Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft
File: Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft (raw, json)
Hash identifier: D7dWGUkIu/6nQYvRqQsAqlga1STZmIYJl+YUlwXgQec=
Subject key identifier: 56:53:22:9B:40:7B:BD:85:7B:B1:FC:24:BF:8C:9D:52:FB:90:6B:F5
Authority key identifier: 2E:67:F3:E4:E1:97:7A:BE:98:CC:B2:0C:A1:AF:A8:58:F1:E6:68:1C
Certificate issuer: /CN=2e67f3e4e1977abe98ccb20ca1afa858f1e6681c
Certificate serial: 0199FBEA9C760298D49822F97C8C538F03CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lmfz5OGXer6YzLIMoa-oWPHmaBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft
Manifest number: 16B6
Signing time: Sun 19 Oct 2025 10:01:20 +0000
Manifest this update: Sun 19 Oct 2025 10:01:20 +0000
Manifest next update: Mon 20 Oct 2025 10:01:20 +0000
Files and hashes: 1: Lmfz5OGXer6YzLIMoa-oWPHmaBw.crl (hash: iFqU8TQjgRK85h1ri90yyxwbLzeNJx+47dD9d6qCXUE=)
2: M21MDqZhLpMUHwm9053y5X5hUu4.roa (hash: SYGPLAqkM4uXfmWggV4XyNi06NaAyivAORW2HClwZBk=)
3: nXQPLiO12M3Y_MzU88OuVYMZ5_U.roa (hash: T3shL01w4f9E1vbhrlXsqoTnaDV8nANG2xjOAb2Kx6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lmfz5OGXer6YzLIMoa-oWPHmaBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:9c:76:02:98:d4:98:22:f9:7c:8c:53:8f:03:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e67f3e4e1977abe98ccb20ca1afa858f1e6681c
Validity
Not Before: Oct 19 10:01:20 2025 GMT
Not After : Oct 20 10:01:20 2025 GMT
Subject: CN=5653229b407bbd857bb1fc24bf8c9d52fb906bf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:71:62:39:dd:81:34:b0:a4:fa:ea:65:d5:6b:
f3:bb:6b:1b:41:25:92:28:6d:ce:a2:a3:89:d3:08:
18:39:06:6d:4d:76:e4:da:f5:f2:15:80:9a:06:93:
b2:c4:ca:6e:1f:63:fc:f5:9b:8f:93:fe:fb:3b:84:
e8:43:9e:73:b8:f2:fd:48:7c:cd:dc:4c:71:98:88:
24:85:bd:5b:7c:4c:a0:b0:2c:fb:4f:55:6f:a5:0b:
46:ac:91:a4:ff:96:a3:3d:95:17:88:09:6a:f0:7d:
b1:bf:4a:a0:b3:45:22:74:33:05:c3:6f:3f:b0:36:
4c:d8:11:4b:01:a8:71:c7:93:d9:3d:f3:a0:b5:19:
8a:0a:37:b6:10:6a:0b:30:43:a1:1b:8f:2d:fd:62:
b8:b0:ee:6d:f9:b9:32:b3:17:e6:bb:95:60:43:70:
f8:9a:e7:8b:33:7c:6a:3e:09:ce:a3:bb:19:a8:64:
72:fd:2e:22:5f:aa:50:f2:ca:04:2e:59:d2:ed:21:
dd:a2:c7:ba:be:cb:4c:26:23:20:36:b9:97:cf:9f:
00:b7:4d:86:e5:82:df:eb:4c:87:dd:f6:b2:5a:d2:
da:4b:e0:1c:02:73:3e:ed:ab:26:22:05:24:8a:5a:
a2:09:94:06:ce:d8:2a:c0:6b:f8:3a:e0:6f:f8:b7:
fb:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:53:22:9B:40:7B:BD:85:7B:B1:FC:24:BF:8C:9D:52:FB:90:6B:F5
X509v3 Authority Key Identifier:
keyid:2E:67:F3:E4:E1:97:7A:BE:98:CC:B2:0C:A1:AF:A8:58:F1:E6:68:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lmfz5OGXer6YzLIMoa-oWPHmaBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:fe:f5:c8:8a:d3:09:75:06:f6:e9:07:95:cf:c9:da:c7:7b:
15:5a:7d:a0:9b:3d:91:08:86:e1:49:7c:66:05:fe:15:f1:9c:
2b:26:11:63:a2:3f:9c:c4:dd:88:b8:d0:5f:24:f3:bd:3e:3a:
9f:5e:8b:b2:ce:e8:78:ed:3a:3d:a6:a1:9c:c8:b2:42:1a:80:
44:a4:b2:5d:26:c7:ad:db:ac:00:bb:0c:7f:7e:c0:3c:e2:b1:
6b:d5:97:59:77:23:9b:68:71:28:8a:99:c4:8b:b8:e7:e6:40:
e9:58:94:20:50:38:47:43:b1:9a:fe:41:51:c0:ca:2f:ce:3f:
1b:8f:1f:9f:18:f4:51:bc:be:0d:aa:54:c7:16:d1:e0:62:c5:
3c:4e:c9:80:ad:d2:eb:fa:84:b4:f1:6a:f3:04:a7:ce:28:a4:
95:34:53:3f:23:c1:66:ac:dd:b7:a6:8e:c1:78:bd:cc:24:aa:
fb:2d:2d:0e:dd:37:d5:dc:ca:ba:88:76:51:39:7d:b1:05:95:
07:a8:60:ea:5d:16:7e:c8:fd:8c:4e:2f:13:c1:76:b5:13:2f:
91:f6:85:66:fa:e3:3f:5b:81:cc:97:45:b4:10:95:24:80:05:
7a:0b:7b:54:76:96:83:19:cf:3e:cf:ec:d5:c5:ef:3b:e2:43:
4e:1a:43:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:03 2025 by rpki-client