Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/fa81f4-6600-4079-93c5-4897261ba46b/1/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.mft
File: lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.mft (raw, json)
Hash identifier: ZvoUse2gWVXDDrliVYJflByRWOO5DNjgB6NdiRlSp2Y=
Subject key identifier: E5:71:CD:A0:1C:C1:60:37:38:C9:E8:11:DC:43:81:69:DF:67:D6:DC
Authority key identifier: 96:65:C8:11:0D:0D:D8:6A:7E:BB:09:38:AA:32:E0:9D:1D:B1:22:F6
Certificate issuer: /CN=9665c8110d0dd86a7ebb0938aa32e09d1db122f6
Certificate serial: 0198D4A82BD41C31E4AD60AAE651B074F9CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/fa81f4-6600-4079-93c5-4897261ba46b/1/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.mft
Manifest number: 0EEE
Signing time: Sat 23 Aug 2025 02:00:47 +0000
Manifest this update: Sat 23 Aug 2025 02:00:47 +0000
Manifest next update: Sun 24 Aug 2025 02:00:47 +0000
Files and hashes: 1: hDr7XZdy7Zu__1e0bkoorUALVGI.roa (hash: Ah9s+DUMovObb0WEEgnVu12bFf+2vlp0mJLr4ANjGq0=)
2: lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.crl (hash: +AvlObticl7khUfGr6lGnG5ET0gNZn2meKhRzddHMGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/fa81f4-6600-4079-93c5-4897261ba46b/1/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/fa81f4-6600-4079-93c5-4897261ba46b/1/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:2b:d4:1c:31:e4:ad:60:aa:e6:51:b0:74:f9:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9665c8110d0dd86a7ebb0938aa32e09d1db122f6
Validity
Not Before: Aug 23 02:00:47 2025 GMT
Not After : Aug 24 02:00:47 2025 GMT
Subject: CN=e571cda01cc1603738c9e811dc438169df67d6dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e2:3f:e1:1c:3e:93:c6:59:ab:37:c2:dd:45:
7a:13:7f:98:3d:ec:fc:50:8b:03:eb:e4:97:0a:45:
e8:5e:5a:f1:10:09:7e:27:c6:e4:80:d1:3d:e6:9e:
0d:ca:9f:63:a5:84:a6:7f:2f:a5:a0:14:e9:dc:c7:
ca:8d:af:24:14:ae:0c:11:5c:35:c1:d7:5f:fe:ce:
90:16:b0:f3:c3:4a:1a:f8:c2:c0:74:42:43:dd:ab:
e7:e6:d7:57:12:a6:0d:b6:a6:df:bc:48:81:54:b0:
44:23:1a:9a:53:45:e0:2c:58:a3:25:70:79:63:fc:
2f:4d:06:c0:be:ec:7c:b3:de:9d:1e:5b:80:1c:aa:
d7:36:41:e2:da:6e:c1:2d:af:91:9e:73:2d:ef:5c:
8b:b2:49:a3:95:6a:bd:2d:be:c4:76:ae:80:76:fa:
12:ce:bb:e3:a2:8e:1c:97:f4:b9:bb:29:43:95:5d:
91:f7:26:dd:04:81:08:91:a3:a0:f1:33:0f:f0:1f:
ab:1a:3e:72:1c:94:24:e7:4a:dd:05:a4:a6:a3:cc:
50:05:26:2a:db:87:7f:97:30:f4:72:26:ef:3c:b4:
38:d2:c1:49:d3:1a:cf:2e:86:12:ea:4f:b6:da:7a:
0a:c3:19:f7:20:65:e3:67:02:7e:a8:36:82:08:b8:
d5:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:71:CD:A0:1C:C1:60:37:38:C9:E8:11:DC:43:81:69:DF:67:D6:DC
X509v3 Authority Key Identifier:
keyid:96:65:C8:11:0D:0D:D8:6A:7E:BB:09:38:AA:32:E0:9D:1D:B1:22:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/fa81f4-6600-4079-93c5-4897261ba46b/1/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/fa81f4-6600-4079-93c5-4897261ba46b/1/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:55:4d:d9:42:26:9c:25:00:2b:28:85:07:ae:51:ad:f1:db:
66:77:69:e9:23:ce:f7:af:ab:f5:ee:15:c7:c8:5c:4b:e7:b2:
c6:95:7f:8a:d8:4b:fa:b3:5d:5f:c1:17:5f:06:0b:53:53:48:
39:d8:91:51:dd:25:67:ba:35:7f:3a:92:b2:fc:84:1a:74:85:
c0:53:ef:a8:33:38:d8:50:ea:ca:9b:2a:d7:48:fb:27:c3:da:
f4:9e:b9:d1:fc:58:88:0c:6e:5e:37:ba:4b:e8:96:de:df:45:
12:b6:4a:01:17:8e:c8:af:ef:70:fe:4a:fb:d3:03:54:74:ed:
c2:ae:c6:95:04:e6:4c:01:e3:ac:e6:41:75:98:97:f8:f7:3c:
09:7a:c5:68:eb:85:d7:90:7c:76:c6:ce:55:3c:de:3b:d0:fb:
3c:e5:d3:e7:b1:ef:13:09:51:f4:f8:c6:ed:26:56:db:4b:8d:
58:1d:89:19:55:83:de:3f:6d:a8:1b:8c:55:75:5d:b6:22:07:
1e:f7:3c:22:44:16:e3:d6:69:f4:ea:2a:6d:16:cb:51:ec:35:
68:53:21:2f:67:1e:cb:97:d2:6d:aa:6e:39:7f:64:96:c1:b4:
36:c9:0c:d4:1d:73:4e:5f:f1:e8:ca:b2:f8:96:be:b3:01:68:
3d:49:bf:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:32:56 2025 by rpki-client