Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6891df-971e-4e60-8cbc-e3c2f32cf3b7/1/lmsFxmHHalvMSNqDju22lz8VO4Y.mft
File: lmsFxmHHalvMSNqDju22lz8VO4Y.mft (raw, json)
Hash identifier: 2mZvksCTvW3Dj/69rsHllDYz3odmdOgYoJ5vy576bXA=
Subject key identifier: 7B:99:1A:E8:60:ED:57:79:21:37:33:27:DA:93:29:BF:CC:C3:76:2D
Authority key identifier: 96:6B:05:C6:61:C7:6A:5B:CC:48:DA:83:8E:ED:B6:97:3F:15:3B:86
Certificate issuer: /CN=966b05c661c76a5bcc48da838eedb6973f153b86
Certificate serial: 0198D473174F81F2595E635C6590136E086B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lmsFxmHHalvMSNqDju22lz8VO4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6891df-971e-4e60-8cbc-e3c2f32cf3b7/1/lmsFxmHHalvMSNqDju22lz8VO4Y.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 01:02:48 +0000
Manifest this update: Sat 23 Aug 2025 01:02:48 +0000
Manifest next update: Sun 24 Aug 2025 01:02:48 +0000
Files and hashes: 1: Nx9kTkaHQ0iwNwkXngRt-k1HWOU.roa (hash: pOVBPKl9ofShR8LgVcsGajQVqEVeBnSw/u7hLhRIRNg=)
2: lmsFxmHHalvMSNqDju22lz8VO4Y.crl (hash: uS7jw6suMxsKIYCCiEC2tKQfT9WceTLvcOQ7Qsz7sIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/6891df-971e-4e60-8cbc-e3c2f32cf3b7/1/lmsFxmHHalvMSNqDju22lz8VO4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/6891df-971e-4e60-8cbc-e3c2f32cf3b7/1/lmsFxmHHalvMSNqDju22lz8VO4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/lmsFxmHHalvMSNqDju22lz8VO4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:17:4f:81:f2:59:5e:63:5c:65:90:13:6e:08:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=966b05c661c76a5bcc48da838eedb6973f153b86
Validity
Not Before: Aug 23 01:02:48 2025 GMT
Not After : Aug 24 01:02:48 2025 GMT
Subject: CN=7b991ae860ed577921373327da9329bfccc3762d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:6c:72:b5:00:06:57:6e:b6:4d:11:6d:f1:48:
c7:40:57:7e:32:b4:38:79:d6:c0:6e:4f:19:3f:b8:
17:21:6a:2c:22:61:6b:95:82:9f:72:e1:d7:95:1b:
b0:30:ad:86:19:51:c3:cd:30:47:d7:5e:60:ad:4c:
30:18:2a:2d:ca:47:5d:3f:eb:44:28:a6:87:90:a3:
b6:b7:d4:2d:ef:5a:72:53:8a:5c:7d:4b:17:94:aa:
e3:70:09:48:41:a5:bd:14:6e:e6:fa:82:81:69:47:
df:b1:7a:db:52:dd:e9:1e:2e:e5:cf:56:1c:69:f9:
3c:f8:21:ea:cb:55:ce:c6:04:fc:1a:cb:bd:e6:3d:
b3:2e:91:0b:56:4f:db:68:e4:bd:ec:ff:79:c6:87:
38:e9:21:9e:6f:50:66:50:5e:e5:ae:26:70:83:f5:
5f:77:6b:bb:bf:71:82:66:4b:16:91:a1:89:34:b6:
45:47:54:66:89:8f:90:60:01:6b:ea:50:d7:1b:05:
06:ef:f5:90:e4:ff:5a:fb:f8:aa:9f:14:6c:c7:5b:
69:c6:06:61:82:ac:97:67:cf:4c:fb:b8:0b:2e:01:
22:c6:6e:c2:04:3a:bb:03:95:c0:fb:3c:dd:33:9e:
8f:8b:02:b3:85:e6:b3:b7:73:ef:37:4c:b7:97:f5:
cf:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:99:1A:E8:60:ED:57:79:21:37:33:27:DA:93:29:BF:CC:C3:76:2D
X509v3 Authority Key Identifier:
keyid:96:6B:05:C6:61:C7:6A:5B:CC:48:DA:83:8E:ED:B6:97:3F:15:3B:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lmsFxmHHalvMSNqDju22lz8VO4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6891df-971e-4e60-8cbc-e3c2f32cf3b7/1/lmsFxmHHalvMSNqDju22lz8VO4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6891df-971e-4e60-8cbc-e3c2f32cf3b7/1/lmsFxmHHalvMSNqDju22lz8VO4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:d3:07:76:ff:f9:ff:43:f6:26:98:73:35:0a:7f:44:9e:66:
37:52:de:c6:3a:6e:fd:c1:e1:5a:3e:11:54:73:72:b9:3b:46:
19:26:7b:76:75:07:81:4b:a9:b1:82:5d:1c:38:ac:8e:d9:75:
3d:22:07:33:54:f1:54:48:2b:4d:e9:75:24:44:e1:a9:9d:9b:
b9:5c:09:94:c5:cb:3a:48:cb:4f:e2:e5:f3:51:8f:05:08:fe:
5c:d8:26:b6:27:c1:ac:7d:52:f4:06:ef:00:aa:03:d6:b5:19:
25:f6:bf:e1:c4:a3:c7:16:e6:ea:03:f5:b5:d1:28:b2:11:26:
54:ec:c0:3b:50:89:ef:0c:f4:75:8e:36:f1:91:f6:73:ea:4c:
c1:72:ea:08:5f:e3:70:b4:96:26:c7:e3:4f:1c:b6:2d:f4:ff:
48:85:cf:d8:80:06:ec:df:b2:93:b5:2e:46:ac:ef:6b:96:1c:
e4:4f:74:fe:2b:23:e8:5f:36:f8:94:23:bc:89:8d:64:6a:35:
41:58:e4:af:5a:d4:96:5b:e1:33:f5:62:26:6a:3e:61:2a:a6:
85:b5:68:d9:a7:9c:c3:c1:69:ca:7a:38:b4:2e:46:9b:2f:bb:
fd:6c:e2:21:2e:73:20:98:1a:69:26:40:a7:74:7e:cc:4d:17:
a3:75:4f:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:25 2025 by rpki-client