Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft
File: Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft (raw, json)
Hash identifier: ApZec0o0iNrjXP9EWg1UotoHcaLD/s2ShfyA9fYI95k=
Subject key identifier: 4A:D7:A4:53:95:26:F5:16:2E:E1:F3:D0:0D:09:66:48:9C:97:DC:56
Authority key identifier: 2E:67:F3:E4:E1:97:7A:BE:98:CC:B2:0C:A1:AF:A8:58:F1:E6:68:1C
Certificate issuer: /CN=2e67f3e4e1977abe98ccb20ca1afa858f1e6681c
Certificate serial: 019938DF42310766DEC67E530DBEA4A7CD66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lmfz5OGXer6YzLIMoa-oWPHmaBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft
Manifest number: 1651
Signing time: Thu 11 Sep 2025 13:02:59 +0000
Manifest this update: Thu 11 Sep 2025 13:02:59 +0000
Manifest next update: Fri 12 Sep 2025 13:02:59 +0000
Files and hashes: 1: Lmfz5OGXer6YzLIMoa-oWPHmaBw.crl (hash: 8v+NLy8xGzo58w4+xa8rQq0zR27Nei6GjeopAHs+2bE=)
2: M21MDqZhLpMUHwm9053y5X5hUu4.roa (hash: SYGPLAqkM4uXfmWggV4XyNi06NaAyivAORW2HClwZBk=)
3: nXQPLiO12M3Y_MzU88OuVYMZ5_U.roa (hash: T3shL01w4f9E1vbhrlXsqoTnaDV8nANG2xjOAb2Kx6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lmfz5OGXer6YzLIMoa-oWPHmaBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 13:02:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:38:df:42:31:07:66:de:c6:7e:53:0d:be:a4:a7:cd:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e67f3e4e1977abe98ccb20ca1afa858f1e6681c
Validity
Not Before: Sep 11 13:02:59 2025 GMT
Not After : Sep 12 13:02:59 2025 GMT
Subject: CN=4ad7a4539526f5162ee1f3d00d0966489c97dc56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:96:86:7a:10:dc:6a:7a:0f:38:fd:d2:b1:1c:
99:8b:81:4c:c2:ac:b3:a4:09:73:13:51:c5:5a:4e:
b0:88:a0:11:fe:74:f8:25:6f:e4:a6:1b:de:82:14:
2e:21:16:69:ac:7e:fa:82:d8:45:cb:0d:ce:66:95:
4c:e9:3d:af:74:26:ab:99:3f:70:74:54:95:bb:3e:
b5:ab:47:cb:1a:e9:9a:e3:27:fa:7d:c1:f2:00:fe:
b2:dd:cc:3d:46:1c:5f:66:59:ed:56:ec:50:24:5b:
d4:76:63:7f:b4:92:d7:7b:03:0b:10:1f:24:36:67:
92:5d:b7:ca:7d:e4:ef:50:69:dd:06:48:bf:6b:71:
37:20:3f:16:fa:62:e0:80:c0:64:50:9b:c2:f2:7e:
11:5b:b0:17:dd:20:ed:e5:c1:0d:18:93:06:a8:83:
66:3c:e1:06:56:5b:f0:ae:03:4e:31:3d:af:65:72:
86:0a:32:03:82:c5:e4:6d:65:06:cf:a4:dd:6b:84:
78:d2:93:12:ab:7c:0e:36:0f:cf:2c:ec:03:88:89:
95:a5:50:bd:1e:42:1a:77:56:bd:b1:ac:36:5a:66:
a6:a7:f2:a5:11:27:ef:3d:a3:ad:1d:a2:95:33:52:
24:62:cc:d7:74:65:3d:f4:76:c8:53:cb:c6:16:0e:
be:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:D7:A4:53:95:26:F5:16:2E:E1:F3:D0:0D:09:66:48:9C:97:DC:56
X509v3 Authority Key Identifier:
keyid:2E:67:F3:E4:E1:97:7A:BE:98:CC:B2:0C:A1:AF:A8:58:F1:E6:68:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lmfz5OGXer6YzLIMoa-oWPHmaBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:45:22:f4:f6:25:e1:69:09:1a:20:36:82:c8:7b:6f:e4:35:
76:ac:d2:ba:49:38:ec:57:c5:51:5e:68:86:a6:e7:4e:df:86:
13:ae:1a:43:eb:1d:63:fc:2d:87:5d:4f:4e:c9:ae:31:72:60:
3f:4c:f1:75:e2:b9:b1:55:c5:8b:f6:3d:e0:46:d9:4a:42:8a:
c4:64:90:32:bc:91:69:86:24:8a:7a:ed:8a:8f:f0:3a:63:74:
04:ce:39:fd:94:ae:ae:18:5e:6d:19:9b:3a:de:18:39:be:83:
42:ee:1d:ae:9d:ac:c4:fd:57:cd:b5:14:80:36:ed:28:5e:1e:
e5:73:03:37:42:b1:62:b9:87:8a:fb:72:4b:1a:18:fe:00:f7:
cc:38:1c:30:06:f3:07:f8:4b:1d:fc:c5:90:9c:aa:ae:74:a5:
79:b9:2b:24:da:8b:e6:27:33:06:1d:db:53:f0:8c:6f:c7:0d:
a1:6d:f7:e7:66:7a:d8:18:95:41:aa:8d:15:b5:3b:05:d9:0e:
d3:f7:d1:f4:db:9f:81:fa:ac:80:1a:15:40:16:59:7a:6e:bb:
49:8a:0f:43:fa:e0:af:e8:ef:1b:e6:13:44:82:c6:1d:be:c8:
c5:92:7f:bd:8f:d5:ed:fb:7a:9d:f7:c9:12:e1:71:b6:04:51:
bc:92:bb:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 17:44:13 2025 by rpki-client