Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/1f7c98-18aa-47d8-ab41-1161edb9bf0e/1/lmr8FNShmnwsFo6yyB1WIrMBSes.mft
File: lmr8FNShmnwsFo6yyB1WIrMBSes.mft (raw, json)
Hash identifier: OzWUO/FsmTSZveOFtS05louilSKOj8goRAOy+cwSXpM=
Subject key identifier: 3D:E9:1C:00:6E:DE:7F:3C:53:BE:4E:2F:73:C8:2E:1E:06:75:70:88
Authority key identifier: 96:6A:FC:14:D4:A1:9A:7C:2C:16:8E:B2:C8:1D:56:22:B3:01:49:EB
Certificate issuer: /CN=966afc14d4a19a7c2c168eb2c81d5622b30149eb
Certificate serial: 0199FCC64F3AF4DCEE89E5BFA17834E4F7B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lmr8FNShmnwsFo6yyB1WIrMBSes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/1f7c98-18aa-47d8-ab41-1161edb9bf0e/1/lmr8FNShmnwsFo6yyB1WIrMBSes.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 14:01:18 +0000
Manifest this update: Sun 19 Oct 2025 14:01:18 +0000
Manifest next update: Mon 20 Oct 2025 14:01:18 +0000
Files and hashes: 1: YBabozhq7Bm__rh2KvKvZaWJJSk.roa (hash: ZpYTHURBPLv+zLOzTtEUmCp4scPYCX2Bazth3B2lfOY=)
2: lmr8FNShmnwsFo6yyB1WIrMBSes.crl (hash: FPK4++PhCFg2+1A4UBTXB+ZpfiTQSwb+OJ9GjrmlJGU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/1f7c98-18aa-47d8-ab41-1161edb9bf0e/1/lmr8FNShmnwsFo6yyB1WIrMBSes.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/1f7c98-18aa-47d8-ab41-1161edb9bf0e/1/lmr8FNShmnwsFo6yyB1WIrMBSes.mft
rsync://rpki.ripe.net/repository/DEFAULT/lmr8FNShmnwsFo6yyB1WIrMBSes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:4f:3a:f4:dc:ee:89:e5:bf:a1:78:34:e4:f7:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=966afc14d4a19a7c2c168eb2c81d5622b30149eb
Validity
Not Before: Oct 19 14:01:18 2025 GMT
Not After : Oct 20 14:01:18 2025 GMT
Subject: CN=3de91c006ede7f3c53be4e2f73c82e1e06757088
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:20:77:69:65:24:1a:dd:6a:27:f6:4f:84:29:
55:6b:6d:2b:0f:cf:e2:98:4e:82:0d:89:38:b0:75:
2d:8f:c7:8d:45:79:86:4b:67:2f:da:df:5a:88:c7:
d8:4f:77:c2:ac:20:c8:eb:a3:a1:7d:54:cd:d2:a4:
97:89:e3:ca:f5:ce:7a:a0:4a:e1:b6:bd:64:75:09:
b8:ea:dd:b5:1b:23:b7:be:a0:74:60:3e:23:47:ae:
ad:19:22:cf:12:95:a1:07:62:e7:76:83:72:a8:93:
a6:d5:35:0f:1a:77:d8:bd:e6:f6:4f:e2:67:83:d8:
50:ef:53:ea:d6:f5:6c:8b:63:3a:e4:0d:52:c2:88:
36:e8:e9:be:bb:9a:d5:7b:51:c1:63:e9:e3:d0:10:
52:eb:6a:d1:ba:f1:dc:ad:4e:02:07:59:ec:02:4b:
3b:0f:35:70:62:3f:04:0e:41:df:51:33:a4:b6:fd:
2e:2e:d9:a5:b8:8d:69:92:a2:0a:f5:b8:7b:2d:08:
a9:6d:04:73:ac:11:8c:3d:c0:1a:e8:f8:29:1d:3f:
40:d3:90:6e:a7:61:95:5b:6a:fa:3c:25:53:c5:09:
4f:1b:32:0a:75:30:95:a0:0e:2a:89:93:12:0f:ea:
5e:b2:14:68:d8:c3:c6:35:1c:0f:4e:4b:55:84:2b:
89:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:E9:1C:00:6E:DE:7F:3C:53:BE:4E:2F:73:C8:2E:1E:06:75:70:88
X509v3 Authority Key Identifier:
keyid:96:6A:FC:14:D4:A1:9A:7C:2C:16:8E:B2:C8:1D:56:22:B3:01:49:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lmr8FNShmnwsFo6yyB1WIrMBSes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1f7c98-18aa-47d8-ab41-1161edb9bf0e/1/lmr8FNShmnwsFo6yyB1WIrMBSes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1f7c98-18aa-47d8-ab41-1161edb9bf0e/1/lmr8FNShmnwsFo6yyB1WIrMBSes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:26:d4:a1:2f:51:6e:11:4f:7e:36:dd:ab:50:2d:f7:e9:c4:
65:01:a4:4f:46:1b:d7:70:6b:54:5a:ba:e5:82:7f:d5:e6:5a:
2d:cd:35:fe:da:24:f3:ac:cd:e5:de:2f:9c:e3:80:bf:6a:d9:
a5:da:8d:9d:60:15:4a:e1:08:97:60:72:f7:e1:63:c1:51:c4:
85:a8:9d:31:99:75:da:19:14:95:55:d4:99:18:0a:a1:42:fc:
9c:9f:97:70:91:e1:4c:00:79:5d:c3:b7:b6:4e:8e:87:d2:de:
bb:81:5e:55:d6:f0:9d:3f:ba:05:4e:eb:aa:f3:16:d0:f2:58:
fc:a5:0e:47:32:76:42:e7:ee:c9:1b:ae:84:34:8c:23:94:6c:
ae:e9:8c:52:db:07:17:3d:ed:3e:82:97:57:02:b2:5f:04:56:
63:b2:97:4b:56:b2:42:43:03:90:62:c6:fd:2a:91:81:25:92:
b4:0b:e9:88:97:94:34:7a:6e:cd:6f:55:23:4b:1c:1b:72:31:
1b:a6:e7:0c:52:96:ec:28:58:13:c2:1a:d7:b4:50:b9:7c:a3:
95:1f:2f:84:47:ef:4b:2c:43:e7:a7:b9:28:72:6e:d3:0a:33:
bc:fa:bf:bc:93:87:94:78:a1:9e:53:f8:32:86:7e:94:44:dc:
c1:b7:4f:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:30:37 2025 by rpki-client