Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.mft
File: LxrJ8JTYMY8wiNymgwGGX0YF6do.mft (raw, json)
Hash identifier: 0gw4pqelGLUJjIzO/H/6ozVSbbXt1QCWIo6NWDgms7Y=
Subject key identifier: 8D:43:01:96:7B:9B:73:A1:33:B4:3E:0C:63:7E:88:EC:E5:DF:11:81
Authority key identifier: 2F:1A:C9:F0:94:D8:31:8F:30:88:DC:A6:83:01:86:5F:46:05:E9:DA
Certificate issuer: /CN=2f1ac9f094d8318f3088dca68301865f4605e9da
Certificate serial: 019A4E86A17B5BC4241C36995955DE4BA693
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LxrJ8JTYMY8wiNymgwGGX0YF6do.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.mft
Manifest number: 10D4
Signing time: Tue 04 Nov 2025 11:00:37 +0000
Manifest this update: Tue 04 Nov 2025 11:00:37 +0000
Manifest next update: Wed 05 Nov 2025 11:00:37 +0000
Files and hashes: 1: 6_d9VSWBVNToOGPNlpWA61QmprM.roa (hash: 57355UO7axP5A8MR5ssS/djmBZAYmcZTAffNl5b7yUY=)
2: LxrJ8JTYMY8wiNymgwGGX0YF6do.crl (hash: 4Qc8catFt878lZCnfEYfDY+MlmAeipqOluxXITrojEg=)
3: h79SEaHwXYiVzt4p0CBMPa0GFjY.roa (hash: LtDXQ1PILY1+EGPsQbs1Ku9N9hF4cubp+4vVwoPrfN4=)
4: uc4NY9XdDoUNm-7G0TF_f0pLIfg.roa (hash: Kdxkp+N3BeWYNrfae94aDnYFKHtejikhtbXsxsmUtiE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.mft
rsync://rpki.ripe.net/repository/DEFAULT/LxrJ8JTYMY8wiNymgwGGX0YF6do.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:a1:7b:5b:c4:24:1c:36:99:59:55:de:4b:a6:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f1ac9f094d8318f3088dca68301865f4605e9da
Validity
Not Before: Nov 4 11:00:37 2025 GMT
Not After : Nov 5 11:00:37 2025 GMT
Subject: CN=8d4301967b9b73a133b43e0c637e88ece5df1181
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:16:79:8f:1f:73:e0:90:c5:96:ab:0b:fd:b4:
c5:71:f2:7d:18:31:89:e4:e0:15:ae:1e:aa:58:dd:
0d:dc:df:03:f1:4b:3c:67:3a:1d:0c:45:18:f7:f6:
b8:49:37:44:13:66:dd:27:cc:0d:2f:1c:a7:28:c1:
c7:3a:e5:71:3e:8e:45:30:4b:2e:fd:bb:94:49:6d:
e3:a5:77:bd:95:84:05:52:9f:66:c8:66:a1:6d:62:
f0:b2:da:6e:ac:bb:77:28:64:0e:7d:21:5b:6b:13:
64:2d:cb:4e:bc:7c:1c:3d:9b:ef:59:4e:4c:07:81:
e3:46:f1:ac:d0:54:60:d8:0e:4d:ee:83:57:f6:44:
52:db:64:44:22:bf:8e:d7:b4:89:55:26:be:89:8d:
a5:fb:33:e3:21:70:48:c8:67:02:45:00:e1:1d:c7:
5f:16:d5:78:ef:a4:b2:7d:92:fa:5d:16:14:b5:56:
a0:48:f3:fe:0a:64:40:b3:46:96:72:6d:cc:c4:15:
1b:59:a7:9c:4e:3b:15:23:4e:f6:f4:05:b9:eb:93:
3e:5a:17:67:0f:d5:64:7d:68:2d:7d:ce:4a:e3:26:
3f:ad:5d:ad:00:79:93:49:b4:66:fa:5f:f7:8f:dc:
63:a3:5e:c0:34:16:18:81:1f:50:7b:3c:c5:ac:63:
df:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:43:01:96:7B:9B:73:A1:33:B4:3E:0C:63:7E:88:EC:E5:DF:11:81
X509v3 Authority Key Identifier:
keyid:2F:1A:C9:F0:94:D8:31:8F:30:88:DC:A6:83:01:86:5F:46:05:E9:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxrJ8JTYMY8wiNymgwGGX0YF6do.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:4c:6e:1f:7b:0a:1a:e9:96:87:f7:97:57:80:5b:49:5c:64:
0b:ca:42:0a:30:3f:9e:cc:e5:da:1b:9f:fb:6d:d3:62:7e:ce:
80:98:3f:d5:3a:70:b5:8c:95:4e:57:f5:39:d5:1d:3c:19:ad:
dc:08:03:19:fd:00:68:94:6f:60:0a:a6:ea:2e:59:a3:5e:7e:
91:ec:f4:f5:12:c5:ad:44:b0:03:97:14:e6:a3:aa:d3:c1:d7:
8c:f6:bc:51:7c:87:07:f5:32:1c:e7:14:ec:fa:fe:06:31:84:
8f:3f:fe:31:4a:c7:b4:c2:01:47:96:3e:f6:a0:6e:45:60:f4:
94:9b:72:47:78:7d:c5:a5:93:9b:c3:7c:6d:5e:44:53:62:99:
42:1b:b4:07:a2:04:4b:ba:a5:fb:31:7f:62:ae:34:56:be:0d:
43:ea:cd:ef:56:a9:8f:f3:13:83:ef:9c:92:c1:e4:d8:c1:e4:
8a:65:ab:ff:71:48:f8:e1:f2:5a:47:b1:6b:3c:56:50:12:c2:
0e:cc:bb:4f:18:32:92:c6:1c:e7:6b:86:a8:71:88:94:fb:bf:
a7:18:66:0e:0e:ef:f8:f9:7f:68:12:ed:01:a5:e5:27:3a:1e:
c9:db:c0:e1:e3:b2:57:fd:ef:eb:e9:80:5b:08:5a:d3:b1:a9:
15:c4:5c:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:00 2025 by rpki-client