Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/0aab78-66de-444c-a843-0b3cb4c6b79a/1/lbgfTkXXEdoMFI3Cuq0VBN27Qns.mft
File: lbgfTkXXEdoMFI3Cuq0VBN27Qns.mft (raw, json)
Hash identifier: x0wpzbpCQkhcmAvOwCOUHz/G/lTNjn7Kh+vQMf/k2uU=
Subject key identifier: 77:77:6F:11:0D:47:9B:98:1B:69:BD:91:9D:ED:E9:3F:23:4B:FB:5D
Authority key identifier: 95:B8:1F:4E:45:D7:11:DA:0C:14:8D:C2:BA:AD:15:04:DD:BB:42:7B
Certificate issuer: /CN=95b81f4e45d711da0c148dc2baad1504ddbb427b
Certificate serial: 019A72267096BBDFFC11E1288178F0D75C67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbgfTkXXEdoMFI3Cuq0VBN27Qns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/0aab78-66de-444c-a843-0b3cb4c6b79a/1/lbgfTkXXEdoMFI3Cuq0VBN27Qns.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 09:01:52 +0000
Manifest this update: Tue 11 Nov 2025 09:01:52 +0000
Manifest next update: Wed 12 Nov 2025 09:01:52 +0000
Files and hashes: 1: 7akWYjQwsX6a6HhUzkzvmpveN9o.roa (hash: NaXDBHO9cOnr/DrruhF4XLx1P8skQ7ZIYlWJ7+sC7iA=)
2: lbgfTkXXEdoMFI3Cuq0VBN27Qns.crl (hash: He3qNyqzBIE5cvF7gtrsKQzmVoCZ+rVLSD5cBhfHtGE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/0aab78-66de-444c-a843-0b3cb4c6b79a/1/lbgfTkXXEdoMFI3Cuq0VBN27Qns.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/0aab78-66de-444c-a843-0b3cb4c6b79a/1/lbgfTkXXEdoMFI3Cuq0VBN27Qns.mft
rsync://rpki.ripe.net/repository/DEFAULT/lbgfTkXXEdoMFI3Cuq0VBN27Qns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:70:96:bb:df:fc:11:e1:28:81:78:f0:d7:5c:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b81f4e45d711da0c148dc2baad1504ddbb427b
Validity
Not Before: Nov 11 09:01:52 2025 GMT
Not After : Nov 12 09:01:52 2025 GMT
Subject: CN=77776f110d479b981b69bd919dede93f234bfb5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f0:c4:80:c3:1c:5c:29:54:52:d9:3f:b1:26:
68:6c:8b:42:a5:cc:25:79:92:96:46:d8:4d:e2:69:
ba:f8:80:15:66:79:46:3d:08:95:3a:73:cc:01:e3:
bc:9f:9f:7c:60:bb:57:54:4b:e6:b3:0c:8f:35:1a:
85:61:80:a8:89:f7:8a:92:ef:c9:5a:aa:8f:6c:58:
6b:ed:c2:fd:66:f1:67:f6:31:08:73:16:89:d1:e8:
91:4b:2f:32:58:1d:6f:49:92:1c:e2:8d:39:06:03:
92:fc:4c:72:3b:87:3e:36:cb:78:d1:e0:9f:95:57:
eb:d1:c2:4a:5e:83:cd:7d:0a:6f:24:a4:6f:c7:61:
a4:bb:0b:d4:42:87:c7:86:78:9f:34:13:ed:07:82:
f4:5f:1d:23:d0:9a:be:fe:cf:f0:d8:4a:f0:c6:b7:
fa:9e:e1:08:b9:f7:ac:29:19:d1:f5:ab:62:1f:ea:
9f:d6:31:09:c8:3a:07:7f:dd:f5:5f:44:7e:9f:f5:
cd:4a:23:db:5f:24:82:4b:27:f7:a9:95:56:2f:87:
b2:11:64:9f:da:68:aa:46:39:f7:a7:05:c4:08:04:
ea:35:04:41:73:8b:1c:3d:96:e7:08:7e:f2:f6:8c:
e0:20:49:36:c6:94:c0:77:53:00:e5:a6:f3:47:4c:
7e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:77:6F:11:0D:47:9B:98:1B:69:BD:91:9D:ED:E9:3F:23:4B:FB:5D
X509v3 Authority Key Identifier:
keyid:95:B8:1F:4E:45:D7:11:DA:0C:14:8D:C2:BA:AD:15:04:DD:BB:42:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbgfTkXXEdoMFI3Cuq0VBN27Qns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0aab78-66de-444c-a843-0b3cb4c6b79a/1/lbgfTkXXEdoMFI3Cuq0VBN27Qns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0aab78-66de-444c-a843-0b3cb4c6b79a/1/lbgfTkXXEdoMFI3Cuq0VBN27Qns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:22:80:f3:fe:19:e5:86:12:e6:f9:36:53:59:44:82:f8:f3:
f3:39:f6:5a:3d:54:e6:c8:c0:0c:f5:93:52:cf:85:30:8a:7b:
45:e6:3c:1b:48:98:91:2f:a6:66:a1:b2:57:8f:df:c7:88:8d:
d1:4f:a0:b6:f8:ec:a8:06:9a:37:21:2d:61:50:64:7f:da:68:
7e:12:da:2a:78:43:cc:5d:ae:00:4f:20:b5:82:36:6e:7a:5d:
e4:74:78:d7:cf:85:ce:86:67:d7:c1:40:fd:20:19:c0:89:96:
b5:77:9d:e5:dc:b7:49:57:a9:a1:03:36:99:01:63:76:47:9f:
6f:bc:f6:8e:c0:2d:e9:1e:42:3b:06:50:05:44:0d:71:c6:59:
37:b8:9c:ca:04:c5:1d:91:27:70:88:90:2d:4e:17:04:a6:68:
5b:5b:20:98:df:63:63:e1:b2:9f:bc:c4:f6:32:dd:4e:af:23:
ca:4f:14:0d:ef:eb:27:af:ee:dd:0e:a5:43:f8:d6:df:ca:e1:
0d:19:17:de:98:07:e2:42:64:7a:46:14:2f:b9:fc:b7:4b:bd:
dd:dd:0a:8f:24:56:94:6d:6a:89:9c:15:3d:fc:f8:cc:b2:28:
cf:2f:84:c3:46:80:5b:da:ff:7b:0c:21:9e:09:84:60:0c:c7:
be:33:cb:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:14 2025 by rpki-client