Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/b50110-02b0-4235-984f-2d80cb25579a/1/lmAVV4yUjzG_dKHh__1_o-NGAgY.mft
File: lmAVV4yUjzG_dKHh__1_o-NGAgY.mft (raw, json)
Hash identifier: dqde477NoESPogHxShHLhXzQWCcwwCnP3VUxl4Q9eZw=
Subject key identifier: 3E:B5:B0:FD:95:3A:B8:BB:50:DC:1F:56:A2:85:3E:91:6B:DF:48:20
Authority key identifier: 96:60:15:57:8C:94:8F:31:BF:74:A1:E1:FF:FD:7F:A3:E3:46:02:06
Certificate issuer: /CN=966015578c948f31bf74a1e1fffd7fa3e3460206
Certificate serial: 019923310A714B8A7BA5C04D97FB2D8CB68F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lmAVV4yUjzG_dKHh__1_o-NGAgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/b50110-02b0-4235-984f-2d80cb25579a/1/lmAVV4yUjzG_dKHh__1_o-NGAgY.mft
Manifest number: 0CFE
Signing time: Sun 07 Sep 2025 08:00:40 +0000
Manifest this update: Sun 07 Sep 2025 08:00:40 +0000
Manifest next update: Mon 08 Sep 2025 08:00:40 +0000
Files and hashes: 1: OE686EGR1IVKz-bx67_ZsH11lHQ.roa (hash: S5Z4RalwztbreTYazKn4Yw+ySxhuT6+PltCXQ/y03p0=)
2: lmAVV4yUjzG_dKHh__1_o-NGAgY.crl (hash: hc5EhSgroRm2DdJCOHWFR+jsDOZPWQqp8O0+IBC2qeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/b50110-02b0-4235-984f-2d80cb25579a/1/lmAVV4yUjzG_dKHh__1_o-NGAgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/b50110-02b0-4235-984f-2d80cb25579a/1/lmAVV4yUjzG_dKHh__1_o-NGAgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lmAVV4yUjzG_dKHh__1_o-NGAgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:0a:71:4b:8a:7b:a5:c0:4d:97:fb:2d:8c:b6:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=966015578c948f31bf74a1e1fffd7fa3e3460206
Validity
Not Before: Sep 7 08:00:40 2025 GMT
Not After : Sep 8 08:00:40 2025 GMT
Subject: CN=3eb5b0fd953ab8bb50dc1f56a2853e916bdf4820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:22:4d:dc:21:0c:ac:59:d6:c8:2d:2d:8c:93:
a8:42:43:15:19:ba:33:7f:fa:90:ec:55:32:25:7d:
79:69:94:73:66:5b:5d:df:d8:99:90:aa:40:18:6d:
5a:da:03:fc:61:a5:f1:8f:e5:d9:05:66:a1:ea:e3:
c7:b8:6b:46:b6:4c:61:11:f3:17:14:4d:a4:2a:d4:
f8:a4:20:b5:92:49:f5:40:b2:f3:32:67:0e:b8:c5:
77:14:07:ec:29:8a:a2:44:0d:7d:bf:74:4e:43:be:
a3:16:1b:71:02:6d:34:cb:12:95:63:79:2c:4a:d7:
5f:e0:e3:5d:9e:e9:a1:ce:2f:c1:0c:92:5d:58:21:
06:fb:74:b6:a2:e4:de:15:03:c6:78:c6:f4:77:88:
96:7b:80:69:e4:56:f9:4a:05:04:81:a2:78:86:e8:
2d:23:c5:37:fc:4a:07:93:c4:f4:bc:2f:c7:b5:ad:
86:47:6d:05:8d:58:0e:69:c2:22:16:fe:bd:16:ed:
9f:67:4d:cd:3d:f9:57:f2:1d:5a:09:f7:3f:b4:49:
41:50:e7:81:e4:9b:ff:7c:30:82:70:1a:55:8c:44:
b8:db:54:41:65:a4:5d:b3:31:0b:f0:93:b3:5b:df:
97:bc:3e:39:d4:43:26:73:55:27:9e:c8:a5:4d:33:
8a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:B5:B0:FD:95:3A:B8:BB:50:DC:1F:56:A2:85:3E:91:6B:DF:48:20
X509v3 Authority Key Identifier:
keyid:96:60:15:57:8C:94:8F:31:BF:74:A1:E1:FF:FD:7F:A3:E3:46:02:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lmAVV4yUjzG_dKHh__1_o-NGAgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/b50110-02b0-4235-984f-2d80cb25579a/1/lmAVV4yUjzG_dKHh__1_o-NGAgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/b50110-02b0-4235-984f-2d80cb25579a/1/lmAVV4yUjzG_dKHh__1_o-NGAgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:e3:9c:e5:28:5a:5e:91:61:92:7d:e5:ec:f0:ec:9c:42:51:
bb:dd:0a:b1:4f:ff:fe:9b:39:66:96:b2:2f:ae:5f:23:08:33:
62:21:aa:71:4f:5c:ea:20:db:52:9b:e8:4c:48:25:59:b3:6b:
7e:85:27:3f:ae:82:bd:51:f2:13:24:04:e9:52:96:cb:09:89:
ff:2a:77:7f:19:ea:88:f6:ba:f8:d4:75:28:d4:09:e6:c2:39:
b1:d6:af:65:30:b5:27:96:ae:ff:2b:61:da:53:78:b6:df:23:
77:5b:bc:62:05:9e:9a:11:af:10:ff:87:33:9e:eb:28:cd:6d:
c1:11:8b:5f:42:5e:47:11:1c:94:1d:70:b9:3a:71:56:d5:31:
44:71:11:33:eb:d9:22:e2:ce:bb:a4:ae:d3:66:44:45:ee:e0:
29:44:a9:b4:80:66:5e:54:96:bd:b1:78:20:0c:da:f1:a6:55:
33:2a:04:f5:de:9f:d8:62:9e:5d:c5:0f:24:fd:4c:8d:05:2f:
d7:39:97:7e:4a:6e:03:6d:91:1a:45:3e:fa:aa:00:7f:78:4b:
0d:84:a8:ae:0e:cd:5e:77:e7:db:64:79:20:0b:e4:1f:d6:4c:
3f:08:61:74:50:a2:fe:d7:5c:a5:42:7e:1f:03:ff:5f:6e:ff:
2c:b0:94:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:22:01 2025 by rpki-client