Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/lbmAuBA5WB4NLDelEhbNeXKbDHE.mft
File: lbmAuBA5WB4NLDelEhbNeXKbDHE.mft (raw, json)
Hash identifier: o82gG8qNPSB79rt6yZaoPqFhaFeIod4oJ2hME9ZmUxA=
Subject key identifier: 75:B3:E2:87:0F:3F:E5:4A:1C:70:47:43:4F:6A:3C:2C:23:C9:93:BC
Authority key identifier: 95:B9:80:B8:10:39:58:1E:0D:2C:37:A5:12:16:CD:79:72:9B:0C:71
Certificate issuer: /CN=95b980b81039581e0d2c37a51216cd79729b0c71
Certificate serial: 0199FC587B60303FFBED5F684EB6AB76D6FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbmAuBA5WB4NLDelEhbNeXKbDHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/lbmAuBA5WB4NLDelEhbNeXKbDHE.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 12:01:21 +0000
Manifest this update: Sun 19 Oct 2025 12:01:21 +0000
Manifest next update: Mon 20 Oct 2025 12:01:21 +0000
Files and hashes: 1: ANSAYrE9HNntD61TvEpJUmG8rgw.roa (hash: 4+iM21UqhAp7nE5c7mZKQw9TVqg+SMBpGm5UpV8V8dc=)
2: PJ5ra5RQEPuenhUZKqA-ySi8au4.roa (hash: HAE/ZYsuA8aESklvJ9Rn5+/ozrtEQRVx0jFM8lv6NbI=)
3: lbmAuBA5WB4NLDelEhbNeXKbDHE.crl (hash: 1zMaADDNOHT2saW6WuqUnaDJIpqdPLi8/Yfix2eOA/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/lbmAuBA5WB4NLDelEhbNeXKbDHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/lbmAuBA5WB4NLDelEhbNeXKbDHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lbmAuBA5WB4NLDelEhbNeXKbDHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:7b:60:30:3f:fb:ed:5f:68:4e:b6:ab:76:d6:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b980b81039581e0d2c37a51216cd79729b0c71
Validity
Not Before: Oct 19 12:01:21 2025 GMT
Not After : Oct 20 12:01:21 2025 GMT
Subject: CN=75b3e2870f3fe54a1c7047434f6a3c2c23c993bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:53:37:3f:1e:55:f6:a9:33:68:1f:ea:1e:cf:
a9:b7:f8:bb:34:e6:f1:d0:97:85:37:af:d8:03:6e:
d9:37:b7:16:83:70:54:39:37:36:52:e1:22:f1:8f:
6a:38:69:ae:45:1d:eb:a7:fd:5b:d4:94:9c:71:d3:
ec:06:1e:d9:3c:e1:b2:af:2a:74:b6:af:23:aa:06:
ee:44:25:4f:24:e1:dc:f1:47:b4:68:78:d9:5c:f4:
4d:3d:97:45:34:01:ce:1a:f8:1b:f1:57:57:62:70:
91:bc:e6:20:b6:f0:dc:a3:f0:3b:03:06:80:c9:b6:
e5:e5:c5:f3:f2:4e:84:41:35:d6:7f:7e:df:9b:21:
a5:85:a2:d9:ad:90:d3:fe:a4:69:79:71:c7:07:9e:
5f:27:4f:3f:3f:3a:49:83:0a:1e:25:bb:e2:f3:41:
c6:e1:96:2b:81:01:5c:63:10:47:33:a9:6a:67:aa:
a9:7f:c5:9a:db:81:1a:52:b6:bc:f0:cc:20:1a:dd:
eb:98:bf:bc:97:30:34:61:24:9b:21:31:b7:cc:a3:
aa:99:e4:08:78:8c:55:55:10:2f:40:87:75:b0:80:
46:a1:0a:ca:08:74:8e:b5:1e:3e:ed:24:55:4e:0d:
b5:08:d2:6c:10:e2:f3:92:1f:a8:b0:90:bf:49:5e:
c5:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:B3:E2:87:0F:3F:E5:4A:1C:70:47:43:4F:6A:3C:2C:23:C9:93:BC
X509v3 Authority Key Identifier:
keyid:95:B9:80:B8:10:39:58:1E:0D:2C:37:A5:12:16:CD:79:72:9B:0C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbmAuBA5WB4NLDelEhbNeXKbDHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/lbmAuBA5WB4NLDelEhbNeXKbDHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/lbmAuBA5WB4NLDelEhbNeXKbDHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:96:b2:c1:70:0a:39:9d:41:26:64:7c:a5:e3:f3:fa:35:cb:
64:ab:57:02:8d:78:7b:1f:1c:0b:c0:3e:85:c1:c9:4e:99:4b:
a4:36:f1:c2:eb:e1:af:8d:b2:1a:ca:b5:db:f5:cc:b4:9d:59:
52:26:56:1d:bd:8a:34:42:04:2f:65:1d:c7:bd:08:41:67:60:
35:e0:cb:11:ff:52:04:4e:a5:b3:f3:3f:fb:48:95:44:15:8c:
03:50:8b:99:12:aa:e5:ae:37:75:d2:79:c9:48:65:21:f5:3a:
bf:d8:5d:44:f1:4d:11:b1:e7:e7:59:6f:de:08:ef:3e:80:ca:
1b:17:8b:b7:70:f9:52:4c:e5:8d:36:7e:b3:b5:02:78:25:8c:
b9:c2:24:a1:62:c6:28:c6:3a:ee:06:4e:f9:fc:0c:4f:2a:5b:
23:f5:c0:54:2d:b1:85:1c:af:cb:2c:c2:51:f1:8e:86:f5:be:
3f:2a:12:de:1c:a3:e9:8d:43:6e:18:6d:c4:fa:5a:9e:e6:71:
f3:f2:41:7b:75:33:dd:81:11:79:22:e0:c3:b3:6f:18:74:80:
05:1b:3e:96:ef:f2:29:f4:6a:4a:f7:34:39:69:66:c4:15:c4:
02:c7:3a:2b:d1:54:08:87:e2:fa:3e:24:3b:69:fe:04:28:24:
b3:f3:dd:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:37:18 2025 by rpki-client