Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/1f7c98-18aa-47d8-ab41-1161edb9bf0e/1/lmr8FNShmnwsFo6yyB1WIrMBSes.mft
File: lmr8FNShmnwsFo6yyB1WIrMBSes.mft (raw, json)
Hash identifier: l1ARZEYCAHTXZiw5UQBAZj9GXKV2V23EsvhIgYJo7Ms=
Subject key identifier: B7:1D:D3:DE:58:DB:11:32:20:75:1E:63:4C:80:8A:8A:27:90:A3:57
Authority key identifier: 96:6A:FC:14:D4:A1:9A:7C:2C:16:8E:B2:C8:1D:56:22:B3:01:49:EB
Certificate issuer: /CN=966afc14d4a19a7c2c168eb2c81d5622b30149eb
Certificate serial: 0198D54E9D811169DD234493E360103481CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lmr8FNShmnwsFo6yyB1WIrMBSes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/1f7c98-18aa-47d8-ab41-1161edb9bf0e/1/lmr8FNShmnwsFo6yyB1WIrMBSes.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 05:02:35 +0000
Manifest this update: Sat 23 Aug 2025 05:02:35 +0000
Manifest next update: Sun 24 Aug 2025 05:02:35 +0000
Files and hashes: 1: YBabozhq7Bm__rh2KvKvZaWJJSk.roa (hash: ZpYTHURBPLv+zLOzTtEUmCp4scPYCX2Bazth3B2lfOY=)
2: lmr8FNShmnwsFo6yyB1WIrMBSes.crl (hash: fkvEIqRtNbpWTTlq389vbw2XxzdrsKWJKn3UZMpyCXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/1f7c98-18aa-47d8-ab41-1161edb9bf0e/1/lmr8FNShmnwsFo6yyB1WIrMBSes.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/1f7c98-18aa-47d8-ab41-1161edb9bf0e/1/lmr8FNShmnwsFo6yyB1WIrMBSes.mft
rsync://rpki.ripe.net/repository/DEFAULT/lmr8FNShmnwsFo6yyB1WIrMBSes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:9d:81:11:69:dd:23:44:93:e3:60:10:34:81:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=966afc14d4a19a7c2c168eb2c81d5622b30149eb
Validity
Not Before: Aug 23 05:02:35 2025 GMT
Not After : Aug 24 05:02:35 2025 GMT
Subject: CN=b71dd3de58db113220751e634c808a8a2790a357
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:39:87:44:dd:03:67:1f:10:96:50:22:8e:a4:
9f:4b:67:79:b1:b3:98:ee:70:f7:b8:60:72:21:79:
1f:cc:81:f7:9b:bf:cb:b5:03:6f:73:3d:f9:62:0e:
7d:4a:9a:49:80:f2:e4:a7:e6:57:f6:ae:df:ff:ee:
cc:05:b7:81:80:b9:ca:5e:b4:21:82:2e:9b:24:77:
fd:3b:8f:23:0b:bc:7d:2e:63:6e:0d:b9:54:28:27:
cc:71:81:3b:89:93:9c:21:9c:07:0d:bc:bb:b3:b5:
18:67:de:36:51:51:dc:6d:78:51:30:64:39:12:9b:
d7:8a:ba:04:e5:96:d3:49:02:dd:cc:f3:92:ca:06:
e0:5f:72:04:a2:6c:e6:36:bd:e2:a2:95:4a:38:f4:
45:e8:d9:16:5a:6f:ad:36:38:25:f2:9b:2d:3d:7c:
ca:c1:e4:09:05:c5:87:ef:06:38:72:ed:2b:e7:27:
8d:93:0e:6c:92:62:60:7b:8d:8e:37:f3:61:a3:dd:
49:08:91:0b:17:01:73:a7:ee:04:83:ca:c1:c5:13:
0f:52:b1:e1:89:15:2b:9b:70:54:28:5d:7d:8b:d0:
b3:b6:b7:0b:bc:08:41:8a:07:e7:d0:bb:58:37:52:
64:08:f9:6c:af:e7:98:cd:b5:7b:7c:ea:8c:82:fa:
8c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:1D:D3:DE:58:DB:11:32:20:75:1E:63:4C:80:8A:8A:27:90:A3:57
X509v3 Authority Key Identifier:
keyid:96:6A:FC:14:D4:A1:9A:7C:2C:16:8E:B2:C8:1D:56:22:B3:01:49:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lmr8FNShmnwsFo6yyB1WIrMBSes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1f7c98-18aa-47d8-ab41-1161edb9bf0e/1/lmr8FNShmnwsFo6yyB1WIrMBSes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1f7c98-18aa-47d8-ab41-1161edb9bf0e/1/lmr8FNShmnwsFo6yyB1WIrMBSes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:0d:6f:5f:2e:d7:4c:f3:59:b6:a9:1b:ff:00:8f:9b:e2:e7:
c8:06:57:24:36:04:36:06:17:89:c5:10:12:f4:c3:8f:7e:06:
6f:b2:47:f2:62:49:d5:0f:7b:74:ab:55:d2:b7:b6:a3:67:8b:
e4:fb:f7:a9:ff:bd:11:25:c9:35:2e:78:cb:c1:a2:4a:c6:26:
52:e3:23:66:22:ec:77:f4:1b:d9:c2:d0:d3:51:92:6b:6f:36:
6d:58:ed:95:1b:6f:e4:a3:74:56:4a:0a:3b:f9:92:75:ab:7f:
fd:5a:16:0c:21:ae:9d:62:69:26:49:d1:ef:b2:5a:0b:b1:7f:
ae:3e:9c:32:99:68:a6:3e:28:67:da:af:bf:13:e7:a1:72:d8:
51:57:0b:6a:64:c8:97:09:fe:66:f1:07:f8:9e:eb:00:45:e6:
cb:88:5b:7b:04:2c:b6:18:ad:7d:46:f7:73:3c:9b:3b:36:3f:
46:b6:3c:2f:3a:ad:e5:65:c8:2b:61:f7:2d:ad:96:36:00:1a:
fc:be:3c:d7:33:97:e8:3a:71:1c:15:64:af:99:93:2d:e3:12:
7e:a1:00:7c:00:d6:9d:b0:44:14:30:dc:cc:41:10:de:df:ad:
35:35:4d:1c:0d:00:e2:8c:b3:d7:b5:15:13:87:f0:46:a6:22:
29:92:7e:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:36:16 2025 by rpki-client