Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/c58c8c-5c6e-44e0-82af-e96de3112dea/1/LBMiAg7k5Zy1zT3nFlDGKv1MAic.mft
File: LBMiAg7k5Zy1zT3nFlDGKv1MAic.mft (raw, json)
Hash identifier: WiCSxZKyf1mvASa2kZl6dpD0VkpyO1mZRzDU02/FHuc=
Subject key identifier: A2:3E:37:CB:8E:BC:B3:74:FB:7A:FF:B7:B7:5D:8C:5C:5F:9F:12:85
Authority key identifier: 2C:13:22:02:0E:E4:E5:9C:B5:CD:3D:E7:16:50:C6:2A:FD:4C:02:27
Certificate issuer: /CN=2c1322020ee4e59cb5cd3de71650c62afd4c0227
Certificate serial: 0198D473FB372323D063B017E7E16558BEA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LBMiAg7k5Zy1zT3nFlDGKv1MAic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/c58c8c-5c6e-44e0-82af-e96de3112dea/1/LBMiAg7k5Zy1zT3nFlDGKv1MAic.mft
Manifest number: 095E
Signing time: Sat 23 Aug 2025 01:03:47 +0000
Manifest this update: Sat 23 Aug 2025 01:03:47 +0000
Manifest next update: Sun 24 Aug 2025 01:03:47 +0000
Files and hashes: 1: LBMiAg7k5Zy1zT3nFlDGKv1MAic.crl (hash: Zi1sEGI/78AsQQETHpp3ElAZUELrtSVsDeLrKmx0N8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/c58c8c-5c6e-44e0-82af-e96de3112dea/1/LBMiAg7k5Zy1zT3nFlDGKv1MAic.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/c58c8c-5c6e-44e0-82af-e96de3112dea/1/LBMiAg7k5Zy1zT3nFlDGKv1MAic.mft
rsync://rpki.ripe.net/repository/DEFAULT/LBMiAg7k5Zy1zT3nFlDGKv1MAic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:fb:37:23:23:d0:63:b0:17:e7:e1:65:58:be:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c1322020ee4e59cb5cd3de71650c62afd4c0227
Validity
Not Before: Aug 23 01:03:47 2025 GMT
Not After : Aug 24 01:03:47 2025 GMT
Subject: CN=a23e37cb8ebcb374fb7affb7b75d8c5c5f9f1285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:4c:79:fa:fd:e7:d1:6e:e7:9b:9e:f6:59:aa:
1a:b4:2b:79:2d:4b:0e:98:11:98:14:01:12:cc:de:
ea:86:19:d1:22:2a:34:dc:86:0b:76:b0:66:3f:e2:
e2:3d:f5:1b:c0:06:4f:52:49:15:31:db:14:7c:99:
43:a7:f2:6e:1f:87:b2:35:d3:26:74:86:9c:29:88:
e4:5a:5b:c4:0a:da:61:8f:41:47:42:cf:de:70:5b:
0a:a1:20:bb:75:b9:3c:32:ab:c9:a1:69:78:e0:f3:
0f:05:39:de:7a:bc:47:80:31:dc:48:a1:f9:93:a7:
f5:fd:e5:c1:35:db:40:a9:1f:37:07:5e:f8:5b:0a:
5c:ed:72:ad:a0:b4:d3:54:29:f2:4d:92:78:18:e6:
a9:1e:10:17:f5:22:7f:fa:08:fe:68:71:df:6e:89:
a0:07:ac:2f:67:fe:f3:2f:5b:fb:e8:4e:21:37:a4:
ca:42:fb:de:62:0e:8c:0f:99:66:42:35:3c:8e:ba:
2a:8c:0e:f9:22:f7:f4:be:f4:10:d4:90:77:30:c3:
9e:0b:a6:ae:f3:47:92:0c:1c:89:99:63:20:17:39:
17:62:60:4a:62:08:a5:7f:7c:0d:cc:07:f1:86:5b:
9c:8d:03:b4:96:98:f7:c0:88:8f:1c:3b:0b:b2:d0:
a6:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:3E:37:CB:8E:BC:B3:74:FB:7A:FF:B7:B7:5D:8C:5C:5F:9F:12:85
X509v3 Authority Key Identifier:
keyid:2C:13:22:02:0E:E4:E5:9C:B5:CD:3D:E7:16:50:C6:2A:FD:4C:02:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LBMiAg7k5Zy1zT3nFlDGKv1MAic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c58c8c-5c6e-44e0-82af-e96de3112dea/1/LBMiAg7k5Zy1zT3nFlDGKv1MAic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c58c8c-5c6e-44e0-82af-e96de3112dea/1/LBMiAg7k5Zy1zT3nFlDGKv1MAic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:ae:a7:6a:0f:a3:02:67:21:47:de:bc:bc:ba:b9:7e:6f:02:
6b:ea:dd:48:32:8f:e9:ea:fd:9d:1c:b2:42:58:32:dd:61:bc:
60:bc:c1:b4:17:24:82:7f:d8:dd:81:b1:97:7c:ef:91:c8:1c:
26:b1:29:16:a4:cb:33:72:ab:5b:11:bb:3c:3b:04:32:e7:07:
d3:cd:89:b1:7e:3e:34:c3:09:48:ac:66:29:59:ed:1b:2f:d8:
58:41:c8:01:a9:12:96:20:43:3a:a1:aa:2a:b7:ce:78:e0:95:
5b:43:1e:5c:83:43:0b:37:c0:28:63:ee:c4:0e:f5:5c:da:78:
25:1f:90:7c:b1:ab:9a:89:40:f1:56:0a:b8:ec:f5:3e:eb:05:
4a:64:3e:7d:36:59:36:d3:18:c2:24:b4:f6:ff:07:13:2a:27:
af:1e:9d:ae:6e:4f:c6:63:58:23:97:d0:b6:ff:ad:f2:b3:23:
20:d0:46:e8:ea:04:a7:40:28:6e:ab:ac:f5:28:db:db:9f:02:
e0:a2:ef:f4:e0:04:4c:25:7c:b0:83:a5:a3:a3:a8:e6:10:f6:
45:63:e1:95:7c:ce:0d:ae:9b:ee:c7:fa:7e:0f:73:3d:62:a7:
d5:2e:53:96:81:06:ac:6d:12:52:36:77:75:94:41:68:59:84:
9b:63:bd:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUc/s3IyPQY7AX5+FlWL6jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjMTMyMjAyMGVlNGU1OWNiNWNkM2RlNzE2NTBjNjJhZmQ0
YzAyMjcwHhcNMjUwODIzMDEwMzQ3WhcNMjUwODI0MDEwMzQ3WjAzMTEwLwYDVQQD
EyhhMjNlMzdjYjhlYmNiMzc0ZmI3YWZmYjdiNzVkOGM1YzVmOWYxMjg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Ex5+v3n0W7nm572WaoatCt5LUsO
mBGYFAESzN7qhhnRIio03IYLdrBmP+LiPfUbwAZPUkkVMdsUfJlDp/JuH4eyNdMm
dIacKYjkWlvECtphj0FHQs/ecFsKoSC7dbk8MqvJoWl44PMPBTneerxHgDHcSKH5
k6f1/eXBNdtAqR83B174Wwpc7XKtoLTTVCnyTZJ4GOapHhAX9SJ/+gj+aHHfbomg
B6wvZ/7zL1v76E4hN6TKQvveYg6MD5lmQjU8jroqjA75Ivf0vvQQ1JB3MMOeC6au
80eSDByJmWMgFzkXYmBKYgilf3wNzAfxhlucjQO0lpj3wIiPHDsLstCmeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKI+N8uOvLN0+3r/t7ddjFxfnxKFMB8GA1UdIwQY
MBaAFCwTIgIO5OWctc095xZQxir9TAInMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTEJNaUFnN2s1WnkxelQzbkZsREdLdjFNQWljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9jNThjOGMtNWM2ZS00NGUwLTgyYWYt
ZTk2ZGUzMTEyZGVhLzEvTEJNaUFnN2s1WnkxelQzbkZsREdLdjFNQWljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS9jNThjOGMtNWM2ZS00NGUwLTgyYWYtZTk2ZGUzMTEyZGVh
LzEvTEJNaUFnN2s1WnkxelQzbkZsREdLdjFNQWljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARa6nag+j
AmchR968vLq5fm8Ca+rdSDKP6er9nRyyQlgy3WG8YLzBtBckgn/Y3YGxl3zvkcgc
JrEpFqTLM3KrWxG7PDsEMucH082JsX4+NMMJSKxmKVntGy/YWEHIAakSliBDOqGq
KrfOeOCVW0MeXINDCzfAKGPuxA71XNp4JR+QfLGrmolA8VYKuOz1PusFSmQ+fTZZ
NtMYwiS09v8HEyonrx6drm5PxmNYI5fQtv+t8rMjINBG6OoEp0Aobqus9Sjb258C
4KLv9OAETCV8sIOlo6Oo5hD2RWPhlXzODa6b7sf6fg9zPWKn1S5TloEGrG0SUjZ3
dZRBaFmEm2O9tg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 09:49:18 2025 by rpki-client