Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/1f7c98-18aa-47d8-ab41-1161edb9bf0e/1/lmr8FNShmnwsFo6yyB1WIrMBSes.mft
File: lmr8FNShmnwsFo6yyB1WIrMBSes.mft (raw, json)
Hash identifier: LB/WXlM3Oo4OMGEbSohczVz4NXDljqLJzx+pxj7Sv/E=
Subject key identifier: C0:A6:6E:FB:66:08:11:26:24:1C:D2:8B:79:0F:C0:D7:34:40:42:45
Authority key identifier: 96:6A:FC:14:D4:A1:9A:7C:2C:16:8E:B2:C8:1D:56:22:B3:01:49:EB
Certificate issuer: /CN=966afc14d4a19a7c2c168eb2c81d5622b30149eb
Certificate serial: 0199228CAAE9FAC2B98579BEE02C0AAF11C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lmr8FNShmnwsFo6yyB1WIrMBSes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/1f7c98-18aa-47d8-ab41-1161edb9bf0e/1/lmr8FNShmnwsFo6yyB1WIrMBSes.mft
Manifest number: 1670
Signing time: Sun 07 Sep 2025 05:01:08 +0000
Manifest this update: Sun 07 Sep 2025 05:01:08 +0000
Manifest next update: Mon 08 Sep 2025 05:01:08 +0000
Files and hashes: 1: YBabozhq7Bm__rh2KvKvZaWJJSk.roa (hash: ZpYTHURBPLv+zLOzTtEUmCp4scPYCX2Bazth3B2lfOY=)
2: lmr8FNShmnwsFo6yyB1WIrMBSes.crl (hash: dOxQkismnJ2ZXKGOFDuZFktDO2tC85XiUUwQjWLygpM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/1f7c98-18aa-47d8-ab41-1161edb9bf0e/1/lmr8FNShmnwsFo6yyB1WIrMBSes.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/1f7c98-18aa-47d8-ab41-1161edb9bf0e/1/lmr8FNShmnwsFo6yyB1WIrMBSes.mft
rsync://rpki.ripe.net/repository/DEFAULT/lmr8FNShmnwsFo6yyB1WIrMBSes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:aa:e9:fa:c2:b9:85:79:be:e0:2c:0a:af:11:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=966afc14d4a19a7c2c168eb2c81d5622b30149eb
Validity
Not Before: Sep 7 05:01:08 2025 GMT
Not After : Sep 8 05:01:08 2025 GMT
Subject: CN=c0a66efb66081126241cd28b790fc0d734404245
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:43:aa:0e:de:81:92:0a:6c:26:b7:e4:78:d3:
b2:91:c2:1e:17:ed:4c:91:5c:9b:02:36:89:b0:f2:
ec:61:ee:32:78:61:ba:c7:0f:ee:ef:fe:fb:6a:b4:
e3:88:95:c2:a4:4a:1a:73:47:10:32:62:74:96:88:
ff:f5:5e:10:a4:9b:82:4b:65:83:c6:94:18:e8:70:
8c:90:0e:21:22:a3:0a:c7:61:27:a1:20:e2:14:2d:
e2:9d:5a:b2:a9:44:6e:b1:a5:d5:f6:95:04:2a:ec:
8d:1e:59:7e:06:24:5c:d1:33:32:ca:00:8c:1c:28:
50:60:b4:13:c3:50:17:a2:15:a3:c5:26:53:5f:dc:
b2:e3:fc:dc:00:b2:e7:e4:3c:b2:ec:20:d6:d7:f7:
b1:c7:e3:3c:1f:18:9f:d4:06:52:65:8d:26:6f:2a:
5c:e1:85:8d:09:7d:29:10:40:30:4a:a9:55:61:e2:
91:df:82:e7:b2:d1:2b:d2:0e:3b:43:07:8d:40:19:
bc:a1:2c:93:b5:d7:fa:8e:52:7f:c1:92:a8:c8:aa:
36:65:75:09:24:43:f8:58:cd:21:9b:3a:d6:dd:b3:
c6:d5:e8:10:d5:e1:eb:ec:a3:72:47:e0:d8:15:b8:
79:a3:5d:1e:c3:9f:51:ba:0f:d2:e5:e1:5f:b4:5d:
99:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:A6:6E:FB:66:08:11:26:24:1C:D2:8B:79:0F:C0:D7:34:40:42:45
X509v3 Authority Key Identifier:
keyid:96:6A:FC:14:D4:A1:9A:7C:2C:16:8E:B2:C8:1D:56:22:B3:01:49:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lmr8FNShmnwsFo6yyB1WIrMBSes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1f7c98-18aa-47d8-ab41-1161edb9bf0e/1/lmr8FNShmnwsFo6yyB1WIrMBSes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1f7c98-18aa-47d8-ab41-1161edb9bf0e/1/lmr8FNShmnwsFo6yyB1WIrMBSes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:bc:4f:c3:f8:9f:68:53:9d:a4:ab:41:3d:4b:3f:78:7d:65:
88:1a:0c:c9:04:e7:07:0d:88:82:6b:50:68:75:19:e4:3b:4a:
8b:f8:c1:f3:f9:0a:87:c7:a5:86:52:4c:9d:e5:2a:20:a7:a1:
56:2f:ef:6a:4b:83:09:33:ee:e7:f1:cc:04:3f:c4:7c:fb:11:
44:5c:48:47:61:4a:91:7c:6c:25:7e:39:6d:87:a2:9d:14:88:
01:1f:bb:88:33:34:39:9d:48:b2:95:92:07:20:d4:6d:8b:66:
55:d0:7e:12:9c:32:cc:42:3c:24:cd:d7:d9:a2:9e:2e:fb:8a:
e8:7f:cb:86:62:21:b2:50:13:b1:c1:3a:24:d7:50:af:9a:06:
5c:0c:52:bb:6a:19:aa:e4:ce:2f:db:71:52:01:9e:5c:89:53:
a5:07:07:7a:2e:78:a0:2f:6b:97:06:50:08:00:6e:17:d4:eb:
7a:02:28:6f:3d:6d:8f:08:81:a7:81:4b:d0:91:ec:c8:81:85:
8b:7d:d1:b7:61:e6:33:82:c4:a7:0d:b7:f2:19:dc:8c:b2:19:
7e:47:3a:20:f7:a1:b7:bb:7a:a4:34:54:5b:35:7f:20:92:c5:
3b:2f:eb:8c:7b:52:71:4d:3c:c2:49:4a:d8:3f:87:57:fa:09:
40:45:c9:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:42:32 2025 by rpki-client