Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft
File: Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft (raw, json)
Hash identifier: sAx+oXRblckTnp5hbCToGBgL7QEQd7/ou7RrJYx3k+U=
Subject key identifier: 44:9A:64:2B:67:7D:37:22:10:70:05:3B:4F:CA:50:27:A6:0D:7F:EB
Authority key identifier: 2E:67:F3:E4:E1:97:7A:BE:98:CC:B2:0C:A1:AF:A8:58:F1:E6:68:1C
Certificate issuer: /CN=2e67f3e4e1977abe98ccb20ca1afa858f1e6681c
Certificate serial: 01987D8A37325A0C3593D6B0676B1B0FFD7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lmfz5OGXer6YzLIMoa-oWPHmaBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft
Manifest number: 15F0
Signing time: Wed 06 Aug 2025 04:01:06 +0000
Manifest this update: Wed 06 Aug 2025 04:01:06 +0000
Manifest next update: Thu 07 Aug 2025 04:01:06 +0000
Files and hashes: 1: Lmfz5OGXer6YzLIMoa-oWPHmaBw.crl (hash: EIOEhUZ5YC3gKNeGFTKhf+NxtZbgSfP90fK97i8hCsE=)
2: M21MDqZhLpMUHwm9053y5X5hUu4.roa (hash: SYGPLAqkM4uXfmWggV4XyNi06NaAyivAORW2HClwZBk=)
3: nXQPLiO12M3Y_MzU88OuVYMZ5_U.roa (hash: T3shL01w4f9E1vbhrlXsqoTnaDV8nANG2xjOAb2Kx6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lmfz5OGXer6YzLIMoa-oWPHmaBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8a:37:32:5a:0c:35:93:d6:b0:67:6b:1b:0f:fd:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e67f3e4e1977abe98ccb20ca1afa858f1e6681c
Validity
Not Before: Aug 6 04:01:06 2025 GMT
Not After : Aug 7 04:01:06 2025 GMT
Subject: CN=449a642b677d37221070053b4fca5027a60d7feb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8e:6f:3b:7e:0a:1e:ca:f2:97:4d:cc:42:44:
d5:d9:83:6c:b6:34:4f:0c:ba:0c:2d:62:18:3d:57:
9e:cf:44:37:ad:0e:fc:38:5e:ed:45:4e:0b:69:9f:
7f:5b:de:8d:47:a2:29:47:fe:18:2b:3e:52:1e:8d:
48:da:64:44:2f:7f:65:1e:4a:16:3f:41:d9:40:87:
d5:7a:30:87:1c:28:79:10:af:ae:4f:11:f5:b3:9c:
88:60:b2:5e:c0:18:bb:83:6c:81:9d:67:16:64:1d:
2f:46:6c:dd:3e:bf:9c:12:db:41:8b:19:7f:3d:7a:
14:ae:56:6a:95:d1:bf:1f:01:ca:f2:1b:99:5f:64:
0c:db:e3:88:a5:80:cb:9c:1c:be:8a:ca:d1:11:bb:
43:b2:20:88:1d:1b:52:ac:3a:1b:99:ff:d7:b4:ba:
88:d3:3f:68:34:e9:0a:5a:eb:d2:68:82:3f:06:63:
f2:a0:fb:ce:e4:18:9d:b7:8a:5f:40:1a:ae:93:e2:
1d:d7:4a:ac:e3:ef:60:20:5f:d3:da:25:1a:b8:7c:
46:88:b1:46:19:4e:5e:58:15:11:38:55:99:bc:20:
cb:fb:97:92:75:53:dc:ec:a9:a4:03:ce:43:76:aa:
23:83:47:8d:1b:9d:96:5d:3b:7f:68:4e:78:71:20:
c3:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:9A:64:2B:67:7D:37:22:10:70:05:3B:4F:CA:50:27:A6:0D:7F:EB
X509v3 Authority Key Identifier:
keyid:2E:67:F3:E4:E1:97:7A:BE:98:CC:B2:0C:A1:AF:A8:58:F1:E6:68:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lmfz5OGXer6YzLIMoa-oWPHmaBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:57:c0:26:9e:d8:7d:22:a5:93:22:6c:f0:24:ed:fd:a8:b3:
06:3d:97:4c:64:b8:ec:3c:61:b7:7d:ca:31:be:f0:e2:d7:d4:
ca:f0:83:b6:f3:a9:ad:26:05:a1:0f:c2:c6:f0:20:62:9f:3e:
0c:32:e2:02:b2:ef:c4:03:f9:39:c6:06:4f:bb:6c:04:8f:f9:
80:81:5f:f2:10:1a:a0:1c:0a:cc:3d:b1:e2:f6:a9:ce:26:33:
3a:a2:eb:42:d4:12:14:4d:23:b1:de:ea:e3:2b:d1:7f:86:a4:
f0:e9:c2:e1:8d:10:8d:b8:77:98:42:d8:f6:76:54:de:84:7e:
59:28:04:0a:d5:51:b9:51:cd:da:87:75:41:51:f3:34:0c:ee:
93:24:ec:cb:a1:d0:ef:ad:d7:54:cf:69:e9:f1:72:00:41:c7:
b7:81:a0:8c:57:d5:ad:3d:61:87:7c:ce:d3:f7:4f:a4:77:f2:
6f:99:57:25:8f:13:99:8c:e4:a1:02:cb:13:6c:51:09:10:1f:
d4:12:7f:91:aa:85:27:b3:0b:70:1b:37:85:e2:29:15:dc:99:
c4:63:a0:90:e8:96:8b:e4:6b:e3:50:bc:72:10:0a:56:08:aa:
31:a8:f1:ea:83:03:f2:03:27:13:25:57:51:e0:17:79:19:07:
68:78:97:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh9ijcyWgw1k9awZ2sbD/19MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlNjdmM2U0ZTE5NzdhYmU5OGNjYjIwY2ExYWZhODU4ZjFl
NjY4MWMwHhcNMjUwODA2MDQwMTA2WhcNMjUwODA3MDQwMTA2WjAzMTEwLwYDVQQD
Eyg0NDlhNjQyYjY3N2QzNzIyMTA3MDA1M2I0ZmNhNTAyN2E2MGQ3ZmViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtI5vO34KHsryl03MQkTV2YNstjRP
DLoMLWIYPVeez0Q3rQ78OF7tRU4LaZ9/W96NR6IpR/4YKz5SHo1I2mREL39lHkoW
P0HZQIfVejCHHCh5EK+uTxH1s5yIYLJewBi7g2yBnWcWZB0vRmzdPr+cEttBixl/
PXoUrlZqldG/HwHK8huZX2QM2+OIpYDLnBy+isrREbtDsiCIHRtSrDobmf/XtLqI
0z9oNOkKWuvSaII/BmPyoPvO5Bidt4pfQBquk+Id10qs4+9gIF/T2iUauHxGiLFG
GU5eWBUROFWZvCDL+5eSdVPc7KmkA85Ddqojg0eNG52WXTt/aE54cSDDmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFESaZCtnfTciEHAFO0/KUCemDX/rMB8GA1UdIwQY
MBaAFC5n8+Thl3q+mMyyDKGvqFjx5mgcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTG1mejVPR1hlcjZZekxJTW9hLW9XUEhtYUJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8wNmJlOGYtYTI2NS00MjZhLWFhMGEt
ZTQ3OWM2YjlmZjJiLzEvTG1mejVPR1hlcjZZekxJTW9hLW9XUEhtYUJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi8wNmJlOGYtYTI2NS00MjZhLWFhMGEtZTQ3OWM2YjlmZjJi
LzEvTG1mejVPR1hlcjZZekxJTW9hLW9XUEhtYUJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIFfAJp7Y
fSKlkyJs8CTt/aizBj2XTGS47Dxht33KMb7w4tfUyvCDtvOprSYFoQ/CxvAgYp8+
DDLiArLvxAP5OcYGT7tsBI/5gIFf8hAaoBwKzD2x4vapziYzOqLrQtQSFE0jsd7q
4yvRf4ak8OnC4Y0Qjbh3mELY9nZU3oR+WSgECtVRuVHN2od1QVHzNAzukyTsy6HQ
763XVM9p6fFyAEHHt4GgjFfVrT1hh3zO0/dPpHfyb5lXJY8TmYzkoQLLE2xRCRAf
1BJ/kaqFJ7MLcBs3heIpFdyZxGOgkOiWi+Rr41C8chAKVgiqMajx6oMD8gMnEyVX
UeAXeRkHaHiXAg==
-----END CERTIFICATE-----
Generated at Wed Aug 6 10:07:09 2025 by rpki-client