Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/1f7c98-18aa-47d8-ab41-1161edb9bf0e/1/lmr8FNShmnwsFo6yyB1WIrMBSes.mft
File: lmr8FNShmnwsFo6yyB1WIrMBSes.mft (raw, json)
Hash identifier: GPi4tKmRcigXKOek1OziX0YEhF8qxphaM/whwRvDPMg=
Subject key identifier: 26:57:74:73:BC:A0:C5:05:7C:93:22:3A:52:6F:D6:2C:80:19:5A:34
Authority key identifier: 96:6A:FC:14:D4:A1:9A:7C:2C:16:8E:B2:C8:1D:56:22:B3:01:49:EB
Certificate issuer: /CN=966afc14d4a19a7c2c168eb2c81d5622b30149eb
Certificate serial: 019A72938C8F38427AC67643FCA9933F85E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lmr8FNShmnwsFo6yyB1WIrMBSes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/1f7c98-18aa-47d8-ab41-1161edb9bf0e/1/lmr8FNShmnwsFo6yyB1WIrMBSes.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 11:01:03 +0000
Manifest this update: Tue 11 Nov 2025 11:01:03 +0000
Manifest next update: Wed 12 Nov 2025 11:01:03 +0000
Files and hashes: 1: YBabozhq7Bm__rh2KvKvZaWJJSk.roa (hash: ZpYTHURBPLv+zLOzTtEUmCp4scPYCX2Bazth3B2lfOY=)
2: lmr8FNShmnwsFo6yyB1WIrMBSes.crl (hash: UIBLUc6/WfkZDTZ6JrX5TH449SH3RnJ+yMS9TPvDQFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/1f7c98-18aa-47d8-ab41-1161edb9bf0e/1/lmr8FNShmnwsFo6yyB1WIrMBSes.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/1f7c98-18aa-47d8-ab41-1161edb9bf0e/1/lmr8FNShmnwsFo6yyB1WIrMBSes.mft
rsync://rpki.ripe.net/repository/DEFAULT/lmr8FNShmnwsFo6yyB1WIrMBSes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:8c:8f:38:42:7a:c6:76:43:fc:a9:93:3f:85:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=966afc14d4a19a7c2c168eb2c81d5622b30149eb
Validity
Not Before: Nov 11 11:01:03 2025 GMT
Not After : Nov 12 11:01:03 2025 GMT
Subject: CN=26577473bca0c5057c93223a526fd62c80195a34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:7b:0e:c4:be:7d:04:48:4a:d3:ac:9f:ba:51:
a7:f9:95:62:c8:95:85:50:33:73:d4:59:c6:51:4a:
8c:02:f1:e6:ac:20:07:42:86:8d:2c:28:20:5a:92:
92:08:17:8b:6b:91:51:ef:70:22:9e:52:87:42:69:
bd:7d:1a:6f:0e:e2:15:3f:de:62:b1:86:92:f5:31:
ae:bd:49:49:2e:29:94:2f:8a:4e:3a:81:ea:19:e5:
10:b5:a1:6f:70:3e:e4:b3:27:71:b3:9e:7d:e2:8e:
80:c2:4d:cc:86:b0:76:d1:fd:3a:50:26:43:e2:20:
29:52:19:4a:05:f3:1d:8b:86:4c:b1:9d:8c:fc:d6:
f5:88:6d:e8:75:59:0d:73:fb:58:da:bc:17:4f:d7:
8f:08:41:52:e0:ce:38:90:95:62:96:3a:99:49:c3:
50:1f:8e:a6:24:f7:f1:47:25:d2:69:b7:de:b2:f5:
c2:c2:f3:92:c8:19:e2:31:f6:ba:13:0c:53:00:e9:
a0:9e:cb:0d:5c:90:d0:23:e6:08:49:42:81:a6:71:
84:c9:01:6b:be:56:4c:81:bf:44:a5:4c:e0:2b:5f:
57:8d:eb:fe:7f:24:f7:d4:df:03:4f:d9:08:81:b8:
43:f7:39:8b:89:73:a9:b4:11:27:56:66:4c:30:ae:
f1:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:57:74:73:BC:A0:C5:05:7C:93:22:3A:52:6F:D6:2C:80:19:5A:34
X509v3 Authority Key Identifier:
keyid:96:6A:FC:14:D4:A1:9A:7C:2C:16:8E:B2:C8:1D:56:22:B3:01:49:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lmr8FNShmnwsFo6yyB1WIrMBSes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1f7c98-18aa-47d8-ab41-1161edb9bf0e/1/lmr8FNShmnwsFo6yyB1WIrMBSes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1f7c98-18aa-47d8-ab41-1161edb9bf0e/1/lmr8FNShmnwsFo6yyB1WIrMBSes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:aa:23:27:a2:52:68:6e:04:7c:1d:89:61:6b:bf:20:38:5a:
55:50:77:fc:48:68:75:03:6a:ad:f8:e4:70:8a:77:5f:d3:12:
fd:93:99:14:fd:ae:44:f8:31:eb:22:d3:0b:c7:0b:d9:40:c4:
12:a0:0a:6e:30:b0:92:b1:9c:1c:7f:7c:df:08:47:46:7c:8d:
73:27:95:00:00:53:4f:1b:ad:da:44:43:f6:df:ea:3a:ab:d8:
5d:88:0d:ba:d2:0f:64:d7:ce:2f:b6:43:d6:91:f5:67:e1:c5:
2b:da:0e:c6:e9:c3:48:3b:d3:f4:53:43:57:82:14:25:2f:b6:
57:f5:b2:ba:12:37:a0:87:71:2d:47:6e:05:95:58:8c:f5:18:
f4:7b:18:17:f6:8b:5f:d0:78:ac:94:71:2d:18:56:bf:c3:e2:
34:60:63:d5:71:08:81:4b:52:4e:10:3f:67:d7:02:fa:b6:11:
2f:44:6b:38:c8:a4:ec:78:6e:98:1d:16:f4:65:c8:9c:54:69:
29:b5:d8:1e:9b:00:c5:43:57:e2:eb:a3:01:54:27:b8:b0:ee:
5f:d0:69:4a:1f:17:39:34:d8:bf:8f:24:44:e0:5a:1d:61:da:
c9:96:b6:ac:74:72:4e:70:66:ed:de:f9:91:e6:ff:72:35:24:
b1:93:01:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyk4yPOEJ6xnZD/KmTP4XpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2NmFmYzE0ZDRhMTlhN2MyYzE2OGViMmM4MWQ1NjIyYjMw
MTQ5ZWIwHhcNMjUxMTExMTEwMTAzWhcNMjUxMTEyMTEwMTAzWjAzMTEwLwYDVQQD
EygyNjU3NzQ3M2JjYTBjNTA1N2M5MzIyM2E1MjZmZDYyYzgwMTk1YTM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjnsOxL59BEhK06yfulGn+ZViyJWF
UDNz1FnGUUqMAvHmrCAHQoaNLCggWpKSCBeLa5FR73AinlKHQmm9fRpvDuIVP95i
sYaS9TGuvUlJLimUL4pOOoHqGeUQtaFvcD7ksydxs5594o6Awk3MhrB20f06UCZD
4iApUhlKBfMdi4ZMsZ2M/Nb1iG3odVkNc/tY2rwXT9ePCEFS4M44kJViljqZScNQ
H46mJPfxRyXSabfesvXCwvOSyBniMfa6EwxTAOmgnssNXJDQI+YISUKBpnGEyQFr
vlZMgb9EpUzgK19Xjev+fyT31N8DT9kIgbhD9zmLiXOptBEnVmZMMK7xoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCZXdHO8oMUFfJMiOlJv1iyAGVo0MB8GA1UdIwQY
MBaAFJZq/BTUoZp8LBaOssgdViKzAUnrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbG1yOEZOU2htbndzRm82eXlCMVdJck1CU2VzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi8xZjdjOTgtMThhYS00N2Q4LWFiNDEt
MTE2MWVkYjliZjBlLzEvbG1yOEZOU2htbndzRm82eXlCMVdJck1CU2VzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi8xZjdjOTgtMThhYS00N2Q4LWFiNDEtMTE2MWVkYjliZjBl
LzEvbG1yOEZOU2htbndzRm82eXlCMVdJck1CU2VzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiKojJ6JS
aG4EfB2JYWu/IDhaVVB3/EhodQNqrfjkcIp3X9MS/ZOZFP2uRPgx6yLTC8cL2UDE
EqAKbjCwkrGcHH983whHRnyNcyeVAABTTxut2kRD9t/qOqvYXYgNutIPZNfOL7ZD
1pH1Z+HFK9oOxunDSDvT9FNDV4IUJS+2V/WyuhI3oIdxLUduBZVYjPUY9HsYF/aL
X9B4rJRxLRhWv8PiNGBj1XEIgUtSThA/Z9cC+rYRL0RrOMik7HhumB0W9GXInFRp
KbXYHpsAxUNX4uujAVQnuLDuX9BpSh8XOTTYv48kROBaHWHayZa2rHRyTnBm7d75
keb/cjUksZMBhg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 16:52:32 2025 by rpki-client