Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/c58c8c-5c6e-44e0-82af-e96de3112dea/1/LBMiAg7k5Zy1zT3nFlDGKv1MAic.mft
File: LBMiAg7k5Zy1zT3nFlDGKv1MAic.mft (raw, json)
Hash identifier: l3+x/1sJEQ8BDDz71qmmbw8qctA75gMQaFe4ncRRiY4=
Subject key identifier: D0:4E:24:C1:62:03:02:CF:21:47:6A:35:22:11:E2:23:20:71:A4:56
Authority key identifier: 2C:13:22:02:0E:E4:E5:9C:B5:CD:3D:E7:16:50:C6:2A:FD:4C:02:27
Certificate issuer: /CN=2c1322020ee4e59cb5cd3de71650c62afd4c0227
Certificate serial: 0199FFC8682F755EA86A940B8A0A3D97AD90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LBMiAg7k5Zy1zT3nFlDGKv1MAic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/c58c8c-5c6e-44e0-82af-e96de3112dea/1/LBMiAg7k5Zy1zT3nFlDGKv1MAic.mft
Manifest number: 09F9
Signing time: Mon 20 Oct 2025 04:02:27 +0000
Manifest this update: Mon 20 Oct 2025 04:02:27 +0000
Manifest next update: Tue 21 Oct 2025 04:02:27 +0000
Files and hashes: 1: LBMiAg7k5Zy1zT3nFlDGKv1MAic.crl (hash: 99Y67kH7LAz06qQZ6kZWyyRZcCwGCaspOreAkBPK6sg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/c58c8c-5c6e-44e0-82af-e96de3112dea/1/LBMiAg7k5Zy1zT3nFlDGKv1MAic.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/c58c8c-5c6e-44e0-82af-e96de3112dea/1/LBMiAg7k5Zy1zT3nFlDGKv1MAic.mft
rsync://rpki.ripe.net/repository/DEFAULT/LBMiAg7k5Zy1zT3nFlDGKv1MAic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:68:2f:75:5e:a8:6a:94:0b:8a:0a:3d:97:ad:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c1322020ee4e59cb5cd3de71650c62afd4c0227
Validity
Not Before: Oct 20 04:02:27 2025 GMT
Not After : Oct 21 04:02:27 2025 GMT
Subject: CN=d04e24c1620302cf21476a352211e2232071a456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:6c:88:2c:1b:92:3e:46:98:83:d6:41:6d:66:
77:a5:a3:40:46:ef:e7:c8:08:f3:a3:b3:b1:d6:0f:
21:de:99:bf:83:03:28:07:1d:0b:15:a4:f5:28:f9:
02:e3:9a:9e:a2:a1:9d:d4:25:b6:aa:5f:38:18:48:
e1:f2:a5:98:d4:5d:cd:61:c6:60:89:33:46:70:6b:
c1:17:35:4b:6f:dc:8a:aa:74:d0:3c:91:47:e2:05:
47:18:6a:3a:f9:e2:06:8d:02:49:da:3f:84:44:b9:
ff:dc:6d:43:e6:c8:bc:5f:5f:79:96:4a:e1:43:35:
b7:77:68:d7:43:db:f3:53:5d:fc:b3:64:6c:6e:db:
a3:a9:79:46:7f:13:75:2f:79:6d:86:2b:af:9d:63:
7f:b7:07:d5:2f:85:56:30:fa:e4:72:12:fd:9d:c7:
73:a8:be:92:f5:d4:87:f6:85:d9:40:3b:db:96:ff:
6f:86:3d:25:e0:10:a6:7e:57:d7:fa:7b:38:fd:00:
ec:0b:5d:11:0b:b2:fd:1e:1c:01:87:12:06:c9:ff:
69:41:3d:19:8b:48:81:83:e7:11:7a:dc:de:d2:77:
05:3c:c4:99:dd:d4:1b:3b:f2:1f:d4:b0:3d:4f:42:
40:f6:7f:7f:f2:e0:11:65:d4:f3:26:47:97:2e:e4:
d0:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:4E:24:C1:62:03:02:CF:21:47:6A:35:22:11:E2:23:20:71:A4:56
X509v3 Authority Key Identifier:
keyid:2C:13:22:02:0E:E4:E5:9C:B5:CD:3D:E7:16:50:C6:2A:FD:4C:02:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LBMiAg7k5Zy1zT3nFlDGKv1MAic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c58c8c-5c6e-44e0-82af-e96de3112dea/1/LBMiAg7k5Zy1zT3nFlDGKv1MAic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c58c8c-5c6e-44e0-82af-e96de3112dea/1/LBMiAg7k5Zy1zT3nFlDGKv1MAic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:be:39:48:f8:bd:01:eb:2f:de:56:51:5b:e5:49:b3:e6:11:
8f:85:80:34:56:89:bd:56:fe:a5:2c:15:0e:c5:09:d9:08:6c:
6e:bb:c8:5a:5d:b6:fa:0f:86:04:b2:49:dd:7f:a0:a4:c3:d0:
de:d9:2f:97:c2:d0:7b:14:84:9b:aa:68:00:7b:47:a8:db:1d:
1a:74:91:b6:ea:e3:18:9d:1e:67:a9:54:4f:b8:28:bf:8d:79:
91:ac:1c:1e:47:6a:49:96:d0:97:b5:de:6c:f1:eb:cf:aa:22:
04:68:89:e4:d6:18:56:f4:79:71:98:cd:07:68:b1:35:f4:af:
96:6a:c7:49:4d:c6:ab:b0:c5:ea:77:d5:3b:5d:88:e1:26:7a:
b3:ca:04:f6:3e:41:de:d9:93:fd:53:39:5f:96:fd:3d:3b:7b:
70:3d:6d:e7:c6:df:8b:85:69:bb:f3:a9:0d:ed:57:2f:20:23:
f0:5e:a4:41:0b:f5:1d:9e:b7:91:4e:ee:88:c8:55:d6:88:3a:
12:84:c6:0b:85:76:77:c9:fb:08:a8:63:74:4a:77:8b:1d:99:
8a:6a:ee:13:ca:06:eb:24:ca:50:ba:da:1b:04:27:bf:ef:4b:
93:ec:63:e7:88:55:f2:42:79:3f:67:5c:31:56:06:be:6a:a0:
27:10:05:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/yGgvdV6oapQLigo9l62QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjMTMyMjAyMGVlNGU1OWNiNWNkM2RlNzE2NTBjNjJhZmQ0
YzAyMjcwHhcNMjUxMDIwMDQwMjI3WhcNMjUxMDIxMDQwMjI3WjAzMTEwLwYDVQQD
EyhkMDRlMjRjMTYyMDMwMmNmMjE0NzZhMzUyMjExZTIyMzIwNzFhNDU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGyILBuSPkaYg9ZBbWZ3paNARu/n
yAjzo7Ox1g8h3pm/gwMoBx0LFaT1KPkC45qeoqGd1CW2ql84GEjh8qWY1F3NYcZg
iTNGcGvBFzVLb9yKqnTQPJFH4gVHGGo6+eIGjQJJ2j+ERLn/3G1D5si8X195lkrh
QzW3d2jXQ9vzU138s2RsbtujqXlGfxN1L3lthiuvnWN/twfVL4VWMPrkchL9ncdz
qL6S9dSH9oXZQDvblv9vhj0l4BCmflfX+ns4/QDsC10RC7L9HhwBhxIGyf9pQT0Z
i0iBg+cRetze0ncFPMSZ3dQbO/If1LA9T0JA9n9/8uARZdTzJkeXLuTQMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNBOJMFiAwLPIUdqNSIR4iMgcaRWMB8GA1UdIwQY
MBaAFCwTIgIO5OWctc095xZQxir9TAInMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTEJNaUFnN2s1WnkxelQzbkZsREdLdjFNQWljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9jNThjOGMtNWM2ZS00NGUwLTgyYWYt
ZTk2ZGUzMTEyZGVhLzEvTEJNaUFnN2s1WnkxelQzbkZsREdLdjFNQWljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS9jNThjOGMtNWM2ZS00NGUwLTgyYWYtZTk2ZGUzMTEyZGVh
LzEvTEJNaUFnN2s1WnkxelQzbkZsREdLdjFNQWljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdL45SPi9
Aesv3lZRW+VJs+YRj4WANFaJvVb+pSwVDsUJ2QhsbrvIWl22+g+GBLJJ3X+gpMPQ
3tkvl8LQexSEm6poAHtHqNsdGnSRturjGJ0eZ6lUT7gov415kawcHkdqSZbQl7Xe
bPHrz6oiBGiJ5NYYVvR5cZjNB2ixNfSvlmrHSU3Gq7DF6nfVO12I4SZ6s8oE9j5B
3tmT/VM5X5b9PTt7cD1t58bfi4Vpu/OpDe1XLyAj8F6kQQv1HZ63kU7uiMhV1og6
EoTGC4V2d8n7CKhjdEp3ix2ZimruE8oG6yTKULraGwQnv+9Lk+xj54hV8kJ5P2dc
MVYGvmqgJxAFSQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 09:29:22 2025 by rpki-client