Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/323add-1d87-416a-bd05-1e9848cb1745/1/Lm0jW_0rt32YhrFMsQ3EnEIII1M.mft
File: Lm0jW_0rt32YhrFMsQ3EnEIII1M.mft (raw, json)
Hash identifier: ztrGsmTiTB/h9KqF9Sah2gi7/aP5yyfCGDxjzQeTO5E=
Subject key identifier: 3C:A0:65:26:0B:1F:E1:F4:A5:06:7E:57:CB:28:71:9C:35:B0:EF:1A
Authority key identifier: 2E:6D:23:5B:FD:2B:B7:7D:98:86:B1:4C:B1:0D:C4:9C:42:08:23:53
Certificate issuer: /CN=2e6d235bfd2bb77d9886b14cb10dc49c42082353
Certificate serial: 01988DD941F98C207FD005746D96E4EFD3A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lm0jW_0rt32YhrFMsQ3EnEIII1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/323add-1d87-416a-bd05-1e9848cb1745/1/Lm0jW_0rt32YhrFMsQ3EnEIII1M.mft
Manifest number: 1626
Signing time: Sat 09 Aug 2025 08:01:22 +0000
Manifest this update: Sat 09 Aug 2025 08:01:22 +0000
Manifest next update: Sun 10 Aug 2025 08:01:22 +0000
Files and hashes: 1: 6fPKrr2WqJdenIvBOBD3KjEA0wk.roa (hash: i2OyGf183j1iELGCpTBdb4xd43I9V5TO+gNqwj8iJKU=)
2: Lm0jW_0rt32YhrFMsQ3EnEIII1M.crl (hash: hZuGGzpn3QjpI64CP93u+f+shYsOtHdP27g7V512JaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/323add-1d87-416a-bd05-1e9848cb1745/1/Lm0jW_0rt32YhrFMsQ3EnEIII1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/323add-1d87-416a-bd05-1e9848cb1745/1/Lm0jW_0rt32YhrFMsQ3EnEIII1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lm0jW_0rt32YhrFMsQ3EnEIII1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:d9:41:f9:8c:20:7f:d0:05:74:6d:96:e4:ef:d3:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6d235bfd2bb77d9886b14cb10dc49c42082353
Validity
Not Before: Aug 9 08:01:22 2025 GMT
Not After : Aug 10 08:01:22 2025 GMT
Subject: CN=3ca065260b1fe1f4a5067e57cb28719c35b0ef1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1c:17:f2:e8:c5:22:13:3a:11:6d:8b:f0:25:
02:af:c0:46:2a:e8:b1:96:bc:4c:2f:74:00:73:c3:
4f:45:31:42:82:3c:06:51:e6:6a:56:ea:f1:58:3b:
e8:39:07:4b:ca:7e:aa:dd:f4:4f:c1:00:e0:c9:31:
4a:e9:21:e7:a9:ea:b5:4e:86:5d:bf:e3:04:2e:82:
64:8b:5e:34:51:68:d8:92:7e:93:0d:e4:b3:c4:07:
44:a9:e8:bf:bb:bc:0d:4b:b6:05:ce:74:90:bf:24:
c7:c2:10:e8:52:fa:c3:fc:b5:60:c5:80:a6:76:c8:
91:d3:5f:86:d3:91:37:1f:29:2e:e6:9e:e8:46:87:
93:a4:b7:38:e5:e0:dd:6e:da:ea:ca:48:91:ac:5c:
61:d2:81:0c:c5:2b:b6:8f:b3:af:25:b0:09:0a:f6:
11:81:09:54:1c:e5:9e:cc:04:96:14:19:da:8d:ec:
36:6b:fb:f5:cd:63:a4:30:a6:cb:d9:85:0a:99:f7:
ea:43:fe:a8:b5:55:52:71:a0:e3:22:2c:9d:65:1a:
9b:fe:ce:85:73:8c:43:9f:b0:c1:5d:af:c9:86:65:
4f:06:20:9d:3e:98:da:54:1d:cd:9d:e0:da:ce:b6:
8f:ac:69:6b:15:a8:79:28:6f:84:fb:6e:57:f1:0d:
01:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:A0:65:26:0B:1F:E1:F4:A5:06:7E:57:CB:28:71:9C:35:B0:EF:1A
X509v3 Authority Key Identifier:
keyid:2E:6D:23:5B:FD:2B:B7:7D:98:86:B1:4C:B1:0D:C4:9C:42:08:23:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lm0jW_0rt32YhrFMsQ3EnEIII1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/323add-1d87-416a-bd05-1e9848cb1745/1/Lm0jW_0rt32YhrFMsQ3EnEIII1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/323add-1d87-416a-bd05-1e9848cb1745/1/Lm0jW_0rt32YhrFMsQ3EnEIII1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:7a:38:cd:94:e4:30:8c:de:7d:a6:e3:85:5c:fa:cd:b7:05:
df:78:67:09:d6:b2:b5:da:bf:a2:53:5b:c9:c1:45:86:10:32:
4a:8d:e4:c6:cd:28:a8:a1:50:cd:47:3f:63:4d:1e:bd:72:64:
da:2a:bd:ff:da:f1:cc:e4:f8:25:80:ca:51:dd:ee:98:11:a1:
ca:5d:9f:1a:cf:a7:41:a2:72:22:3f:86:6f:73:65:37:70:4d:
db:66:3f:1b:86:db:32:7f:91:e4:d4:49:35:13:ac:a8:15:6d:
33:36:97:d3:8b:f0:16:d4:22:30:df:93:eb:40:c9:f4:eb:9f:
01:d5:2c:c1:d3:b9:df:50:4e:fe:41:3e:28:2d:84:71:5b:d4:
01:f3:3b:1a:b8:69:97:7b:76:a3:50:ec:fb:a8:e0:b4:5a:20:
26:b1:7f:8d:05:85:8f:44:ff:00:ee:43:7c:b6:3f:b9:8b:47:
b8:37:93:1e:19:c5:f1:cd:b4:a7:2b:7f:2f:b5:d1:13:c4:49:
4e:03:db:8f:0a:9c:c8:e2:94:4a:49:c6:c5:5c:a4:37:95:cb:
3f:eb:3b:a0:1a:27:e6:51:5b:55:cf:9e:45:f1:89:ca:6c:81:
20:f2:d7:2f:cb:2b:f3:65:18:f6:bb:fb:00:e1:c6:9f:cd:4a:
6e:47:1c:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:19:30 2025 by rpki-client