Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/accde8-f46f-4ef9-94af-8dd81e4b3e33/1/LmszQT-qXl4dJ5oqJf-B2NFTJd8.mft
File: LmszQT-qXl4dJ5oqJf-B2NFTJd8.mft (raw, json)
Hash identifier: fiKOYRMpJj8Zk+XI3JFiGJoFM3uzLdCOYR4JkQOS/2c=
Subject key identifier: B8:7F:45:B9:09:A9:A4:D5:F3:65:95:51:7E:D1:F9:5B:B4:46:A2:42
Authority key identifier: 2E:6B:33:41:3F:AA:5E:5E:1D:27:9A:2A:25:FF:81:D8:D1:53:25:DF
Certificate issuer: /CN=2e6b33413faa5e5e1d279a2a25ff81d8d15325df
Certificate serial: 0197B7EA83F30CDC9BEE62CB52EBA7B46BF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmszQT-qXl4dJ5oqJf-B2NFTJd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/accde8-f46f-4ef9-94af-8dd81e4b3e33/1/LmszQT-qXl4dJ5oqJf-B2NFTJd8.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 19:01:29 +0000
Manifest this update: Sat 28 Jun 2025 19:01:29 +0000
Manifest next update: Sun 29 Jun 2025 19:01:29 +0000
Files and hashes: 1: 1-rQwqNKly6aenIYeWSDOecvE9Dg.roa (hash: xyKaPv0UlzvDAkK4ZPQkPqyXzd2d32Ec3cQVPGFT2Lk=)
2: 53x_LlMR9wDfhoH_h-dm_2o9cfc.roa (hash: hpGqRuP4r/d0ndxhvimQvb9wKXUShtDAOOkpu0Or3Uk=)
3: LmszQT-qXl4dJ5oqJf-B2NFTJd8.crl (hash: uzAhs2SZlZMZQ/0mX5Bku/WZ12QFKMw6H3Vj3z8hc/w=)
4: sCdHa8GDoglI_mdXJ5Cs8c0F3ts.roa (hash: MzLxzWRZS24YmZa+mNMBCsFOGmjiB2b/WusU+bbqWL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/accde8-f46f-4ef9-94af-8dd81e4b3e33/1/LmszQT-qXl4dJ5oqJf-B2NFTJd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/accde8-f46f-4ef9-94af-8dd81e4b3e33/1/LmszQT-qXl4dJ5oqJf-B2NFTJd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/LmszQT-qXl4dJ5oqJf-B2NFTJd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:83:f3:0c:dc:9b:ee:62:cb:52:eb:a7:b4:6b:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6b33413faa5e5e1d279a2a25ff81d8d15325df
Validity
Not Before: Jun 28 19:01:29 2025 GMT
Not After : Jun 29 19:01:29 2025 GMT
Subject: CN=b87f45b909a9a4d5f36595517ed1f95bb446a242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e9:c7:45:63:00:96:0e:2e:96:b9:49:f9:ef:
d1:6c:43:86:75:02:93:58:1d:97:4c:65:59:b7:46:
03:b1:b9:16:16:8f:8c:31:02:29:c2:6a:2d:8e:88:
84:30:f3:4e:28:63:51:fe:0b:6f:6b:fb:ae:c5:39:
cf:f8:85:77:f2:b2:47:ea:d1:2d:65:6a:e7:a5:21:
30:71:cc:2c:3d:03:6e:0f:c9:5f:c8:50:5e:81:f4:
87:85:5d:50:7a:80:e2:82:31:78:73:89:4b:52:a3:
dd:1d:3d:2d:f0:25:56:d6:3f:71:cc:2f:21:17:a7:
bb:b5:bd:2f:46:ca:c8:14:35:81:3f:af:28:72:7a:
c4:b4:b1:6b:4c:7d:b6:c6:24:cd:31:e6:7b:af:de:
78:b5:1d:5b:0d:0f:31:eb:fc:3c:12:af:1e:a1:d6:
05:87:87:8d:d4:06:03:b3:67:38:9b:13:c2:9e:86:
1b:74:6e:8f:eb:f1:b1:60:2b:c5:41:34:11:da:70:
eb:31:53:e3:f7:9c:12:fe:d5:c4:b7:12:76:96:bd:
4d:4c:1b:23:e5:9b:92:31:00:b9:a5:d7:1a:0e:b1:
23:2e:09:be:8d:b3:cc:4e:1a:28:37:ec:2e:7c:8d:
f0:8e:0f:e2:8b:24:bd:45:af:e3:b1:37:bd:e9:58:
9d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:7F:45:B9:09:A9:A4:D5:F3:65:95:51:7E:D1:F9:5B:B4:46:A2:42
X509v3 Authority Key Identifier:
keyid:2E:6B:33:41:3F:AA:5E:5E:1D:27:9A:2A:25:FF:81:D8:D1:53:25:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmszQT-qXl4dJ5oqJf-B2NFTJd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/accde8-f46f-4ef9-94af-8dd81e4b3e33/1/LmszQT-qXl4dJ5oqJf-B2NFTJd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/accde8-f46f-4ef9-94af-8dd81e4b3e33/1/LmszQT-qXl4dJ5oqJf-B2NFTJd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:14:08:5e:96:1c:26:e4:86:c9:17:dd:96:87:41:60:01:a9:
a2:e3:c3:52:ef:9d:eb:5c:1e:a9:28:2d:2e:55:99:eb:f9:c0:
1c:1a:a1:62:e4:97:f5:fa:ff:2b:b5:fa:49:f6:0f:92:5c:c8:
ff:80:c7:1d:98:d9:de:c2:b7:13:fa:93:17:20:3d:f9:b9:24:
74:b2:36:22:d3:31:9e:c8:10:60:90:93:c6:be:cf:c3:07:a7:
95:85:a3:d2:16:32:4d:02:74:fd:54:e1:5c:d1:6b:d3:7d:cd:
27:8e:19:f4:a8:aa:bd:fb:ab:dc:91:1d:36:70:69:58:45:df:
d9:3e:ca:0a:83:be:8b:4b:95:48:b2:d1:eb:a2:5e:c0:7e:d2:
d3:1e:87:53:2f:f7:3f:09:71:a9:0c:f4:73:05:d5:5f:7d:1e:
33:62:c3:0e:2c:a5:e7:55:cf:49:d7:37:e1:ed:40:8a:ae:70:
2d:70:78:bd:d5:dd:5f:fe:23:5f:68:52:b7:c6:94:57:6d:b2:
8b:8e:18:3b:72:23:49:8b:01:64:c7:3f:67:87:9e:3c:b4:c9:
73:01:e5:9c:a2:4f:d6:13:74:4b:89:a7:97:05:a1:84:39:6d:
97:77:ab:8c:b9:e0:ca:22:89:9a:6c:f2:c0:c7:67:c5:e8:d2:
f9:7c:37:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:31:46 2025 by rpki-client