Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/2b5ed6-3a7c-4631-b49d-bf55b8b1669c/1/LM5dUfp1u7btlipBZu9vhjCgJYE.mft
File: LM5dUfp1u7btlipBZu9vhjCgJYE.mft (raw, json)
Hash identifier: bnOpmBr2PPv3YIgeZ4FAXiwDbhA7gIDGS40fqLnECKI=
Subject key identifier: A9:3F:87:17:F4:C0:7E:2A:CB:AE:2A:A8:C8:43:C3:01:BB:20:83:D2
Authority key identifier: 2C:CE:5D:51:FA:75:BB:B6:ED:96:2A:41:66:EF:6F:86:30:A0:25:81
Certificate issuer: /CN=2cce5d51fa75bbb6ed962a4166ef6f8630a02581
Certificate serial: 019A71B948E34D9B9BF0906DCA653A99892F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LM5dUfp1u7btlipBZu9vhjCgJYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/2b5ed6-3a7c-4631-b49d-bf55b8b1669c/1/LM5dUfp1u7btlipBZu9vhjCgJYE.mft
Manifest number: 13BD
Signing time: Tue 11 Nov 2025 07:02:39 +0000
Manifest this update: Tue 11 Nov 2025 07:02:39 +0000
Manifest next update: Wed 12 Nov 2025 07:02:39 +0000
Files and hashes: 1: LM5dUfp1u7btlipBZu9vhjCgJYE.crl (hash: R9ABy2k2LzQpcdxrCuKPeLxCfeNF1j223TkhCgp1c5s=)
2: gwJ9hMltFlWaOeN-R_fhzG-JI24.roa (hash: wuy2X0I9Yx6e8bAqg0gf/bu0yRoRH3AWoeZNQfjdFoc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/2b5ed6-3a7c-4631-b49d-bf55b8b1669c/1/LM5dUfp1u7btlipBZu9vhjCgJYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/2b5ed6-3a7c-4631-b49d-bf55b8b1669c/1/LM5dUfp1u7btlipBZu9vhjCgJYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LM5dUfp1u7btlipBZu9vhjCgJYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:48:e3:4d:9b:9b:f0:90:6d:ca:65:3a:99:89:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cce5d51fa75bbb6ed962a4166ef6f8630a02581
Validity
Not Before: Nov 11 07:02:39 2025 GMT
Not After : Nov 12 07:02:39 2025 GMT
Subject: CN=a93f8717f4c07e2acbae2aa8c843c301bb2083d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:01:5b:af:e5:28:47:c6:82:ac:40:9b:a1:74:
d3:51:51:f0:a4:a7:da:4e:ef:38:55:43:7a:a6:d7:
c5:2c:c1:ef:85:d6:c8:d2:d5:57:82:76:a8:cd:d8:
21:f3:8f:66:5f:c0:d1:79:9f:5d:54:39:97:e8:ba:
0e:f2:89:4b:fc:8d:c4:59:a1:84:3a:9a:fc:0a:2f:
2c:88:23:9a:cc:a3:b4:e6:94:3d:ff:f5:6a:ac:60:
69:fb:a8:82:f4:a5:a5:cd:01:9c:c9:13:61:df:8b:
47:68:ef:df:59:a4:18:f0:93:f1:6e:c9:30:02:b6:
77:83:64:52:04:51:2f:f1:18:9d:c8:14:0c:44:f5:
6a:ab:80:e0:60:db:fc:ee:d7:7d:f5:ae:a7:55:3f:
8f:45:d0:c8:ba:c4:cf:da:b1:1e:be:da:64:9b:12:
c8:41:68:61:dd:f6:93:ef:c4:b9:db:46:69:0f:a0:
3b:e0:96:5d:3d:27:75:7e:9e:f8:05:77:f1:ba:b5:
3e:42:0e:4a:ce:57:37:ee:64:fe:8e:a6:e2:fc:32:
16:41:c3:a1:0a:64:40:f2:60:11:9d:9c:50:da:1f:
3f:b7:03:ed:ae:f7:2f:28:61:9d:dd:5f:f0:3b:fb:
a6:32:14:04:87:6f:50:44:db:09:1d:3b:e0:55:9c:
41:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:3F:87:17:F4:C0:7E:2A:CB:AE:2A:A8:C8:43:C3:01:BB:20:83:D2
X509v3 Authority Key Identifier:
keyid:2C:CE:5D:51:FA:75:BB:B6:ED:96:2A:41:66:EF:6F:86:30:A0:25:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LM5dUfp1u7btlipBZu9vhjCgJYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2b5ed6-3a7c-4631-b49d-bf55b8b1669c/1/LM5dUfp1u7btlipBZu9vhjCgJYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2b5ed6-3a7c-4631-b49d-bf55b8b1669c/1/LM5dUfp1u7btlipBZu9vhjCgJYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:15:38:25:6a:c9:de:8e:3b:48:2f:c5:ae:fb:f9:37:40:aa:
69:b1:6a:36:73:de:3f:93:45:cf:6c:48:7b:b6:0d:e0:8f:82:
2c:6b:b1:75:a8:54:89:69:1a:81:2b:1d:db:5a:04:5a:84:9d:
af:ad:d5:0c:ac:3d:43:fd:65:e0:60:97:82:0d:09:83:0b:84:
91:8e:1e:51:37:5b:c4:59:b5:05:11:ab:66:78:9d:da:72:e6:
f2:f9:19:e7:24:98:b4:05:8a:6f:35:5a:c8:82:5b:6f:ed:d8:
41:2f:aa:b3:35:0e:a6:24:95:13:e6:07:be:fb:66:4a:3b:21:
0c:5f:fe:4b:43:8a:60:ed:0f:92:31:43:ea:fe:b0:0b:6d:bf:
be:98:fa:22:f0:69:ba:67:13:55:46:d8:3c:3c:3d:1d:08:34:
4b:cc:8a:fc:cb:aa:6c:65:e2:a8:9a:c6:ce:d4:b5:b1:d0:68:
42:78:0b:9b:e9:88:5f:55:ab:4a:69:69:f9:dc:14:65:01:24:
2e:62:88:54:b8:ff:86:82:a5:3f:6e:35:ca:74:01:30:38:e9:
ec:4f:b2:c6:d0:ed:1c:14:ba:35:f3:a1:03:17:a6:62:48:d3:
64:2a:d9:cd:44:62:53:e8:29:d0:88:1a:95:42:20:a7:10:ab:
00:b7:a1:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuUjjTZub8JBtymU6mYkvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjY2U1ZDUxZmE3NWJiYjZlZDk2MmE0MTY2ZWY2Zjg2MzBh
MDI1ODEwHhcNMjUxMTExMDcwMjM5WhcNMjUxMTEyMDcwMjM5WjAzMTEwLwYDVQQD
EyhhOTNmODcxN2Y0YzA3ZTJhY2JhZTJhYThjODQzYzMwMWJiMjA4M2QyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQFbr+UoR8aCrECboXTTUVHwpKfa
Tu84VUN6ptfFLMHvhdbI0tVXgnaozdgh849mX8DReZ9dVDmX6LoO8olL/I3EWaGE
Opr8Ci8siCOazKO05pQ9//VqrGBp+6iC9KWlzQGcyRNh34tHaO/fWaQY8JPxbskw
ArZ3g2RSBFEv8RidyBQMRPVqq4DgYNv87td99a6nVT+PRdDIusTP2rEevtpkmxLI
QWhh3faT78S520ZpD6A74JZdPSd1fp74BXfxurU+Qg5Kzlc37mT+jqbi/DIWQcOh
CmRA8mARnZxQ2h8/twPtrvcvKGGd3V/wO/umMhQEh29QRNsJHTvgVZxBsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKk/hxf0wH4qy64qqMhDwwG7IIPSMB8GA1UdIwQY
MBaAFCzOXVH6dbu27ZYqQWbvb4YwoCWBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTE01ZFVmcDF1N2J0bGlwQlp1OXZoakNnSllFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy8yYjVlZDYtM2E3Yy00NjMxLWI0OWQt
YmY1NWI4YjE2NjljLzEvTE01ZFVmcDF1N2J0bGlwQlp1OXZoakNnSllFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy8yYjVlZDYtM2E3Yy00NjMxLWI0OWQtYmY1NWI4YjE2Njlj
LzEvTE01ZFVmcDF1N2J0bGlwQlp1OXZoakNnSllFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkxU4JWrJ
3o47SC/Frvv5N0CqabFqNnPeP5NFz2xIe7YN4I+CLGuxdahUiWkagSsd21oEWoSd
r63VDKw9Q/1l4GCXgg0JgwuEkY4eUTdbxFm1BRGrZnid2nLm8vkZ5ySYtAWKbzVa
yIJbb+3YQS+qszUOpiSVE+YHvvtmSjshDF/+S0OKYO0PkjFD6v6wC22/vpj6IvBp
umcTVUbYPDw9HQg0S8yK/MuqbGXiqJrGztS1sdBoQngLm+mIX1WrSmlp+dwUZQEk
LmKIVLj/hoKlP241ynQBMDjp7E+yxtDtHBS6NfOhAxemYkjTZCrZzURiU+gp0Iga
lUIgpxCrALehmA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:44:19 2025 by rpki-client