
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/LMJf8ykY8LSTBiWdSDr7njgaORU.mft
File: LMJf8ykY8LSTBiWdSDr7njgaORU.mft (raw, json)
Hash identifier: e3xq19kwNhLxHjxrI//mjhk5VWI5jydQPD468AnHxBU=
Subject key identifier: 63:4A:C7:17:DD:E6:8B:88:7B:01:44:8D:9C:F4:1A:65:64:A2:15:47
Authority key identifier: 2C:C2:5F:F3:29:18:F0:B4:93:06:25:9D:48:3A:FB:9E:38:1A:39:15
Certificate issuer: /CN=2cc25ff32918f0b49306259d483afb9e381a3915
Certificate serial: 019A1EAE1C7DE4BA2705C292D805AF6A0ADA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LMJf8ykY8LSTBiWdSDr7njgaORU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/LMJf8ykY8LSTBiWdSDr7njgaORU.mft
Manifest number: 16FE
Signing time: Sun 26 Oct 2025 04:01:58 +0000
Manifest this update: Sun 26 Oct 2025 04:01:58 +0000
Manifest next update: Mon 27 Oct 2025 04:01:58 +0000
Files and hashes: 1: 5SBRKvoUR77xMW-RFvy5_fTtMLs.roa (hash: cAg8Pd/EdFW/XOWvfVIMShqz0a9B/X838ZxVv7gFhww=)
2: Hu3G8484fKZTgdfl16c2pwBVLzw.roa (hash: 3SfpQQtf4mcFv0Cl8RORRLy8kXw31wWhyAgb5576Kg0=)
3: LMJf8ykY8LSTBiWdSDr7njgaORU.crl (hash: 9w+riAx+YQPKyTvOCIT9hTzRUESxmxkabCcm+uQ37BA=)
4: hnVCR69RVtD6DOQtKUfA66di3v8.roa (hash: tMJ65Uy32W65OI2kXkCrStjDFzn3a6wfoxc74YD8CGM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/LMJf8ykY8LSTBiWdSDr7njgaORU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/LMJf8ykY8LSTBiWdSDr7njgaORU.mft
rsync://rpki.ripe.net/repository/DEFAULT/LMJf8ykY8LSTBiWdSDr7njgaORU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 03:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1e:ae:1c:7d:e4:ba:27:05:c2:92:d8:05:af:6a:0a:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cc25ff32918f0b49306259d483afb9e381a3915
Validity
Not Before: Oct 26 04:01:58 2025 GMT
Not After : Oct 27 04:01:58 2025 GMT
Subject: CN=634ac717dde68b887b01448d9cf41a6564a21547
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:32:dd:e5:ca:13:f2:e6:63:52:7a:94:c1:ce:
ee:20:f9:75:a1:11:5c:dd:a1:28:3c:5c:16:da:f1:
ff:cd:d0:3b:f3:b8:ec:99:d7:91:c1:f5:8e:c9:b6:
1e:38:67:a3:f5:ec:e0:89:94:57:67:5c:14:32:d7:
34:d4:c6:31:4e:2e:30:99:98:5b:a6:71:92:f5:e6:
af:ef:6e:c2:73:e2:e2:34:2a:18:23:23:41:50:85:
f2:a3:8b:bb:28:d8:d0:c0:e1:1b:3d:77:4f:60:d8:
15:85:1c:17:96:a5:2e:38:ec:86:c1:2f:57:4d:ac:
94:63:2a:a8:f2:7c:0d:8b:37:55:36:20:86:6a:4f:
1f:27:98:ce:bc:2c:b2:67:07:ea:0c:99:5f:ca:97:
b3:86:e8:90:4f:ec:b4:ac:71:a3:2d:ed:73:a0:77:
ed:ef:0d:6a:8b:91:69:22:57:c1:0a:3a:f7:4e:c6:
71:7e:e6:41:78:97:d1:ba:ae:15:03:93:8d:ab:fd:
3c:c2:52:83:1d:cf:f6:7d:3f:2e:53:64:2d:dd:d8:
5d:aa:e7:cc:bf:fe:10:3d:77:5b:e0:94:78:88:7b:
5b:66:31:d6:fc:15:67:9b:c6:00:6c:5c:da:57:d3:
2e:d7:af:84:7f:12:67:70:22:38:55:ce:10:7b:75:
77:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:4A:C7:17:DD:E6:8B:88:7B:01:44:8D:9C:F4:1A:65:64:A2:15:47
X509v3 Authority Key Identifier:
keyid:2C:C2:5F:F3:29:18:F0:B4:93:06:25:9D:48:3A:FB:9E:38:1A:39:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LMJf8ykY8LSTBiWdSDr7njgaORU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/LMJf8ykY8LSTBiWdSDr7njgaORU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/LMJf8ykY8LSTBiWdSDr7njgaORU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:8d:48:cb:eb:19:c3:d2:21:26:a5:69:23:e7:4c:53:3d:a1:
ff:1e:01:dc:3f:23:d9:88:da:76:03:5b:a5:70:09:f7:15:05:
df:87:ee:34:59:50:32:2b:9f:39:84:a1:9f:46:d1:2e:52:78:
5a:79:fb:2d:9e:e8:e7:58:c2:f7:ce:b2:c4:85:97:18:7b:66:
14:d8:b8:a9:f1:4e:25:71:64:56:cb:b9:54:37:a1:a6:32:98:
77:5f:8f:b3:d8:10:93:d3:89:19:98:23:dd:ef:18:66:00:7e:
32:5d:2c:80:12:2a:9f:23:21:f7:b4:e9:c8:15:46:12:10:a7:
17:95:e0:e4:2c:7b:2d:84:31:1d:18:75:bf:70:0e:be:d6:ff:
4e:2d:18:9f:81:6a:67:b5:f5:28:8c:02:36:e1:1a:f3:6c:25:
d2:37:ce:da:5f:35:31:f7:f8:c6:0f:7e:00:6a:0d:a1:a8:c9:
74:24:9e:fd:eb:87:6c:98:0a:25:9f:ac:cb:27:ce:65:b4:40:
02:56:df:a3:2c:fb:6d:21:59:79:e7:d6:3c:dd:7e:46:87:38:
e6:7a:64:35:7c:be:f6:58:1f:20:09:98:f5:40:7a:4e:58:9e:
43:2a:a8:1c:e1:f5:c1:12:02:af:3a:c7:6d:ea:47:8f:b4:e4:
dd:00:16:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 11:15:40 2025 by rpki-client