Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/fa81f4-6600-4079-93c5-4897261ba46b/1/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.mft
File: lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.mft (raw, json)
Hash identifier: XZIm9ZPPJLSufJ47tlrauKSuXhuKrZL7Z00VXvnKRXg=
Subject key identifier: 51:35:AB:54:DB:0E:C7:16:4C:D4:85:6C:B9:99:AC:6D:9D:6A:00:BB
Authority key identifier: 96:65:C8:11:0D:0D:D8:6A:7E:BB:09:38:AA:32:E0:9D:1D:B1:22:F6
Certificate issuer: /CN=9665c8110d0dd86a7ebb0938aa32e09d1db122f6
Certificate serial: 019921E7E43F98D81C5CDE83D259DDAD7B1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/fa81f4-6600-4079-93c5-4897261ba46b/1/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.mft
Manifest number: 0F16
Signing time: Sun 07 Sep 2025 02:01:09 +0000
Manifest this update: Sun 07 Sep 2025 02:01:09 +0000
Manifest next update: Mon 08 Sep 2025 02:01:09 +0000
Files and hashes: 1: hDr7XZdy7Zu__1e0bkoorUALVGI.roa (hash: Ah9s+DUMovObb0WEEgnVu12bFf+2vlp0mJLr4ANjGq0=)
2: lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.crl (hash: 5ADYbr3OKDGrpA3Pr/rkZ2ZmYqWBlFM9Sd2osC5Fx9g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/fa81f4-6600-4079-93c5-4897261ba46b/1/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/fa81f4-6600-4079-93c5-4897261ba46b/1/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:e4:3f:98:d8:1c:5c:de:83:d2:59:dd:ad:7b:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9665c8110d0dd86a7ebb0938aa32e09d1db122f6
Validity
Not Before: Sep 7 02:01:09 2025 GMT
Not After : Sep 8 02:01:09 2025 GMT
Subject: CN=5135ab54db0ec7164cd4856cb999ac6d9d6a00bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:34:e9:02:97:cd:00:bc:62:43:f9:46:b1:f6:
ab:3b:ba:8a:09:37:11:34:92:9c:66:ff:be:a5:7e:
54:08:65:31:d5:fd:4f:a9:ac:a4:21:f2:35:cf:79:
71:ca:85:4b:41:1b:f7:a4:c4:9b:35:e2:09:77:3d:
9a:a3:31:d7:78:85:a4:9b:be:1d:33:c9:d8:9a:68:
9c:fd:e2:ec:1b:c1:bb:ce:41:80:d4:0a:7d:83:77:
1c:8d:73:06:4c:4b:c0:9c:c3:80:fe:72:c3:b9:24:
0f:16:c5:56:58:d4:cb:5e:3a:c7:74:70:27:aa:87:
6e:04:89:50:b8:8f:97:56:09:8c:3b:dd:5b:16:1b:
74:69:a9:aa:60:e4:40:48:ec:e7:c7:1c:27:8d:fc:
56:7f:ef:94:b2:a4:de:0a:b3:59:45:e8:16:53:f7:
31:cd:84:b8:cc:d8:61:2d:53:c6:58:ee:ec:de:77:
3c:86:a3:d5:e8:a9:ae:42:38:4e:04:1c:7b:da:a9:
f0:0a:f1:1f:99:30:f9:f2:9e:ef:74:2b:5b:60:cd:
9b:d6:64:48:44:42:f6:78:45:41:57:ef:ee:3d:15:
ee:b4:2d:34:7a:ed:3f:09:44:f8:ec:3b:26:63:c5:
d5:4a:34:d5:50:18:51:a4:03:7d:13:a4:ca:b3:43:
99:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:35:AB:54:DB:0E:C7:16:4C:D4:85:6C:B9:99:AC:6D:9D:6A:00:BB
X509v3 Authority Key Identifier:
keyid:96:65:C8:11:0D:0D:D8:6A:7E:BB:09:38:AA:32:E0:9D:1D:B1:22:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/fa81f4-6600-4079-93c5-4897261ba46b/1/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/fa81f4-6600-4079-93c5-4897261ba46b/1/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:55:6b:43:28:ce:54:8a:09:24:84:63:14:4c:df:a4:b8:d7:
06:f3:47:ed:d1:d4:1b:54:d8:05:ad:50:e6:d2:e6:49:08:7d:
66:d4:5b:34:5f:37:4a:8c:a6:c6:bb:e9:e2:5d:82:1c:c4:7b:
3d:b0:ae:d7:63:b5:a8:ac:04:7c:2d:18:71:78:ec:da:9e:9b:
81:4b:4e:e4:4b:c8:50:88:cb:89:a6:64:12:31:5a:45:ee:79:
14:e0:12:d1:67:f7:f1:c3:26:df:2e:5f:bf:06:ec:0f:df:ef:
3d:55:54:6b:e5:64:34:37:17:0c:77:e4:05:0b:7b:4c:9f:49:
f0:69:30:9c:d2:1a:af:70:5b:25:b6:1f:14:59:33:a7:bc:2b:
e1:eb:0d:79:e7:3e:04:1e:b4:d1:1f:f0:6a:40:30:a7:a6:8d:
d9:1a:62:ec:65:d1:02:01:7c:9f:46:26:c3:60:44:65:3a:83:
30:0a:51:6a:07:c8:3a:f1:79:39:e9:1b:c1:c7:dc:57:bd:c9:
5c:20:2b:12:c2:9e:f3:b8:ae:2d:65:6b:2a:98:6b:aa:b2:a7:
4c:5e:59:3b:fd:ca:89:15:7d:3d:cf:aa:80:a2:5b:30:8b:d2:
b5:4c:31:87:70:c2:b8:e8:3f:4d:7e:88:c6:32:24:c2:c1:e0:
fe:0f:00:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkh5+Q/mNgcXN6D0lndrXsfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2NjVjODExMGQwZGQ4NmE3ZWJiMDkzOGFhMzJlMDlkMWRi
MTIyZjYwHhcNMjUwOTA3MDIwMTA5WhcNMjUwOTA4MDIwMTA5WjAzMTEwLwYDVQQD
Eyg1MTM1YWI1NGRiMGVjNzE2NGNkNDg1NmNiOTk5YWM2ZDlkNmEwMGJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTTpApfNALxiQ/lGsfarO7qKCTcR
NJKcZv++pX5UCGUx1f1PqaykIfI1z3lxyoVLQRv3pMSbNeIJdz2aozHXeIWkm74d
M8nYmmic/eLsG8G7zkGA1Ap9g3ccjXMGTEvAnMOA/nLDuSQPFsVWWNTLXjrHdHAn
qoduBIlQuI+XVgmMO91bFht0aamqYORASOznxxwnjfxWf++UsqTeCrNZRegWU/cx
zYS4zNhhLVPGWO7s3nc8hqPV6KmuQjhOBBx72qnwCvEfmTD58p7vdCtbYM2b1mRI
REL2eEVBV+/uPRXutC00eu0/CUT47DsmY8XVSjTVUBhRpAN9E6TKs0OZDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFE1q1TbDscWTNSFbLmZrG2dagC7MB8GA1UdIwQY
MBaAFJZlyBENDdhqfrsJOKoy4J0dsSL2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbG1YSUVRME4yR3AtdXdrNHFqTGduUjJ4SXZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9mYTgxZjQtNjYwMC00MDc5LTkzYzUt
NDg5NzI2MWJhNDZiLzEvbG1YSUVRME4yR3AtdXdrNHFqTGduUjJ4SXZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy9mYTgxZjQtNjYwMC00MDc5LTkzYzUtNDg5NzI2MWJhNDZi
LzEvbG1YSUVRME4yR3AtdXdrNHFqTGduUjJ4SXZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaVVrQyjO
VIoJJIRjFEzfpLjXBvNH7dHUG1TYBa1Q5tLmSQh9ZtRbNF83Soymxrvp4l2CHMR7
PbCu12O1qKwEfC0YcXjs2p6bgUtO5EvIUIjLiaZkEjFaRe55FOAS0Wf38cMm3y5f
vwbsD9/vPVVUa+VkNDcXDHfkBQt7TJ9J8GkwnNIar3BbJbYfFFkzp7wr4esNeec+
BB600R/wakAwp6aN2Rpi7GXRAgF8n0Ymw2BEZTqDMApRagfIOvF5OekbwcfcV73J
XCArEsKe87iuLWVrKphrqrKnTF5ZO/3KiRV9Pc+qgKJbMIvStUwxh3DCuOg/TX6I
xjIkwsHg/g8AZg==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:35:53 2025 by rpki-client