Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/2a226d-c72c-4c12-bbba-a4b55a71c228/1/LbYW860DY-cmnMLrWNG8CGzJdfI.mft
File: LbYW860DY-cmnMLrWNG8CGzJdfI.mft (raw, json)
Hash identifier: sj2Nn1HCELv1IzSnPnBa9oCmq3xeXdgraYQHyI5Iekw=
Subject key identifier: 0F:72:83:E8:F3:5B:97:DD:44:35:1E:8F:C6:75:48:D7:16:3C:67:7D
Authority key identifier: 2D:B6:16:F3:AD:03:63:E7:26:9C:C2:EB:58:D1:BC:08:6C:C9:75:F2
Certificate issuer: /CN=2db616f3ad0363e7269cc2eb58d1bc086cc975f2
Certificate serial: 0198D4749C13D0728CE4BFF24E9DBBC199F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LbYW860DY-cmnMLrWNG8CGzJdfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/2a226d-c72c-4c12-bbba-a4b55a71c228/1/LbYW860DY-cmnMLrWNG8CGzJdfI.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 01:04:28 +0000
Manifest this update: Sat 23 Aug 2025 01:04:28 +0000
Manifest next update: Sun 24 Aug 2025 01:04:28 +0000
Files and hashes: 1: LbYW860DY-cmnMLrWNG8CGzJdfI.crl (hash: Cm4BJgcDqre3cB/X76PcJffX+JMAamjXgcEglVs0etk=)
2: TtiFva0B7nBQnunu1qXuQVvAjRk.roa (hash: BCLtQWteuqq7HD+J7kkS4GO2lBhow7GRQ0k6IwJXdnM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/2a226d-c72c-4c12-bbba-a4b55a71c228/1/LbYW860DY-cmnMLrWNG8CGzJdfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/2a226d-c72c-4c12-bbba-a4b55a71c228/1/LbYW860DY-cmnMLrWNG8CGzJdfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/LbYW860DY-cmnMLrWNG8CGzJdfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:04:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:9c:13:d0:72:8c:e4:bf:f2:4e:9d:bb:c1:99:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2db616f3ad0363e7269cc2eb58d1bc086cc975f2
Validity
Not Before: Aug 23 01:04:28 2025 GMT
Not After : Aug 24 01:04:28 2025 GMT
Subject: CN=0f7283e8f35b97dd44351e8fc67548d7163c677d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:6c:69:33:fe:ee:e1:a7:02:83:90:9d:df:b8:
5b:f7:b3:2e:13:fb:e7:f8:4d:b9:0d:26:a4:36:e6:
70:19:58:2a:9f:7c:b2:8c:a5:8d:32:8a:9e:dd:e9:
60:c2:96:c2:40:5f:12:eb:aa:16:f4:99:a5:51:04:
3e:4c:55:9c:51:27:51:28:ce:f6:2f:7a:21:a0:f5:
91:50:2e:6a:0e:c5:66:df:ce:97:16:74:c3:a6:f4:
3a:a4:2c:f0:dc:bb:69:d0:f6:2c:ab:ff:e0:15:d7:
0b:b4:b2:7c:cc:21:ed:e1:f7:28:18:75:03:f0:55:
8c:04:8c:70:26:59:8b:c9:d8:25:8c:ac:42:5c:f5:
0b:7e:6f:21:ba:17:e1:a7:2c:21:dd:d2:35:d8:a7:
bf:99:cc:36:dc:1e:65:90:27:18:af:af:04:92:80:
f9:24:2c:c4:bb:e8:6e:4e:e5:95:e6:71:a2:eb:ca:
e3:0b:ec:b5:4f:a2:c6:89:d2:7b:11:20:6a:be:3d:
ba:68:ed:ca:9e:fb:f8:9d:a7:e5:02:4c:19:ed:db:
4c:93:11:1c:63:db:1d:70:74:1a:69:f1:a2:4d:52:
a8:32:e4:90:ea:1b:a8:57:f6:5e:e5:2c:cb:b7:14:
c8:69:6b:52:da:71:e8:c1:0f:51:98:5b:5e:4c:94:
c2:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:72:83:E8:F3:5B:97:DD:44:35:1E:8F:C6:75:48:D7:16:3C:67:7D
X509v3 Authority Key Identifier:
keyid:2D:B6:16:F3:AD:03:63:E7:26:9C:C2:EB:58:D1:BC:08:6C:C9:75:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LbYW860DY-cmnMLrWNG8CGzJdfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/2a226d-c72c-4c12-bbba-a4b55a71c228/1/LbYW860DY-cmnMLrWNG8CGzJdfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/2a226d-c72c-4c12-bbba-a4b55a71c228/1/LbYW860DY-cmnMLrWNG8CGzJdfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:63:39:de:9a:6d:e2:49:b6:26:7b:4d:32:ce:52:ac:40:88:
95:ae:f2:b8:05:49:37:0f:56:92:c7:2f:e2:df:fb:02:d2:79:
c7:a5:90:39:30:57:2e:2d:90:db:06:a1:84:b5:61:bc:3e:23:
72:3a:5c:fb:01:6b:35:6b:0d:56:e5:5c:10:05:d0:1c:28:2e:
fa:18:02:89:82:94:9a:6e:f8:5f:80:c4:4e:0b:ac:f2:e2:f3:
82:6c:9b:37:02:67:05:f7:7f:6e:91:8e:dd:94:f8:35:5a:cd:
7b:f0:6d:3a:3b:5e:e2:db:6d:de:8f:27:6d:e0:ef:1f:20:a6:
28:03:d1:36:ab:4d:a5:f5:60:b6:65:f4:17:28:ea:9f:e0:2c:
d1:49:0f:82:7f:63:26:a8:fd:d8:07:b5:69:9c:82:9f:f7:ad:
1a:03:cd:4c:c3:5d:fb:99:61:d0:48:65:01:fe:47:ab:bb:8b:
0d:0a:43:a6:cf:88:50:09:ab:17:ee:83:64:3c:2a:1b:a3:1b:
3c:ef:51:48:6a:2d:95:79:b1:8c:b3:c7:26:6b:58:ac:14:a6:
5c:fe:c6:32:17:bd:14:af:87:43:d0:a8:ad:60:3a:bb:cc:69:
79:75:d5:90:f5:62:05:b0:97:52:8a:1d:23:1a:d5:34:81:43:
3e:68:5b:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUdJwT0HKM5L/yTp27wZn2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkYjYxNmYzYWQwMzYzZTcyNjljYzJlYjU4ZDFiYzA4NmNj
OTc1ZjIwHhcNMjUwODIzMDEwNDI4WhcNMjUwODI0MDEwNDI4WjAzMTEwLwYDVQQD
EygwZjcyODNlOGYzNWI5N2RkNDQzNTFlOGZjNjc1NDhkNzE2M2M2NzdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2xpM/7u4acCg5Cd37hb97MuE/vn
+E25DSakNuZwGVgqn3yyjKWNMoqe3elgwpbCQF8S66oW9JmlUQQ+TFWcUSdRKM72
L3ohoPWRUC5qDsVm386XFnTDpvQ6pCzw3Ltp0PYsq//gFdcLtLJ8zCHt4fcoGHUD
8FWMBIxwJlmLydgljKxCXPULfm8huhfhpywh3dI12Ke/mcw23B5lkCcYr68EkoD5
JCzEu+huTuWV5nGi68rjC+y1T6LGidJ7ESBqvj26aO3Knvv4naflAkwZ7dtMkxEc
Y9sdcHQaafGiTVKoMuSQ6huoV/Ze5SzLtxTIaWtS2nHowQ9RmFteTJTChQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA9yg+jzW5fdRDUej8Z1SNcWPGd9MB8GA1UdIwQY
MBaAFC22FvOtA2PnJpzC61jRvAhsyXXyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGJZVzg2MERZLWNtbk1McldORzhDR3pKZGZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi8yYTIyNmQtYzcyYy00YzEyLWJiYmEt
YTRiNTVhNzFjMjI4LzEvTGJZVzg2MERZLWNtbk1McldORzhDR3pKZGZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi8yYTIyNmQtYzcyYy00YzEyLWJiYmEtYTRiNTVhNzFjMjI4
LzEvTGJZVzg2MERZLWNtbk1McldORzhDR3pKZGZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABGM53ppt
4km2JntNMs5SrECIla7yuAVJNw9Wkscv4t/7AtJ5x6WQOTBXLi2Q2wahhLVhvD4j
cjpc+wFrNWsNVuVcEAXQHCgu+hgCiYKUmm74X4DETgus8uLzgmybNwJnBfd/bpGO
3ZT4NVrNe/BtOjte4ttt3o8nbeDvHyCmKAPRNqtNpfVgtmX0Fyjqn+As0UkPgn9j
Jqj92Ae1aZyCn/etGgPNTMNd+5lh0EhlAf5Hq7uLDQpDps+IUAmrF+6DZDwqG6Mb
PO9RSGotlXmxjLPHJmtYrBSmXP7GMhe9FK+HQ9CorWA6u8xpeXXVkPViBbCXUood
IxrVNIFDPmhbEA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:29:04 2025 by rpki-client