Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft
File: Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft (raw, json)
Hash identifier: jpHlFkCvY98fR2QYEPpnNiv4F5yf0IPMi/P/nf9K2kg=
Subject key identifier: A1:49:9B:BB:FD:45:C5:84:4F:F7:32:74:2A:3D:D8:BE:F7:8E:1D:6C
Authority key identifier: 2E:67:F3:E4:E1:97:7A:BE:98:CC:B2:0C:A1:AF:A8:58:F1:E6:68:1C
Certificate issuer: /CN=2e67f3e4e1977abe98ccb20ca1afa858f1e6681c
Certificate serial: 0198D65F7871979819AD9D61DCF34A57430A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lmfz5OGXer6YzLIMoa-oWPHmaBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft
Manifest number: 161E
Signing time: Sat 23 Aug 2025 10:00:37 +0000
Manifest this update: Sat 23 Aug 2025 10:00:37 +0000
Manifest next update: Sun 24 Aug 2025 10:00:37 +0000
Files and hashes: 1: Lmfz5OGXer6YzLIMoa-oWPHmaBw.crl (hash: CWWz5TDv9QFvBr4rV1eaVPuEltpvzih0jCfw4Y2h3y0=)
2: M21MDqZhLpMUHwm9053y5X5hUu4.roa (hash: SYGPLAqkM4uXfmWggV4XyNi06NaAyivAORW2HClwZBk=)
3: nXQPLiO12M3Y_MzU88OuVYMZ5_U.roa (hash: T3shL01w4f9E1vbhrlXsqoTnaDV8nANG2xjOAb2Kx6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lmfz5OGXer6YzLIMoa-oWPHmaBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:78:71:97:98:19:ad:9d:61:dc:f3:4a:57:43:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e67f3e4e1977abe98ccb20ca1afa858f1e6681c
Validity
Not Before: Aug 23 10:00:37 2025 GMT
Not After : Aug 24 10:00:37 2025 GMT
Subject: CN=a1499bbbfd45c5844ff732742a3dd8bef78e1d6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:25:a9:bf:4c:80:59:dc:66:9b:2e:09:e5:71:
0a:14:25:c2:28:9a:e1:48:a9:f7:7a:dd:58:48:e0:
a6:41:1d:5f:67:35:ef:c0:5e:95:d7:c0:99:bd:1e:
98:27:ce:d7:e1:b1:3f:e1:a1:d9:a6:48:9e:d4:ef:
71:5a:6a:9e:0b:d2:3f:47:cd:aa:46:c2:f8:93:e5:
7e:e1:4e:0b:96:52:d8:a5:4f:9e:96:c6:6a:26:8f:
6c:6c:13:89:48:5a:69:0d:ab:8b:fe:1a:40:f1:93:
40:c6:5c:62:67:ea:8c:f1:ed:08:a7:ce:6a:87:71:
b3:0f:ef:bd:8d:e9:fb:0f:44:74:ba:a9:c9:b3:2c:
06:a2:cf:f5:8b:18:0d:3e:ca:ec:27:c9:38:94:79:
58:03:6f:ec:be:e1:13:79:c1:1a:80:ca:4f:02:91:
fd:47:2f:db:55:47:d7:e0:e6:ff:de:40:84:93:d8:
ef:4a:d8:0c:3f:0c:40:61:3b:c0:c2:7c:6d:40:92:
1a:1d:44:d7:16:ad:c9:5c:87:47:33:ae:7d:49:3d:
6d:2d:c0:bb:77:d8:1f:7e:61:74:a0:68:81:71:b6:
62:56:ca:64:8b:98:b2:8a:a9:b4:10:be:da:e9:c1:
af:25:48:9c:a2:09:09:95:5f:14:6a:35:25:28:50:
13:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:49:9B:BB:FD:45:C5:84:4F:F7:32:74:2A:3D:D8:BE:F7:8E:1D:6C
X509v3 Authority Key Identifier:
keyid:2E:67:F3:E4:E1:97:7A:BE:98:CC:B2:0C:A1:AF:A8:58:F1:E6:68:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lmfz5OGXer6YzLIMoa-oWPHmaBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:dd:0e:87:36:08:ec:aa:75:d4:95:df:77:e3:73:c8:da:e4:
8e:51:c9:21:e0:07:21:29:e5:d4:fb:26:2b:30:cd:8d:b1:04:
60:90:f2:5a:84:9a:c6:7f:ae:eb:b0:4a:e3:da:d5:9c:b8:4c:
09:63:8b:15:fa:51:89:eb:36:5d:1e:51:9c:6a:39:fd:bf:3f:
88:02:07:31:19:1e:40:53:7a:7f:36:36:69:89:bc:11:65:78:
5a:57:15:8d:c8:b6:76:15:bf:8c:63:cd:43:32:3c:9b:7c:5b:
f8:5b:d4:06:ca:bb:87:cc:25:df:33:77:06:6a:49:77:38:2d:
b3:b4:47:f9:4a:69:c9:30:ec:5d:32:32:3c:f4:09:8b:ac:0e:
8a:43:f4:fc:ab:2a:07:b4:c1:64:e6:dd:80:e5:bf:34:4b:40:
14:c6:fc:2f:9f:b1:aa:0f:9e:33:36:4a:ac:16:63:98:5b:be:
22:ee:cc:83:f5:43:12:3b:10:7f:8c:32:21:d4:27:0f:af:cc:
b6:45:2f:b8:98:75:c9:95:80:07:21:2d:6c:0d:b8:b4:a0:fe:
94:ce:1b:ab:01:29:ae:86:ed:b9:e4:f9:ff:b7:80:31:ef:8b:
3e:1a:cd:6f:6f:ea:58:08:6d:13:6e:a5:23:5a:32:ec:16:c3:
60:7f:42:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:12:16 2025 by rpki-client