Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6891df-971e-4e60-8cbc-e3c2f32cf3b7/1/lmsFxmHHalvMSNqDju22lz8VO4Y.mft
File: lmsFxmHHalvMSNqDju22lz8VO4Y.mft (raw, json)
Hash identifier: ID+nC5UjaFjiLu8yIvx8XbCHP9DFI3KIk4QBQB1RBnE=
Subject key identifier: 2B:48:7A:66:B6:E0:95:55:8D:1C:8A:C8:4D:DB:0D:5A:43:8D:4D:14
Authority key identifier: 96:6B:05:C6:61:C7:6A:5B:CC:48:DA:83:8E:ED:B6:97:3F:15:3B:86
Certificate issuer: /CN=966b05c661c76a5bcc48da838eedb6973f153b86
Certificate serial: 0199FC2195AA02EDD61750C2360FAB6192A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lmsFxmHHalvMSNqDju22lz8VO4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6891df-971e-4e60-8cbc-e3c2f32cf3b7/1/lmsFxmHHalvMSNqDju22lz8VO4Y.mft
Manifest number: 16E7
Signing time: Sun 19 Oct 2025 11:01:23 +0000
Manifest this update: Sun 19 Oct 2025 11:01:23 +0000
Manifest next update: Mon 20 Oct 2025 11:01:23 +0000
Files and hashes: 1: lmsFxmHHalvMSNqDju22lz8VO4Y.crl (hash: 5jwVLCNymQNzLSzO/2NHX00okHCsW5hkf5cCbUB0Wao=)
2: vW8nbP0mTPSGV0n46D4WrlPJlkA.roa (hash: FBmE53kvVV07M6urD1OzTmvwStXQDG55TxBqouWfpJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/6891df-971e-4e60-8cbc-e3c2f32cf3b7/1/lmsFxmHHalvMSNqDju22lz8VO4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/6891df-971e-4e60-8cbc-e3c2f32cf3b7/1/lmsFxmHHalvMSNqDju22lz8VO4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/lmsFxmHHalvMSNqDju22lz8VO4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:95:aa:02:ed:d6:17:50:c2:36:0f:ab:61:92:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=966b05c661c76a5bcc48da838eedb6973f153b86
Validity
Not Before: Oct 19 11:01:23 2025 GMT
Not After : Oct 20 11:01:23 2025 GMT
Subject: CN=2b487a66b6e095558d1c8ac84ddb0d5a438d4d14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6a:9a:86:24:4b:5c:de:d8:75:3e:12:4b:b6:
b2:85:ce:d5:1e:d1:76:90:a8:83:a0:ec:5d:ee:4d:
fd:ab:cc:b4:56:23:9b:f7:cb:fd:14:1f:13:c8:26:
d8:5d:95:5f:b3:25:9d:72:a6:3d:9b:78:b0:23:31:
bb:65:18:f1:09:12:87:98:bd:c7:e0:2c:12:89:3c:
71:f2:36:1e:e4:99:c5:23:8f:3b:43:71:b8:2f:e3:
8e:26:3d:f6:57:9b:3b:66:d8:d1:70:1c:1d:99:05:
37:14:9d:62:87:ba:d1:c7:05:e5:fe:26:e7:ca:d1:
69:9f:65:e8:14:fe:8c:e2:a0:5c:4f:2e:a5:07:32:
ea:81:67:b4:bc:5c:a6:2f:c4:45:86:52:9b:86:c0:
1d:d2:2a:44:7c:3c:a1:1c:6c:7b:c6:6c:93:2f:94:
43:a2:0d:80:54:02:d9:05:b2:e9:72:b0:5f:76:83:
02:0a:b9:df:ca:e5:c3:f2:0f:d1:88:86:a1:90:53:
be:29:42:db:3d:20:81:09:c0:1b:68:59:fd:76:9f:
95:b4:b4:77:f9:31:bd:5a:33:91:8e:d8:77:70:cd:
19:53:b5:b8:a8:da:0d:f4:af:eb:d2:af:9b:e1:65:
9d:ce:c2:40:8d:92:11:8f:6b:96:46:df:c6:e8:ba:
12:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:48:7A:66:B6:E0:95:55:8D:1C:8A:C8:4D:DB:0D:5A:43:8D:4D:14
X509v3 Authority Key Identifier:
keyid:96:6B:05:C6:61:C7:6A:5B:CC:48:DA:83:8E:ED:B6:97:3F:15:3B:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lmsFxmHHalvMSNqDju22lz8VO4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6891df-971e-4e60-8cbc-e3c2f32cf3b7/1/lmsFxmHHalvMSNqDju22lz8VO4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6891df-971e-4e60-8cbc-e3c2f32cf3b7/1/lmsFxmHHalvMSNqDju22lz8VO4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:7b:a2:2e:c5:56:da:91:85:11:96:1a:07:9f:f8:9e:c6:da:
d9:e5:33:f1:5b:c8:f8:6a:a9:27:38:7d:d6:c3:98:ec:f3:8e:
e3:33:94:39:fa:ae:b5:1f:9d:1b:b1:15:d0:6f:9f:6b:cd:18:
2e:ee:42:3b:99:81:29:4c:11:53:41:b0:2b:39:ba:1d:d8:69:
1e:aa:f6:f3:b2:51:fc:79:40:09:df:42:0d:94:a3:47:87:17:
69:da:30:eb:c8:ad:1b:0a:47:dc:59:52:53:b7:a9:72:24:3d:
5c:fa:34:ba:9e:50:4c:88:ae:cf:e3:c2:19:e6:44:7c:5d:f0:
e6:53:8c:6f:a3:6e:0b:b9:d2:da:80:9a:b0:17:ce:fb:9b:39:
8b:de:23:7d:94:a4:86:7d:8b:ec:61:a6:29:f1:74:f1:bb:a0:
b8:c5:62:5f:16:9f:60:44:48:cd:e7:c1:52:f3:f4:89:30:45:
2d:3e:a7:79:cf:a1:1a:22:6a:0e:7d:13:9c:2c:2a:35:79:85:
d1:08:b4:14:39:ca:dd:a3:20:e1:be:60:71:6d:f8:b7:2d:dc:
90:87:cf:95:c6:d2:2c:69:6b:88:51:ca:8a:64:b9:8c:8c:db:
ef:72:70:37:f3:74:52:7d:45:07:2f:30:11:3b:9d:67:1c:31:
28:0d:d3:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:09:57 2025 by rpki-client