Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/323add-1d87-416a-bd05-1e9848cb1745/1/Lm0jW_0rt32YhrFMsQ3EnEIII1M.mft
File: Lm0jW_0rt32YhrFMsQ3EnEIII1M.mft (raw, json)
Hash identifier: staU0+Sf/7E3Ki6KTYiZ3y5gU6vu0/ml9GLxNKxnqjo=
Subject key identifier: F0:07:FC:EC:B6:CA:3F:18:1B:24:43:1F:CE:9C:64:BD:36:12:25:E7
Authority key identifier: 2E:6D:23:5B:FD:2B:B7:7D:98:86:B1:4C:B1:0D:C4:9C:42:08:23:53
Certificate issuer: /CN=2e6d235bfd2bb77d9886b14cb10dc49c42082353
Certificate serial: 0199FE7DE1219B904A01B8B7ED90C6F7AB5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lm0jW_0rt32YhrFMsQ3EnEIII1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/323add-1d87-416a-bd05-1e9848cb1745/1/Lm0jW_0rt32YhrFMsQ3EnEIII1M.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 22:01:26 +0000
Manifest this update: Sun 19 Oct 2025 22:01:26 +0000
Manifest next update: Mon 20 Oct 2025 22:01:26 +0000
Files and hashes: 1: 6fPKrr2WqJdenIvBOBD3KjEA0wk.roa (hash: i2OyGf183j1iELGCpTBdb4xd43I9V5TO+gNqwj8iJKU=)
2: Lm0jW_0rt32YhrFMsQ3EnEIII1M.crl (hash: ePwXFt/Y7v+4CJc1Aq8Gty/N6BfCU4ZxXQNb/L2Ikd0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/323add-1d87-416a-bd05-1e9848cb1745/1/Lm0jW_0rt32YhrFMsQ3EnEIII1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/323add-1d87-416a-bd05-1e9848cb1745/1/Lm0jW_0rt32YhrFMsQ3EnEIII1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lm0jW_0rt32YhrFMsQ3EnEIII1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7d:e1:21:9b:90:4a:01:b8:b7:ed:90:c6:f7:ab:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6d235bfd2bb77d9886b14cb10dc49c42082353
Validity
Not Before: Oct 19 22:01:26 2025 GMT
Not After : Oct 20 22:01:26 2025 GMT
Subject: CN=f007fcecb6ca3f181b24431fce9c64bd361225e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:f3:3b:4d:75:02:f2:ac:f3:09:6a:b2:32:38:
4f:e9:54:5b:ef:ca:97:09:bc:23:a5:d4:e6:e8:98:
e9:d8:cc:55:59:26:f0:7e:d1:f9:74:51:0d:46:ef:
46:65:0c:45:45:1d:d4:22:a6:d4:fc:41:1d:76:23:
24:96:48:18:74:29:6d:1d:d8:b3:31:41:a0:4b:b8:
01:61:8c:68:8a:97:f6:aa:dc:88:03:4c:cb:d2:a9:
db:51:cc:33:2c:0a:ea:5d:2d:5a:48:c1:bf:ef:e1:
7e:15:9d:d2:47:c2:c4:1f:95:b2:fc:d7:75:6c:0a:
86:8a:4f:68:53:37:cd:43:37:78:fb:96:f0:e6:45:
ef:61:74:34:58:7e:c4:2f:e2:da:e8:b5:b2:fe:ae:
d4:79:3f:a3:d4:e4:e4:2b:ac:ff:59:4b:06:0f:b5:
e3:8b:16:05:ad:ce:d9:92:35:6b:ca:51:53:47:d1:
f7:c4:33:2e:30:90:b2:53:fe:f1:29:17:22:b3:81:
04:d7:49:77:bd:27:65:4d:4b:c5:08:78:fe:50:72:
17:00:83:d1:9c:68:38:0a:ad:7c:26:49:29:1b:a2:
6d:39:45:24:5a:aa:86:7d:23:b0:49:50:b5:12:9f:
29:b8:d0:2f:8d:1d:8c:d7:ce:fb:de:60:94:06:57:
50:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:07:FC:EC:B6:CA:3F:18:1B:24:43:1F:CE:9C:64:BD:36:12:25:E7
X509v3 Authority Key Identifier:
keyid:2E:6D:23:5B:FD:2B:B7:7D:98:86:B1:4C:B1:0D:C4:9C:42:08:23:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lm0jW_0rt32YhrFMsQ3EnEIII1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/323add-1d87-416a-bd05-1e9848cb1745/1/Lm0jW_0rt32YhrFMsQ3EnEIII1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/323add-1d87-416a-bd05-1e9848cb1745/1/Lm0jW_0rt32YhrFMsQ3EnEIII1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:66:22:30:10:32:cd:8c:98:dd:63:92:e2:15:35:84:71:53:
c0:9a:b6:5c:e0:ca:b7:2a:41:b8:31:d8:c6:d2:83:2e:8a:02:
76:14:be:68:d9:77:2c:75:fb:0c:08:5a:b4:11:89:8a:5d:d8:
96:e0:8d:af:a3:36:34:35:37:16:0d:61:95:02:d0:16:b5:b6:
43:7e:70:47:5f:91:2b:ca:5e:b7:03:23:2a:cb:f4:df:92:bd:
6e:46:f3:f4:46:31:f8:23:30:36:f7:b5:34:76:dc:fc:65:af:
37:31:d0:f7:f8:28:df:8e:4d:29:c6:1e:fc:a9:95:a5:d7:35:
5a:94:cf:a0:b0:43:4c:36:7a:b6:43:dd:fd:58:b7:51:55:ea:
c4:78:f3:35:06:ed:69:b2:cf:20:28:63:44:62:7d:a1:db:d7:
2f:82:cc:bb:8b:3b:be:c2:2f:90:bb:07:4d:ad:0d:94:bf:61:
39:df:b8:41:d9:34:9f:1a:d6:94:d6:59:54:54:c0:c3:51:e1:
1c:f5:03:ab:76:0c:eb:8e:17:5f:36:5a:d3:e8:04:08:20:37:
df:48:67:fe:bf:aa:c3:66:02:f5:71:92:de:96:c6:60:e8:5c:
b5:f3:46:a4:20:a7:30:95:a8:38:59:db:b4:d5:0d:e2:09:43:
cc:b3:ca:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+feEhm5BKAbi37ZDG96teMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlNmQyMzViZmQyYmI3N2Q5ODg2YjE0Y2IxMGRjNDljNDIw
ODIzNTMwHhcNMjUxMDE5MjIwMTI2WhcNMjUxMDIwMjIwMTI2WjAzMTEwLwYDVQQD
EyhmMDA3ZmNlY2I2Y2EzZjE4MWIyNDQzMWZjZTljNjRiZDM2MTIyNWU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9PM7TXUC8qzzCWqyMjhP6VRb78qX
CbwjpdTm6Jjp2MxVWSbwftH5dFENRu9GZQxFRR3UIqbU/EEddiMklkgYdCltHdiz
MUGgS7gBYYxoipf2qtyIA0zL0qnbUcwzLArqXS1aSMG/7+F+FZ3SR8LEH5Wy/Nd1
bAqGik9oUzfNQzd4+5bw5kXvYXQ0WH7EL+La6LWy/q7UeT+j1OTkK6z/WUsGD7Xj
ixYFrc7ZkjVrylFTR9H3xDMuMJCyU/7xKRcis4EE10l3vSdlTUvFCHj+UHIXAIPR
nGg4Cq18JkkpG6JtOUUkWqqGfSOwSVC1Ep8puNAvjR2M18773mCUBldQxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPAH/Oy2yj8YGyRDH86cZL02EiXnMB8GA1UdIwQY
MBaAFC5tI1v9K7d9mIaxTLENxJxCCCNTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTG0waldfMHJ0MzJZaHJGTXNRM0VuRUlJSTFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC8zMjNhZGQtMWQ4Ny00MTZhLWJkMDUt
MWU5ODQ4Y2IxNzQ1LzEvTG0waldfMHJ0MzJZaHJGTXNRM0VuRUlJSTFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC8zMjNhZGQtMWQ4Ny00MTZhLWJkMDUtMWU5ODQ4Y2IxNzQ1
LzEvTG0waldfMHJ0MzJZaHJGTXNRM0VuRUlJSTFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALmYiMBAy
zYyY3WOS4hU1hHFTwJq2XODKtypBuDHYxtKDLooCdhS+aNl3LHX7DAhatBGJil3Y
luCNr6M2NDU3Fg1hlQLQFrW2Q35wR1+RK8petwMjKsv035K9bkbz9EYx+CMwNve1
NHbc/GWvNzHQ9/go345NKcYe/KmVpdc1WpTPoLBDTDZ6tkPd/Vi3UVXqxHjzNQbt
abLPIChjRGJ9odvXL4LMu4s7vsIvkLsHTa0NlL9hOd+4Qdk0nxrWlNZZVFTAw1Hh
HPUDq3YM644XXzZa0+gECCA330hn/r+qw2YC9XGS3pbGYOhctfNGpCCnMJWoOFnb
tNUN4glDzLPK6Q==
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:55:09 2025 by rpki-client