Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/LMJf8ykY8LSTBiWdSDr7njgaORU.mft
File: LMJf8ykY8LSTBiWdSDr7njgaORU.mft (raw, json)
Hash identifier: xYJk/xDXqfhcx9JDD/uQttW51B0QeTeDaHbWYYGmES0=
Subject key identifier: 89:BC:86:26:5A:51:27:FD:D0:FF:E1:E0:D5:95:86:14:7E:21:CC:E2
Authority key identifier: 2C:C2:5F:F3:29:18:F0:B4:93:06:25:9D:48:3A:FB:9E:38:1A:39:15
Certificate issuer: /CN=2cc25ff32918f0b49306259d483afb9e381a3915
Certificate serial: 0198D6981BE6260433C419A199A32FB1E9DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LMJf8ykY8LSTBiWdSDr7njgaORU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/LMJf8ykY8LSTBiWdSDr7njgaORU.mft
Manifest number: 1654
Signing time: Sat 23 Aug 2025 11:02:29 +0000
Manifest this update: Sat 23 Aug 2025 11:02:29 +0000
Manifest next update: Sun 24 Aug 2025 11:02:29 +0000
Files and hashes: 1: 5SBRKvoUR77xMW-RFvy5_fTtMLs.roa (hash: cAg8Pd/EdFW/XOWvfVIMShqz0a9B/X838ZxVv7gFhww=)
2: Hu3G8484fKZTgdfl16c2pwBVLzw.roa (hash: 3SfpQQtf4mcFv0Cl8RORRLy8kXw31wWhyAgb5576Kg0=)
3: LMJf8ykY8LSTBiWdSDr7njgaORU.crl (hash: LOjejpEB6sjvBm95rriqMUEuYkxHuWkIHzcI0hrQnC0=)
4: hnVCR69RVtD6DOQtKUfA66di3v8.roa (hash: tMJ65Uy32W65OI2kXkCrStjDFzn3a6wfoxc74YD8CGM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/LMJf8ykY8LSTBiWdSDr7njgaORU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/LMJf8ykY8LSTBiWdSDr7njgaORU.mft
rsync://rpki.ripe.net/repository/DEFAULT/LMJf8ykY8LSTBiWdSDr7njgaORU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:1b:e6:26:04:33:c4:19:a1:99:a3:2f:b1:e9:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cc25ff32918f0b49306259d483afb9e381a3915
Validity
Not Before: Aug 23 11:02:29 2025 GMT
Not After : Aug 24 11:02:29 2025 GMT
Subject: CN=89bc86265a5127fdd0ffe1e0d59586147e21cce2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:9c:40:39:f2:27:65:a7:6d:44:3b:20:43:7a:
47:ac:2a:03:9a:c9:31:57:c0:55:f4:e7:43:85:fc:
e6:99:51:41:d5:32:96:57:81:13:9d:b1:73:b9:05:
e5:e8:98:ff:e7:3d:f6:bd:3d:87:6d:0c:b7:6a:78:
aa:7c:79:f3:51:ff:02:73:6e:14:13:89:13:79:a0:
9e:fb:f5:7f:d6:e8:e3:31:64:1b:3c:da:e1:81:59:
e4:5b:82:68:a5:62:bc:35:99:d3:4f:16:46:2c:61:
64:2b:a9:00:56:7f:1c:e4:21:20:65:ca:12:65:a5:
6f:40:6d:ce:d3:d5:fc:03:40:5f:4f:78:39:82:33:
e5:14:93:b5:07:5e:7f:ac:0a:96:88:ac:96:2b:ad:
12:0d:89:d1:02:a9:6f:d3:80:61:28:8c:3b:85:fc:
e4:92:9e:44:b7:62:ce:a9:cb:20:32:47:c5:a9:64:
8a:2d:92:81:3d:cd:31:28:25:38:60:7c:a3:8a:b0:
00:c2:bd:77:2c:19:67:ee:ff:69:cc:62:f8:bc:96:
3b:2f:30:c1:95:00:0a:f0:67:a4:69:56:0f:3c:24:
6a:33:e9:16:4e:56:3a:cb:99:b0:3f:1c:c0:42:ce:
71:4d:55:9e:b6:4b:8d:1e:6c:45:8a:d2:4c:94:28:
a4:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:BC:86:26:5A:51:27:FD:D0:FF:E1:E0:D5:95:86:14:7E:21:CC:E2
X509v3 Authority Key Identifier:
keyid:2C:C2:5F:F3:29:18:F0:B4:93:06:25:9D:48:3A:FB:9E:38:1A:39:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LMJf8ykY8LSTBiWdSDr7njgaORU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/LMJf8ykY8LSTBiWdSDr7njgaORU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/LMJf8ykY8LSTBiWdSDr7njgaORU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:3e:23:5c:c4:ef:5d:66:eb:dd:9f:55:f6:ab:96:23:37:b0:
c3:dd:83:ad:73:84:b8:ca:84:40:2f:3d:7c:a0:2d:ca:1b:02:
66:35:f7:33:88:28:fa:aa:88:e4:d3:b8:57:0a:b5:f7:f6:f8:
88:54:70:78:c0:d1:18:e7:27:02:3e:c8:ce:2b:22:a0:d1:dc:
f9:bb:68:32:2e:a4:29:a1:92:4e:a9:e7:8f:11:30:fa:a2:10:
6b:8e:e5:22:28:2a:c8:15:da:fb:b0:12:ac:71:c8:23:d1:8a:
18:ba:4b:40:ec:73:6c:b4:7e:b0:e6:c4:cf:1f:c1:44:fc:d0:
43:1c:e2:0a:48:14:f8:a2:2b:18:e0:ec:d7:da:25:3f:ec:96:
07:8d:58:c3:07:7c:8f:b7:af:f8:8a:24:b2:dd:03:b3:7c:ed:
b2:7c:f2:f8:53:41:ea:85:99:c7:41:2a:ab:a3:99:86:81:12:
f6:b9:fd:0b:8f:17:8f:16:9f:7d:2e:25:e3:d1:bc:ab:4d:1f:
c0:39:ee:98:6a:fb:19:ef:f0:b4:ec:28:1a:90:c0:93:28:3a:
c5:1e:a5:5f:1f:5e:a8:cf:4c:01:b8:09:a3:58:ba:76:c3:15:
4c:ce:dc:05:c6:e7:97:fb:67:00:7a:6c:c3:1e:45:b5:65:3d:
df:5c:88:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:10:43 2025 by rpki-client