Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/436b56-5b55-4ff4-83bf-98ac665b1908/1/lm-ON-SmyEs_O1unfiEJ0-9ZquA.mft
File: lm-ON-SmyEs_O1unfiEJ0-9ZquA.mft (raw, json)
Hash identifier: 9FgPYXBDo35SPgU/yPU/qZ/iaq7y6D56z5brJAiPbKM=
Subject key identifier: 4B:61:EB:45:47:D3:E5:E0:FF:95:6B:48:BE:54:52:2D:38:02:12:AF
Authority key identifier: 96:6F:8E:37:E4:A6:C8:4B:3F:3B:5B:A7:7E:21:09:D3:EF:59:AA:E0
Certificate issuer: /CN=966f8e37e4a6c84b3f3b5ba77e2109d3ef59aae0
Certificate serial: 0198D8F2CF7B2104B741E828DD9CD1318BBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lm-ON-SmyEs_O1unfiEJ0-9ZquA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/436b56-5b55-4ff4-83bf-98ac665b1908/1/lm-ON-SmyEs_O1unfiEJ0-9ZquA.mft
Manifest number: 0238
Signing time: Sat 23 Aug 2025 22:00:48 +0000
Manifest this update: Sat 23 Aug 2025 22:00:48 +0000
Manifest next update: Sun 24 Aug 2025 22:00:48 +0000
Files and hashes: 1: lm-ON-SmyEs_O1unfiEJ0-9ZquA.crl (hash: G7iwHet5ZUsN7o1Xs1TazXzmTYzpf/w8p38zoYwbf4I=)
2: on5-XY5_69ZqoMpI3X4OhIb7uc4.roa (hash: 4oa5fFDXWm4dHc0nsqOubqefekgWac8ztkJvtrP5fzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/436b56-5b55-4ff4-83bf-98ac665b1908/1/lm-ON-SmyEs_O1unfiEJ0-9ZquA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/436b56-5b55-4ff4-83bf-98ac665b1908/1/lm-ON-SmyEs_O1unfiEJ0-9ZquA.mft
rsync://rpki.ripe.net/repository/DEFAULT/lm-ON-SmyEs_O1unfiEJ0-9ZquA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 17:19:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:f2:cf:7b:21:04:b7:41:e8:28:dd:9c:d1:31:8b:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=966f8e37e4a6c84b3f3b5ba77e2109d3ef59aae0
Validity
Not Before: Aug 23 22:00:48 2025 GMT
Not After : Aug 24 22:00:48 2025 GMT
Subject: CN=4b61eb4547d3e5e0ff956b48be54522d380212af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a2:02:04:31:60:c6:5d:c3:aa:a1:c9:ff:49:
35:b6:b9:77:c7:0c:8a:c3:8a:49:a4:04:1c:b7:5b:
ff:78:6f:7a:00:35:95:ac:22:95:8c:e2:2a:9f:7c:
ba:62:32:73:f8:de:3c:a8:68:0b:ee:c2:e4:16:d8:
71:9c:8b:f6:41:bf:2b:c6:9e:70:f3:61:65:eb:56:
e6:d8:9f:b3:dc:31:4b:5c:be:ec:80:61:a9:54:15:
a7:64:9e:b4:7d:b5:fc:72:66:45:0c:da:0a:45:75:
17:d8:6d:83:46:37:68:b9:14:fc:de:5d:94:82:52:
8d:84:40:6e:a7:b8:74:a6:a8:07:ef:e6:85:40:36:
a8:e9:46:12:70:75:c5:30:9d:79:74:28:9f:40:ba:
74:9f:2b:39:6f:65:3b:03:52:32:db:2d:e4:d4:ad:
57:b4:e6:cd:98:72:25:00:30:a8:f2:36:e6:2d:41:
31:91:52:1e:45:82:5f:4b:b6:a1:75:8a:2f:60:cb:
2d:95:32:8b:81:ae:92:8f:29:3e:ad:75:c2:1a:dc:
56:17:05:f9:88:63:86:64:4e:64:10:44:47:32:30:
f2:b0:5e:00:1a:a9:cc:ca:ee:40:10:56:02:92:66:
d6:23:7a:c3:f4:60:24:4e:1f:56:05:7c:e6:ce:e2:
ba:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:61:EB:45:47:D3:E5:E0:FF:95:6B:48:BE:54:52:2D:38:02:12:AF
X509v3 Authority Key Identifier:
keyid:96:6F:8E:37:E4:A6:C8:4B:3F:3B:5B:A7:7E:21:09:D3:EF:59:AA:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lm-ON-SmyEs_O1unfiEJ0-9ZquA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/436b56-5b55-4ff4-83bf-98ac665b1908/1/lm-ON-SmyEs_O1unfiEJ0-9ZquA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/436b56-5b55-4ff4-83bf-98ac665b1908/1/lm-ON-SmyEs_O1unfiEJ0-9ZquA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:f9:e2:0b:8e:cc:e7:37:2c:57:d1:cf:6d:6d:4a:0c:f2:3c:
3a:ea:94:7f:90:9d:cd:97:4e:2e:1a:f0:16:0f:3f:3b:c8:e9:
80:ad:0f:fd:33:82:4e:54:b2:1c:ac:e5:0e:f2:be:5b:e0:18:
09:e0:2a:ba:1b:98:32:17:e2:b4:32:d7:b3:00:38:a1:b9:67:
30:81:7e:55:e1:97:ec:96:7e:bb:49:58:ab:a4:24:1f:0d:16:
93:a0:d1:1f:c3:bd:64:c0:9a:cc:14:5a:cf:b8:1b:77:9b:de:
f5:4c:ee:11:e8:30:ac:d1:3f:5e:41:a3:4e:94:44:52:05:ff:
45:b5:f4:98:ea:f1:87:a5:5f:f8:12:04:73:c1:3b:20:5b:8d:
0f:96:16:e2:e4:2c:f4:1d:cb:a2:d6:75:fe:37:63:5d:f9:7d:
95:be:25:ad:2c:31:7d:8f:81:ea:aa:70:4e:61:13:0d:cc:fd:
0f:81:fd:0c:ac:36:10:57:5a:d4:96:95:e2:0e:ee:4d:d1:3e:
ef:ab:a1:72:47:e4:7d:22:72:30:d8:b9:0c:23:0e:28:ae:0a:
73:ce:b7:da:50:97:50:66:fb:44:2c:44:56:92:ff:83:2a:3e:
e4:60:bd:2c:bd:b9:ee:00:25:91:dd:a8:8e:91:d5:cd:b7:5b:
09:38:9f:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:33:45 2025 by rpki-client