:fa:f2:bf:06:25:52:c2:c8:70:9c:be:78:c4:3b:16:15:
df:32:db:5d:9d:d8:22:38:24:62:b4:d3:d9:57:05:84:ff:35:
f6:8a:dd:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:06:40 2025 by rpki-client