Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/fa81f4-6600-4079-93c5-4897261ba46b/1/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.mft
File: lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.mft (raw, json)
Hash identifier: mYqv5zCcKtvJYFDmSaJYhj+NrWz/ci/CU/poGr8d7rU=
Subject key identifier: 32:CC:E4:0D:86:99:63:F7:07:D3:D0:62:93:72:39:1B:F5:65:E9:6B
Authority key identifier: 96:65:C8:11:0D:0D:D8:6A:7E:BB:09:38:AA:32:E0:9D:1D:B1:22:F6
Certificate issuer: /CN=9665c8110d0dd86a7ebb0938aa32e09d1db122f6
Certificate serial: 0199FE0FF96EB1820CB80CC7BA811CF9DB5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/fa81f4-6600-4079-93c5-4897261ba46b/1/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.mft
Manifest number: 0F88
Signing time: Sun 19 Oct 2025 20:01:23 +0000
Manifest this update: Sun 19 Oct 2025 20:01:23 +0000
Manifest next update: Mon 20 Oct 2025 20:01:23 +0000
Files and hashes: 1: hDr7XZdy7Zu__1e0bkoorUALVGI.roa (hash: Ah9s+DUMovObb0WEEgnVu12bFf+2vlp0mJLr4ANjGq0=)
2: lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.crl (hash: sMHmRINHud8MIqYz2GDEjvSjBxltW0k6PJB5r+A5Gxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/fa81f4-6600-4079-93c5-4897261ba46b/1/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/fa81f4-6600-4079-93c5-4897261ba46b/1/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:0f:f9:6e:b1:82:0c:b8:0c:c7:ba:81:1c:f9:db:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9665c8110d0dd86a7ebb0938aa32e09d1db122f6
Validity
Not Before: Oct 19 20:01:23 2025 GMT
Not After : Oct 20 20:01:23 2025 GMT
Subject: CN=32cce40d869963f707d3d0629372391bf565e96b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:27:7a:2c:9a:8d:a2:52:f2:a5:64:71:52:4d:
e3:f3:67:50:3f:5d:16:5c:94:cb:30:b3:d8:10:65:
a2:a0:12:5e:90:90:f3:c8:28:79:d2:3e:18:62:94:
be:fb:ea:c6:c2:22:40:9e:12:c7:23:8b:75:f7:fb:
a3:e6:95:58:32:a0:01:42:6b:f4:0e:4a:ed:47:6d:
8a:fa:4a:b8:c7:6b:61:cb:17:c6:29:6d:4b:e3:d0:
82:37:6e:6a:32:86:67:55:67:f4:2a:e6:d5:12:64:
b7:90:8a:36:fc:9b:92:cb:e2:ad:a0:ab:a8:5f:07:
a9:8d:ff:52:fe:67:77:64:27:e8:ab:87:42:be:9d:
d6:3a:62:bd:8f:85:77:e5:74:51:3c:1a:78:3d:2c:
92:4c:c9:cf:9d:e9:b3:16:e5:0e:d7:93:9c:73:6b:
1d:aa:f8:d7:22:73:2c:39:1c:93:c9:4c:93:79:8b:
7b:a9:49:cf:1b:92:ed:00:40:1e:7d:39:00:15:60:
af:6a:52:da:49:4e:73:1a:4b:ed:7c:26:62:b3:91:
8f:6a:8c:81:f0:cb:1a:5d:d8:5c:92:3c:11:96:a7:
db:31:91:ff:bd:a6:a7:97:41:cd:d2:6a:e4:c3:09:
66:9d:a0:09:9e:61:ef:f8:02:e4:36:be:82:28:1b:
f0:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:CC:E4:0D:86:99:63:F7:07:D3:D0:62:93:72:39:1B:F5:65:E9:6B
X509v3 Authority Key Identifier:
keyid:96:65:C8:11:0D:0D:D8:6A:7E:BB:09:38:AA:32:E0:9D:1D:B1:22:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/fa81f4-6600-4079-93c5-4897261ba46b/1/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/fa81f4-6600-4079-93c5-4897261ba46b/1/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:70:26:65:4d:6d:39:41:a9:b2:aa:b1:2b:46:68:a8:52:42:
fc:43:43:4b:f6:96:cf:e6:e3:c9:b7:72:99:ec:02:d0:83:9b:
78:9c:d9:25:69:17:e1:aa:a4:8a:2c:fb:c1:27:db:0d:8b:4b:
36:40:fb:0b:e0:2a:e0:38:e2:de:4e:dd:c6:fa:23:d1:04:fb:
7c:8e:81:ca:0e:57:39:fc:45:6f:06:b0:37:1a:b9:42:1b:51:
e8:bb:08:e9:0e:24:8a:8a:6b:5b:de:1a:a8:39:7a:35:77:35:
ed:9b:4e:9c:82:d3:7f:d2:7a:f3:3b:0f:21:79:09:83:ec:e1:
2d:d6:fd:5f:32:fa:6b:94:d1:ec:32:2d:18:d9:55:fb:e5:4b:
a9:38:80:f4:18:10:1f:61:44:d5:1d:bb:0e:c9:5e:9b:17:24:
cd:76:30:01:a2:f7:27:e6:89:0c:48:ba:1f:4b:e5:48:f1:ff:
28:e3:09:fb:b8:fd:2c:89:96:cf:a2:7e:4d:68:8a:35:10:2e:
36:6a:0f:1e:b1:c8:2b:dc:ab:25:c8:93:60:3f:c0:b7:9b:e2:
63:4f:f8:59:e6:b7:2c:e2:8f:0e:f5:68:45:3f:f9:f1:0d:87:
5c:4d:95:1a:0e:ac:ac:b3:7b:32:19:b5:b5:88:3c:4c:56:da:
6f:3d:c4:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+D/lusYIMuAzHuoEc+dtfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2NjVjODExMGQwZGQ4NmE3ZWJiMDkzOGFhMzJlMDlkMWRi
MTIyZjYwHhcNMjUxMDE5MjAwMTIzWhcNMjUxMDIwMjAwMTIzWjAzMTEwLwYDVQQD
EygzMmNjZTQwZDg2OTk2M2Y3MDdkM2QwNjI5MzcyMzkxYmY1NjVlOTZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwyd6LJqNolLypWRxUk3j82dQP10W
XJTLMLPYEGWioBJekJDzyCh50j4YYpS+++rGwiJAnhLHI4t19/uj5pVYMqABQmv0
DkrtR22K+kq4x2thyxfGKW1L49CCN25qMoZnVWf0KubVEmS3kIo2/JuSy+KtoKuo
Xwepjf9S/md3ZCfoq4dCvp3WOmK9j4V35XRRPBp4PSySTMnPnemzFuUO15Occ2sd
qvjXInMsORyTyUyTeYt7qUnPG5LtAEAefTkAFWCvalLaSU5zGkvtfCZis5GPaoyB
8MsaXdhckjwRlqfbMZH/vaanl0HN0mrkwwlmnaAJnmHv+ALkNr6CKBvwZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDLM5A2GmWP3B9PQYpNyORv1ZelrMB8GA1UdIwQY
MBaAFJZlyBENDdhqfrsJOKoy4J0dsSL2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbG1YSUVRME4yR3AtdXdrNHFqTGduUjJ4SXZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9mYTgxZjQtNjYwMC00MDc5LTkzYzUt
NDg5NzI2MWJhNDZiLzEvbG1YSUVRME4yR3AtdXdrNHFqTGduUjJ4SXZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy9mYTgxZjQtNjYwMC00MDc5LTkzYzUtNDg5NzI2MWJhNDZi
LzEvbG1YSUVRME4yR3AtdXdrNHFqTGduUjJ4SXZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiXAmZU1t
OUGpsqqxK0ZoqFJC/ENDS/aWz+bjybdymewC0IObeJzZJWkX4aqkiiz7wSfbDYtL
NkD7C+Aq4Dji3k7dxvoj0QT7fI6Byg5XOfxFbwawNxq5QhtR6LsI6Q4kioprW94a
qDl6NXc17ZtOnILTf9J68zsPIXkJg+zhLdb9XzL6a5TR7DItGNlV++VLqTiA9BgQ
H2FE1R27DslemxckzXYwAaL3J+aJDEi6H0vlSPH/KOMJ+7j9LImWz6J+TWiKNRAu
NmoPHrHIK9yrJciTYD/At5viY0/4Wea3LOKPDvVoRT/58Q2HXE2VGg6srLN7Mhm1
tYg8TFbabz3Eww==
-----END CERTIFICATE-----
Generated at Mon Oct 20 00:01:16 2025 by rpki-client