Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft
File: Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft (raw, json)
Hash identifier: htne6M5ReZn/HFWnx2Bb0ay4usLKkgK3ep0lVhdtgsE=
Subject key identifier: 84:A8:0D:44:A0:DC:99:75:B2:A3:65:6F:9E:F5:11:18:C4:11:7C:6A
Authority key identifier: 2E:67:F3:E4:E1:97:7A:BE:98:CC:B2:0C:A1:AF:A8:58:F1:E6:68:1C
Certificate issuer: /CN=2e67f3e4e1977abe98ccb20ca1afa858f1e6681c
Certificate serial: 0197B6A0807D0D337F987F758F2917C982EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lmfz5OGXer6YzLIMoa-oWPHmaBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft
Manifest number: 1589
Signing time: Sat 28 Jun 2025 13:01:01 +0000
Manifest this update: Sat 28 Jun 2025 13:01:01 +0000
Manifest next update: Sun 29 Jun 2025 13:01:01 +0000
Files and hashes: 1: Lmfz5OGXer6YzLIMoa-oWPHmaBw.crl (hash: 5TR7INilohBjH7rM+9/EpwctrdQobEJA+UFQ+8OqtCw=)
2: M21MDqZhLpMUHwm9053y5X5hUu4.roa (hash: SYGPLAqkM4uXfmWggV4XyNi06NaAyivAORW2HClwZBk=)
3: nXQPLiO12M3Y_MzU88OuVYMZ5_U.roa (hash: T3shL01w4f9E1vbhrlXsqoTnaDV8nANG2xjOAb2Kx6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lmfz5OGXer6YzLIMoa-oWPHmaBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:80:7d:0d:33:7f:98:7f:75:8f:29:17:c9:82:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e67f3e4e1977abe98ccb20ca1afa858f1e6681c
Validity
Not Before: Jun 28 13:01:01 2025 GMT
Not After : Jun 29 13:01:01 2025 GMT
Subject: CN=84a80d44a0dc9975b2a3656f9ef51118c4117c6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:bd:16:03:d4:ca:06:15:95:ff:7f:71:99:a5:
0f:2e:fc:9d:cd:bb:4a:f9:3d:df:fc:6e:d8:79:dc:
51:4d:22:cc:47:67:80:fc:3e:f7:5b:c3:3a:e4:7c:
4b:44:eb:ac:e1:3b:c2:97:70:63:77:22:43:71:c0:
ec:5e:7b:e1:fb:43:c9:c2:1f:9a:9e:2e:32:da:7b:
4d:b7:7a:c8:8f:e6:13:d9:8d:d1:c1:75:ff:4c:28:
b6:ce:2f:72:a9:01:12:ff:31:46:e6:e8:dc:c3:be:
19:b1:15:32:da:57:d6:71:24:75:8a:20:f7:ea:78:
48:03:34:f4:e6:c6:bf:6f:78:92:d7:0b:3c:33:03:
23:be:1a:41:42:de:a5:d8:45:09:21:34:f0:a2:30:
82:14:14:52:ee:67:47:7c:a2:7d:f0:ba:c8:92:50:
50:82:b9:a7:50:50:04:48:98:e4:04:0b:6d:30:0d:
90:da:35:63:32:62:be:89:9e:61:0b:35:42:ed:66:
89:2e:32:7b:aa:98:4a:6d:94:2e:ed:46:43:88:d1:
ee:3a:9c:81:f7:25:4e:6a:56:ab:28:b9:37:fa:20:
42:23:0c:dc:40:c1:9a:53:ad:fd:ec:9d:81:fc:d2:
36:04:0d:b4:94:eb:20:f4:a1:38:94:2d:2c:f8:52:
6f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:A8:0D:44:A0:DC:99:75:B2:A3:65:6F:9E:F5:11:18:C4:11:7C:6A
X509v3 Authority Key Identifier:
keyid:2E:67:F3:E4:E1:97:7A:BE:98:CC:B2:0C:A1:AF:A8:58:F1:E6:68:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lmfz5OGXer6YzLIMoa-oWPHmaBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:23:79:39:63:e5:2a:d8:ef:b5:e2:98:dc:a3:34:2b:d5:6e:
6a:61:13:fa:fd:41:72:93:72:f4:58:f6:de:23:8f:86:16:19:
5a:3f:5e:dd:b7:40:63:6f:34:0f:46:fc:db:3d:12:cc:de:e9:
44:eb:3d:d0:cf:f8:89:a9:81:4d:2c:58:69:37:60:be:80:6f:
0e:8e:82:fa:67:16:05:a7:fc:1d:46:f4:ed:51:5e:d2:99:6c:
8c:04:fe:4e:ca:81:06:2f:b0:18:fc:22:bb:49:cd:41:43:45:
1d:e5:10:19:34:f0:cf:60:b6:b5:93:bb:f2:19:86:84:70:4e:
45:fe:21:aa:3a:09:e4:57:d8:d5:d4:05:66:bf:2d:3e:94:e6:
ec:81:0a:5e:a7:7e:64:97:43:dd:2b:8d:b4:5e:d7:fd:6a:5b:
29:6b:73:33:33:f6:28:9a:69:50:70:57:db:aa:cb:9f:67:93:
27:5f:72:ac:8b:7b:e6:a0:03:be:14:59:41:af:16:34:07:38:
c5:c8:0b:c8:e4:0d:a8:58:0f:8b:e8:a6:cb:ce:20:19:f7:60:
2d:e4:b5:0f:8e:71:44:0c:10:60:23:9d:30:7b:08:19:b3:1a:
0f:5f:9f:3a:f7:46:5a:4d:37:d3:3c:d0:a6:76:c7:16:01:70:
bf:c7:ba:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:27:43 2025 by rpki-client