
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/2b5ed6-3a7c-4631-b49d-bf55b8b1669c/1/LM5dUfp1u7btlipBZu9vhjCgJYE.mft
File: LM5dUfp1u7btlipBZu9vhjCgJYE.mft (raw, json)
Hash identifier: QKLdutE9SWyuNJRaHz88aLIwdos+EovbP1/PuDQJLnY=
Subject key identifier: E1:C2:A3:70:3E:72:56:D0:AD:6D:53:23:4D:54:37:11:14:E1:4A:09
Authority key identifier: 2C:CE:5D:51:FA:75:BB:B6:ED:96:2A:41:66:EF:6F:86:30:A0:25:81
Certificate issuer: /CN=2cce5d51fa75bbb6ed962a4166ef6f8630a02581
Certificate serial: 0199FBEB521055A59540D2528096208B8B0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LM5dUfp1u7btlipBZu9vhjCgJYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/2b5ed6-3a7c-4631-b49d-bf55b8b1669c/1/LM5dUfp1u7btlipBZu9vhjCgJYE.mft
Manifest number: 1380
Signing time: Sun 19 Oct 2025 10:02:07 +0000
Manifest this update: Sun 19 Oct 2025 10:02:07 +0000
Manifest next update: Mon 20 Oct 2025 10:02:07 +0000
Files and hashes: 1: LM5dUfp1u7btlipBZu9vhjCgJYE.crl (hash: hKr28bl8Th1DrOB4k8of+FTLUEQD+xDZwLz4hdWSUJg=)
2: gwJ9hMltFlWaOeN-R_fhzG-JI24.roa (hash: wuy2X0I9Yx6e8bAqg0gf/bu0yRoRH3AWoeZNQfjdFoc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/2b5ed6-3a7c-4631-b49d-bf55b8b1669c/1/LM5dUfp1u7btlipBZu9vhjCgJYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/2b5ed6-3a7c-4631-b49d-bf55b8b1669c/1/LM5dUfp1u7btlipBZu9vhjCgJYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LM5dUfp1u7btlipBZu9vhjCgJYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:52:10:55:a5:95:40:d2:52:80:96:20:8b:8b:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cce5d51fa75bbb6ed962a4166ef6f8630a02581
Validity
Not Before: Oct 19 10:02:07 2025 GMT
Not After : Oct 20 10:02:07 2025 GMT
Subject: CN=e1c2a3703e7256d0ad6d53234d54371114e14a09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ed:5d:ac:a1:a5:6c:44:b2:ae:68:13:26:0d:
13:74:a8:a5:27:f4:cc:f9:31:14:2f:b2:4c:d8:ac:
d0:ea:bc:4b:4b:16:65:fb:77:85:10:a5:84:aa:2c:
19:94:64:6f:cf:c2:d0:0f:65:d2:9e:72:e6:a4:6e:
6e:2a:11:9d:72:19:8b:a9:13:f1:7c:4c:67:33:11:
ac:c0:0d:c1:4a:02:14:7a:30:0a:10:8e:4f:76:33:
9d:ac:78:50:35:ff:1c:42:bf:02:8f:5e:61:a2:3b:
1c:66:0e:a9:6c:3d:f9:07:ab:b4:e7:cb:c5:50:ff:
0b:61:aa:32:14:ae:2d:cd:1a:1b:c0:99:30:1d:98:
cd:8e:1f:ce:e9:fd:db:42:70:cd:5f:7c:3c:a3:58:
ce:9f:2d:bc:bd:61:db:fc:24:63:54:74:af:92:eb:
c6:bc:bf:78:84:c1:f3:86:eb:05:9b:34:c4:9b:97:
a8:55:ba:c9:f5:4c:5b:eb:86:0b:cf:0d:34:44:c8:
18:2a:a6:3e:80:25:14:98:df:47:3d:5c:96:5e:d0:
0d:f9:91:f1:3a:6a:f0:52:ff:2b:64:0f:8b:c0:41:
e2:d3:e5:bc:41:38:99:36:0e:e5:2c:c0:10:2f:1c:
fb:ae:43:cd:a7:d6:08:1b:6d:c4:02:f6:92:60:5a:
da:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:C2:A3:70:3E:72:56:D0:AD:6D:53:23:4D:54:37:11:14:E1:4A:09
X509v3 Authority Key Identifier:
keyid:2C:CE:5D:51:FA:75:BB:B6:ED:96:2A:41:66:EF:6F:86:30:A0:25:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LM5dUfp1u7btlipBZu9vhjCgJYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2b5ed6-3a7c-4631-b49d-bf55b8b1669c/1/LM5dUfp1u7btlipBZu9vhjCgJYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2b5ed6-3a7c-4631-b49d-bf55b8b1669c/1/LM5dUfp1u7btlipBZu9vhjCgJYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:4a:e0:3a:5a:c7:36:b7:87:43:20:08:65:de:37:66:ff:71:
8e:f6:7b:89:6a:52:c5:be:35:76:a8:b7:9d:b4:47:80:a4:a5:
25:c2:01:f1:40:09:4b:a2:2d:63:46:d2:dd:b6:8c:2f:3a:83:
21:a9:a2:47:92:4d:c9:0e:70:ae:d2:09:88:9e:c9:99:08:c5:
d4:3c:6a:6b:14:58:3f:30:23:5a:91:e0:85:b0:ae:ab:1f:21:
9d:ea:e9:97:7a:33:8a:41:1f:f3:ea:19:c8:21:e2:2a:f6:2d:
2e:c9:c6:cc:06:f0:0a:59:32:1b:97:73:6b:50:c8:ab:a1:e4:
ce:70:a4:9d:09:ce:a4:8f:77:c0:da:37:bb:49:34:84:0c:4f:
24:9f:89:91:b5:e8:c4:ba:fa:e0:d1:c4:87:63:e4:dd:e7:38:
90:99:36:bc:4d:9e:bd:51:5a:fa:15:11:a0:cb:5e:ab:b0:b0:
ce:f6:b7:19:0b:df:d4:2e:af:88:8f:36:b5:18:df:9e:e4:cb:
a1:0a:93:18:dc:aa:54:2c:f7:b2:22:1f:dd:26:54:67:72:2c:
8e:27:95:9a:12:ed:59:c4:c3:6a:28:73:66:07:e8:03:7c:cb:
1a:c9:d7:e1:3a:23:01:92:b4:11:d3:4e:ee:53:ef:00:6e:45:
a6:b5:73:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn761IQVaWVQNJSgJYgi4sNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjY2U1ZDUxZmE3NWJiYjZlZDk2MmE0MTY2ZWY2Zjg2MzBh
MDI1ODEwHhcNMjUxMDE5MTAwMjA3WhcNMjUxMDIwMTAwMjA3WjAzMTEwLwYDVQQD
EyhlMWMyYTM3MDNlNzI1NmQwYWQ2ZDUzMjM0ZDU0MzcxMTE0ZTE0YTA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAse1drKGlbESyrmgTJg0TdKilJ/TM
+TEUL7JM2KzQ6rxLSxZl+3eFEKWEqiwZlGRvz8LQD2XSnnLmpG5uKhGdchmLqRPx
fExnMxGswA3BSgIUejAKEI5PdjOdrHhQNf8cQr8Cj15hojscZg6pbD35B6u058vF
UP8LYaoyFK4tzRobwJkwHZjNjh/O6f3bQnDNX3w8o1jOny28vWHb/CRjVHSvkuvG
vL94hMHzhusFmzTEm5eoVbrJ9Uxb64YLzw00RMgYKqY+gCUUmN9HPVyWXtAN+ZHx
OmrwUv8rZA+LwEHi0+W8QTiZNg7lLMAQLxz7rkPNp9YIG23EAvaSYFra8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOHCo3A+clbQrW1TI01UNxEU4UoJMB8GA1UdIwQY
MBaAFCzOXVH6dbu27ZYqQWbvb4YwoCWBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTE01ZFVmcDF1N2J0bGlwQlp1OXZoakNnSllFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy8yYjVlZDYtM2E3Yy00NjMxLWI0OWQt
YmY1NWI4YjE2NjljLzEvTE01ZFVmcDF1N2J0bGlwQlp1OXZoakNnSllFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy8yYjVlZDYtM2E3Yy00NjMxLWI0OWQtYmY1NWI4YjE2Njlj
LzEvTE01ZFVmcDF1N2J0bGlwQlp1OXZoakNnSllFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIUrgOlrH
NreHQyAIZd43Zv9xjvZ7iWpSxb41dqi3nbRHgKSlJcIB8UAJS6ItY0bS3baMLzqD
IamiR5JNyQ5wrtIJiJ7JmQjF1DxqaxRYPzAjWpHghbCuqx8hnerpl3ozikEf8+oZ
yCHiKvYtLsnGzAbwClkyG5dza1DIq6HkznCknQnOpI93wNo3u0k0hAxPJJ+JkbXo
xLr64NHEh2Pk3ec4kJk2vE2evVFa+hURoMteq7Cwzva3GQvf1C6viI82tRjfnuTL
oQqTGNyqVCz3siIf3SZUZ3IsjieVmhLtWcTDaihzZgfoA3zLGsnX4TojAZK0EdNO
7lPvAG5FprVzJQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:38:01 2025 by rpki-client