Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/6a9b24-d4d3-40c1-8173-93b914701470/1/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.mft
File: LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.mft (raw, json)
Hash identifier: wiFkS+DiQfSPLt7TT8iVqgdPzdD/08Z5vFIOpheQnxk=
Subject key identifier: 83:5B:B6:2C:09:1A:CC:E2:D9:85:DF:DB:0A:D5:58:A4:9B:4B:FA:B1
Authority key identifier: 2E:62:76:13:62:54:83:0B:B4:90:7E:98:C2:58:E4:93:B4:2A:AA:3A
Certificate issuer: /CN=2e6276136254830bb4907e98c258e493b42aaa3a
Certificate serial: 019935003B284D4D1B5D6A6525C16FC5CC01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/6a9b24-d4d3-40c1-8173-93b914701470/1/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.mft
Manifest number: 15D1
Signing time: Wed 10 Sep 2025 19:00:31 +0000
Manifest this update: Wed 10 Sep 2025 19:00:31 +0000
Manifest next update: Thu 11 Sep 2025 19:00:31 +0000
Files and hashes: 1: LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.crl (hash: ce5OK2sXaVEoQdgJQPEo8/j5SVal620otR3bWuFdRVU=)
2: fNli-LiQ9awKyhQw-GNSvJ_42w0.roa (hash: L98lyb6k01PaEjUwasFWjyw8Arv6ILhrmJTj2kl/6vk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/6a9b24-d4d3-40c1-8173-93b914701470/1/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/6a9b24-d4d3-40c1-8173-93b914701470/1/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 19:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:00:3b:28:4d:4d:1b:5d:6a:65:25:c1:6f:c5:cc:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6276136254830bb4907e98c258e493b42aaa3a
Validity
Not Before: Sep 10 19:00:31 2025 GMT
Not After : Sep 11 19:00:31 2025 GMT
Subject: CN=835bb62c091acce2d985dfdb0ad558a49b4bfab1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:be:bb:bf:7f:b9:f6:c2:92:24:2a:8e:c6:ad:
3b:97:5d:00:9c:9f:79:02:f9:bf:76:99:16:f3:9a:
90:0f:4b:9f:30:2d:e1:54:4f:20:08:5f:02:56:c5:
76:d4:ad:b8:ec:d8:94:e4:b7:8d:e3:04:e3:1f:9d:
c2:df:09:3b:e2:5b:23:b7:00:65:ac:c7:78:2f:2c:
9a:e2:4d:ea:4a:eb:97:3f:9f:a3:4f:57:01:b6:fa:
85:08:e4:2c:ff:16:c0:73:f4:e8:9d:da:ae:97:cd:
e4:5d:62:20:22:f3:3c:50:f4:82:bf:b6:e4:f1:34:
31:69:08:ea:93:19:8a:fe:c0:1b:b7:78:75:db:cc:
3e:6f:46:b7:be:fb:ec:b3:3d:eb:e8:5e:1a:54:ec:
02:d4:cf:61:c0:ad:7d:0e:b9:ac:9f:f2:63:0b:ae:
69:7a:0b:d9:88:d4:d7:a3:39:7e:e5:9b:e5:13:93:
f9:62:08:a9:2a:f2:2b:ec:91:d3:dd:78:3e:db:c1:
4a:ac:0e:bf:0d:5a:d5:9a:a6:44:ca:1f:39:cf:a7:
b2:c3:98:00:6e:60:04:f8:2a:df:48:f5:14:fc:1d:
f4:49:c1:c2:1c:eb:03:09:08:de:4e:3c:b7:fe:8f:
c4:12:a6:36:1c:dc:2e:9e:b8:c8:3f:97:ef:39:8d:
2e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:5B:B6:2C:09:1A:CC:E2:D9:85:DF:DB:0A:D5:58:A4:9B:4B:FA:B1
X509v3 Authority Key Identifier:
keyid:2E:62:76:13:62:54:83:0B:B4:90:7E:98:C2:58:E4:93:B4:2A:AA:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/6a9b24-d4d3-40c1-8173-93b914701470/1/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/6a9b24-d4d3-40c1-8173-93b914701470/1/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:71:aa:60:7c:7d:67:dd:8d:b6:cf:50:aa:0a:5e:89:bc:60:
15:39:84:a2:12:e5:e7:9e:c9:89:b0:b1:9f:b9:70:98:02:de:
b8:42:bf:a2:6d:24:ab:cc:ac:f0:40:4b:12:a1:a7:3f:ce:f1:
02:d6:a5:56:85:ea:55:e5:09:56:cf:df:ba:8f:87:3f:15:7a:
89:2c:9c:6c:9f:ed:26:23:ac:6c:d6:f0:a7:56:f2:89:c4:fb:
f7:b7:ce:7e:80:7d:82:4c:71:a1:cc:a3:6a:65:a2:0b:96:df:
df:21:65:12:57:76:8e:63:c6:43:3c:e7:4f:a9:5a:5c:f0:37:
c9:b7:4a:76:66:e8:69:f8:a5:98:a4:15:34:9f:9d:1e:6c:7e:
50:46:45:9e:2a:59:1c:8d:6e:1d:1f:5a:f6:16:36:bf:57:07:
10:03:fe:ae:85:ee:ce:8f:f9:0e:45:ad:6b:20:d4:6f:3d:6d:
cb:73:a5:d6:98:fc:49:41:1d:a2:cb:ae:80:ed:69:17:ef:02:
66:f7:69:74:ac:6a:94:1f:a0:eb:16:a6:26:2a:df:10:78:b7:
1e:b4:aa:12:12:a3:a6:df:2f:41:51:b2:81:6b:4f:72:c5:39:
67:d6:9c:01:60:47:4b:12:be:05:ba:78:cb:1c:28:a9:0b:78:
23:bc:0e:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 23:00:47 2025 by rpki-client