Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/accde8-f46f-4ef9-94af-8dd81e4b3e33/1/LmszQT-qXl4dJ5oqJf-B2NFTJd8.mft
File: LmszQT-qXl4dJ5oqJf-B2NFTJd8.mft (raw, json)
Hash identifier: Om7Pv8SCsOAHpdMqbJ0Qm2GgfS20IpoZa5A8/2aNeHk=
Subject key identifier: 09:00:B3:EE:B0:10:7B:AF:BD:C7:CB:6C:0C:5B:71:5F:23:92:C1:35
Authority key identifier: 2E:6B:33:41:3F:AA:5E:5E:1D:27:9A:2A:25:FF:81:D8:D1:53:25:DF
Certificate issuer: /CN=2e6b33413faa5e5e1d279a2a25ff81d8d15325df
Certificate serial: 0199FF2297783A12CCC25BE9865A15C6E7E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmszQT-qXl4dJ5oqJf-B2NFTJd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/accde8-f46f-4ef9-94af-8dd81e4b3e33/1/LmszQT-qXl4dJ5oqJf-B2NFTJd8.mft
Manifest number: 16E6
Signing time: Mon 20 Oct 2025 01:01:20 +0000
Manifest this update: Mon 20 Oct 2025 01:01:20 +0000
Manifest next update: Tue 21 Oct 2025 01:01:20 +0000
Files and hashes: 1: 1-rQwqNKly6aenIYeWSDOecvE9Dg.roa (hash: xyKaPv0UlzvDAkK4ZPQkPqyXzd2d32Ec3cQVPGFT2Lk=)
2: 53x_LlMR9wDfhoH_h-dm_2o9cfc.roa (hash: hpGqRuP4r/d0ndxhvimQvb9wKXUShtDAOOkpu0Or3Uk=)
3: LmszQT-qXl4dJ5oqJf-B2NFTJd8.crl (hash: tO/Cl8t82maRta3Ae4sqX0puOnuOTGrDoBNzPDzb08U=)
4: sCdHa8GDoglI_mdXJ5Cs8c0F3ts.roa (hash: MzLxzWRZS24YmZa+mNMBCsFOGmjiB2b/WusU+bbqWL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/accde8-f46f-4ef9-94af-8dd81e4b3e33/1/LmszQT-qXl4dJ5oqJf-B2NFTJd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/accde8-f46f-4ef9-94af-8dd81e4b3e33/1/LmszQT-qXl4dJ5oqJf-B2NFTJd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/LmszQT-qXl4dJ5oqJf-B2NFTJd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:97:78:3a:12:cc:c2:5b:e9:86:5a:15:c6:e7:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6b33413faa5e5e1d279a2a25ff81d8d15325df
Validity
Not Before: Oct 20 01:01:20 2025 GMT
Not After : Oct 21 01:01:20 2025 GMT
Subject: CN=0900b3eeb0107bafbdc7cb6c0c5b715f2392c135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:91:c4:aa:dd:83:62:52:49:bf:c3:32:39:7b:
a1:27:56:4b:c2:d3:ba:7f:de:93:ab:d4:02:12:d4:
2e:db:c4:a2:92:97:49:f3:ef:28:61:7a:54:78:bf:
06:22:a3:a9:0f:71:7c:a6:4b:72:cf:ca:ed:6b:da:
0d:13:98:3f:dd:02:56:56:98:0a:3f:87:99:59:c2:
c0:4c:40:9a:27:b1:9e:66:3d:2e:7c:78:09:92:5b:
8f:32:20:55:4f:15:8f:5d:11:79:fa:18:ca:38:4e:
c9:dd:c6:08:2f:37:8a:37:73:b9:3b:39:4d:97:da:
20:fd:b8:c7:cc:6a:51:c2:44:68:5b:2a:e5:30:d3:
e0:64:46:71:bc:d9:8a:63:9a:65:fe:07:11:da:92:
9a:df:ca:af:2b:d6:bf:c5:3c:9a:19:d4:07:40:31:
8d:76:61:0a:84:0c:9d:03:80:5d:67:1b:9e:26:52:
45:b9:31:d7:f4:72:d1:8f:0e:25:d3:1d:89:52:08:
c9:3d:1c:ef:66:10:ef:2a:3b:29:35:f8:5e:d5:9f:
03:db:ce:63:3d:17:d4:e6:e0:86:29:83:8b:5e:ba:
0f:54:d5:b8:22:60:59:b3:5e:15:27:b0:cd:d4:89:
2b:dd:bb:8c:9a:e0:9e:57:71:c2:36:14:8c:7d:51:
de:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:00:B3:EE:B0:10:7B:AF:BD:C7:CB:6C:0C:5B:71:5F:23:92:C1:35
X509v3 Authority Key Identifier:
keyid:2E:6B:33:41:3F:AA:5E:5E:1D:27:9A:2A:25:FF:81:D8:D1:53:25:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmszQT-qXl4dJ5oqJf-B2NFTJd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/accde8-f46f-4ef9-94af-8dd81e4b3e33/1/LmszQT-qXl4dJ5oqJf-B2NFTJd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/accde8-f46f-4ef9-94af-8dd81e4b3e33/1/LmszQT-qXl4dJ5oqJf-B2NFTJd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:d8:6a:c0:ec:2e:83:f9:c9:16:52:4a:63:d8:09:5a:ff:f7:
4a:d2:63:d7:64:2b:af:1d:be:4d:9f:d2:5f:22:37:22:08:6c:
11:b7:20:66:89:c5:47:43:cc:80:a8:fc:26:cf:5a:4b:fa:cc:
a8:c9:2a:30:1d:65:1b:6d:31:bc:b9:65:e0:20:c5:f1:7d:7d:
73:b1:4f:c1:a5:19:74:e7:43:85:cf:f1:8c:01:7c:24:69:b9:
f8:b5:2e:b2:99:38:b8:68:19:cd:b6:3c:22:b6:0e:f2:e9:77:
65:e8:73:f2:2c:70:2a:a0:63:61:2c:15:1c:58:0d:12:7a:ea:
03:06:d4:23:cb:cb:1e:cc:b2:42:3f:89:0d:d1:82:1f:31:d0:
15:1c:da:ca:51:e9:42:84:48:ed:0d:0d:45:be:cf:7c:09:d5:
02:cb:36:b1:22:39:40:b3:4a:e3:50:2b:2d:0c:62:48:5b:34:
f6:11:d2:40:53:ff:8d:33:49:1d:fe:05:26:50:47:b3:9a:fc:
08:80:50:ae:ce:cc:ec:e5:68:0f:0a:a2:e6:81:25:b5:c4:2c:
20:0b:3a:07:0c:8f:41:41:2e:3a:7a:33:ff:97:5f:ff:dc:84:
4e:57:6d:bf:77:85:2f:99:32:a5:a5:68:f5:e3:96:ba:e1:68:
2b:4b:5d:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:04:54 2025 by rpki-client