Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/accde8-f46f-4ef9-94af-8dd81e4b3e33/1/LmszQT-qXl4dJ5oqJf-B2NFTJd8.mft
File: LmszQT-qXl4dJ5oqJf-B2NFTJd8.mft (raw, json)
Hash identifier: 1bWiR5Ojbvj+s3xBy/Cs2SnMvg9BA8sknyPCqRq5Uvs=
Subject key identifier: 4A:05:A2:3A:EA:67:99:45:D3:7F:D8:A8:46:EF:2E:8F:B4:0A:BB:E6
Authority key identifier: 2E:6B:33:41:3F:AA:5E:5E:1D:27:9A:2A:25:FF:81:D8:D1:53:25:DF
Certificate issuer: /CN=2e6b33413faa5e5e1d279a2a25ff81d8d15325df
Certificate serial: 019A7301987D8AB59DCE0958CD2F618BE1CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmszQT-qXl4dJ5oqJf-B2NFTJd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/accde8-f46f-4ef9-94af-8dd81e4b3e33/1/LmszQT-qXl4dJ5oqJf-B2NFTJd8.mft
Manifest number: 1722
Signing time: Tue 11 Nov 2025 13:01:15 +0000
Manifest this update: Tue 11 Nov 2025 13:01:15 +0000
Manifest next update: Wed 12 Nov 2025 13:01:15 +0000
Files and hashes: 1: 1-rQwqNKly6aenIYeWSDOecvE9Dg.roa (hash: xyKaPv0UlzvDAkK4ZPQkPqyXzd2d32Ec3cQVPGFT2Lk=)
2: 53x_LlMR9wDfhoH_h-dm_2o9cfc.roa (hash: hpGqRuP4r/d0ndxhvimQvb9wKXUShtDAOOkpu0Or3Uk=)
3: LmszQT-qXl4dJ5oqJf-B2NFTJd8.crl (hash: /v4nOCf/t9uSsGYkb//ckVIsGQj38hWH88EeYqisgBo=)
4: sCdHa8GDoglI_mdXJ5Cs8c0F3ts.roa (hash: MzLxzWRZS24YmZa+mNMBCsFOGmjiB2b/WusU+bbqWL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/accde8-f46f-4ef9-94af-8dd81e4b3e33/1/LmszQT-qXl4dJ5oqJf-B2NFTJd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/accde8-f46f-4ef9-94af-8dd81e4b3e33/1/LmszQT-qXl4dJ5oqJf-B2NFTJd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/LmszQT-qXl4dJ5oqJf-B2NFTJd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:98:7d:8a:b5:9d:ce:09:58:cd:2f:61:8b:e1:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6b33413faa5e5e1d279a2a25ff81d8d15325df
Validity
Not Before: Nov 11 13:01:15 2025 GMT
Not After : Nov 12 13:01:15 2025 GMT
Subject: CN=4a05a23aea679945d37fd8a846ef2e8fb40abbe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c7:98:88:83:71:2f:5b:4f:a5:9c:70:be:37:
82:10:07:51:4c:e6:23:26:16:c7:68:84:d4:4e:1a:
e1:7e:d5:67:fc:0f:3d:91:2e:33:42:a0:4f:62:24:
9c:88:a2:a1:0e:f7:ce:10:45:8e:6d:eb:a4:20:11:
fc:dc:82:2b:c9:da:51:9a:9f:59:d5:2f:61:8c:49:
d1:67:4c:fd:54:b9:c6:38:08:f0:fd:df:9f:5e:dd:
9b:d2:9a:4e:83:a2:f5:ab:10:e6:57:e1:55:c4:8c:
41:42:7c:ea:88:33:9c:7c:45:2d:86:2b:59:d0:49:
51:50:9b:1c:56:97:18:e2:c8:fe:50:90:a8:c8:e3:
a7:9e:1d:19:60:00:9c:62:ca:ff:35:32:00:bc:5d:
0e:dc:f0:02:61:86:1c:06:a7:03:d3:3e:5e:30:02:
e0:81:f1:7c:f7:67:26:9c:8b:14:15:8d:d8:23:db:
b5:47:67:ac:d9:79:76:b9:ca:16:39:2e:68:52:04:
7d:ca:40:39:7e:1f:9c:ac:d7:d6:d1:d3:fe:79:0d:
bd:40:d1:37:4e:12:30:ee:2b:53:78:e5:e9:a2:46:
8a:77:58:4d:0d:bd:1a:75:72:2f:b6:ee:ee:ed:a7:
7f:8e:81:43:d4:bd:64:07:a1:df:79:9b:fc:28:6a:
f6:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:05:A2:3A:EA:67:99:45:D3:7F:D8:A8:46:EF:2E:8F:B4:0A:BB:E6
X509v3 Authority Key Identifier:
keyid:2E:6B:33:41:3F:AA:5E:5E:1D:27:9A:2A:25:FF:81:D8:D1:53:25:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmszQT-qXl4dJ5oqJf-B2NFTJd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/accde8-f46f-4ef9-94af-8dd81e4b3e33/1/LmszQT-qXl4dJ5oqJf-B2NFTJd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/accde8-f46f-4ef9-94af-8dd81e4b3e33/1/LmszQT-qXl4dJ5oqJf-B2NFTJd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:9e:0c:6d:ee:df:82:f5:5d:7b:35:8c:b4:c8:1c:b4:53:de:
61:99:f0:53:97:6a:e8:8a:bb:20:6b:c6:e9:1b:23:fb:0d:28:
25:c0:28:29:53:42:0b:7a:9f:b7:a6:05:75:d2:96:0a:1c:b9:
a4:5d:80:ac:8f:7f:1d:1e:5d:c2:21:d5:48:2e:be:d6:7d:45:
3c:a2:f9:3e:23:91:90:55:ce:f7:a6:5e:ae:83:cb:d9:40:8b:
25:cc:48:19:b9:cc:52:87:65:39:cd:1a:42:e4:60:3e:5f:72:
9d:18:95:1e:ac:fe:14:9b:e9:65:73:25:cb:70:2a:03:30:a6:
9a:6f:da:d9:28:45:bf:f6:4a:02:4f:bf:b3:9f:1f:04:2a:44:
57:05:52:55:6f:ba:d9:68:48:89:4d:18:30:26:76:36:d8:7b:
24:d5:45:87:4f:2f:33:d9:de:90:ab:96:a5:21:ae:e6:92:12:
c8:f8:a0:9c:c6:bc:89:42:5f:50:94:e3:a3:56:96:51:39:97:
51:d5:11:20:4e:e7:93:f1:84:7f:e5:25:68:2f:e2:78:6b:c8:
5a:0a:f7:3a:d4:0f:8a:8f:cd:62:2a:55:e9:a6:f5:cc:8a:65:
0e:51:2f:a9:41:24:8e:58:4b:2e:85:06:3a:97:82:68:45:4f:
fa:5a:e1:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:36:55 2025 by rpki-client