Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft
File: Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft (raw, json)
Hash identifier: L1p8jy5kTnS23tO/INepBKQCgQhlwZpYEQzXah1p/xY=
Subject key identifier: 89:92:52:8B:3F:CD:36:79:6A:86:3E:C7:DD:38:E6:1F:8A:BA:5D:85
Authority key identifier: 2E:67:F3:E4:E1:97:7A:BE:98:CC:B2:0C:A1:AF:A8:58:F1:E6:68:1C
Certificate issuer: /CN=2e67f3e4e1977abe98ccb20ca1afa858f1e6681c
Certificate serial: 01974666ABB0B7E751794A71CD5E65DA0275
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lmfz5OGXer6YzLIMoa-oWPHmaBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft
Manifest number: 154F
Signing time: Fri 06 Jun 2025 18:00:23 +0000
Manifest this update: Fri 06 Jun 2025 18:00:23 +0000
Manifest next update: Sat 07 Jun 2025 18:00:23 +0000
Files and hashes: 1: Lmfz5OGXer6YzLIMoa-oWPHmaBw.crl (hash: Aq/m5AX/QIPWWO1jGQXbxsBly12V6X5qxP+NMzRYE7g=)
2: M21MDqZhLpMUHwm9053y5X5hUu4.roa (hash: SYGPLAqkM4uXfmWggV4XyNi06NaAyivAORW2HClwZBk=)
3: nXQPLiO12M3Y_MzU88OuVYMZ5_U.roa (hash: T3shL01w4f9E1vbhrlXsqoTnaDV8nANG2xjOAb2Kx6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lmfz5OGXer6YzLIMoa-oWPHmaBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:66:ab:b0:b7:e7:51:79:4a:71:cd:5e:65:da:02:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e67f3e4e1977abe98ccb20ca1afa858f1e6681c
Validity
Not Before: Jun 6 18:00:23 2025 GMT
Not After : Jun 7 18:00:23 2025 GMT
Subject: CN=8992528b3fcd36796a863ec7dd38e61f8aba5d85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4b:6b:97:cd:b2:ba:e4:41:0b:d9:04:2b:57:
2c:a0:57:c4:6d:73:e5:72:61:a6:94:f6:81:03:4e:
d2:30:ea:84:20:86:79:c8:69:07:46:84:86:89:46:
92:e9:d8:c3:c3:53:43:bb:85:b2:3b:42:8e:e2:8e:
55:53:87:b7:7e:f3:4a:2d:d5:04:78:e2:27:6f:e7:
13:85:95:05:66:69:90:d3:cd:e9:16:68:1c:8c:7e:
b1:c6:a2:db:9b:9a:78:25:70:0d:0d:b9:36:70:6b:
b8:cc:d1:8b:9a:be:3f:00:97:b8:2d:7e:02:56:08:
27:fc:90:47:d8:f3:3c:b7:b7:f5:9c:53:70:42:d3:
93:b6:c6:24:9e:b1:ed:f1:3e:89:c6:a5:0a:44:28:
9b:8e:ce:13:a4:c5:91:8b:89:2a:2c:5c:84:6a:ef:
45:f2:85:8b:f8:ba:50:26:b4:49:30:72:fe:30:24:
94:a6:c4:e6:8e:e0:f6:d7:90:9f:87:33:7d:c5:3a:
15:7b:71:e6:e2:ae:88:b3:0b:32:fb:e4:9c:fb:a1:
ab:cb:12:c2:95:f9:09:6e:64:f0:c8:8e:43:9b:b7:
7f:41:2b:a7:00:b7:6c:93:6c:a2:65:82:52:36:6c:
12:f1:b1:c2:c5:83:84:09:3b:c6:38:ce:d4:ca:6d:
51:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:92:52:8B:3F:CD:36:79:6A:86:3E:C7:DD:38:E6:1F:8A:BA:5D:85
X509v3 Authority Key Identifier:
keyid:2E:67:F3:E4:E1:97:7A:BE:98:CC:B2:0C:A1:AF:A8:58:F1:E6:68:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lmfz5OGXer6YzLIMoa-oWPHmaBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:20:f8:6a:23:2e:f4:2c:4d:53:00:da:2b:fb:c3:ff:6b:1d:
d6:65:a4:d2:3c:bb:db:f8:98:f2:03:fd:54:1a:d9:21:ba:d4:
42:6e:19:3d:87:e7:c4:e7:a7:5d:c3:aa:92:34:7e:5e:7a:99:
23:e6:71:e4:69:15:0f:2a:79:4a:51:72:35:28:d6:93:bc:9e:
64:ba:a4:04:63:54:41:04:f8:44:18:a7:82:7d:a9:ed:e6:15:
db:1d:a9:78:e1:5c:8a:ab:f3:8a:d8:53:2f:85:c2:26:62:58:
d6:da:5c:d8:87:48:72:53:57:5d:68:b5:d2:3b:7f:ee:13:bb:
16:d6:93:d6:a8:31:9e:bf:b9:51:f7:b4:fb:46:11:11:0b:72:
62:79:b5:c5:2f:3d:b8:b5:50:ee:ff:e7:20:63:86:bc:4c:74:
a1:e1:0f:5b:16:98:ff:60:ef:32:33:24:ee:df:bc:96:20:ac:
61:b5:79:a2:29:29:4f:7c:76:af:1d:83:26:5d:40:8a:61:14:
49:6e:47:fc:23:66:2d:cb:5e:05:72:b2:11:7e:61:c2:ac:f1:
ce:b0:9f:40:4a:42:1c:60:7b:c0:d5:8f:55:f3:61:32:f4:eb:
12:c0:25:4c:bd:f6:b4:1d:a9:6a:bf:86:6f:7c:a4:08:f1:d9:
59:87:a1:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdGZquwt+dReUpxzV5l2gJ1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlNjdmM2U0ZTE5NzdhYmU5OGNjYjIwY2ExYWZhODU4ZjFl
NjY4MWMwHhcNMjUwNjA2MTgwMDIzWhcNMjUwNjA3MTgwMDIzWjAzMTEwLwYDVQQD
Eyg4OTkyNTI4YjNmY2QzNjc5NmE4NjNlYzdkZDM4ZTYxZjhhYmE1ZDg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEtrl82yuuRBC9kEK1csoFfEbXPl
cmGmlPaBA07SMOqEIIZ5yGkHRoSGiUaS6djDw1NDu4WyO0KO4o5VU4e3fvNKLdUE
eOInb+cThZUFZmmQ083pFmgcjH6xxqLbm5p4JXANDbk2cGu4zNGLmr4/AJe4LX4C
Vggn/JBH2PM8t7f1nFNwQtOTtsYknrHt8T6JxqUKRCibjs4TpMWRi4kqLFyEau9F
8oWL+LpQJrRJMHL+MCSUpsTmjuD215CfhzN9xToVe3Hm4q6Iswsy++Sc+6GryxLC
lfkJbmTwyI5Dm7d/QSunALdsk2yiZYJSNmwS8bHCxYOECTvGOM7Uym1ROwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFImSUos/zTZ5aoY+x9045h+Kul2FMB8GA1UdIwQY
MBaAFC5n8+Thl3q+mMyyDKGvqFjx5mgcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTG1mejVPR1hlcjZZekxJTW9hLW9XUEhtYUJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8wNmJlOGYtYTI2NS00MjZhLWFhMGEt
ZTQ3OWM2YjlmZjJiLzEvTG1mejVPR1hlcjZZekxJTW9hLW9XUEhtYUJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi8wNmJlOGYtYTI2NS00MjZhLWFhMGEtZTQ3OWM2YjlmZjJi
LzEvTG1mejVPR1hlcjZZekxJTW9hLW9XUEhtYUJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKiD4aiMu
9CxNUwDaK/vD/2sd1mWk0jy72/iY8gP9VBrZIbrUQm4ZPYfnxOenXcOqkjR+XnqZ
I+Zx5GkVDyp5SlFyNSjWk7yeZLqkBGNUQQT4RBingn2p7eYV2x2peOFciqvzithT
L4XCJmJY1tpc2IdIclNXXWi10jt/7hO7FtaT1qgxnr+5Ufe0+0YREQtyYnm1xS89
uLVQ7v/nIGOGvEx0oeEPWxaY/2DvMjMk7t+8liCsYbV5oikpT3x2rx2DJl1AimEU
SW5H/CNmLcteBXKyEX5hwqzxzrCfQEpCHGB7wNWPVfNhMvTrEsAlTL32tB2par+G
b3ykCPHZWYehpg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 01:19:11 2025 by rpki-client