Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/0aab78-66de-444c-a843-0b3cb4c6b79a/1/lbgfTkXXEdoMFI3Cuq0VBN27Qns.mft
File: lbgfTkXXEdoMFI3Cuq0VBN27Qns.mft (raw, json)
Hash identifier: 7JRGCZoKxFke1Zads0sGgFYAv8QmFDZQ8xkwxYGlEQM=
Subject key identifier: 54:D8:22:CE:78:CB:73:72:23:D2:46:F4:EE:ED:6C:DE:E6:E6:4A:54
Authority key identifier: 95:B8:1F:4E:45:D7:11:DA:0C:14:8D:C2:BA:AD:15:04:DD:BB:42:7B
Certificate issuer: /CN=95b81f4e45d711da0c148dc2baad1504ddbb427b
Certificate serial: 0199FC58EDDA2D127714F7660201A9C8909E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbgfTkXXEdoMFI3Cuq0VBN27Qns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/0aab78-66de-444c-a843-0b3cb4c6b79a/1/lbgfTkXXEdoMFI3Cuq0VBN27Qns.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 12:01:50 +0000
Manifest this update: Sun 19 Oct 2025 12:01:50 +0000
Manifest next update: Mon 20 Oct 2025 12:01:50 +0000
Files and hashes: 1: 7akWYjQwsX6a6HhUzkzvmpveN9o.roa (hash: NaXDBHO9cOnr/DrruhF4XLx1P8skQ7ZIYlWJ7+sC7iA=)
2: lbgfTkXXEdoMFI3Cuq0VBN27Qns.crl (hash: AUDxF6Dxbj3ELNWHw3RSTwG7qtoao+e/FkxLE6TmNwc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/0aab78-66de-444c-a843-0b3cb4c6b79a/1/lbgfTkXXEdoMFI3Cuq0VBN27Qns.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/0aab78-66de-444c-a843-0b3cb4c6b79a/1/lbgfTkXXEdoMFI3Cuq0VBN27Qns.mft
rsync://rpki.ripe.net/repository/DEFAULT/lbgfTkXXEdoMFI3Cuq0VBN27Qns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:ed:da:2d:12:77:14:f7:66:02:01:a9:c8:90:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b81f4e45d711da0c148dc2baad1504ddbb427b
Validity
Not Before: Oct 19 12:01:50 2025 GMT
Not After : Oct 20 12:01:50 2025 GMT
Subject: CN=54d822ce78cb737223d246f4eeed6cdee6e64a54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:54:36:49:db:d9:57:56:bf:41:4a:cc:89:f3:
c2:19:e6:40:44:80:22:1c:46:47:26:f2:ed:16:0a:
a5:6c:1b:13:75:4a:79:1d:34:f2:47:0f:15:7b:22:
c0:2a:57:8f:80:52:ec:33:38:be:b2:ec:d7:24:a1:
79:1a:e4:c6:b0:0d:7e:b8:b9:61:fb:f9:06:04:35:
d2:52:cb:f1:da:81:c3:8c:1e:fb:13:7a:9c:7c:ad:
f2:f6:af:ea:fa:42:11:ac:c1:90:5b:c4:26:7b:fd:
57:8b:84:6f:5a:e2:fc:07:b7:ba:ea:89:47:7f:0f:
08:c8:2b:51:2e:67:b4:af:fc:e6:ab:25:f4:fc:e5:
73:a3:38:78:36:fb:fb:67:ce:ac:d6:20:63:ea:25:
c6:d5:c7:fb:ea:38:82:6b:6b:51:3a:3e:79:61:04:
f7:cc:fb:b8:9e:04:c0:03:bd:1f:8d:c4:5c:cd:e0:
47:98:10:c9:59:2a:78:4c:71:c3:74:0d:42:76:24:
1b:cd:9e:f1:8c:f2:c4:87:26:53:11:f8:5f:69:b6:
57:9e:c4:7e:4b:aa:30:76:49:a0:f7:bd:96:b7:78:
6e:48:63:06:5b:5c:54:79:6c:7b:95:f8:62:21:71:
a2:58:c3:8e:65:96:8d:dc:ad:77:ab:53:ec:e5:a7:
7a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:D8:22:CE:78:CB:73:72:23:D2:46:F4:EE:ED:6C:DE:E6:E6:4A:54
X509v3 Authority Key Identifier:
keyid:95:B8:1F:4E:45:D7:11:DA:0C:14:8D:C2:BA:AD:15:04:DD:BB:42:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbgfTkXXEdoMFI3Cuq0VBN27Qns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0aab78-66de-444c-a843-0b3cb4c6b79a/1/lbgfTkXXEdoMFI3Cuq0VBN27Qns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0aab78-66de-444c-a843-0b3cb4c6b79a/1/lbgfTkXXEdoMFI3Cuq0VBN27Qns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:3b:23:d9:76:27:a6:76:4e:9a:25:46:c5:cf:d1:d5:77:65:
6d:9e:ed:79:4b:1b:4a:34:f0:58:31:13:7b:a4:fb:73:1c:fe:
f2:c2:01:5a:7a:62:a3:17:7d:c7:77:29:30:6a:85:ef:f9:ab:
b9:02:aa:77:7a:54:0d:32:eb:33:40:f1:24:a7:97:ab:6f:d7:
73:19:25:05:5a:ef:93:ad:35:6d:af:64:7c:2a:01:66:ec:85:
2d:30:8e:a9:87:d2:f8:3e:19:2a:cc:fd:6e:93:23:08:63:2d:
b1:3f:97:e9:a2:30:60:e3:a6:b5:1d:fc:5a:cb:33:63:14:6b:
67:40:ef:4f:50:29:ac:6f:52:4d:76:2b:e8:6f:d7:a1:92:a9:
94:df:e2:87:c8:59:be:39:40:6a:f7:45:4c:39:70:ee:72:05:
d9:e0:bb:29:87:36:78:f8:d3:9d:9f:8e:d3:89:cd:76:92:7b:
79:0e:0f:63:47:17:b5:d6:0e:3f:c9:20:a2:62:5a:82:b0:d3:
21:06:d9:54:ec:f5:4e:83:35:c5:58:a9:4c:eb:b9:8f:d4:46:
a8:e9:e3:93:55:9f:9e:a0:20:a0:0d:48:52:df:46:00:cd:37:
89:4d:b1:76:3d:25:3a:d6:4a:0f:cb:b6:5e:31:bb:7d:20:fe:
40:72:af:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WO3aLRJ3FPdmAgGpyJCeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1YjgxZjRlNDVkNzExZGEwYzE0OGRjMmJhYWQxNTA0ZGRi
YjQyN2IwHhcNMjUxMDE5MTIwMTUwWhcNMjUxMDIwMTIwMTUwWjAzMTEwLwYDVQQD
Eyg1NGQ4MjJjZTc4Y2I3MzcyMjNkMjQ2ZjRlZWVkNmNkZWU2ZTY0YTU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVQ2SdvZV1a/QUrMifPCGeZARIAi
HEZHJvLtFgqlbBsTdUp5HTTyRw8VeyLAKlePgFLsMzi+suzXJKF5GuTGsA1+uLlh
+/kGBDXSUsvx2oHDjB77E3qcfK3y9q/q+kIRrMGQW8Qme/1Xi4RvWuL8B7e66olH
fw8IyCtRLme0r/zmqyX0/OVzozh4Nvv7Z86s1iBj6iXG1cf76jiCa2tROj55YQT3
zPu4ngTAA70fjcRczeBHmBDJWSp4THHDdA1CdiQbzZ7xjPLEhyZTEfhfabZXnsR+
S6owdkmg972Wt3huSGMGW1xUeWx7lfhiIXGiWMOOZZaN3K13q1Ps5ad6XQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFTYIs54y3NyI9JG9O7tbN7m5kpUMB8GA1UdIwQY
MBaAFJW4H05F1xHaDBSNwrqtFQTdu0J7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGJnZlRrWFhFZG9NRkkzQ3VxMFZCTjI3UW5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8wYWFiNzgtNjZkZS00NDRjLWE4NDMt
MGIzY2I0YzZiNzlhLzEvbGJnZlRrWFhFZG9NRkkzQ3VxMFZCTjI3UW5zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS8wYWFiNzgtNjZkZS00NDRjLWE4NDMtMGIzY2I0YzZiNzlh
LzEvbGJnZlRrWFhFZG9NRkkzQ3VxMFZCTjI3UW5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAATsj2XYn
pnZOmiVGxc/R1XdlbZ7teUsbSjTwWDETe6T7cxz+8sIBWnpioxd9x3cpMGqF7/mr
uQKqd3pUDTLrM0DxJKeXq2/XcxklBVrvk601ba9kfCoBZuyFLTCOqYfS+D4ZKsz9
bpMjCGMtsT+X6aIwYOOmtR38WsszYxRrZ0DvT1AprG9STXYr6G/XoZKplN/ih8hZ
vjlAavdFTDlw7nIF2eC7KYc2ePjTnZ+O04nNdpJ7eQ4PY0cXtdYOP8kgomJagrDT
IQbZVOz1ToM1xVipTOu5j9RGqOnjk1WfnqAgoA1IUt9GAM03iU2xdj0lOtZKD8u2
XjG7fSD+QHKvbA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:51 2025 by rpki-client