Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/1f7c98-18aa-47d8-ab41-1161edb9bf0e/1/lmr8FNShmnwsFo6yyB1WIrMBSes.mft
File: lmr8FNShmnwsFo6yyB1WIrMBSes.mft (raw, json)
Hash identifier: rD1Epzmjp37tlQqb1GFwNfen9qiKu2RAv4Vv+42TUlU=
Subject key identifier: 8B:1A:DD:AA:4F:0A:A1:01:EF:37:38:96:2B:4B:D4:A2:0F:68:40:48
Authority key identifier: 96:6A:FC:14:D4:A1:9A:7C:2C:16:8E:B2:C8:1D:56:22:B3:01:49:EB
Certificate issuer: /CN=966afc14d4a19a7c2c168eb2c81d5622b30149eb
Certificate serial: 01987E667481FCC32A49E62B8A01E295AE0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lmr8FNShmnwsFo6yyB1WIrMBSes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/1f7c98-18aa-47d8-ab41-1161edb9bf0e/1/lmr8FNShmnwsFo6yyB1WIrMBSes.mft
Manifest number: 161B
Signing time: Wed 06 Aug 2025 08:01:40 +0000
Manifest this update: Wed 06 Aug 2025 08:01:40 +0000
Manifest next update: Thu 07 Aug 2025 08:01:40 +0000
Files and hashes: 1: YBabozhq7Bm__rh2KvKvZaWJJSk.roa (hash: ZpYTHURBPLv+zLOzTtEUmCp4scPYCX2Bazth3B2lfOY=)
2: lmr8FNShmnwsFo6yyB1WIrMBSes.crl (hash: gEtOQwMNsK/Gxc/Ze/uIUuyFQ+hHxeYpRgEGL8rs+QM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/1f7c98-18aa-47d8-ab41-1161edb9bf0e/1/lmr8FNShmnwsFo6yyB1WIrMBSes.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/1f7c98-18aa-47d8-ab41-1161edb9bf0e/1/lmr8FNShmnwsFo6yyB1WIrMBSes.mft
rsync://rpki.ripe.net/repository/DEFAULT/lmr8FNShmnwsFo6yyB1WIrMBSes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:66:74:81:fc:c3:2a:49:e6:2b:8a:01:e2:95:ae:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=966afc14d4a19a7c2c168eb2c81d5622b30149eb
Validity
Not Before: Aug 6 08:01:40 2025 GMT
Not After : Aug 7 08:01:40 2025 GMT
Subject: CN=8b1addaa4f0aa101ef3738962b4bd4a20f684048
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:fe:a9:d7:d8:66:9d:05:02:5c:9b:c6:c3:41:
c5:50:e0:81:d0:13:bd:6d:e4:40:a2:78:f6:32:e1:
64:5f:6e:e2:c1:0a:62:74:e7:78:a7:7b:c6:33:dd:
b8:38:6b:05:3d:ad:82:58:2c:65:b6:19:d5:85:b4:
a7:2a:cf:ff:f3:75:2c:cf:65:18:95:58:2c:f4:18:
36:1b:0b:60:75:d3:64:cb:08:9d:99:5e:a7:c1:19:
b4:63:af:81:f2:5a:a4:b0:f3:e6:45:01:01:7e:af:
9b:c9:73:be:88:1e:25:1e:23:c8:74:24:a8:2c:f3:
29:30:fe:7f:53:c1:9c:c1:c9:38:86:62:3e:41:9d:
96:3e:1a:7e:53:d2:1d:11:f7:94:9b:13:00:9f:26:
2a:9c:e1:a7:48:2e:f0:3e:62:56:0f:9c:13:2d:93:
29:f2:aa:0b:48:68:78:b3:42:e8:0a:cb:ad:d4:86:
87:3a:86:76:64:94:21:9a:bb:76:01:59:d9:3e:67:
9a:e7:28:99:8a:84:7d:94:27:a6:b5:1f:6f:36:82:
7b:75:9a:5f:dd:e1:64:e0:af:a2:32:b1:3e:22:0d:
f8:3c:62:93:11:79:3d:28:43:e8:31:0f:55:47:5d:
11:9e:e8:2e:26:2d:b7:59:11:47:cb:72:0a:14:93:
de:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:1A:DD:AA:4F:0A:A1:01:EF:37:38:96:2B:4B:D4:A2:0F:68:40:48
X509v3 Authority Key Identifier:
keyid:96:6A:FC:14:D4:A1:9A:7C:2C:16:8E:B2:C8:1D:56:22:B3:01:49:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lmr8FNShmnwsFo6yyB1WIrMBSes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1f7c98-18aa-47d8-ab41-1161edb9bf0e/1/lmr8FNShmnwsFo6yyB1WIrMBSes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1f7c98-18aa-47d8-ab41-1161edb9bf0e/1/lmr8FNShmnwsFo6yyB1WIrMBSes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:b0:e1:16:d7:f1:53:fe:c8:03:6d:cb:6e:b0:8a:9d:d4:2a:
02:39:46:65:c7:75:24:85:5f:3a:80:85:0f:84:9c:8d:ee:13:
99:a7:8b:c2:c8:98:ca:a6:bf:43:9f:2c:cd:22:13:3e:ec:7c:
4f:91:b0:ad:18:e8:da:9c:c2:a0:a8:1a:b2:7d:90:19:90:f6:
cf:73:a5:da:0d:45:64:04:0e:48:e1:7a:94:84:46:42:e3:b9:
6b:bf:51:a7:55:59:fc:45:00:a6:09:3e:a0:48:08:83:58:e9:
66:3f:d9:78:68:84:fe:dc:79:2b:d1:4f:e8:6d:fc:6e:9b:ab:
93:63:b8:86:59:55:55:d1:b7:c3:2c:e4:5d:8a:1e:83:fe:09:
f4:bd:d3:f3:68:d8:6b:24:aa:dd:1a:0f:c8:30:3e:3f:b8:f7:
ab:45:37:d4:4f:e1:8e:e4:99:43:33:9b:05:8c:9a:6e:d8:7b:
1c:b9:10:26:e5:86:52:7a:7e:be:d9:c3:22:ed:18:b5:8c:ec:
b9:70:da:22:ae:de:c1:13:ea:49:e3:5e:45:d0:4f:7d:78:b0:
ff:f7:f9:26:08:7a:fc:b2:b4:3d:6b:8c:99:a4:59:c1:27:2a:
a3:17:92:99:eb:d3:89:b9:5a:d7:2e:af:5d:b7:9f:f9:bd:be:
4d:2b:f2:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:09:09 2025 by rpki-client