
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.mft
File: lbheWsBVoSGIrlDNsAf6SItqqIs.mft (raw, json)
Hash identifier: a/VAtlgVp/noGrpF6ISmH9Ml8/7oIGpG5SkcKLmKe8g=
Subject key identifier: 83:AE:37:83:97:38:EA:52:65:73:36:BE:38:BF:0B:A1:66:51:1D:41
Authority key identifier: 95:B8:5E:5A:C0:55:A1:21:88:AE:50:CD:B0:07:FA:48:8B:6A:A8:8B
Certificate issuer: /CN=95b85e5ac055a12188ae50cdb007fa488b6aa88b
Certificate serial: 0199FBEBB420BD19E10E742493F35E3E53AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbheWsBVoSGIrlDNsAf6SItqqIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 10:02:32 +0000
Manifest this update: Sun 19 Oct 2025 10:02:32 +0000
Manifest next update: Mon 20 Oct 2025 10:02:32 +0000
Files and hashes: 1: 6LbIgFJwzpH2Qf0sirzfHYuw_a4.roa (hash: yVSc0ifnnPwL8H5EwEXT2iNnCkvEaZBn7yh2JV9dabc=)
2: lbheWsBVoSGIrlDNsAf6SItqqIs.crl (hash: wb0bwc6pDt5VFql4hWwSRwo5A53i5+hQHekUL3mJiaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/lbheWsBVoSGIrlDNsAf6SItqqIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:b4:20:bd:19:e1:0e:74:24:93:f3:5e:3e:53:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b85e5ac055a12188ae50cdb007fa488b6aa88b
Validity
Not Before: Oct 19 10:02:32 2025 GMT
Not After : Oct 20 10:02:32 2025 GMT
Subject: CN=83ae37839738ea52657336be38bf0ba166511d41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c1:5b:67:3d:b3:a4:8b:68:1a:6c:d9:86:ba:
fa:35:f9:a0:61:29:3f:09:af:45:fa:2a:7e:ee:f1:
59:92:fa:e7:18:f9:7d:86:e5:87:0e:6b:65:2a:0f:
ab:79:ae:8d:46:ef:ac:a0:72:da:95:ae:9d:67:db:
bb:3b:11:d6:44:c8:c7:e4:45:d2:8c:a9:2e:30:f5:
12:0f:cf:61:c0:b8:63:80:d4:59:a1:8d:fa:29:7c:
11:3d:64:fd:ec:77:90:0b:61:84:c2:12:fc:a5:61:
b9:3b:cb:e9:b9:4f:94:2a:1a:7e:73:8d:8b:89:c6:
a1:bf:db:3f:4b:69:00:2c:06:30:96:68:cb:fa:f2:
e2:c8:04:b5:1a:94:0d:68:39:27:6a:66:f6:da:10:
35:24:63:0f:3f:c5:cf:1c:47:40:68:ef:4c:72:f8:
8f:b1:7c:6f:fe:e4:d6:aa:79:0a:d4:12:bf:04:06:
c9:6f:b4:bd:d0:d4:65:f7:32:50:47:da:35:b8:fd:
c3:ca:04:6a:2e:d9:bc:39:c0:ba:c4:64:fd:7d:a1:
f4:7b:47:8f:b1:90:a6:6b:8d:85:32:53:4e:e2:49:
f3:ed:0a:a4:ed:0d:8c:a4:8b:e0:bf:13:0b:0a:bb:
62:85:ac:45:3e:1a:fb:16:ea:81:22:4d:c7:27:7e:
e2:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:AE:37:83:97:38:EA:52:65:73:36:BE:38:BF:0B:A1:66:51:1D:41
X509v3 Authority Key Identifier:
keyid:95:B8:5E:5A:C0:55:A1:21:88:AE:50:CD:B0:07:FA:48:8B:6A:A8:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbheWsBVoSGIrlDNsAf6SItqqIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:aa:7f:d2:b2:f1:d3:0d:22:81:52:f4:9b:11:a8:77:be:5a:
cf:8d:63:93:d8:ed:b0:c8:f9:56:80:09:5d:69:29:51:8b:5d:
68:b4:45:86:7c:2a:3d:4c:9c:ff:9c:1e:d2:1c:95:44:4d:17:
f8:3c:a3:1d:0a:a6:cf:b7:0e:00:d9:7a:0b:87:84:19:87:fc:
f8:10:51:1f:52:ea:a8:31:79:86:00:8d:48:ad:81:a7:8c:54:
59:97:47:31:6f:72:8f:3d:b1:df:f5:98:10:74:d0:d7:f1:33:
33:45:a9:a6:7b:3a:15:be:d5:0a:41:15:ea:6e:98:78:60:9d:
31:eb:67:a3:8d:a2:88:27:89:b7:33:35:4c:18:a0:72:10:c8:
2f:da:26:60:34:75:13:a9:4f:a0:ec:ea:82:35:a7:5f:06:21:
b4:e3:9f:fb:c0:b9:bb:6c:98:fd:9b:c3:f4:49:7d:f8:bd:d9:
6c:4c:fa:ff:a3:cd:8d:2f:25:b3:06:37:c8:21:67:5a:6c:61:
c7:9f:00:7e:bf:33:e3:9b:be:fe:6e:85:38:fa:29:85:c4:3c:
30:af:1e:29:6b:7d:31:87:f0:c0:bb:40:c3:2a:c2:6e:bc:ad:
08:dd:fb:31:d8:69:0a:fd:00:18:84:af:3f:22:23:33:24:6a:
11:20:05:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:05:46 2025 by rpki-client