Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/1f7c98-18aa-47d8-ab41-1161edb9bf0e/1/lmr8FNShmnwsFo6yyB1WIrMBSes.mft
File: lmr8FNShmnwsFo6yyB1WIrMBSes.mft (raw, json)
Hash identifier: V3Edg749QtNrAQDqO7dT6IL0x/SDxWZXIyRDl4yyxBY=
Subject key identifier: 85:90:EC:B5:FD:93:DE:0F:A5:43:14:08:3E:4E:2C:BF:A8:FC:48:85
Authority key identifier: 96:6A:FC:14:D4:A1:9A:7C:2C:16:8E:B2:C8:1D:56:22:B3:01:49:EB
Certificate issuer: /CN=966afc14d4a19a7c2c168eb2c81d5622b30149eb
Certificate serial: 0197684DFCCC45DE35FA277773DB137B6FBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lmr8FNShmnwsFo6yyB1WIrMBSes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/1f7c98-18aa-47d8-ab41-1161edb9bf0e/1/lmr8FNShmnwsFo6yyB1WIrMBSes.mft
Manifest number: 158B
Signing time: Fri 13 Jun 2025 08:00:30 +0000
Manifest this update: Fri 13 Jun 2025 08:00:30 +0000
Manifest next update: Sat 14 Jun 2025 08:00:30 +0000
Files and hashes: 1: YBabozhq7Bm__rh2KvKvZaWJJSk.roa (hash: ZpYTHURBPLv+zLOzTtEUmCp4scPYCX2Bazth3B2lfOY=)
2: lmr8FNShmnwsFo6yyB1WIrMBSes.crl (hash: yW5XTgoGUnKFH0OnnjIjYyDP26l29I41CerPgVz6t+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/1f7c98-18aa-47d8-ab41-1161edb9bf0e/1/lmr8FNShmnwsFo6yyB1WIrMBSes.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/1f7c98-18aa-47d8-ab41-1161edb9bf0e/1/lmr8FNShmnwsFo6yyB1WIrMBSes.mft
rsync://rpki.ripe.net/repository/DEFAULT/lmr8FNShmnwsFo6yyB1WIrMBSes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 08:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:4d:fc:cc:45:de:35:fa:27:77:73:db:13:7b:6f:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=966afc14d4a19a7c2c168eb2c81d5622b30149eb
Validity
Not Before: Jun 13 08:00:30 2025 GMT
Not After : Jun 14 08:00:30 2025 GMT
Subject: CN=8590ecb5fd93de0fa54314083e4e2cbfa8fc4885
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:15:b5:43:1c:ea:12:65:8e:83:ce:08:ee:0e:
82:57:4b:2f:d6:75:60:cc:43:22:6f:1c:80:b4:c4:
22:b6:e2:14:ca:79:a5:d1:5e:62:55:31:40:ed:ef:
b6:81:8f:b1:a8:1e:46:b3:b1:5b:5b:75:33:2b:02:
bb:b7:44:4e:43:25:2e:e9:75:17:7e:3e:e1:39:23:
4a:9e:8f:43:e4:5e:e0:df:54:c0:f4:cc:48:af:69:
93:9b:8e:20:98:d2:8c:b9:42:de:53:c7:b6:31:34:
58:e8:79:4a:db:80:cd:c7:fa:8d:e3:97:61:bf:0c:
85:74:2c:42:52:52:92:fb:2f:0d:9e:1e:c5:2d:5a:
a7:d0:ae:36:55:4a:1a:d3:40:aa:49:a4:d8:81:c8:
f2:97:05:26:a4:56:4f:0c:b9:55:36:aa:28:b2:65:
94:8d:53:05:90:d0:c7:ca:55:14:3e:a9:49:cf:74:
5f:c9:aa:55:fc:2f:35:4f:66:d0:49:b9:01:08:3b:
23:40:ac:ff:a0:2f:4e:8d:84:9f:42:f1:d8:87:02:
09:f0:2e:06:98:ec:88:73:7f:af:81:62:45:10:75:
65:d2:47:a5:cc:74:02:a0:79:a6:0c:18:76:43:bd:
08:aa:8b:4a:37:85:12:38:68:eb:dd:e3:0d:1a:d9:
95:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:90:EC:B5:FD:93:DE:0F:A5:43:14:08:3E:4E:2C:BF:A8:FC:48:85
X509v3 Authority Key Identifier:
keyid:96:6A:FC:14:D4:A1:9A:7C:2C:16:8E:B2:C8:1D:56:22:B3:01:49:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lmr8FNShmnwsFo6yyB1WIrMBSes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1f7c98-18aa-47d8-ab41-1161edb9bf0e/1/lmr8FNShmnwsFo6yyB1WIrMBSes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1f7c98-18aa-47d8-ab41-1161edb9bf0e/1/lmr8FNShmnwsFo6yyB1WIrMBSes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:60:e4:7a:c9:d9:ab:07:b7:cc:a9:f8:ef:21:a1:c6:0b:e9:
ed:85:ab:79:03:d6:8d:fa:4c:d8:6d:25:83:d1:73:fe:e9:8e:
e7:eb:89:7d:05:0c:f2:c9:a6:b7:c9:e5:00:37:cb:63:a6:dc:
a1:de:a3:9f:60:52:48:aa:f3:71:37:2d:8e:ba:25:ee:d4:29:
ed:0f:a3:ca:2c:fb:96:64:b1:77:81:7b:57:1d:ba:a6:6a:8f:
f5:45:b5:91:ad:90:f7:10:52:ce:fc:98:86:c1:69:25:28:4b:
97:cd:d4:25:99:a8:07:fe:e2:aa:90:69:80:70:15:27:5d:79:
62:56:b5:1c:4e:29:53:ee:ea:5b:50:8f:2e:dd:2a:d9:88:fb:
ff:31:53:29:77:e2:94:9c:38:09:cc:36:32:d1:22:1c:6c:a3:
45:7f:9a:45:c2:fa:29:3d:cd:8c:ac:ca:08:33:21:b9:3b:61:
05:5d:f2:90:31:5c:ca:13:d6:6a:0a:46:71:aa:20:fd:bc:69:
c3:58:57:d0:0e:0b:f4:11:eb:22:10:da:9f:7b:df:2a:27:43:
18:fa:04:aa:f1:d1:5c:72:66:d2:b1:18:1c:1b:60:b5:00:71:
f6:75:89:db:51:0f:20:32:c4:de:f4:ca:df:6f:45:92:2a:92:
80:f1:b2:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:29:47 2025 by rpki-client