Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft
File: Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft (raw, json)
Hash identifier: 0lCY7qLe4tDZeIR/ElW6UCgwa2JHtcEQw19qYrL7KJg=
Subject key identifier: D3:90:27:6A:14:00:A1:E4:E7:F5:32:02:E5:F4:10:64:2F:92:B3:6D
Authority key identifier: 2E:67:F3:E4:E1:97:7A:BE:98:CC:B2:0C:A1:AF:A8:58:F1:E6:68:1C
Certificate issuer: /CN=2e67f3e4e1977abe98ccb20ca1afa858f1e6681c
Certificate serial: 01984965572BFF63199EADF8BBC670EDD081
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lmfz5OGXer6YzLIMoa-oWPHmaBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft
Manifest number: 15D5
Signing time: Sun 27 Jul 2025 01:00:34 +0000
Manifest this update: Sun 27 Jul 2025 01:00:34 +0000
Manifest next update: Mon 28 Jul 2025 01:00:34 +0000
Files and hashes: 1: Lmfz5OGXer6YzLIMoa-oWPHmaBw.crl (hash: EdHoJ9NG+ud6MTjPirI/j+ayMxZQlfPw12in0LZ2y/c=)
2: M21MDqZhLpMUHwm9053y5X5hUu4.roa (hash: SYGPLAqkM4uXfmWggV4XyNi06NaAyivAORW2HClwZBk=)
3: nXQPLiO12M3Y_MzU88OuVYMZ5_U.roa (hash: T3shL01w4f9E1vbhrlXsqoTnaDV8nANG2xjOAb2Kx6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lmfz5OGXer6YzLIMoa-oWPHmaBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:57:2b:ff:63:19:9e:ad:f8:bb:c6:70:ed:d0:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e67f3e4e1977abe98ccb20ca1afa858f1e6681c
Validity
Not Before: Jul 27 01:00:34 2025 GMT
Not After : Jul 28 01:00:34 2025 GMT
Subject: CN=d390276a1400a1e4e7f53202e5f410642f92b36d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b2:db:ed:70:b8:4b:c2:e0:08:fa:10:5b:2e:
f7:e3:3b:a9:31:a5:c0:61:20:25:c0:8c:4d:aa:3d:
02:02:3e:28:15:d2:3e:5f:36:9d:71:a7:b2:45:2c:
26:5a:26:52:44:96:82:af:e1:f4:3c:8a:c6:10:6d:
76:8d:c5:26:9e:3f:d6:2b:1b:9d:d2:be:47:8e:00:
6a:0b:fb:61:75:02:90:6f:15:e6:c2:0a:10:e4:4b:
57:47:64:ec:50:5d:b6:fc:a9:bf:20:16:8b:5d:8f:
af:97:00:8d:fa:e5:5e:b8:6f:39:c3:26:8b:0b:fd:
cd:ba:88:95:94:9d:9a:9c:86:5d:3b:ec:0f:5d:f9:
7e:81:ef:d9:86:f8:75:76:d9:47:d7:50:2f:e1:91:
26:2d:d1:d4:b8:ef:96:81:a9:cf:6d:0b:f8:7a:d7:
a4:08:70:73:94:a4:df:9b:b9:b9:a3:c7:88:04:7e:
af:c3:94:c0:9e:6d:bf:54:68:bc:f2:7b:20:23:6e:
19:b9:e3:31:c4:bd:6c:29:37:d6:2e:46:f0:77:44:
8b:c4:7d:31:53:b0:0b:18:21:37:17:00:8b:45:1d:
35:1c:da:3b:88:ca:c4:d7:0c:0b:92:8a:23:c2:34:
18:22:70:0b:d1:29:7b:83:aa:46:40:4d:a9:d1:48:
ab:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:90:27:6A:14:00:A1:E4:E7:F5:32:02:E5:F4:10:64:2F:92:B3:6D
X509v3 Authority Key Identifier:
keyid:2E:67:F3:E4:E1:97:7A:BE:98:CC:B2:0C:A1:AF:A8:58:F1:E6:68:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lmfz5OGXer6YzLIMoa-oWPHmaBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:23:a9:97:21:97:1d:6d:c6:39:a1:a4:dd:ff:a8:43:74:e2:
60:cc:94:55:de:ce:49:07:54:f1:68:13:b2:3e:5a:68:29:65:
93:b1:d3:cc:9c:dd:f2:3f:2d:ac:83:a0:b1:72:12:37:2f:a0:
3c:fd:d0:bc:ea:a0:77:95:5b:b2:19:7c:6a:0a:94:3e:7f:88:
f8:ef:74:cc:51:02:1f:1e:57:53:2a:25:91:4c:70:91:32:65:
95:45:dd:72:21:d8:fc:91:e5:d6:2e:64:f0:55:d2:f2:be:82:
fc:06:3c:87:28:43:de:00:b0:06:31:14:8c:22:01:0a:d8:a4:
fd:98:58:cc:a7:ed:ce:98:42:26:67:af:2c:cb:d1:5e:3f:89:
b5:7a:5f:4b:7c:0d:37:eb:9a:7e:9b:4b:63:99:fa:51:b5:ed:
37:9f:2a:eb:38:f3:48:76:ac:fd:de:cf:51:b5:02:cc:2e:ac:
33:91:bd:98:14:63:d9:26:71:ab:5f:f9:19:ce:2c:9a:ae:8a:
22:38:f7:7e:97:71:ac:88:96:dd:d4:5d:98:a3:c3:f5:0f:14:
c0:f2:09:6f:b7:f7:6a:a3:4c:72:84:e8:3e:1d:fe:4b:40:d1:
6f:ed:69:2a:cd:fa:3c:14:05:b0:ef:44:50:c0:bd:06:b7:ef:
e1:22:88:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJZVcr/2MZnq34u8Zw7dCBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlNjdmM2U0ZTE5NzdhYmU5OGNjYjIwY2ExYWZhODU4ZjFl
NjY4MWMwHhcNMjUwNzI3MDEwMDM0WhcNMjUwNzI4MDEwMDM0WjAzMTEwLwYDVQQD
EyhkMzkwMjc2YTE0MDBhMWU0ZTdmNTMyMDJlNWY0MTA2NDJmOTJiMzZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLLb7XC4S8LgCPoQWy734zupMaXA
YSAlwIxNqj0CAj4oFdI+XzadcaeyRSwmWiZSRJaCr+H0PIrGEG12jcUmnj/WKxud
0r5HjgBqC/thdQKQbxXmwgoQ5EtXR2TsUF22/Km/IBaLXY+vlwCN+uVeuG85wyaL
C/3NuoiVlJ2anIZdO+wPXfl+ge/Zhvh1dtlH11Av4ZEmLdHUuO+WganPbQv4etek
CHBzlKTfm7m5o8eIBH6vw5TAnm2/VGi88nsgI24ZueMxxL1sKTfWLkbwd0SLxH0x
U7ALGCE3FwCLRR01HNo7iMrE1wwLkoojwjQYInAL0Sl7g6pGQE2p0UirowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNOQJ2oUAKHk5/UyAuX0EGQvkrNtMB8GA1UdIwQY
MBaAFC5n8+Thl3q+mMyyDKGvqFjx5mgcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTG1mejVPR1hlcjZZekxJTW9hLW9XUEhtYUJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8wNmJlOGYtYTI2NS00MjZhLWFhMGEt
ZTQ3OWM2YjlmZjJiLzEvTG1mejVPR1hlcjZZekxJTW9hLW9XUEhtYUJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi8wNmJlOGYtYTI2NS00MjZhLWFhMGEtZTQ3OWM2YjlmZjJi
LzEvTG1mejVPR1hlcjZZekxJTW9hLW9XUEhtYUJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUiOplyGX
HW3GOaGk3f+oQ3TiYMyUVd7OSQdU8WgTsj5aaCllk7HTzJzd8j8trIOgsXISNy+g
PP3QvOqgd5Vbshl8agqUPn+I+O90zFECHx5XUyolkUxwkTJllUXdciHY/JHl1i5k
8FXS8r6C/AY8hyhD3gCwBjEUjCIBCtik/ZhYzKftzphCJmevLMvRXj+JtXpfS3wN
N+uafptLY5n6UbXtN58q6zjzSHas/d7PUbUCzC6sM5G9mBRj2SZxq1/5Gc4smq6K
Ijj3fpdxrIiW3dRdmKPD9Q8UwPIJb7f3aqNMcoToPh3+S0DRb+1pKs36PBQFsO9E
UMC9Brfv4SKIgA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 05:27:03 2025 by rpki-client