Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/2a226d-c72c-4c12-bbba-a4b55a71c228/1/LbYW860DY-cmnMLrWNG8CGzJdfI.mft
File: LbYW860DY-cmnMLrWNG8CGzJdfI.mft (raw, json)
Hash identifier: 4OIGkxx8iyITOt3BY28rtFY7YQW0XAF9Lsuoh0zlRIg=
Subject key identifier: 2D:B0:5D:01:5C:0F:E7:4F:83:AD:EC:F3:7F:CC:FE:B9:35:C2:42:08
Authority key identifier: 2D:B6:16:F3:AD:03:63:E7:26:9C:C2:EB:58:D1:BC:08:6C:C9:75:F2
Certificate issuer: /CN=2db616f3ad0363e7269cc2eb58d1bc086cc975f2
Certificate serial: 0199FBEC18902F384851868AA5421106BD43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LbYW860DY-cmnMLrWNG8CGzJdfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/2a226d-c72c-4c12-bbba-a4b55a71c228/1/LbYW860DY-cmnMLrWNG8CGzJdfI.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 10:02:58 +0000
Manifest this update: Sun 19 Oct 2025 10:02:58 +0000
Manifest next update: Mon 20 Oct 2025 10:02:58 +0000
Files and hashes: 1: LbYW860DY-cmnMLrWNG8CGzJdfI.crl (hash: izoRtxCo7tQ0SHvfRBfwq11Haq6/IIrqyWl49zYMo2U=)
2: TtiFva0B7nBQnunu1qXuQVvAjRk.roa (hash: BCLtQWteuqq7HD+J7kkS4GO2lBhow7GRQ0k6IwJXdnM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/2a226d-c72c-4c12-bbba-a4b55a71c228/1/LbYW860DY-cmnMLrWNG8CGzJdfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/2a226d-c72c-4c12-bbba-a4b55a71c228/1/LbYW860DY-cmnMLrWNG8CGzJdfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/LbYW860DY-cmnMLrWNG8CGzJdfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:18:90:2f:38:48:51:86:8a:a5:42:11:06:bd:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2db616f3ad0363e7269cc2eb58d1bc086cc975f2
Validity
Not Before: Oct 19 10:02:58 2025 GMT
Not After : Oct 20 10:02:58 2025 GMT
Subject: CN=2db05d015c0fe74f83adecf37fccfeb935c24208
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:be:f1:ea:a0:af:bd:36:14:ed:ee:85:86:cf:
59:3e:a6:cf:5d:98:12:4d:f9:18:80:a4:e0:66:83:
23:b5:9f:7a:db:70:a9:73:ce:4a:ab:25:e3:57:5c:
01:50:09:16:dc:d5:5d:11:04:65:40:7e:dd:45:31:
2c:14:2a:c6:32:7c:be:df:75:0a:1d:1c:2f:fd:ab:
fd:ab:8f:1e:f6:b0:c7:27:66:b5:e4:08:53:a9:c6:
ee:8a:6c:85:86:48:41:65:7b:70:09:8b:4c:7b:9e:
e1:e1:86:48:ae:fa:d7:8b:32:7d:10:20:e2:ea:06:
4f:cd:e8:24:5d:ce:2c:18:ca:4b:4b:dc:b5:cc:e5:
27:3e:f7:eb:38:66:63:f7:0e:b0:5b:45:9e:fc:7c:
7c:55:a1:f3:5e:94:e8:8e:3c:c9:02:d7:83:b7:c0:
bc:78:1f:f7:c3:79:18:fd:61:5b:f5:06:2a:60:89:
3b:a1:87:fc:7a:7f:06:3c:01:55:b4:e4:25:9a:31:
4f:54:8f:5e:4c:f0:89:c9:06:34:a5:51:27:d9:e8:
78:4b:89:ab:21:23:63:62:45:0f:a4:58:d6:21:c7:
d5:79:a0:db:89:be:46:1e:a1:24:48:a2:76:ca:68:
a0:c4:32:80:aa:97:d2:d9:af:bb:d4:e9:05:b7:eb:
54:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:B0:5D:01:5C:0F:E7:4F:83:AD:EC:F3:7F:CC:FE:B9:35:C2:42:08
X509v3 Authority Key Identifier:
keyid:2D:B6:16:F3:AD:03:63:E7:26:9C:C2:EB:58:D1:BC:08:6C:C9:75:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LbYW860DY-cmnMLrWNG8CGzJdfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/2a226d-c72c-4c12-bbba-a4b55a71c228/1/LbYW860DY-cmnMLrWNG8CGzJdfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/2a226d-c72c-4c12-bbba-a4b55a71c228/1/LbYW860DY-cmnMLrWNG8CGzJdfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:6a:04:bd:aa:18:7a:d9:5e:dc:cd:be:7c:27:68:a9:b3:52:
01:4e:28:d4:51:55:e4:c4:a5:fb:56:87:5a:f4:8a:75:0b:62:
3c:12:e1:31:8a:fd:c5:1e:19:b0:18:36:d2:2d:28:dd:07:e0:
bd:aa:0e:e4:4e:1c:ad:5e:52:83:9b:d4:07:b5:13:de:f2:db:
7c:54:ad:c4:7d:13:71:8f:02:c7:79:48:b8:ac:09:85:11:11:
c5:26:8c:3f:bf:00:a6:d0:4f:3f:db:15:5a:8d:d0:40:73:e6:
29:42:7e:fc:bb:05:45:d7:3b:5a:4b:d0:53:23:9d:b6:1d:fb:
1e:29:cf:97:32:3b:6f:0d:57:c2:69:97:ed:02:68:f9:97:1d:
5a:23:a4:26:6e:fb:18:28:6d:8a:c8:a3:36:08:27:f7:e9:88:
8b:7f:68:1e:5a:cc:4e:45:bb:b1:35:ce:7b:79:a7:58:3c:05:
2e:af:fb:1c:a7:6f:af:f1:08:6c:20:83:85:c4:a3:6f:2f:f1:
31:4e:d1:fb:c5:f3:80:9b:21:8c:d7:9b:21:ed:72:a6:47:af:
20:33:a1:34:a9:bc:6a:e7:4b:28:41:2d:99:99:4f:92:b3:42:
1d:b0:a9:87:13:68:4b:fc:c7:33:9b:b2:05:cd:fc:51:88:7d:
da:8c:b0:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:26:07 2025 by rpki-client