Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/lbmAuBA5WB4NLDelEhbNeXKbDHE.mft
File: lbmAuBA5WB4NLDelEhbNeXKbDHE.mft (raw, json)
Hash identifier: hYhxAaSN14X7tMK8h6th+npZiy3Dxy8iceaBJFQPytg=
Subject key identifier: 96:B9:A5:C1:CA:88:8D:CF:ED:A9:30:2B:FA:B8:83:31:49:44:CE:D5
Authority key identifier: 95:B9:80:B8:10:39:58:1E:0D:2C:37:A5:12:16:CD:79:72:9B:0C:71
Certificate issuer: /CN=95b980b81039581e0d2c37a51216cd79729b0c71
Certificate serial: 0198D6CD3EDA4FDB3318713A2538A17F84B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbmAuBA5WB4NLDelEhbNeXKbDHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/lbmAuBA5WB4NLDelEhbNeXKbDHE.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 12:00:31 +0000
Manifest this update: Sat 23 Aug 2025 12:00:31 +0000
Manifest next update: Sun 24 Aug 2025 12:00:31 +0000
Files and hashes: 1: ANSAYrE9HNntD61TvEpJUmG8rgw.roa (hash: 4+iM21UqhAp7nE5c7mZKQw9TVqg+SMBpGm5UpV8V8dc=)
2: PJ5ra5RQEPuenhUZKqA-ySi8au4.roa (hash: HAE/ZYsuA8aESklvJ9Rn5+/ozrtEQRVx0jFM8lv6NbI=)
3: lbmAuBA5WB4NLDelEhbNeXKbDHE.crl (hash: 7l8eudPIaoj6Y0TQbz9q0BE8TuMub35Fsn5RUdXPS8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/lbmAuBA5WB4NLDelEhbNeXKbDHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/lbmAuBA5WB4NLDelEhbNeXKbDHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lbmAuBA5WB4NLDelEhbNeXKbDHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:3e:da:4f:db:33:18:71:3a:25:38:a1:7f:84:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b980b81039581e0d2c37a51216cd79729b0c71
Validity
Not Before: Aug 23 12:00:31 2025 GMT
Not After : Aug 24 12:00:31 2025 GMT
Subject: CN=96b9a5c1ca888dcfeda9302bfab883314944ced5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c5:f2:a0:9c:4c:c5:c4:5e:41:43:c8:c8:be:
4f:e2:74:2e:32:45:a4:3e:1d:b6:9a:0f:51:d1:a0:
7b:52:6b:39:a5:f4:8b:25:4f:e8:83:ec:fe:e5:75:
40:47:3d:63:53:73:ea:35:72:4f:fd:d4:cf:b4:1b:
19:fc:00:57:d7:b9:52:00:9f:0f:ed:91:51:8d:00:
50:27:29:19:82:ee:bc:89:eb:2a:38:f1:7a:e5:0b:
b4:a0:89:37:88:66:6c:07:ef:dd:aa:cd:43:61:14:
f7:2c:11:b7:1d:7b:d6:83:49:82:b1:ab:06:da:23:
a0:83:c9:47:37:2a:dc:5e:3b:e3:91:41:36:1b:b4:
6f:05:5a:d6:26:b2:ad:01:a0:8c:bb:27:e2:36:c8:
dd:64:7c:75:4a:7b:ba:ef:9c:72:17:55:fb:f7:b7:
96:f6:69:13:74:70:39:73:2f:c3:db:d7:8e:4f:fb:
18:98:9a:12:5a:e2:ed:64:f5:e9:ab:0d:10:a0:e5:
97:5e:26:78:fa:4c:91:05:16:77:ca:cc:03:6c:5b:
7c:55:41:11:e8:29:56:66:21:68:d2:7b:e6:50:ff:
d1:37:0b:b6:71:e6:d2:3f:bc:f8:d6:a6:71:db:36:
a6:55:5e:82:60:ab:d0:1f:6b:f0:ac:c0:50:2e:68:
f7:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:B9:A5:C1:CA:88:8D:CF:ED:A9:30:2B:FA:B8:83:31:49:44:CE:D5
X509v3 Authority Key Identifier:
keyid:95:B9:80:B8:10:39:58:1E:0D:2C:37:A5:12:16:CD:79:72:9B:0C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbmAuBA5WB4NLDelEhbNeXKbDHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/lbmAuBA5WB4NLDelEhbNeXKbDHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/lbmAuBA5WB4NLDelEhbNeXKbDHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:31:5f:b6:03:64:b3:24:13:b7:66:f0:bf:a8:39:9a:28:84:
9c:cb:f9:07:11:c7:a5:cb:75:8f:09:ee:e2:f1:f6:d2:bd:ee:
d5:23:7a:0e:21:8e:ec:e0:3c:7e:ff:ed:1b:4e:fe:0a:93:fa:
a7:d8:9e:82:db:77:2d:ce:2f:a8:05:38:5f:a8:10:5e:6e:62:
34:48:91:bc:ab:14:4e:89:78:05:8b:fe:51:33:72:80:74:84:
79:ca:2f:14:17:77:38:d3:31:17:df:58:27:b6:a4:87:70:82:
71:40:17:15:83:f9:b6:b1:e9:a8:23:1e:41:2f:d3:c5:81:ef:
6f:c2:50:63:89:94:c1:2b:1e:c0:7d:ab:a9:13:66:e2:ee:e2:
49:de:e2:94:78:53:40:01:91:d3:a5:70:e5:9a:82:f4:72:ca:
ae:cf:d2:08:49:cd:3a:7f:3d:ed:db:8f:cf:1c:e7:a9:85:b2:
dd:be:8b:3a:1d:7b:4b:93:13:7f:91:fa:a9:e0:99:22:9f:cb:
13:bf:af:55:b3:dc:c3:2d:94:13:3d:b5:f4:8c:8a:54:c3:af:
43:8f:ee:a5:2b:9e:fe:b1:fe:4c:46:60:73:e5:a7:f9:72:c1:
9f:58:71:18:fd:e7:96:5e:0a:71:a4:e6:f3:5e:dc:db:cc:9c:
a8:95:11:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWzT7aT9szGHE6JTihf4SxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1Yjk4MGI4MTAzOTU4MWUwZDJjMzdhNTEyMTZjZDc5NzI5
YjBjNzEwHhcNMjUwODIzMTIwMDMxWhcNMjUwODI0MTIwMDMxWjAzMTEwLwYDVQQD
Eyg5NmI5YTVjMWNhODg4ZGNmZWRhOTMwMmJmYWI4ODMzMTQ5NDRjZWQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8XyoJxMxcReQUPIyL5P4nQuMkWk
Ph22mg9R0aB7Ums5pfSLJU/og+z+5XVARz1jU3PqNXJP/dTPtBsZ/ABX17lSAJ8P
7ZFRjQBQJykZgu68iesqOPF65Qu0oIk3iGZsB+/dqs1DYRT3LBG3HXvWg0mCsasG
2iOgg8lHNyrcXjvjkUE2G7RvBVrWJrKtAaCMuyfiNsjdZHx1Snu675xyF1X797eW
9mkTdHA5cy/D29eOT/sYmJoSWuLtZPXpqw0QoOWXXiZ4+kyRBRZ3yswDbFt8VUER
6ClWZiFo0nvmUP/RNwu2cebSP7z41qZx2zamVV6CYKvQH2vwrMBQLmj3iQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJa5pcHKiI3P7akwK/q4gzFJRM7VMB8GA1UdIwQY
MBaAFJW5gLgQOVgeDSw3pRIWzXlymwxxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGJtQXVCQTVXQjROTERlbEVoYk5lWEtiREhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC82MzQxNzItYmIzNy00ZDgyLTg4YTIt
OTQyZDJjNmM1ODU2LzEvbGJtQXVCQTVXQjROTERlbEVoYk5lWEtiREhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC82MzQxNzItYmIzNy00ZDgyLTg4YTItOTQyZDJjNmM1ODU2
LzEvbGJtQXVCQTVXQjROTERlbEVoYk5lWEtiREhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAejFftgNk
syQTt2bwv6g5miiEnMv5BxHHpct1jwnu4vH20r3u1SN6DiGO7OA8fv/tG07+CpP6
p9iegtt3Lc4vqAU4X6gQXm5iNEiRvKsUTol4BYv+UTNygHSEecovFBd3ONMxF99Y
J7akh3CCcUAXFYP5trHpqCMeQS/TxYHvb8JQY4mUwSsewH2rqRNm4u7iSd7ilHhT
QAGR06Vw5ZqC9HLKrs/SCEnNOn897duPzxznqYWy3b6LOh17S5MTf5H6qeCZIp/L
E7+vVbPcwy2UEz219IyKVMOvQ4/upSue/rH+TEZgc+Wn+XLBn1hxGP3nll4KcaTm
817c28ycqJURJw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:45:49 2025 by rpki-client