Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/6a9b24-d4d3-40c1-8173-93b914701470/1/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.mft
File: LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.mft (raw, json)
Hash identifier: m3OUOpmRgYa1wDnVCp3Y67jL0oiwawzsnlDPP1hTLkw=
Subject key identifier: F8:6F:B9:C6:B1:CD:2D:22:14:C8:F5:77:58:E6:CB:BE:6C:F8:FC:2E
Authority key identifier: 2E:62:76:13:62:54:83:0B:B4:90:7E:98:C2:58:E4:93:B4:2A:AA:3A
Certificate issuer: /CN=2e6276136254830bb4907e98c258e493b42aaa3a
Certificate serial: 0198D4738A81097E2E98F88A1CF9FDCCDFE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/6a9b24-d4d3-40c1-8173-93b914701470/1/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.mft
Manifest number: 159F
Signing time: Sat 23 Aug 2025 01:03:18 +0000
Manifest this update: Sat 23 Aug 2025 01:03:18 +0000
Manifest next update: Sun 24 Aug 2025 01:03:18 +0000
Files and hashes: 1: LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.crl (hash: NaS+CRy6ng62smQtGL4Yip6yw6mlRTneNzAjUWrilxQ=)
2: fNli-LiQ9awKyhQw-GNSvJ_42w0.roa (hash: L98lyb6k01PaEjUwasFWjyw8Arv6ILhrmJTj2kl/6vk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/6a9b24-d4d3-40c1-8173-93b914701470/1/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/6a9b24-d4d3-40c1-8173-93b914701470/1/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:8a:81:09:7e:2e:98:f8:8a:1c:f9:fd:cc:df:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6276136254830bb4907e98c258e493b42aaa3a
Validity
Not Before: Aug 23 01:03:18 2025 GMT
Not After : Aug 24 01:03:18 2025 GMT
Subject: CN=f86fb9c6b1cd2d2214c8f57758e6cbbe6cf8fc2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:5f:5b:0e:0f:7f:c2:7b:91:08:38:84:e6:b6:
7f:a5:08:fa:97:0b:62:51:5e:fd:fd:78:a1:11:69:
27:19:b6:64:65:b5:68:97:fe:72:20:7a:e8:75:c0:
cd:92:61:29:8f:12:fd:fa:f1:33:af:96:ad:d2:0c:
f4:1e:3a:80:88:26:33:0e:ce:f2:a6:f3:36:d1:97:
b7:95:51:2f:ea:a4:f1:f6:f5:b4:fb:99:0c:8b:d4:
db:11:7c:13:fa:06:56:15:d3:03:4c:ed:52:b0:d3:
8f:52:16:46:14:5c:01:be:b8:0e:e2:03:75:da:38:
bb:c6:97:6a:32:84:0e:d4:66:51:00:0c:1a:22:fb:
6a:22:3e:b8:b1:08:4b:e5:87:40:ab:fd:ad:0a:ec:
32:bf:8e:a0:2f:e3:39:66:b5:5b:cb:a1:e0:ab:57:
7e:d2:c5:9d:bb:d1:70:90:08:31:e3:49:a2:f6:06:
b9:15:da:7b:44:b5:74:75:06:8a:9b:89:b1:82:89:
48:e0:dc:9c:56:e1:a2:1a:ba:7a:c6:04:43:34:3a:
33:89:3b:a0:7c:c3:7b:f5:39:d7:5f:6e:45:e1:61:
51:cd:d7:4f:c8:f5:e8:bb:1d:0a:00:96:ba:67:82:
4d:ab:16:7c:14:d6:07:f2:a7:67:23:d2:e4:ca:4b:
fd:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:6F:B9:C6:B1:CD:2D:22:14:C8:F5:77:58:E6:CB:BE:6C:F8:FC:2E
X509v3 Authority Key Identifier:
keyid:2E:62:76:13:62:54:83:0B:B4:90:7E:98:C2:58:E4:93:B4:2A:AA:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/6a9b24-d4d3-40c1-8173-93b914701470/1/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/6a9b24-d4d3-40c1-8173-93b914701470/1/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:6b:0c:37:a3:c4:dd:c5:cb:b7:5a:2b:0b:d9:a0:89:1c:5f:
ed:f9:12:9b:8d:95:bf:2c:58:01:52:df:15:18:79:a4:21:cb:
35:b2:1f:46:46:70:3b:32:19:0a:93:08:76:83:f6:53:6d:f6:
96:70:08:5b:4d:28:60:57:9f:f9:3f:fa:54:82:68:3f:16:45:
d0:fe:b2:a3:d8:8b:62:02:12:2f:46:51:12:9f:2c:b7:46:a0:
5e:58:15:33:f4:6c:c3:7a:1c:81:1f:5a:84:e8:fc:ea:8d:53:
63:bf:8b:3b:6f:75:cb:42:f2:19:7e:5d:ce:e1:90:45:ab:b1:
22:f8:f4:32:14:c2:dd:bd:dd:53:69:09:b8:38:fb:77:29:73:
4f:e1:2c:6e:2a:35:61:ed:b7:ac:94:0d:e7:c5:52:ef:b4:81:
88:1f:84:f1:41:9d:c1:eb:0e:f6:91:5b:97:ee:db:15:d4:25:
51:d8:56:ca:91:51:13:4b:0b:92:fe:3b:9c:ff:03:7e:9a:2e:
b0:37:13:ad:93:8d:90:72:14:d9:5b:ae:00:c0:00:e1:a7:b2:
f5:b4:2e:1a:43:9c:d0:a8:ea:89:af:19:02:68:f1:07:da:de:
05:a1:c9:20:94:b5:23:c0:6e:bf:38:23:48:0b:e7:f6:ba:eb:
2f:db:b0:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:24:51 2025 by rpki-client