Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft
File: Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft (raw, json)
Hash identifier: y0QvZeHnEUFl5cfbuxFYLTrP25PhA+Yudkub907OoNI=
Subject key identifier: 0D:7B:68:D8:80:C8:D6:00:14:ED:BE:9E:CC:2E:D9:81:32:11:24:F1
Authority key identifier: 2E:67:F3:E4:E1:97:7A:BE:98:CC:B2:0C:A1:AF:A8:58:F1:E6:68:1C
Certificate issuer: /CN=2e67f3e4e1977abe98ccb20ca1afa858f1e6681c
Certificate serial: 019A4EF4A534E4AD1995BBBEC65864231F9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lmfz5OGXer6YzLIMoa-oWPHmaBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft
Manifest number: 16E1
Signing time: Tue 04 Nov 2025 13:00:47 +0000
Manifest this update: Tue 04 Nov 2025 13:00:47 +0000
Manifest next update: Wed 05 Nov 2025 13:00:47 +0000
Files and hashes: 1: Lmfz5OGXer6YzLIMoa-oWPHmaBw.crl (hash: fuKJGIII3Dugarb2kZMw14OFb9ui84qte34rHrhU8uc=)
2: M21MDqZhLpMUHwm9053y5X5hUu4.roa (hash: SYGPLAqkM4uXfmWggV4XyNi06NaAyivAORW2HClwZBk=)
3: nXQPLiO12M3Y_MzU88OuVYMZ5_U.roa (hash: T3shL01w4f9E1vbhrlXsqoTnaDV8nANG2xjOAb2Kx6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lmfz5OGXer6YzLIMoa-oWPHmaBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:a5:34:e4:ad:19:95:bb:be:c6:58:64:23:1f:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e67f3e4e1977abe98ccb20ca1afa858f1e6681c
Validity
Not Before: Nov 4 13:00:47 2025 GMT
Not After : Nov 5 13:00:47 2025 GMT
Subject: CN=0d7b68d880c8d60014edbe9ecc2ed981321124f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:c4:93:32:9f:03:58:b9:e8:63:04:f6:70:d1:
6b:43:22:a8:c8:82:16:c4:6b:92:30:50:94:f3:53:
f6:07:7e:00:61:a3:ad:58:97:26:2a:65:bb:b5:c0:
b9:61:89:e6:22:a2:4f:31:74:10:e3:00:03:d3:d5:
7d:0d:ab:b2:9d:33:02:77:4a:cc:16:7f:64:eb:84:
d8:2b:dd:26:9c:a2:10:21:d4:e9:e9:03:2d:9b:d9:
86:0f:f8:00:15:8f:2d:fd:f0:28:24:38:aa:5d:6c:
31:26:ab:5d:5c:bf:ab:9b:3b:a6:42:be:a7:61:40:
57:a5:32:4e:00:7a:95:72:c1:83:a2:2d:52:5f:f7:
97:21:ef:c7:ad:77:b4:d3:25:85:6b:47:12:3a:90:
31:d2:dd:bf:8c:df:8a:c7:36:8b:8e:c2:d3:84:d5:
fa:f5:47:7f:f4:a3:9e:f3:0c:9f:ca:45:81:cc:a8:
b3:02:e9:f5:79:fc:75:08:0f:96:92:d9:92:4e:32:
0d:c9:b2:5b:97:10:6b:bf:e8:d7:a5:68:97:39:ea:
27:7a:8d:9b:c1:55:cd:d3:89:f5:98:d1:0f:64:28:
36:2a:23:4c:9e:e4:72:db:7c:3f:d1:97:5c:63:eb:
2b:94:2f:48:26:61:fd:99:af:ca:1d:8e:4d:2b:e1:
84:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:7B:68:D8:80:C8:D6:00:14:ED:BE:9E:CC:2E:D9:81:32:11:24:F1
X509v3 Authority Key Identifier:
keyid:2E:67:F3:E4:E1:97:7A:BE:98:CC:B2:0C:A1:AF:A8:58:F1:E6:68:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lmfz5OGXer6YzLIMoa-oWPHmaBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:79:4f:54:05:02:99:e2:56:4e:84:ce:a0:d8:91:bb:2d:3d:
62:3a:94:36:ef:fb:54:4e:6d:d7:65:3b:94:bd:22:ff:9a:16:
c1:0f:3f:48:4a:35:53:56:32:8d:a6:55:03:df:03:5f:34:8a:
e8:36:a9:41:f9:4e:8a:ac:52:a6:7d:8b:14:f8:5c:15:77:b1:
cf:bf:5a:4a:23:2b:5a:fd:e4:9a:ef:94:b2:6e:8d:22:c0:3d:
fb:8d:80:65:df:ee:18:1f:6b:c1:e3:b6:46:e4:7a:78:83:cd:
4d:ad:d7:ef:a7:4b:4a:8d:e9:65:b5:a5:7c:37:9f:12:90:4b:
98:bc:a8:6a:ac:06:e0:f1:c1:4a:04:1a:c2:ae:01:27:ee:21:
0b:cb:c5:70:06:a2:34:17:36:e8:83:95:01:d0:04:aa:1a:14:
0b:d9:3b:47:08:e2:d0:5e:f3:c0:b5:79:f8:c8:ab:39:70:b2:
61:3e:e8:51:ed:48:b6:06:9e:e2:b8:1c:c6:2f:24:66:37:ec:
82:a5:a5:8b:75:9f:3d:77:08:98:46:30:e0:b6:09:6a:81:e5:
39:b7:a7:c0:a5:12:4b:79:1c:1e:38:d6:6b:ad:1a:42:40:17:
7d:4f:fb:0e:c7:2f:7b:59:55:6d:4e:b7:96:e9:44:b5:14:b5:
81:a3:16:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:40:51 2025 by rpki-client