Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/b363cd-5a14-417e-80f5-9215865d37b9/1/LGEmRGexp_7xxRhnd55a1ha2Gc8.mft
File: LGEmRGexp_7xxRhnd55a1ha2Gc8.mft (raw, json)
Hash identifier: wilF+px6TH19pSKo7ue3Z48tjzSJYsFYtPbxaAPy3G8=
Subject key identifier: 47:B5:DD:60:67:A2:53:7D:91:51:F0:26:23:DB:F3:43:F2:89:79:1D
Authority key identifier: 2C:61:26:44:67:B1:A7:FE:F1:C5:18:67:77:9E:5A:D6:16:B6:19:CF
Certificate issuer: /CN=2c61264467b1a7fef1c51867779e5ad616b619cf
Certificate serial: 019A71B7A538764FE18CD8D0E721F37A715E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LGEmRGexp_7xxRhnd55a1ha2Gc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/b363cd-5a14-417e-80f5-9215865d37b9/1/LGEmRGexp_7xxRhnd55a1ha2Gc8.mft
Manifest number: 108B
Signing time: Tue 11 Nov 2025 07:00:51 +0000
Manifest this update: Tue 11 Nov 2025 07:00:51 +0000
Manifest next update: Wed 12 Nov 2025 07:00:51 +0000
Files and hashes: 1: LGEmRGexp_7xxRhnd55a1ha2Gc8.crl (hash: WKBqH9jogqcYmsaLl6CEJWjaazcld+dexghyYX/BasE=)
2: lBmif3cec10f96f5KVrFOMIaqw8.roa (hash: CNoA9Jb73fZBHtmfFBZ+xq7RmTBmWpp0zyBq79wifVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/b363cd-5a14-417e-80f5-9215865d37b9/1/LGEmRGexp_7xxRhnd55a1ha2Gc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/b363cd-5a14-417e-80f5-9215865d37b9/1/LGEmRGexp_7xxRhnd55a1ha2Gc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/LGEmRGexp_7xxRhnd55a1ha2Gc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:a5:38:76:4f:e1:8c:d8:d0:e7:21:f3:7a:71:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c61264467b1a7fef1c51867779e5ad616b619cf
Validity
Not Before: Nov 11 07:00:51 2025 GMT
Not After : Nov 12 07:00:51 2025 GMT
Subject: CN=47b5dd6067a2537d9151f02623dbf343f289791d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:79:ac:d3:99:f0:11:22:51:b1:5a:2b:db:02:
ae:40:6e:19:25:ca:51:5b:7c:3a:08:29:84:dd:09:
f4:69:cb:c0:40:9b:7a:07:9e:75:7a:9c:89:db:c6:
37:8a:cf:2e:3b:ac:99:46:a2:4c:bc:b0:84:fb:c1:
9a:7d:44:fd:79:40:9a:72:19:e6:e9:e4:86:46:6b:
03:94:51:12:a4:12:cb:a5:76:b5:65:9d:d5:5d:09:
1f:59:0c:4f:cd:f5:ba:a0:28:15:f2:ac:f3:33:be:
fc:fd:a5:e1:56:3c:83:c4:85:ab:6a:60:15:ad:5f:
b4:32:db:eb:dd:b7:38:dc:27:b4:2b:eb:34:0c:4a:
ea:fa:21:78:fd:5f:8b:2d:b0:45:a3:4a:60:c8:ea:
48:49:09:04:f1:f8:8c:28:3f:67:e4:8b:8e:61:6e:
1b:3a:cb:43:a2:7d:77:eb:18:6e:32:32:3a:3b:28:
1f:d3:9e:0d:bb:47:18:05:bd:6a:b5:20:ec:85:e6:
2f:81:43:7e:da:7f:b1:8c:b3:e4:8e:36:94:75:33:
7a:d3:10:41:47:df:2c:b8:cc:aa:b8:0b:df:fb:f7:
9a:c9:19:58:12:11:c9:a6:5c:8a:a4:64:d8:3f:f9:
89:0c:c3:0f:ab:31:49:3b:0f:11:d3:a1:b9:5d:96:
48:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:B5:DD:60:67:A2:53:7D:91:51:F0:26:23:DB:F3:43:F2:89:79:1D
X509v3 Authority Key Identifier:
keyid:2C:61:26:44:67:B1:A7:FE:F1:C5:18:67:77:9E:5A:D6:16:B6:19:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LGEmRGexp_7xxRhnd55a1ha2Gc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b363cd-5a14-417e-80f5-9215865d37b9/1/LGEmRGexp_7xxRhnd55a1ha2Gc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b363cd-5a14-417e-80f5-9215865d37b9/1/LGEmRGexp_7xxRhnd55a1ha2Gc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:36:96:ad:11:3a:e2:5d:43:cb:ba:eb:cb:e3:e4:a5:21:80:
23:4e:bb:07:9d:e4:eb:b7:a9:0c:a3:60:5c:a1:fa:8f:a9:f0:
f3:cf:bd:06:36:e1:3d:94:e8:a1:3e:c1:9a:dc:00:d1:da:1d:
25:bc:d0:55:a5:25:32:67:81:03:a5:57:ef:8d:02:89:ee:2b:
ec:97:2b:6c:d8:16:d8:63:6c:b3:c9:ae:2b:bb:e0:74:ec:76:
61:03:b9:b2:a5:c1:66:5d:b8:93:fe:5d:30:40:d7:c8:ca:0f:
c1:b6:8d:d1:c7:c9:b1:10:4c:dc:0e:18:e3:44:47:83:11:b1:
e8:d1:6c:15:79:0b:ab:68:31:34:58:0b:98:5b:24:7e:55:4f:
15:f7:ab:c7:aa:6f:e1:38:80:6a:ad:cf:c2:c9:f9:80:d3:a1:
a4:cd:d7:c4:2d:8b:50:69:10:71:f3:5f:43:06:76:6b:ff:df:
98:6a:f7:de:cc:2f:43:cb:92:90:5e:e8:19:ff:f1:10:30:20:
c9:b3:9d:34:9a:df:84:0b:7d:0c:30:2a:3e:95:09:a1:76:df:
ed:ac:de:29:4f:48:15:33:b7:5b:cd:24:45:37:45:29:e2:76:
0a:c6:55:a8:cf:ad:17:33:8c:ec:db:b0:1b:8b:33:11:9a:37:
d4:77:3f:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxt6U4dk/hjNjQ5yHzenFeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjNjEyNjQ0NjdiMWE3ZmVmMWM1MTg2Nzc3OWU1YWQ2MTZi
NjE5Y2YwHhcNMjUxMTExMDcwMDUxWhcNMjUxMTEyMDcwMDUxWjAzMTEwLwYDVQQD
Eyg0N2I1ZGQ2MDY3YTI1MzdkOTE1MWYwMjYyM2RiZjM0M2YyODk3OTFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknms05nwESJRsVor2wKuQG4ZJcpR
W3w6CCmE3Qn0acvAQJt6B551epyJ28Y3is8uO6yZRqJMvLCE+8GafUT9eUCachnm
6eSGRmsDlFESpBLLpXa1ZZ3VXQkfWQxPzfW6oCgV8qzzM778/aXhVjyDxIWramAV
rV+0Mtvr3bc43Ce0K+s0DErq+iF4/V+LLbBFo0pgyOpISQkE8fiMKD9n5IuOYW4b
OstDon136xhuMjI6Oygf054Nu0cYBb1qtSDsheYvgUN+2n+xjLPkjjaUdTN60xBB
R98suMyquAvf+/eayRlYEhHJplyKpGTYP/mJDMMPqzFJOw8R06G5XZZIGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEe13WBnolN9kVHwJiPb80PyiXkdMB8GA1UdIwQY
MBaAFCxhJkRnsaf+8cUYZ3eeWtYWthnPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTEdFbVJHZXhwXzd4eFJobmQ1NWExaGEyR2M4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9iMzYzY2QtNWExNC00MTdlLTgwZjUt
OTIxNTg2NWQzN2I5LzEvTEdFbVJHZXhwXzd4eFJobmQ1NWExaGEyR2M4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9iMzYzY2QtNWExNC00MTdlLTgwZjUtOTIxNTg2NWQzN2I5
LzEvTEdFbVJHZXhwXzd4eFJobmQ1NWExaGEyR2M4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAujaWrRE6
4l1Dy7rry+PkpSGAI067B53k67epDKNgXKH6j6nw88+9BjbhPZTooT7BmtwA0dod
JbzQVaUlMmeBA6VX740Cie4r7JcrbNgW2GNss8muK7vgdOx2YQO5sqXBZl24k/5d
MEDXyMoPwbaN0cfJsRBM3A4Y40RHgxGx6NFsFXkLq2gxNFgLmFskflVPFferx6pv
4TiAaq3Pwsn5gNOhpM3XxC2LUGkQcfNfQwZ2a//fmGr33swvQ8uSkF7oGf/xEDAg
ybOdNJrfhAt9DDAqPpUJoXbf7azeKU9IFTO3W80kRTdFKeJ2CsZVqM+tFzOM7Nuw
G4szEZo31Hc/tw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:05:41 2025 by rpki-client