Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/fa81f4-6600-4079-93c5-4897261ba46b/1/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.mft
File: lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.mft (raw, json)
Hash identifier: xAyD0T+ZgkJv+sl25fYpAUX4AL/GQf/e0uvAhw+nFMM=
Subject key identifier: C8:76:06:ED:57:CD:AD:02:57:6B:DD:84:AD:6C:20:19:98:9D:EC:5A
Authority key identifier: 96:65:C8:11:0D:0D:D8:6A:7E:BB:09:38:AA:32:E0:9D:1D:B1:22:F6
Certificate issuer: /CN=9665c8110d0dd86a7ebb0938aa32e09d1db122f6
Certificate serial: 019A71EEC14BDC37C6E64129BA2276DEE8B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/fa81f4-6600-4079-93c5-4897261ba46b/1/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.mft
Manifest number: 0FC4
Signing time: Tue 11 Nov 2025 08:01:03 +0000
Manifest this update: Tue 11 Nov 2025 08:01:03 +0000
Manifest next update: Wed 12 Nov 2025 08:01:03 +0000
Files and hashes: 1: hDr7XZdy7Zu__1e0bkoorUALVGI.roa (hash: Ah9s+DUMovObb0WEEgnVu12bFf+2vlp0mJLr4ANjGq0=)
2: lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.crl (hash: ymMX5eMx2njnB4FyKxdHPiPf5ft9TIOhxFenKxgDhqU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/fa81f4-6600-4079-93c5-4897261ba46b/1/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/fa81f4-6600-4079-93c5-4897261ba46b/1/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:c1:4b:dc:37:c6:e6:41:29:ba:22:76:de:e8:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9665c8110d0dd86a7ebb0938aa32e09d1db122f6
Validity
Not Before: Nov 11 08:01:03 2025 GMT
Not After : Nov 12 08:01:03 2025 GMT
Subject: CN=c87606ed57cdad02576bdd84ad6c2019989dec5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ab:2a:03:43:88:ee:42:1e:d5:c3:75:08:21:
71:a5:e1:73:19:8e:03:7e:72:59:90:58:a7:13:de:
ce:56:b7:e2:c8:ea:16:2d:58:20:b5:30:25:d0:32:
24:89:37:8f:9e:c6:c3:46:54:3b:59:f1:a4:0f:3e:
d7:38:19:f0:26:5d:50:12:18:ab:eb:16:bf:00:92:
fb:fa:f1:b6:d4:60:61:dd:f4:37:46:f4:82:b7:16:
0e:fa:3a:22:59:53:7e:4c:49:b2:b6:b0:00:49:5f:
cc:20:c5:95:3c:51:b5:ff:44:96:e5:cd:be:48:44:
88:59:d8:40:2d:b2:db:57:2e:ed:b7:f7:c2:9d:b5:
49:b8:7c:1f:e8:b2:52:a8:0b:1f:92:34:5b:cf:76:
b4:f5:c7:06:6d:9a:40:58:2a:d2:bf:20:5e:cf:ed:
ac:f6:80:ae:b3:3f:f5:cc:0d:f0:8c:fe:f3:89:bd:
28:61:33:87:d1:2c:cf:1d:53:1b:29:2f:c1:92:0b:
e0:27:11:f9:fe:29:95:55:ef:f7:6b:33:4d:f3:a7:
6b:b7:1f:6f:b6:07:33:f0:00:b0:3a:38:a0:64:e7:
66:fb:11:e5:3c:71:21:5f:a2:32:41:68:62:4b:14:
18:b3:85:dd:4e:8d:d6:86:7b:da:b6:9f:cb:1d:28:
4e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:76:06:ED:57:CD:AD:02:57:6B:DD:84:AD:6C:20:19:98:9D:EC:5A
X509v3 Authority Key Identifier:
keyid:96:65:C8:11:0D:0D:D8:6A:7E:BB:09:38:AA:32:E0:9D:1D:B1:22:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/fa81f4-6600-4079-93c5-4897261ba46b/1/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/fa81f4-6600-4079-93c5-4897261ba46b/1/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:ff:34:97:0e:ea:8e:6d:bc:37:2c:2d:2f:b1:a4:6e:db:d5:
7f:7e:80:2b:60:b1:38:cf:d2:6f:99:34:5f:11:20:e5:2c:42:
b9:c5:36:f4:69:4a:df:45:bf:af:9f:63:b4:a1:ee:65:fb:b4:
16:d0:ef:87:84:19:ff:60:f1:fc:25:b9:7a:64:10:6d:d8:66:
1f:15:65:50:4d:7f:1b:05:87:a8:dc:ed:6f:31:50:43:52:9e:
cc:d7:06:b3:ea:1c:07:9c:01:46:80:46:c5:63:7b:79:45:5d:
cb:ae:bc:bc:27:a6:ba:fc:c6:cb:f6:88:fa:34:da:54:58:aa:
2c:a7:94:f8:a0:16:6c:e8:70:ea:fa:d3:97:6c:68:a6:15:37:
eb:60:d0:b4:e2:17:25:cc:b8:cf:20:10:c9:32:eb:a6:ca:f9:
21:b6:84:df:48:69:6c:b8:72:df:67:e8:55:1f:65:9f:c6:10:
ee:59:09:0f:ed:87:27:63:09:a1:4e:38:92:5c:a0:5b:ed:9e:
5a:bc:52:b1:e1:3e:e9:c0:75:7b:e4:2a:37:6c:01:9b:40:8b:
45:6f:5f:d2:21:81:b0:ca:de:ad:e3:71:a0:5a:eb:e9:f7:2e:
c4:26:65:e9:fc:15:7d:9a:10:cb:7a:11:d6:83:c8:27:ed:b1:
19:ac:a8:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:17:34 2025 by rpki-client