Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/323add-1d87-416a-bd05-1e9848cb1745/1/Lm0jW_0rt32YhrFMsQ3EnEIII1M.mft
File: Lm0jW_0rt32YhrFMsQ3EnEIII1M.mft (raw, json)
Hash identifier: dBDLR97Jt0/4J/aF/KXZnrH07mvzw/XCl6Td6OFyoMc=
Subject key identifier: 5F:E1:7D:D7:AA:5C:E9:6A:88:1C:89:EE:47:04:63:24:9D:98:26:87
Authority key identifier: 2E:6D:23:5B:FD:2B:B7:7D:98:86:B1:4C:B1:0D:C4:9C:42:08:23:53
Certificate issuer: /CN=2e6d235bfd2bb77d9886b14cb10dc49c42082353
Certificate serial: 0198D54EABF6F586B03618E18E5137AACB16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lm0jW_0rt32YhrFMsQ3EnEIII1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/323add-1d87-416a-bd05-1e9848cb1745/1/Lm0jW_0rt32YhrFMsQ3EnEIII1M.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 05:02:39 +0000
Manifest this update: Sat 23 Aug 2025 05:02:39 +0000
Manifest next update: Sun 24 Aug 2025 05:02:39 +0000
Files and hashes: 1: 6fPKrr2WqJdenIvBOBD3KjEA0wk.roa (hash: i2OyGf183j1iELGCpTBdb4xd43I9V5TO+gNqwj8iJKU=)
2: Lm0jW_0rt32YhrFMsQ3EnEIII1M.crl (hash: lwPO2bN9rq9BWXUScFG9AdjP+jEytaz1MhYknHpntps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/323add-1d87-416a-bd05-1e9848cb1745/1/Lm0jW_0rt32YhrFMsQ3EnEIII1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/323add-1d87-416a-bd05-1e9848cb1745/1/Lm0jW_0rt32YhrFMsQ3EnEIII1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lm0jW_0rt32YhrFMsQ3EnEIII1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:ab:f6:f5:86:b0:36:18:e1:8e:51:37:aa:cb:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6d235bfd2bb77d9886b14cb10dc49c42082353
Validity
Not Before: Aug 23 05:02:39 2025 GMT
Not After : Aug 24 05:02:39 2025 GMT
Subject: CN=5fe17dd7aa5ce96a881c89ee470463249d982687
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:68:3f:56:a5:bf:db:13:02:1e:75:69:cd:53:
2b:65:9e:b9:3a:1a:f4:d8:01:e4:36:32:ba:7e:49:
22:e9:6d:3c:b9:b3:41:7e:8b:64:9e:f5:31:3b:41:
cf:c5:d8:d3:78:fe:84:57:2a:68:bd:63:e3:c6:5c:
a2:ba:94:f8:88:31:88:b0:0f:ec:19:e9:67:2c:c7:
dd:69:13:b6:dc:3b:d2:87:6d:bf:85:b2:cb:3b:31:
f9:b3:01:e5:ff:ef:e3:d5:9b:d7:f4:45:de:74:3f:
3b:ab:e8:d2:01:9d:c9:fe:58:9a:35:59:91:53:9c:
62:10:3b:ab:2d:63:1c:75:00:52:b2:82:af:38:fc:
e8:aa:f7:2d:a3:71:4d:f4:e3:ae:8e:46:ce:0f:ae:
1c:3c:21:82:fd:82:d3:83:76:0d:3c:96:9d:ee:91:
bb:8d:1a:d7:ff:2e:5a:6b:af:74:63:39:db:44:bd:
0b:d9:98:06:ce:85:84:1d:2b:8b:b1:71:e3:32:9e:
7c:e2:27:76:6d:b7:16:15:3d:fe:6a:70:51:92:2b:
7c:04:0c:4f:9a:24:32:f1:19:e2:d8:6f:f7:fd:8b:
97:6a:da:a2:20:6e:58:41:2d:da:cd:d3:41:63:f7:
9f:18:3f:6e:89:37:7e:56:a0:66:77:13:b8:d8:28:
36:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:E1:7D:D7:AA:5C:E9:6A:88:1C:89:EE:47:04:63:24:9D:98:26:87
X509v3 Authority Key Identifier:
keyid:2E:6D:23:5B:FD:2B:B7:7D:98:86:B1:4C:B1:0D:C4:9C:42:08:23:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lm0jW_0rt32YhrFMsQ3EnEIII1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/323add-1d87-416a-bd05-1e9848cb1745/1/Lm0jW_0rt32YhrFMsQ3EnEIII1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/323add-1d87-416a-bd05-1e9848cb1745/1/Lm0jW_0rt32YhrFMsQ3EnEIII1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:61:cb:6b:a0:ec:91:f7:14:6a:52:17:80:a0:3d:f5:6b:8c:
59:24:90:17:23:0a:cb:ab:a1:a3:58:c3:ec:59:aa:58:5c:06:
3c:76:3a:1d:9e:cf:e4:91:60:7a:28:77:0a:7c:f2:f4:ea:5c:
14:2a:05:ac:85:1e:da:7a:d6:33:0d:f0:44:0a:fc:e6:f3:45:
30:31:64:4d:c8:2b:d6:c1:29:2c:3e:d2:c1:c4:da:56:22:a3:
9a:f3:01:b6:51:aa:4a:b8:81:cb:6e:be:cd:15:16:7e:54:80:
83:90:07:b1:61:37:02:63:49:34:18:cc:8b:60:80:cc:ff:64:
27:d8:73:56:28:e2:ce:67:26:7b:fa:00:59:2d:47:64:aa:e4:
32:3d:a0:0a:c8:81:ad:66:71:31:e9:e7:f8:26:c3:a4:b3:ea:
a7:c2:23:c1:60:bd:84:c6:8b:d9:de:4c:e0:c3:11:e3:f2:22:
ea:72:ca:29:4f:65:a3:c8:36:89:f1:10:fd:8e:ee:3d:63:ed:
17:0d:12:cc:81:3d:cf:04:e8:4b:07:59:db:b3:f7:8a:87:0c:
df:89:76:98:c2:96:5b:dc:21:39:9b:61:1d:6c:de:3d:15:83:
4b:f7:f2:1c:e8:36:6b:3f:dc:b2:30:8c:64:aa:c0:ee:41:02:
d6:6f:02:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:26:22 2025 by rpki-client