Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/323add-1d87-416a-bd05-1e9848cb1745/1/Lm0jW_0rt32YhrFMsQ3EnEIII1M.mft
File: Lm0jW_0rt32YhrFMsQ3EnEIII1M.mft (raw, json)
Hash identifier: 1PTzVF7ynNc2UPEQFjWVZkvXSWVTc3wRYF/hXK1a6lA=
Subject key identifier: D3:07:90:E1:76:3A:B5:12:8F:DA:75:13:6F:12:A5:EF:41:51:16:92
Authority key identifier: 2E:6D:23:5B:FD:2B:B7:7D:98:86:B1:4C:B1:0D:C4:9C:42:08:23:53
Certificate issuer: /CN=2e6d235bfd2bb77d9886b14cb10dc49c42082353
Certificate serial: 0199228CFBC6FC00F49AF981BEA6B821C14A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lm0jW_0rt32YhrFMsQ3EnEIII1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/323add-1d87-416a-bd05-1e9848cb1745/1/Lm0jW_0rt32YhrFMsQ3EnEIII1M.mft
Manifest number: 1673
Signing time: Sun 07 Sep 2025 05:01:28 +0000
Manifest this update: Sun 07 Sep 2025 05:01:28 +0000
Manifest next update: Mon 08 Sep 2025 05:01:28 +0000
Files and hashes: 1: 6fPKrr2WqJdenIvBOBD3KjEA0wk.roa (hash: i2OyGf183j1iELGCpTBdb4xd43I9V5TO+gNqwj8iJKU=)
2: Lm0jW_0rt32YhrFMsQ3EnEIII1M.crl (hash: NzIbdCTe9UAyTVnROSVeQn+uRAKrSHK3jcrKPbDccPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/323add-1d87-416a-bd05-1e9848cb1745/1/Lm0jW_0rt32YhrFMsQ3EnEIII1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/323add-1d87-416a-bd05-1e9848cb1745/1/Lm0jW_0rt32YhrFMsQ3EnEIII1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lm0jW_0rt32YhrFMsQ3EnEIII1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:fb:c6:fc:00:f4:9a:f9:81:be:a6:b8:21:c1:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6d235bfd2bb77d9886b14cb10dc49c42082353
Validity
Not Before: Sep 7 05:01:28 2025 GMT
Not After : Sep 8 05:01:28 2025 GMT
Subject: CN=d30790e1763ab5128fda75136f12a5ef41511692
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:3e:45:52:f3:84:fe:54:64:b6:bf:a7:cc:5c:
78:65:77:e5:8e:2f:1f:b3:41:08:a0:e2:aa:57:89:
52:51:d2:24:f1:17:94:d5:f8:4d:04:f6:cd:36:22:
df:9e:aa:e9:00:e0:55:25:2f:09:ef:c8:20:ce:11:
10:33:35:a0:c2:9b:37:51:c5:dd:42:25:52:f4:42:
76:96:c9:ca:21:48:aa:d9:20:f9:f2:c0:f6:a7:ab:
dd:73:9b:b3:37:2b:f8:bd:95:34:4e:fd:a0:6b:51:
47:82:f3:51:7e:eb:40:53:15:0c:00:40:70:96:88:
56:f1:24:83:cf:37:b1:68:a5:75:41:85:e2:55:d3:
0e:f0:d6:99:b3:67:34:a8:1d:22:4f:26:a1:e9:e5:
d8:a1:56:c9:85:81:91:c9:91:f9:e5:6c:3a:b3:bf:
d5:b1:09:62:61:31:b6:ed:98:2b:db:cf:50:c2:1f:
a8:75:a1:3a:52:1d:cc:c6:16:fa:44:65:9e:ec:c9:
b6:d2:ae:f2:88:1f:42:e6:c8:72:6e:2b:81:1b:45:
27:51:60:87:8b:35:26:66:02:9f:4b:44:3d:99:8b:
e8:c2:29:f7:97:8e:8b:cc:a3:66:88:a5:66:a2:11:
88:8a:97:5e:eb:6f:f3:04:7f:6c:2f:a9:a8:6e:c1:
55:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:07:90:E1:76:3A:B5:12:8F:DA:75:13:6F:12:A5:EF:41:51:16:92
X509v3 Authority Key Identifier:
keyid:2E:6D:23:5B:FD:2B:B7:7D:98:86:B1:4C:B1:0D:C4:9C:42:08:23:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lm0jW_0rt32YhrFMsQ3EnEIII1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/323add-1d87-416a-bd05-1e9848cb1745/1/Lm0jW_0rt32YhrFMsQ3EnEIII1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/323add-1d87-416a-bd05-1e9848cb1745/1/Lm0jW_0rt32YhrFMsQ3EnEIII1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:fc:6a:3c:f8:0d:02:ae:f0:93:a2:b6:31:19:10:fe:1d:4e:
d0:bd:f3:7d:d2:1c:00:6e:32:14:a0:b8:99:a5:a7:da:1d:20:
1a:ce:9d:73:1b:d1:29:41:4f:e9:41:bd:80:07:b8:5e:d7:cf:
a8:63:da:99:80:fc:ed:0e:62:3a:30:d6:4a:9b:4d:01:ab:5d:
08:16:59:14:6f:bd:ff:8a:1b:f6:c1:bd:fe:bb:e9:97:91:11:
8a:d8:d0:68:f1:20:99:d0:11:5c:ed:9a:77:a3:de:93:00:f6:
84:e4:75:6c:57:a7:c4:bd:89:55:2f:7e:a4:e6:3a:53:8a:16:
2a:d6:84:6f:e3:69:68:f6:65:9a:43:72:0b:7c:82:fd:2a:2e:
e8:e3:53:1c:5e:2b:c7:e5:83:81:94:71:6c:f8:6d:16:d3:44:
d4:10:9f:64:30:b4:8b:8d:33:fe:a7:74:78:55:ff:79:f6:e0:
fa:a2:c6:c7:95:b9:c5:93:93:98:69:d5:e7:86:07:c5:ad:15:
4d:d5:75:b0:11:f6:0a:8e:3d:b5:a3:26:04:ef:eb:e8:03:c4:
b8:20:d1:97:95:f4:fd:8e:1c:19:86:90:7e:a0:a9:4a:a1:6a:
0e:cc:73:d2:23:e6:93:f2:e7:6d:97:82:a5:94:32:03:a8:bf:
52:f9:17:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:08:24 2025 by rpki-client