Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/c58c8c-5c6e-44e0-82af-e96de3112dea/1/LBMiAg7k5Zy1zT3nFlDGKv1MAic.mft
File: LBMiAg7k5Zy1zT3nFlDGKv1MAic.mft (raw, json)
Hash identifier: p3j5uYFWbcd57u+QksjN/MCrp90+dFZL587oTqDjyj8=
Subject key identifier: BE:AE:CC:D1:71:FB:DC:13:12:30:FB:BD:88:9D:49:26:19:02:F4:40
Authority key identifier: 2C:13:22:02:0E:E4:E5:9C:B5:CD:3D:E7:16:50:C6:2A:FD:4C:02:27
Certificate issuer: /CN=2c1322020ee4e59cb5cd3de71650c62afd4c0227
Certificate serial: 0197B6A18E51249FA9430627312BFADEBDFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LBMiAg7k5Zy1zT3nFlDGKv1MAic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/c58c8c-5c6e-44e0-82af-e96de3112dea/1/LBMiAg7k5Zy1zT3nFlDGKv1MAic.mft
Manifest number: 08CA
Signing time: Sat 28 Jun 2025 13:02:10 +0000
Manifest this update: Sat 28 Jun 2025 13:02:10 +0000
Manifest next update: Sun 29 Jun 2025 13:02:10 +0000
Files and hashes: 1: LBMiAg7k5Zy1zT3nFlDGKv1MAic.crl (hash: zxji+WujR0I+jpRcNdd2Aec6STw4n0hfoGLdw6DP+0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/c58c8c-5c6e-44e0-82af-e96de3112dea/1/LBMiAg7k5Zy1zT3nFlDGKv1MAic.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/c58c8c-5c6e-44e0-82af-e96de3112dea/1/LBMiAg7k5Zy1zT3nFlDGKv1MAic.mft
rsync://rpki.ripe.net/repository/DEFAULT/LBMiAg7k5Zy1zT3nFlDGKv1MAic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:8e:51:24:9f:a9:43:06:27:31:2b:fa:de:bd:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c1322020ee4e59cb5cd3de71650c62afd4c0227
Validity
Not Before: Jun 28 13:02:10 2025 GMT
Not After : Jun 29 13:02:10 2025 GMT
Subject: CN=beaeccd171fbdc131230fbbd889d49261902f440
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:8c:ee:8b:39:c1:46:cc:5f:54:88:93:07:1b:
07:27:5d:02:73:bc:80:dd:2b:ed:1b:56:c3:e2:97:
a1:3d:58:fa:d6:28:5a:a0:47:0f:9e:a0:4d:44:bc:
62:cc:4f:83:d9:fe:e6:09:9e:e5:3c:e9:4c:36:0e:
cb:42:b1:3c:8a:d2:80:44:7d:26:90:d2:ba:20:5b:
a6:7e:6d:6b:2c:6f:e5:4a:29:26:d7:f6:03:53:2f:
0b:a3:92:d8:e7:d9:c9:4d:44:49:d5:49:7e:28:c6:
b1:41:05:99:43:28:17:ea:49:0c:7d:92:a9:29:2a:
b5:81:f2:5d:0d:cb:56:ae:c1:a2:7c:23:18:4b:6f:
95:79:c3:36:5c:79:f2:9d:f3:c8:a4:05:e1:9a:ce:
0c:b2:7e:0a:ac:eb:61:70:1b:bd:5f:a7:17:96:11:
84:2f:00:77:9c:6f:c6:3f:91:92:8b:53:54:db:7b:
77:1d:83:d5:6e:dd:b2:df:38:7a:79:3c:ca:2f:c2:
fd:66:3e:db:99:32:44:7c:36:15:11:7a:19:02:b0:
b6:89:77:55:c8:40:f5:6b:09:5c:98:37:d9:dd:54:
c5:75:f7:9d:dc:a8:23:1e:0e:b4:1f:20:16:c3:92:
d9:2b:3a:ab:51:4e:fe:21:71:eb:66:fb:ee:8a:9c:
e8:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:AE:CC:D1:71:FB:DC:13:12:30:FB:BD:88:9D:49:26:19:02:F4:40
X509v3 Authority Key Identifier:
keyid:2C:13:22:02:0E:E4:E5:9C:B5:CD:3D:E7:16:50:C6:2A:FD:4C:02:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LBMiAg7k5Zy1zT3nFlDGKv1MAic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c58c8c-5c6e-44e0-82af-e96de3112dea/1/LBMiAg7k5Zy1zT3nFlDGKv1MAic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c58c8c-5c6e-44e0-82af-e96de3112dea/1/LBMiAg7k5Zy1zT3nFlDGKv1MAic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:2b:c7:60:76:fb:0b:7b:f1:ac:e7:be:c6:0d:ba:db:f8:eb:
13:07:35:94:3c:89:57:26:64:5c:34:0f:64:fd:9b:4f:52:be:
ca:14:5b:a3:b2:4c:a0:39:ea:2a:d3:d0:32:40:67:ab:00:7e:
a6:06:b8:13:67:a3:69:8c:d9:60:b2:2a:70:da:43:f7:da:41:
e0:dd:35:8a:a5:97:57:cf:4e:dd:68:31:bd:9d:1a:ac:fe:b4:
92:55:21:1d:1a:e7:ba:61:52:90:25:e1:da:ba:ba:03:a4:68:
41:02:ff:20:61:1a:7d:9d:ea:3a:b3:62:29:5d:14:b1:82:67:
d0:31:bd:58:66:48:03:50:62:78:78:be:34:d1:5c:00:8b:54:
b2:6d:28:47:db:a5:df:de:dd:75:1f:ee:14:25:61:cd:49:82:
6d:42:ea:06:c6:5b:60:49:31:68:66:19:c3:fe:50:74:30:1f:
90:e1:ef:59:19:b3:28:1e:96:35:e3:e5:55:93:1d:94:30:50:
a8:99:10:47:50:90:02:6f:7e:d6:5e:0b:84:b5:7d:71:04:d4:
9c:e1:ce:73:b9:c3:da:03:1e:f4:82:bb:24:dd:2b:53:c6:3c:
96:60:74:98:55:8d:61:f7:38:7e:23:f7:bb:47:59:51:49:ea:
30:c3:01:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oY5RJJ+pQwYnMSv63r36MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjMTMyMjAyMGVlNGU1OWNiNWNkM2RlNzE2NTBjNjJhZmQ0
YzAyMjcwHhcNMjUwNjI4MTMwMjEwWhcNMjUwNjI5MTMwMjEwWjAzMTEwLwYDVQQD
EyhiZWFlY2NkMTcxZmJkYzEzMTIzMGZiYmQ4ODlkNDkyNjE5MDJmNDQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ozuiznBRsxfVIiTBxsHJ10Cc7yA
3SvtG1bD4pehPVj61ihaoEcPnqBNRLxizE+D2f7mCZ7lPOlMNg7LQrE8itKARH0m
kNK6IFumfm1rLG/lSikm1/YDUy8Lo5LY59nJTURJ1Ul+KMaxQQWZQygX6kkMfZKp
KSq1gfJdDctWrsGifCMYS2+VecM2XHnynfPIpAXhms4Msn4KrOthcBu9X6cXlhGE
LwB3nG/GP5GSi1NU23t3HYPVbt2y3zh6eTzKL8L9Zj7bmTJEfDYVEXoZArC2iXdV
yED1awlcmDfZ3VTFdfed3KgjHg60HyAWw5LZKzqrUU7+IXHrZvvuipzoHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL6uzNFx+9wTEjD7vYidSSYZAvRAMB8GA1UdIwQY
MBaAFCwTIgIO5OWctc095xZQxir9TAInMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTEJNaUFnN2s1WnkxelQzbkZsREdLdjFNQWljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9jNThjOGMtNWM2ZS00NGUwLTgyYWYt
ZTk2ZGUzMTEyZGVhLzEvTEJNaUFnN2s1WnkxelQzbkZsREdLdjFNQWljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS9jNThjOGMtNWM2ZS00NGUwLTgyYWYtZTk2ZGUzMTEyZGVh
LzEvTEJNaUFnN2s1WnkxelQzbkZsREdLdjFNQWljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhyvHYHb7
C3vxrOe+xg262/jrEwc1lDyJVyZkXDQPZP2bT1K+yhRbo7JMoDnqKtPQMkBnqwB+
pga4E2ejaYzZYLIqcNpD99pB4N01iqWXV89O3WgxvZ0arP60klUhHRrnumFSkCXh
2rq6A6RoQQL/IGEafZ3qOrNiKV0UsYJn0DG9WGZIA1BieHi+NNFcAItUsm0oR9ul
397ddR/uFCVhzUmCbULqBsZbYEkxaGYZw/5QdDAfkOHvWRmzKB6WNePlVZMdlDBQ
qJkQR1CQAm9+1l4LhLV9cQTUnOHOc7nD2gMe9IK7JN0rU8Y8lmB0mFWNYfc4fiP3
u0dZUUnqMMMBFQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:09:31 2025 by rpki-client