Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/fa81f4-6600-4079-93c5-4897261ba46b/1/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.mft
File: lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.mft (raw, json)
Hash identifier: e1C8VF+xgFnaBjs9ODyC/n33BEwMnicX2MvVGWVjpH4=
Subject key identifier: 80:3F:99:3D:9D:AE:6C:BB:3A:87:9E:57:04:1E:58:7E:1B:96:1A:70
Authority key identifier: 96:65:C8:11:0D:0D:D8:6A:7E:BB:09:38:AA:32:E0:9D:1D:B1:22:F6
Certificate issuer: /CN=9665c8110d0dd86a7ebb0938aa32e09d1db122f6
Certificate serial: 0197CA27567DBD9A6F3A6084EE675F06A0E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/fa81f4-6600-4079-93c5-4897261ba46b/1/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.mft
Manifest number: 0E64
Signing time: Wed 02 Jul 2025 08:01:04 +0000
Manifest this update: Wed 02 Jul 2025 08:01:04 +0000
Manifest next update: Thu 03 Jul 2025 08:01:04 +0000
Files and hashes: 1: hDr7XZdy7Zu__1e0bkoorUALVGI.roa (hash: Ah9s+DUMovObb0WEEgnVu12bFf+2vlp0mJLr4ANjGq0=)
2: lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.crl (hash: /W53nPL4NXzTghGiVy7I2APJeCNsZ32WMzy26XS71wI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/fa81f4-6600-4079-93c5-4897261ba46b/1/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/fa81f4-6600-4079-93c5-4897261ba46b/1/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ca:27:56:7d:bd:9a:6f:3a:60:84:ee:67:5f:06:a0:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9665c8110d0dd86a7ebb0938aa32e09d1db122f6
Validity
Not Before: Jul 2 08:01:04 2025 GMT
Not After : Jul 3 08:01:04 2025 GMT
Subject: CN=803f993d9dae6cbb3a879e57041e587e1b961a70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:cd:84:9d:98:de:d7:a7:a7:44:98:fe:02:05:
b4:bc:28:72:b1:e6:0e:4a:3d:1a:df:7b:61:3b:6f:
5c:2b:ee:c7:1b:06:a1:c5:4d:0e:ff:ef:6d:bb:40:
32:86:26:4d:21:8e:cf:58:8c:47:f3:f3:a1:70:ca:
7a:fa:65:31:30:fb:bf:5b:29:c7:46:aa:d4:33:b1:
2c:22:6e:5c:60:51:98:0f:39:75:40:99:b0:00:c1:
e9:cd:4b:2e:e3:d5:b3:45:1d:30:83:d3:4a:71:34:
cb:c9:6d:8d:3e:73:73:96:a0:36:c5:29:e4:3f:57:
d8:3f:66:41:e9:4c:21:57:0c:02:f1:82:77:77:f0:
50:cf:51:b2:2d:f1:22:ab:61:8c:88:d4:ab:fd:19:
46:56:ae:43:06:52:67:db:58:c3:8f:1c:68:a5:77:
1f:6d:5e:64:34:f2:24:53:3c:3b:df:ec:c5:e3:f7:
59:01:90:94:cc:fe:5c:22:7c:c5:f9:7a:87:f9:18:
52:34:23:c8:8c:97:fa:99:03:57:70:35:6a:9b:db:
4a:78:9f:85:46:6c:a3:93:6e:c3:66:14:d0:03:10:
c6:4c:6f:15:b8:f2:90:cb:66:9b:b4:a7:56:69:29:
da:87:f4:68:60:cc:09:90:74:2b:ce:6c:28:48:55:
ca:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:3F:99:3D:9D:AE:6C:BB:3A:87:9E:57:04:1E:58:7E:1B:96:1A:70
X509v3 Authority Key Identifier:
keyid:96:65:C8:11:0D:0D:D8:6A:7E:BB:09:38:AA:32:E0:9D:1D:B1:22:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/fa81f4-6600-4079-93c5-4897261ba46b/1/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/fa81f4-6600-4079-93c5-4897261ba46b/1/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:0f:46:23:b7:89:f1:66:c6:16:2e:10:5b:75:f8:b9:50:79:
20:7c:72:e0:c5:ab:e6:24:32:b5:72:8b:54:87:df:42:6b:65:
f4:e0:fc:f9:1e:56:8f:33:d1:a2:a7:bc:f6:8f:0e:ff:6f:fa:
b1:1e:0e:ad:c2:b6:e2:11:f0:64:5a:bd:35:70:45:d3:09:1e:
42:b6:5c:b9:4e:11:41:20:26:95:7b:14:b4:e1:ff:16:a3:9a:
32:86:53:7f:f5:a4:53:dc:25:92:e7:20:d4:5e:f6:2f:77:0a:
7f:5b:e6:ed:80:67:ba:7b:04:84:2e:e4:77:83:3f:0b:a3:71:
c4:63:29:7b:39:da:e6:56:12:90:5e:ea:14:46:eb:da:b9:24:
bc:d3:ad:18:42:f8:7d:79:dd:07:6e:ba:34:b3:46:49:2c:0f:
f7:9f:b5:de:d9:4f:6e:3b:e3:83:53:cf:70:44:66:9d:57:c5:
3c:dd:57:db:de:81:a6:f0:f5:9d:8a:ce:ba:93:10:38:b3:1a:
68:28:7f:4b:85:e1:ba:1a:29:63:15:5c:77:79:0b:a3:4b:66:
a7:a2:90:2f:1c:9c:20:16:cf:d4:4e:d1:93:af:3a:76:3e:0a:
b8:97:d1:07:7c:3e:ed:15:26:42:e5:e1:04:69:61:bb:0c:df:
a6:51:3e:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 10:18:10 2025 by rpki-client