Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/200988-39db-44a3-9e49-5e047433b234/1/LNBBAsGZa1PIjhceXk-NH6ChMIQ.mft
File: LNBBAsGZa1PIjhceXk-NH6ChMIQ.mft (raw, json)
Hash identifier: Sqb1CbD9EXZkwkPshLtsYp3iA23X1TAxlNSC2i/GFSQ=
Subject key identifier: 1D:85:A8:00:B0:09:C0:0D:A8:78:E9:6A:D9:14:DC:71:5F:21:C4:02
Authority key identifier: 2C:D0:41:02:C1:99:6B:53:C8:8E:17:1E:5E:4F:8D:1F:A0:A1:30:84
Certificate issuer: /CN=2cd04102c1996b53c88e171e5e4f8d1fa0a13084
Certificate serial: 0198D5BB76DCE56683DD155A3A444E9B88C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LNBBAsGZa1PIjhceXk-NH6ChMIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/200988-39db-44a3-9e49-5e047433b234/1/LNBBAsGZa1PIjhceXk-NH6ChMIQ.mft
Manifest number: 160D
Signing time: Sat 23 Aug 2025 07:01:29 +0000
Manifest this update: Sat 23 Aug 2025 07:01:29 +0000
Manifest next update: Sun 24 Aug 2025 07:01:29 +0000
Files and hashes: 1: LNBBAsGZa1PIjhceXk-NH6ChMIQ.crl (hash: +Qz5vhrtDlLzGzjHMuxda/IWPcv4vpOTAoW1wKL4nBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/200988-39db-44a3-9e49-5e047433b234/1/LNBBAsGZa1PIjhceXk-NH6ChMIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/200988-39db-44a3-9e49-5e047433b234/1/LNBBAsGZa1PIjhceXk-NH6ChMIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/LNBBAsGZa1PIjhceXk-NH6ChMIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:76:dc:e5:66:83:dd:15:5a:3a:44:4e:9b:88:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cd04102c1996b53c88e171e5e4f8d1fa0a13084
Validity
Not Before: Aug 23 07:01:29 2025 GMT
Not After : Aug 24 07:01:29 2025 GMT
Subject: CN=1d85a800b009c00da878e96ad914dc715f21c402
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c2:64:7c:a1:1c:b4:cd:12:62:c1:d0:fe:d7:
8c:02:72:8f:9c:4c:1e:ab:32:44:e6:a7:ff:5b:74:
19:ba:fe:81:f8:69:aa:56:62:27:88:6a:02:6f:df:
3f:7a:12:07:83:ad:4e:04:5c:87:f5:f6:cb:79:95:
9d:5d:16:40:38:d7:09:a5:dc:e7:88:cd:bf:c0:38:
5f:c5:61:33:14:a3:bd:b0:21:5c:da:e6:55:7d:1c:
cb:fe:aa:a4:3a:ee:c2:07:7f:45:ac:87:07:78:6f:
76:65:67:81:92:85:af:b6:66:0b:43:ed:b3:f6:d7:
a0:b8:bd:04:96:3d:08:fc:4c:f7:0b:bd:fa:b6:7b:
db:18:9e:0f:f2:ee:39:3c:b6:5d:13:43:e9:ae:1a:
83:8d:27:d6:25:b5:0b:ee:a5:46:26:f2:5a:4c:d0:
12:28:62:90:a3:f2:f3:ed:6b:4f:6d:db:f9:b9:85:
9f:a0:0e:93:35:26:3b:41:2e:21:eb:73:66:a9:f9:
65:11:77:37:bf:ff:e1:68:81:db:60:03:da:07:6e:
6a:b6:fb:10:35:5f:df:a8:6a:7d:78:97:a0:5a:68:
ea:55:e2:8e:95:f3:36:e2:59:7d:4e:5b:cf:95:91:
8e:59:c4:b5:8c:1d:e3:74:8d:1a:4f:91:25:0a:f8:
5e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:85:A8:00:B0:09:C0:0D:A8:78:E9:6A:D9:14:DC:71:5F:21:C4:02
X509v3 Authority Key Identifier:
keyid:2C:D0:41:02:C1:99:6B:53:C8:8E:17:1E:5E:4F:8D:1F:A0:A1:30:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LNBBAsGZa1PIjhceXk-NH6ChMIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/200988-39db-44a3-9e49-5e047433b234/1/LNBBAsGZa1PIjhceXk-NH6ChMIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/200988-39db-44a3-9e49-5e047433b234/1/LNBBAsGZa1PIjhceXk-NH6ChMIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:49:cf:b7:7e:4c:94:5b:bf:2f:66:d9:78:71:d8:3a:d1:9c:
a1:ab:95:39:82:34:ef:fd:79:a7:54:c6:10:17:b1:1d:09:3a:
43:71:d6:48:2a:c1:c5:1e:9f:e8:4a:19:97:72:9c:da:1f:58:
e3:17:a2:79:20:04:be:b3:3d:1e:f6:2d:02:e9:42:3d:b2:00:
1f:86:58:32:4a:c5:a6:d9:8c:32:6d:d5:67:67:a0:68:25:b0:
6f:3b:2c:73:07:56:23:86:b7:71:81:33:8d:c0:45:2c:3e:5c:
c0:14:4e:b6:0f:03:66:e3:3f:99:d9:12:65:77:e3:f6:00:7d:
05:6e:cf:3c:ba:40:68:f7:e3:60:ae:ab:e2:d5:31:66:59:fb:
70:42:93:62:69:ae:22:5c:54:fb:59:91:eb:35:3c:d0:ae:f4:
88:c4:e3:32:76:b8:32:af:9f:f9:07:85:fa:cb:d1:91:7b:ee:
7e:bb:54:77:e0:f4:57:b2:40:f7:44:de:69:49:ff:a7:c8:9c:
15:53:e9:4f:1e:7d:26:fe:59:1e:e6:f5:68:0b:34:d4:43:15:
71:b5:a4:9a:6e:b7:16:09:51:8d:87:8b:12:fd:0a:15:ba:5a:
07:19:64:94:06:13:8f:02:cf:e2:5b:5f:01:88:89:f4:b7:d7:
16:37:b7:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVu3bc5WaD3RVaOkROm4jDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjZDA0MTAyYzE5OTZiNTNjODhlMTcxZTVlNGY4ZDFmYTBh
MTMwODQwHhcNMjUwODIzMDcwMTI5WhcNMjUwODI0MDcwMTI5WjAzMTEwLwYDVQQD
EygxZDg1YTgwMGIwMDljMDBkYTg3OGU5NmFkOTE0ZGM3MTVmMjFjNDAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMJkfKEctM0SYsHQ/teMAnKPnEwe
qzJE5qf/W3QZuv6B+GmqVmIniGoCb98/ehIHg61OBFyH9fbLeZWdXRZAONcJpdzn
iM2/wDhfxWEzFKO9sCFc2uZVfRzL/qqkOu7CB39FrIcHeG92ZWeBkoWvtmYLQ+2z
9teguL0Elj0I/Ez3C736tnvbGJ4P8u45PLZdE0PprhqDjSfWJbUL7qVGJvJaTNAS
KGKQo/Lz7WtPbdv5uYWfoA6TNSY7QS4h63NmqfllEXc3v//haIHbYAPaB25qtvsQ
NV/fqGp9eJegWmjqVeKOlfM24ll9TlvPlZGOWcS1jB3jdI0aT5ElCvheGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB2FqACwCcANqHjpatkU3HFfIcQCMB8GA1UdIwQY
MBaAFCzQQQLBmWtTyI4XHl5PjR+goTCEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTE5CQkFzR1phMVBJamhjZVhrLU5INkNoTUlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8yMDA5ODgtMzlkYi00NGEzLTllNDkt
NWUwNDc0MzNiMjM0LzEvTE5CQkFzR1phMVBJamhjZVhrLU5INkNoTUlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS8yMDA5ODgtMzlkYi00NGEzLTllNDktNWUwNDc0MzNiMjM0
LzEvTE5CQkFzR1phMVBJamhjZVhrLU5INkNoTUlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU0nPt35M
lFu/L2bZeHHYOtGcoauVOYI07/15p1TGEBexHQk6Q3HWSCrBxR6f6EoZl3Kc2h9Y
4xeieSAEvrM9HvYtAulCPbIAH4ZYMkrFptmMMm3VZ2egaCWwbzsscwdWI4a3cYEz
jcBFLD5cwBROtg8DZuM/mdkSZXfj9gB9BW7PPLpAaPfjYK6r4tUxZln7cEKTYmmu
IlxU+1mR6zU80K70iMTjMna4Mq+f+QeF+svRkXvufrtUd+D0V7JA90TeaUn/p8ic
FVPpTx59Jv5ZHub1aAs01EMVcbWkmm63FglRjYeLEv0KFbpaBxlklAYTjwLP4ltf
AYiJ9LfXFje33A==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:26:22 2025 by rpki-client