Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6891df-971e-4e60-8cbc-e3c2f32cf3b7/1/lmsFxmHHalvMSNqDju22lz8VO4Y.mft
File: lmsFxmHHalvMSNqDju22lz8VO4Y.mft (raw, json)
Hash identifier: y6GmzVTzKGdNAcY8/yruMimdsaPXtssCgD4s2Xmbr1A=
Subject key identifier: 3F:DB:44:35:94:56:E5:19:C0:0C:22:90:E4:87:DE:1D:6D:0C:AE:1A
Authority key identifier: 96:6B:05:C6:61:C7:6A:5B:CC:48:DA:83:8E:ED:B6:97:3F:15:3B:86
Certificate issuer: /CN=966b05c661c76a5bcc48da838eedb6973f153b86
Certificate serial: 0197B7B3137CC497902B4E47AF13548F6554
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lmsFxmHHalvMSNqDju22lz8VO4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6891df-971e-4e60-8cbc-e3c2f32cf3b7/1/lmsFxmHHalvMSNqDju22lz8VO4Y.mft
Manifest number: 15B9
Signing time: Sat 28 Jun 2025 18:00:55 +0000
Manifest this update: Sat 28 Jun 2025 18:00:55 +0000
Manifest next update: Sun 29 Jun 2025 18:00:55 +0000
Files and hashes: 1: W2JvQeJsn6sgqGIrZ408H97qioo.roa (hash: Qz+vWtvmQAoEF3URoltR78Ia49dnDg7/98XNY7BmHc8=)
2: lmsFxmHHalvMSNqDju22lz8VO4Y.crl (hash: M2VGn34auRdtI397kpRLppQOmGFr/EjxcZ6KjKQd6E4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/6891df-971e-4e60-8cbc-e3c2f32cf3b7/1/lmsFxmHHalvMSNqDju22lz8VO4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/6891df-971e-4e60-8cbc-e3c2f32cf3b7/1/lmsFxmHHalvMSNqDju22lz8VO4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/lmsFxmHHalvMSNqDju22lz8VO4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:13:7c:c4:97:90:2b:4e:47:af:13:54:8f:65:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=966b05c661c76a5bcc48da838eedb6973f153b86
Validity
Not Before: Jun 28 18:00:55 2025 GMT
Not After : Jun 29 18:00:55 2025 GMT
Subject: CN=3fdb44359456e519c00c2290e487de1d6d0cae1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:71:83:d2:2c:21:7b:b7:99:89:a9:ee:21:f9:
e7:56:1b:66:af:8f:cb:fc:82:c8:03:4d:60:57:ef:
6e:fd:d0:4a:dc:ef:22:44:55:aa:4c:b1:30:4d:a7:
34:d2:e7:89:d6:8a:5d:3c:b9:89:cc:6d:87:63:c6:
3a:92:7b:1e:ba:96:cb:0e:32:20:c2:82:1a:77:8a:
58:22:30:de:05:d9:1b:1c:4b:20:3d:05:55:b6:0b:
c0:8d:ff:ae:7a:6b:3d:ce:93:51:19:af:e7:a0:68:
95:b7:1f:2d:ca:7e:95:b6:2c:fb:14:a9:8f:2a:3b:
3e:f2:7f:c4:bb:aa:0d:bb:9c:d3:b4:34:a5:67:c5:
ab:eb:56:6e:85:dd:d1:67:e3:91:5a:ae:1d:fa:b0:
ff:90:49:dd:f9:40:3d:d0:da:fb:75:d7:f0:36:84:
dc:86:64:1c:7c:f5:6e:bd:55:e4:c2:ac:96:82:3f:
0a:e1:ee:a3:27:b6:8b:08:c0:24:bd:de:22:0a:05:
5e:0f:49:26:a8:97:da:80:9d:e5:48:b3:9d:07:10:
a0:8e:55:68:c9:ea:e8:c7:5e:f6:24:1b:0a:b6:13:
9b:94:f7:91:e4:4d:22:1f:b6:6e:bf:11:4f:44:ad:
88:4b:6c:a4:ad:19:69:08:52:9e:a9:ae:41:39:df:
7d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:DB:44:35:94:56:E5:19:C0:0C:22:90:E4:87:DE:1D:6D:0C:AE:1A
X509v3 Authority Key Identifier:
keyid:96:6B:05:C6:61:C7:6A:5B:CC:48:DA:83:8E:ED:B6:97:3F:15:3B:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lmsFxmHHalvMSNqDju22lz8VO4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6891df-971e-4e60-8cbc-e3c2f32cf3b7/1/lmsFxmHHalvMSNqDju22lz8VO4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6891df-971e-4e60-8cbc-e3c2f32cf3b7/1/lmsFxmHHalvMSNqDju22lz8VO4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:ce:75:16:78:0f:e7:c2:a7:96:eb:cb:db:7f:3a:9c:2f:a3:
49:ab:b9:7a:09:58:45:b5:16:34:6e:3f:42:4d:85:98:31:5b:
1a:23:16:7b:0d:66:c9:55:1a:54:d8:a4:db:73:17:aa:c3:ea:
6a:08:d4:cb:fb:40:59:30:38:46:1b:fe:07:fd:df:af:9c:82:
af:9b:85:ca:65:9a:2a:0c:9a:5d:ab:7c:1c:38:70:ec:d0:f6:
7a:18:98:53:4c:36:4d:48:17:b4:9e:dd:f1:b9:83:15:7b:db:
ac:9a:43:b8:70:17:39:22:c2:d6:6a:48:59:7a:fc:0f:f3:e7:
55:40:95:dc:10:04:5a:26:b6:5f:74:42:31:9a:d0:13:86:f1:
67:dc:ef:ac:0d:f2:cf:5e:f5:bd:d1:af:23:91:3e:5e:cb:3b:
32:1a:34:ee:f4:d9:92:ef:86:f8:f9:3f:06:c1:a8:17:f2:61:
89:2c:29:f8:e7:77:fa:63:e1:17:77:82:8f:b5:46:65:e5:b1:
c6:bd:9d:c6:70:85:c4:74:ba:ad:ab:b3:ec:78:cf:f8:83:26:
04:45:fe:1b:2e:96:cf:3f:07:ee:ca:78:72:72:10:a1:ce:a5:
fa:53:dc:f2:17:86:22:af:a8:16:2e:69:42:2f:4e:fc:72:19:
40:06:97:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:00:10 2025 by rpki-client