Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/436b56-5b55-4ff4-83bf-98ac665b1908/1/lm-ON-SmyEs_O1unfiEJ0-9ZquA.mft
File: lm-ON-SmyEs_O1unfiEJ0-9ZquA.mft (raw, json)
Hash identifier: yi6aAz9kQKd1sHNe3y7ipMVxrlHGmySCgqJmV3pIKro=
Subject key identifier: F2:87:42:EF:E3:97:FA:05:D0:B4:C7:F6:3A:D7:D6:14:C9:F4:E7:55
Authority key identifier: 96:6F:8E:37:E4:A6:C8:4B:3F:3B:5B:A7:7E:21:09:D3:EF:59:AA:E0
Certificate issuer: /CN=966f8e37e4a6c84b3f3b5ba77e2109d3ef59aae0
Certificate serial: 0199FC8F3B9E616BD112AC3FA9A2C2FCFC28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lm-ON-SmyEs_O1unfiEJ0-9ZquA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/436b56-5b55-4ff4-83bf-98ac665b1908/1/lm-ON-SmyEs_O1unfiEJ0-9ZquA.mft
Manifest number: 02CF
Signing time: Sun 19 Oct 2025 13:01:09 +0000
Manifest this update: Sun 19 Oct 2025 13:01:09 +0000
Manifest next update: Mon 20 Oct 2025 13:01:09 +0000
Files and hashes: 1: lm-ON-SmyEs_O1unfiEJ0-9ZquA.crl (hash: u6W5ImWSOaKc4dojD4FjIcfBFhAeA74CcRgji6Vilww=)
2: on5-XY5_69ZqoMpI3X4OhIb7uc4.roa (hash: 4oa5fFDXWm4dHc0nsqOubqefekgWac8ztkJvtrP5fzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/436b56-5b55-4ff4-83bf-98ac665b1908/1/lm-ON-SmyEs_O1unfiEJ0-9ZquA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/436b56-5b55-4ff4-83bf-98ac665b1908/1/lm-ON-SmyEs_O1unfiEJ0-9ZquA.mft
rsync://rpki.ripe.net/repository/DEFAULT/lm-ON-SmyEs_O1unfiEJ0-9ZquA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:3b:9e:61:6b:d1:12:ac:3f:a9:a2:c2:fc:fc:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=966f8e37e4a6c84b3f3b5ba77e2109d3ef59aae0
Validity
Not Before: Oct 19 13:01:09 2025 GMT
Not After : Oct 20 13:01:09 2025 GMT
Subject: CN=f28742efe397fa05d0b4c7f63ad7d614c9f4e755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3b:d4:b8:46:4f:a6:f6:7b:db:7b:bb:e5:e5:
b1:98:55:7f:86:46:fa:ec:e7:32:ab:64:1f:1a:2e:
d4:c8:20:bf:7c:ad:ba:7f:96:da:0d:74:aa:d8:e0:
82:fa:a2:df:db:dd:9d:43:e7:ef:71:ff:d4:7d:10:
b7:2a:e2:e6:69:21:65:39:0c:a8:44:78:9a:26:65:
27:b4:8c:38:4e:a5:e3:56:c2:2d:e1:10:3b:f6:a5:
31:e7:ca:b9:2b:77:cd:2d:cb:f3:dc:19:dc:c8:20:
71:80:60:11:78:5c:32:32:73:79:06:d5:e9:87:9a:
a7:36:93:89:48:a8:6e:33:74:05:a3:c3:13:1b:92:
69:fe:f5:4d:03:28:96:6b:6f:a8:87:4e:c1:f2:e7:
73:0f:ce:eb:db:d8:15:84:aa:c8:51:42:aa:69:99:
52:5c:74:94:8c:63:d2:8b:02:3d:5c:03:8b:8e:02:
36:95:86:51:d7:3e:ff:52:d2:87:9a:aa:2f:17:8e:
86:88:70:81:18:de:17:a2:39:1c:5e:35:89:f3:be:
b2:b1:a2:5c:25:2c:36:70:01:12:14:1a:fe:41:66:
56:f5:e3:68:b5:9a:7a:b2:3c:bc:fa:d9:27:f4:f8:
f5:91:91:c1:3d:2c:f1:6f:ca:4a:fe:75:ce:08:13:
f0:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:87:42:EF:E3:97:FA:05:D0:B4:C7:F6:3A:D7:D6:14:C9:F4:E7:55
X509v3 Authority Key Identifier:
keyid:96:6F:8E:37:E4:A6:C8:4B:3F:3B:5B:A7:7E:21:09:D3:EF:59:AA:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lm-ON-SmyEs_O1unfiEJ0-9ZquA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/436b56-5b55-4ff4-83bf-98ac665b1908/1/lm-ON-SmyEs_O1unfiEJ0-9ZquA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/436b56-5b55-4ff4-83bf-98ac665b1908/1/lm-ON-SmyEs_O1unfiEJ0-9ZquA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:20:8d:02:23:70:16:92:10:65:5e:33:cd:a5:6f:95:c7:ec:
f3:2d:83:8c:d9:6c:bf:c5:43:49:39:24:37:2c:ed:b0:b2:3c:
fc:29:95:6c:45:12:79:1b:f4:c4:71:98:56:ad:f9:f2:c6:ba:
8a:cd:81:b7:2b:b4:86:ee:1b:29:0c:22:b3:79:93:d4:95:73:
74:7a:d3:d8:d0:33:95:b7:99:58:a3:38:73:d7:b6:f4:3b:ba:
6d:15:2d:90:45:70:ce:9f:8f:8e:3a:ff:9f:6a:9e:1f:64:a9:
25:67:5a:2c:c2:28:45:88:4c:ad:3f:73:2d:d9:64:ab:34:9d:
f3:f6:da:77:52:c5:ec:f6:eb:78:ff:ea:a1:81:f8:c1:f0:19:
f2:c0:50:a3:42:8a:72:6d:c4:7d:21:b3:b3:11:9e:0f:9a:b2:
4a:14:74:2a:15:8e:53:f3:ed:af:93:bf:cf:05:d7:b2:bf:1d:
43:39:b0:a1:f8:d2:aa:ee:81:4c:75:c5:a6:1c:c5:20:80:50:
1b:84:07:d9:9d:50:5d:28:a8:47:ce:08:82:8a:5d:7b:b3:ca:
a0:db:22:c4:0d:85:4f:b7:16:46:39:ec:e5:34:0b:d9:f3:3f:
a9:cf:6e:42:de:53:a0:c8:2d:11:73:a2:ea:d5:3e:ad:f0:86:
b2:d6:de:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:45 2025 by rpki-client