Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/34d94d-2cc6-409d-95f3-949b91e9f48d/1/lpMmVir3Dnnz1RJIjikOkkMtWgE.mft
File: lpMmVir3Dnnz1RJIjikOkkMtWgE.mft (raw, json)
Hash identifier: 4snF6+aVRA+JDkcYMUorvN0VUdTCQ2IHaY97aFMlfrw=
Subject key identifier: BF:A8:4C:58:66:BD:C1:7D:11:B6:21:57:A0:E7:D7:EA:49:65:5B:48
Authority key identifier: 96:93:26:56:2A:F7:0E:79:F3:D5:12:48:8E:29:0E:92:43:2D:5A:01
Certificate issuer: /CN=969326562af70e79f3d512488e290e92432d5a01
Certificate serial: 0199FCFD6D6761C02B8109B99307061C5B58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lpMmVir3Dnnz1RJIjikOkkMtWgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/34d94d-2cc6-409d-95f3-949b91e9f48d/1/lpMmVir3Dnnz1RJIjikOkkMtWgE.mft
Manifest number: 138C
Signing time: Sun 19 Oct 2025 15:01:31 +0000
Manifest this update: Sun 19 Oct 2025 15:01:31 +0000
Manifest next update: Mon 20 Oct 2025 15:01:31 +0000
Files and hashes: 1: _zRJudFm9-SwIj8WqpSjxqhsHho.roa (hash: yl1VlGdcj3D0SfYe9bEEDXwIlAfQxRhpjuP7t/iSfW0=)
2: lpMmVir3Dnnz1RJIjikOkkMtWgE.crl (hash: oSpjSQCnq7yCYGoTpDu9Hvjjz3VHksjLkc8QNPriVJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/34d94d-2cc6-409d-95f3-949b91e9f48d/1/lpMmVir3Dnnz1RJIjikOkkMtWgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/34d94d-2cc6-409d-95f3-949b91e9f48d/1/lpMmVir3Dnnz1RJIjikOkkMtWgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lpMmVir3Dnnz1RJIjikOkkMtWgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:6d:67:61:c0:2b:81:09:b9:93:07:06:1c:5b:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=969326562af70e79f3d512488e290e92432d5a01
Validity
Not Before: Oct 19 15:01:31 2025 GMT
Not After : Oct 20 15:01:31 2025 GMT
Subject: CN=bfa84c5866bdc17d11b62157a0e7d7ea49655b48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a5:52:bd:fd:2b:b1:ee:8f:b0:61:2b:a5:35:
9e:aa:5f:2c:a0:0d:20:5c:48:5b:13:f2:97:92:40:
8d:06:46:91:a8:ab:aa:0d:ff:90:f1:dd:d2:f9:ee:
7a:37:65:a3:bd:7d:03:ab:01:5e:c6:78:18:43:2f:
4d:02:81:ca:a5:3c:45:86:f5:66:40:97:50:5b:e2:
9d:1a:4e:1f:1c:36:41:06:d8:53:20:9e:5f:31:cc:
a4:14:02:21:85:2b:69:68:e4:a2:12:71:05:9e:c0:
ce:dc:3a:be:8a:4d:fe:37:8b:65:77:ba:72:d8:43:
fa:81:58:9f:3e:56:4e:3f:b3:c3:e6:cd:f4:9e:69:
e9:b3:cb:3a:af:dd:ba:00:15:e7:f3:2d:d6:c3:72:
57:78:d3:10:f6:e5:53:bf:29:de:52:02:f5:3c:bf:
0d:4a:79:a4:b2:4b:cd:bc:88:fb:46:11:ff:1e:07:
ab:fc:28:3f:c7:2a:9c:c4:a4:88:0a:c1:7d:c1:3a:
eb:19:44:96:7e:08:21:b5:13:39:83:52:25:92:37:
ce:0e:5f:8e:b9:19:f1:b0:e5:30:62:4a:0e:19:33:
c4:78:de:9b:7d:19:4e:9d:17:a1:9c:bb:53:b3:60:
83:ca:54:c4:1b:15:26:43:24:5d:20:21:dd:72:f0:
1a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:A8:4C:58:66:BD:C1:7D:11:B6:21:57:A0:E7:D7:EA:49:65:5B:48
X509v3 Authority Key Identifier:
keyid:96:93:26:56:2A:F7:0E:79:F3:D5:12:48:8E:29:0E:92:43:2D:5A:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lpMmVir3Dnnz1RJIjikOkkMtWgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/34d94d-2cc6-409d-95f3-949b91e9f48d/1/lpMmVir3Dnnz1RJIjikOkkMtWgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/34d94d-2cc6-409d-95f3-949b91e9f48d/1/lpMmVir3Dnnz1RJIjikOkkMtWgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:d7:ee:4e:9b:c9:f9:bc:f0:e4:79:d6:df:67:4f:2c:44:e2:
1d:32:fd:d6:25:3a:9e:eb:7b:93:3e:5b:1c:de:36:48:84:af:
4c:d2:c9:36:d5:02:ca:ac:a8:59:1e:d6:64:54:5b:bb:53:18:
77:5e:02:bc:b5:bf:fe:32:a7:b0:a9:d4:6a:33:ee:76:86:85:
ca:d8:4c:0c:0c:b7:16:51:cf:73:1a:e1:41:c2:5f:f9:f2:94:
bd:0c:9e:bc:eb:f3:56:b1:40:3e:a3:1d:16:04:25:62:7c:a1:
17:77:4e:fa:d3:24:f8:dc:1e:88:3f:71:14:df:50:6c:30:1a:
fe:0d:2f:d3:d9:db:bf:b5:ef:ba:5b:91:7a:51:40:d6:52:a4:
b9:3a:0a:5a:8f:7e:39:3c:48:87:e3:e4:b7:4f:23:f1:89:d0:
8c:34:b8:48:c3:56:c3:35:3d:a7:be:e9:14:53:57:6d:4f:fe:
ba:86:5a:97:9a:15:ba:88:1e:37:85:08:db:ed:44:86:3c:bc:
f1:b8:2c:c0:a3:ba:51:61:f8:6b:68:73:0f:e7:3e:03:44:d4:
1f:50:ef:f6:b7:1a:ed:ff:b7:6b:de:e5:de:11:ba:c1:37:a4:
e7:46:d5:15:1a:dd:9d:52:59:31:23:9c:83:6a:5a:8e:90:ff:
24:55:58:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:49:51 2025 by rpki-client