Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft
File: Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft (raw, json)
Hash identifier: ybbwjQCp2oHIBm5zGqHhOoNTSc7RD81vDaRn1uwHe0I=
Subject key identifier: C2:B7:35:D6:C7:EA:16:62:40:3A:EE:C7:DC:78:9E:52:2E:44:E7:FC
Authority key identifier: 2E:67:F3:E4:E1:97:7A:BE:98:CC:B2:0C:A1:AF:A8:58:F1:E6:68:1C
Certificate issuer: /CN=2e67f3e4e1977abe98ccb20ca1afa858f1e6681c
Certificate serial: 019A228A8DD999D940B172DB326442A983C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lmfz5OGXer6YzLIMoa-oWPHmaBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft
Manifest number: 16CA
Signing time: Sun 26 Oct 2025 22:01:36 +0000
Manifest this update: Sun 26 Oct 2025 22:01:36 +0000
Manifest next update: Mon 27 Oct 2025 22:01:36 +0000
Files and hashes: 1: Lmfz5OGXer6YzLIMoa-oWPHmaBw.crl (hash: 4ewuU0DttBVI/bAFSOy/mLMALq0LfwVWb0rgwEzeukQ=)
2: M21MDqZhLpMUHwm9053y5X5hUu4.roa (hash: SYGPLAqkM4uXfmWggV4XyNi06NaAyivAORW2HClwZBk=)
3: nXQPLiO12M3Y_MzU88OuVYMZ5_U.roa (hash: T3shL01w4f9E1vbhrlXsqoTnaDV8nANG2xjOAb2Kx6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lmfz5OGXer6YzLIMoa-oWPHmaBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 22:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:8a:8d:d9:99:d9:40:b1:72:db:32:64:42:a9:83:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e67f3e4e1977abe98ccb20ca1afa858f1e6681c
Validity
Not Before: Oct 26 22:01:36 2025 GMT
Not After : Oct 27 22:01:36 2025 GMT
Subject: CN=c2b735d6c7ea1662403aeec7dc789e522e44e7fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:72:e8:fe:8d:f9:05:e5:10:00:11:b6:ec:20:
41:8f:64:55:1c:10:33:ae:f8:a1:e6:44:21:d8:0f:
8a:ae:ed:fa:f4:4f:e4:a6:a6:3b:ce:67:73:9d:89:
0b:86:4b:ca:13:37:7b:a8:0e:aa:27:4e:83:37:f0:
ef:d7:4e:9b:45:ba:87:a1:06:f6:16:e8:0c:e0:05:
90:9f:eb:9d:88:f1:55:fe:03:4c:50:05:67:77:e5:
cc:96:9e:79:15:78:df:ad:7b:1b:6b:dd:80:18:3e:
74:77:ce:85:46:73:8b:b1:95:e8:48:42:c7:cb:b7:
c4:62:b6:83:b5:8d:06:c4:8f:1c:62:33:ef:d3:63:
87:ad:fa:05:3b:38:51:b6:75:0e:26:a1:42:e4:65:
47:93:20:4a:5a:6c:3c:2a:17:18:3e:be:63:f8:0d:
4f:7a:d7:0d:8d:c6:0c:4f:9d:71:05:c8:37:a7:a6:
21:6c:86:34:a2:f5:4a:27:04:9e:df:ae:d1:6e:ad:
f0:5b:04:be:09:94:8b:4b:b6:4e:9e:c1:78:31:7d:
2f:0d:16:8d:dd:b0:5d:f4:20:3f:db:16:a0:ae:d5:
ca:8d:c1:24:0f:58:2e:06:de:92:8b:99:90:fb:ae:
1f:e1:ab:13:ea:e5:7a:ad:f2:46:66:e0:84:f0:55:
4f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:B7:35:D6:C7:EA:16:62:40:3A:EE:C7:DC:78:9E:52:2E:44:E7:FC
X509v3 Authority Key Identifier:
keyid:2E:67:F3:E4:E1:97:7A:BE:98:CC:B2:0C:A1:AF:A8:58:F1:E6:68:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lmfz5OGXer6YzLIMoa-oWPHmaBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:d4:4e:3d:ee:7b:79:81:c4:6e:43:8d:37:dd:b9:2d:b3:f1:
de:40:b6:c4:5a:c7:09:10:e4:45:b7:07:9c:fd:a1:f6:3d:d4:
3f:60:da:34:0e:04:d6:41:29:22:5d:63:a5:32:d7:00:8a:31:
a9:f5:a7:a2:c9:7f:5a:97:bb:d5:6a:15:eb:c7:5a:0e:fd:68:
55:81:b3:0e:3d:87:f2:a0:4f:19:e0:a5:0d:a0:a2:5d:91:8b:
d8:04:85:42:26:32:74:19:5d:a2:17:bd:23:17:f8:8e:6a:10:
4d:c5:cd:0e:73:74:b9:38:b3:62:c2:36:f7:b9:df:ac:28:44:
32:f8:52:66:8a:12:be:e6:ad:4f:be:84:93:50:68:f9:71:bb:
df:98:1f:1e:16:03:74:bb:87:09:8c:d7:ca:e3:77:19:68:95:
cc:ee:b1:84:5d:bb:df:d8:95:e2:61:8c:81:ec:be:8b:c6:2d:
5a:a6:c4:5e:49:7a:09:d0:7e:e2:e6:f4:8d:cc:9d:bf:b2:cf:
21:c8:ef:f0:57:e4:a0:2e:d8:59:08:b9:45:38:06:72:25:1c:
0e:16:4f:2b:32:0e:b8:bd:02:04:93:98:55:79:a0:19:c5:cc:
51:52:ae:ff:42:9a:75:4b:a5:72:da:37:52:67:e5:50:e2:24:
31:3c:fe:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 07:10:13 2025 by rpki-client