Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/ecbffa-1166-4d1e-9f55-11575db64fbe/1/LBKCZbgJkXiNhuImLpM5A4tO-oI.mft
File: LBKCZbgJkXiNhuImLpM5A4tO-oI.mft (raw, json)
Hash identifier: Ei87x/6SWfpzkzgc2a8GsJlwqxSsFoItWwFQQBH9GbE=
Subject key identifier: FD:59:D9:1C:A6:46:DF:92:0A:27:60:E9:62:B2:94:83:A7:9F:0F:36
Authority key identifier: 2C:12:82:65:B8:09:91:78:8D:86:E2:26:2E:93:39:03:8B:4E:FA:82
Certificate issuer: /CN=2c128265b80991788d86e2262e9339038b4efa82
Certificate serial: 0199179AEC89F7DABC15EFD201B87ED4D5DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LBKCZbgJkXiNhuImLpM5A4tO-oI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/ecbffa-1166-4d1e-9f55-11575db64fbe/1/LBKCZbgJkXiNhuImLpM5A4tO-oI.mft
Manifest number: 01FB
Signing time: Fri 05 Sep 2025 02:00:52 +0000
Manifest this update: Fri 05 Sep 2025 02:00:52 +0000
Manifest next update: Sat 06 Sep 2025 02:00:52 +0000
Files and hashes: 1: AUJAohDb7gvWp2PAn2xH3z3Zx8I.roa (hash: Px2ndw4EQ+qkKAfeVMR+LtAp8KsmOxSR4KCS0rfVjWc=)
2: LBKCZbgJkXiNhuImLpM5A4tO-oI.crl (hash: Bs2ts+SgnB2rv77kcCIUbF49h41WZ9qLnK8AnTXPV7A=)
3: LTEzdR9zUquR1ggUmA4_QHu2p50.roa (hash: uNuzvFRDaCwMPWv1CbBVSxROhTe6dbQ9XSUinppVNcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/ecbffa-1166-4d1e-9f55-11575db64fbe/1/LBKCZbgJkXiNhuImLpM5A4tO-oI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/ecbffa-1166-4d1e-9f55-11575db64fbe/1/LBKCZbgJkXiNhuImLpM5A4tO-oI.mft
rsync://rpki.ripe.net/repository/DEFAULT/LBKCZbgJkXiNhuImLpM5A4tO-oI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:17:9a:ec:89:f7:da:bc:15:ef:d2:01:b8:7e:d4:d5:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c128265b80991788d86e2262e9339038b4efa82
Validity
Not Before: Sep 5 02:00:52 2025 GMT
Not After : Sep 6 02:00:52 2025 GMT
Subject: CN=fd59d91ca646df920a2760e962b29483a79f0f36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b8:e9:cb:c3:e7:dc:11:85:39:42:83:f4:58:
3e:ad:d8:e1:8b:4d:43:68:7c:6c:10:44:f7:e1:e3:
f3:66:cb:17:26:10:8c:d8:79:52:7d:29:52:88:67:
3e:4e:6b:bb:64:95:0b:41:cb:42:6d:54:c2:13:fe:
0d:a9:71:15:37:c7:3b:ad:f5:10:60:f9:ce:45:96:
eb:b9:8c:e5:9c:69:80:48:5d:11:0c:4a:e1:be:98:
51:1b:d8:e9:04:b4:1a:0f:91:27:f5:ef:08:30:dd:
40:52:03:36:da:a3:15:23:84:09:78:63:bb:6c:75:
7f:a3:7b:c1:1d:ea:5b:3b:d6:5d:2d:35:d9:4b:32:
72:91:e4:65:74:f4:a8:41:27:87:7f:ee:19:aa:9f:
67:11:2f:26:9f:3f:96:58:95:2f:eb:5b:13:58:96:
6d:b2:3c:c6:68:db:e7:35:08:b6:bb:b1:01:90:bd:
0a:d8:d3:1e:cf:62:0f:f1:a6:33:9b:0f:4b:87:af:
bd:fc:96:58:c8:60:ad:79:15:6d:18:ea:3b:a8:c9:
66:50:17:73:44:c6:4e:25:12:ab:c9:cc:cc:d0:d0:
c5:73:52:a3:25:38:99:ce:39:af:75:26:42:3e:b2:
47:d9:4a:1d:27:67:b6:b1:37:b3:71:b6:a2:23:e3:
7b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:59:D9:1C:A6:46:DF:92:0A:27:60:E9:62:B2:94:83:A7:9F:0F:36
X509v3 Authority Key Identifier:
keyid:2C:12:82:65:B8:09:91:78:8D:86:E2:26:2E:93:39:03:8B:4E:FA:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LBKCZbgJkXiNhuImLpM5A4tO-oI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ecbffa-1166-4d1e-9f55-11575db64fbe/1/LBKCZbgJkXiNhuImLpM5A4tO-oI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ecbffa-1166-4d1e-9f55-11575db64fbe/1/LBKCZbgJkXiNhuImLpM5A4tO-oI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:4c:c7:2e:83:3c:73:3a:e8:b0:a0:cb:ba:e2:6a:08:8e:3f:
04:9e:c0:c9:31:3d:b5:a5:bf:3e:d8:59:d7:31:c3:fe:af:3b:
d2:8a:26:ec:6a:d4:55:b8:f3:6b:17:01:4d:65:93:99:0c:f2:
ea:f0:26:c4:58:1a:3c:71:0f:62:64:e1:bb:80:dc:af:35:7b:
e3:27:a8:7a:1e:5c:15:a6:6c:69:7b:55:ab:ef:26:34:b1:92:
2b:7d:81:23:4c:cb:41:88:b3:e4:03:4d:18:b5:ee:53:ed:54:
55:6b:89:34:cb:10:2c:84:e7:f4:c3:7a:1a:19:53:48:df:90:
0c:5f:f0:3a:47:93:9e:6b:af:51:f6:f4:e6:55:65:f8:bf:65:
ad:f3:8b:97:8f:74:e7:d4:65:e7:a0:d0:fc:fb:5c:16:59:eb:
cd:7f:0e:5a:51:1c:38:88:71:7a:c5:0f:e2:07:53:9c:ca:e7:
84:f4:3a:c9:87:ed:0d:f4:7b:8f:07:54:ca:9a:9d:4e:6a:72:
fd:00:a8:76:11:e7:3a:80:49:4f:de:48:05:c4:02:47:02:4e:
5c:02:8a:53:ee:57:ac:49:d0:72:f4:93:6b:d1:68:1e:51:28:
4d:98:98:48:19:df:1e:8a:7b:00:06:20:bd:81:aa:5f:c4:16:
f3:c8:9d:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkXmuyJ99q8Fe/SAbh+1NXdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjMTI4MjY1YjgwOTkxNzg4ZDg2ZTIyNjJlOTMzOTAzOGI0
ZWZhODIwHhcNMjUwOTA1MDIwMDUyWhcNMjUwOTA2MDIwMDUyWjAzMTEwLwYDVQQD
EyhmZDU5ZDkxY2E2NDZkZjkyMGEyNzYwZTk2MmIyOTQ4M2E3OWYwZjM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7jpy8Pn3BGFOUKD9Fg+rdjhi01D
aHxsEET34ePzZssXJhCM2HlSfSlSiGc+Tmu7ZJULQctCbVTCE/4NqXEVN8c7rfUQ
YPnORZbruYzlnGmASF0RDErhvphRG9jpBLQaD5En9e8IMN1AUgM22qMVI4QJeGO7
bHV/o3vBHepbO9ZdLTXZSzJykeRldPSoQSeHf+4Zqp9nES8mnz+WWJUv61sTWJZt
sjzGaNvnNQi2u7EBkL0K2NMez2IP8aYzmw9Lh6+9/JZYyGCteRVtGOo7qMlmUBdz
RMZOJRKryczM0NDFc1KjJTiZzjmvdSZCPrJH2UodJ2e2sTezcbaiI+N7vQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP1Z2RymRt+SCidg6WKylIOnnw82MB8GA1UdIwQY
MBaAFCwSgmW4CZF4jYbiJi6TOQOLTvqCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTEJLQ1piZ0prWGlOaHVJbUxwTTVBNHRPLW9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9lY2JmZmEtMTE2Ni00ZDFlLTlmNTUt
MTE1NzVkYjY0ZmJlLzEvTEJLQ1piZ0prWGlOaHVJbUxwTTVBNHRPLW9JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9lY2JmZmEtMTE2Ni00ZDFlLTlmNTUtMTE1NzVkYjY0ZmJl
LzEvTEJLQ1piZ0prWGlOaHVJbUxwTTVBNHRPLW9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe0zHLoM8
czrosKDLuuJqCI4/BJ7AyTE9taW/PthZ1zHD/q870oom7GrUVbjzaxcBTWWTmQzy
6vAmxFgaPHEPYmThu4DcrzV74yeoeh5cFaZsaXtVq+8mNLGSK32BI0zLQYiz5ANN
GLXuU+1UVWuJNMsQLITn9MN6GhlTSN+QDF/wOkeTnmuvUfb05lVl+L9lrfOLl490
59Rl56DQ/PtcFlnrzX8OWlEcOIhxesUP4gdTnMrnhPQ6yYftDfR7jwdUypqdTmpy
/QCodhHnOoBJT95IBcQCRwJOXAKKU+5XrEnQcvSTa9FoHlEoTZiYSBnfHop7AAYg
vYGqX8QW88idnA==
-----END CERTIFICATE-----
Generated at Fri Sep 5 06:05:39 2025 by rpki-client