Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/ecbffa-1166-4d1e-9f55-11575db64fbe/1/LBKCZbgJkXiNhuImLpM5A4tO-oI.mft
File: LBKCZbgJkXiNhuImLpM5A4tO-oI.mft (raw, json)
Hash identifier: Uid7ME8YuZ8mnJq0mm172u4VXRu4FAbjsOFB+dhXZTI=
Subject key identifier: D3:EE:7A:38:CC:4B:49:61:5E:CD:5A:E5:AC:BE:3F:81:08:EB:C5:69
Authority key identifier: 2C:12:82:65:B8:09:91:78:8D:86:E2:26:2E:93:39:03:8B:4E:FA:82
Certificate issuer: /CN=2c128265b80991788d86e2262e9339038b4efa82
Certificate serial: 0199FB7CF34EE58AD4E3D1B09B81C704F98E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LBKCZbgJkXiNhuImLpM5A4tO-oI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/ecbffa-1166-4d1e-9f55-11575db64fbe/1/LBKCZbgJkXiNhuImLpM5A4tO-oI.mft
Manifest number: 0271
Signing time: Sun 19 Oct 2025 08:01:33 +0000
Manifest this update: Sun 19 Oct 2025 08:01:33 +0000
Manifest next update: Mon 20 Oct 2025 08:01:33 +0000
Files and hashes: 1: AUJAohDb7gvWp2PAn2xH3z3Zx8I.roa (hash: Px2ndw4EQ+qkKAfeVMR+LtAp8KsmOxSR4KCS0rfVjWc=)
2: LBKCZbgJkXiNhuImLpM5A4tO-oI.crl (hash: ZrP9rC2E3y8UkxC9q4weClvOT1aLGtEj4Sj2ENqeS1Q=)
3: LTEzdR9zUquR1ggUmA4_QHu2p50.roa (hash: uNuzvFRDaCwMPWv1CbBVSxROhTe6dbQ9XSUinppVNcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/ecbffa-1166-4d1e-9f55-11575db64fbe/1/LBKCZbgJkXiNhuImLpM5A4tO-oI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/ecbffa-1166-4d1e-9f55-11575db64fbe/1/LBKCZbgJkXiNhuImLpM5A4tO-oI.mft
rsync://rpki.ripe.net/repository/DEFAULT/LBKCZbgJkXiNhuImLpM5A4tO-oI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:f3:4e:e5:8a:d4:e3:d1:b0:9b:81:c7:04:f9:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c128265b80991788d86e2262e9339038b4efa82
Validity
Not Before: Oct 19 08:01:33 2025 GMT
Not After : Oct 20 08:01:33 2025 GMT
Subject: CN=d3ee7a38cc4b49615ecd5ae5acbe3f8108ebc569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:7d:0c:fe:8b:01:6c:a3:a2:1b:5e:68:63:cb:
0c:3c:74:e3:7a:29:cd:b0:2b:74:d4:8b:d1:a0:20:
f0:85:a2:8c:51:52:3c:d7:a2:30:a2:a5:c5:73:7e:
3e:fc:d5:a0:35:5e:f8:d3:7f:40:65:1f:a4:46:10:
2b:1f:2b:e1:01:85:36:92:a6:eb:11:f7:74:93:a7:
36:e2:83:cd:4b:f9:ad:14:d1:fa:ff:7b:fd:e1:b6:
cc:73:91:5f:9f:6b:54:20:ff:2e:09:fc:97:ae:69:
aa:52:42:79:f4:10:fa:68:e3:c4:9c:06:a9:71:50:
5f:f3:0a:6d:c8:45:56:a3:5a:f9:61:b2:dd:e7:b3:
0d:ef:08:92:b2:bf:0f:ab:84:4e:5d:9a:ec:cc:22:
61:6d:f2:be:94:85:f8:be:1d:62:ef:18:cd:f1:6d:
0e:04:1e:e4:b4:1a:12:a4:84:f0:76:a7:ba:69:a9:
74:f5:94:61:11:20:4c:28:80:17:f8:5d:f8:77:d4:
ca:79:b7:03:21:a1:a1:4b:b8:cc:c6:6e:04:45:5d:
95:fe:dd:1f:6c:6a:8f:23:cc:31:3e:75:3c:1f:18:
33:ce:22:4f:a1:8f:c8:99:0a:49:24:6e:a1:7f:d5:
40:75:4c:32:87:e5:05:d7:8c:53:5b:0e:89:39:d7:
7e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:EE:7A:38:CC:4B:49:61:5E:CD:5A:E5:AC:BE:3F:81:08:EB:C5:69
X509v3 Authority Key Identifier:
keyid:2C:12:82:65:B8:09:91:78:8D:86:E2:26:2E:93:39:03:8B:4E:FA:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LBKCZbgJkXiNhuImLpM5A4tO-oI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ecbffa-1166-4d1e-9f55-11575db64fbe/1/LBKCZbgJkXiNhuImLpM5A4tO-oI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ecbffa-1166-4d1e-9f55-11575db64fbe/1/LBKCZbgJkXiNhuImLpM5A4tO-oI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:39:ce:fb:c6:00:80:19:7c:60:57:dd:1d:bf:10:c9:15:2b:
a1:ac:68:a0:e0:4d:d6:fb:e9:b3:b3:03:12:fd:a0:62:38:ca:
2e:4e:db:07:ec:61:27:80:69:a4:1c:3d:5f:15:17:10:8d:77:
3c:ee:d8:8e:fe:78:f9:90:c1:60:5a:ed:05:f7:f4:42:fd:93:
d8:8f:c7:f3:51:3a:6c:76:4f:3b:ca:88:28:cd:cb:33:3b:3e:
52:b5:56:fc:e8:66:41:56:80:58:5a:57:bb:27:8d:b1:e6:3b:
8a:e2:4d:60:cb:7a:0b:f2:52:ae:3e:8a:e9:73:7e:e0:25:9a:
58:56:2c:08:c0:3b:3e:6d:2b:f1:e9:f2:a2:88:36:b1:8a:56:
b8:14:f1:67:cf:b6:7e:77:8f:7d:cd:e1:35:b8:1d:65:06:6d:
59:c0:9d:a8:ca:77:91:8d:c3:fc:78:6e:33:2d:26:f1:6b:49:
f2:9e:80:55:be:a1:6a:f9:27:86:a8:53:5b:bf:d1:16:c3:45:
f1:0b:b9:8b:1f:6b:95:17:e8:d6:06:3d:5c:06:c3:e7:38:1b:
b5:c5:c0:23:92:2a:a1:8f:65:7a:86:db:5a:59:d3:47:84:88:
55:52:be:1c:20:83:df:c4:c9:97:db:50:5d:38:f5:1b:09:47:
4d:d0:17:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:24 2025 by rpki-client