Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/a33f9a-9bc3-430d-bb7c-5ec794b0e69c/1/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.mft
File: LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.mft (raw, json)
Hash identifier: AOl2KqP1Hv5GMzHA1iO0rplmRElgGu90w1LxhSfIdhw=
Subject key identifier: EF:E0:D4:DF:66:FA:79:F3:92:CA:C2:2C:12:AF:93:C6:1C:2E:A9:70
Authority key identifier: 2F:10:28:15:D2:7E:65:11:74:6D:4A:3E:9F:D1:35:9C:D9:82:A8:66
Certificate issuer: /CN=2f102815d27e6511746d4a3e9fd1359cd982a866
Certificate serial: 019A4E1906110DBDDF6F1E3153A84387317D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/a33f9a-9bc3-430d-bb7c-5ec794b0e69c/1/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.mft
Manifest number: 0B8A
Signing time: Tue 04 Nov 2025 09:00:54 +0000
Manifest this update: Tue 04 Nov 2025 09:00:54 +0000
Manifest next update: Wed 05 Nov 2025 09:00:54 +0000
Files and hashes: 1: LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.crl (hash: NtB3gQ4EBLtPl0sCCHWKfOKiHN86pB/Im9mPxT7iLhw=)
2: lT88CqOH5vwMoi8VUrMFaxJU8J4.roa (hash: S4Errm7narViCee9k3oJgV4xcS7HzGtYGoc+vP+G/zk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/a33f9a-9bc3-430d-bb7c-5ec794b0e69c/1/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/a33f9a-9bc3-430d-bb7c-5ec794b0e69c/1/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:19:06:11:0d:bd:df:6f:1e:31:53:a8:43:87:31:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f102815d27e6511746d4a3e9fd1359cd982a866
Validity
Not Before: Nov 4 09:00:54 2025 GMT
Not After : Nov 5 09:00:54 2025 GMT
Subject: CN=efe0d4df66fa79f392cac22c12af93c61c2ea970
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:7d:a5:87:f5:7d:e8:d6:e2:4f:46:c5:01:73:
b9:89:71:fe:69:67:e6:c9:e3:32:31:8e:2a:c9:6b:
85:40:a6:6b:de:54:b5:60:dc:3d:2c:13:0f:79:5c:
67:94:6f:5a:20:7a:27:fc:bb:fd:ab:f7:c2:0a:20:
6e:36:e4:29:60:3f:e8:68:90:d4:a4:58:37:5c:86:
c5:62:48:d5:b2:91:cd:39:df:90:7c:8e:3a:85:e4:
71:52:7c:12:2c:f8:e9:a8:94:c9:35:ea:bb:1f:cc:
95:50:dc:42:15:aa:78:c4:b4:5f:2f:c1:e7:5d:47:
e8:07:1c:cc:5c:57:50:3c:aa:09:ce:7c:69:25:18:
80:ca:68:16:d2:49:31:a4:b2:eb:80:56:47:8c:d1:
b5:e9:99:e8:7d:38:0c:9c:9a:37:85:8e:11:cb:27:
cb:9f:58:00:d2:1d:cd:15:7f:be:40:b0:35:11:dc:
8d:09:cd:32:1e:2b:89:c8:b3:df:64:12:14:cc:4e:
a8:6e:96:6a:d9:b3:35:d7:0a:88:dd:a7:65:d2:20:
a2:aa:4f:b4:86:13:82:05:dd:0a:0c:b0:ea:24:fe:
43:e9:b2:c5:3c:f2:97:0a:00:6c:40:b9:7f:e8:d6:
7b:65:22:7c:0f:08:ff:2d:ba:93:e4:a2:f1:ce:28:
15:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:E0:D4:DF:66:FA:79:F3:92:CA:C2:2C:12:AF:93:C6:1C:2E:A9:70
X509v3 Authority Key Identifier:
keyid:2F:10:28:15:D2:7E:65:11:74:6D:4A:3E:9F:D1:35:9C:D9:82:A8:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a33f9a-9bc3-430d-bb7c-5ec794b0e69c/1/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a33f9a-9bc3-430d-bb7c-5ec794b0e69c/1/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:3a:7e:87:00:2d:3e:0e:9d:cb:cd:2a:71:78:df:2a:e2:e5:
01:f4:30:1b:7e:76:53:e8:0a:23:96:01:db:f0:e2:00:aa:e3:
e5:fc:ce:af:9f:0d:b4:5a:a3:0f:4f:e2:8e:0e:cc:6c:41:85:
7a:7a:09:4e:67:52:43:73:25:38:ed:37:9b:ee:ce:a0:66:34:
6b:05:ff:76:99:cb:d1:81:d5:79:cd:1a:e2:46:b4:e7:00:a7:
cd:60:80:3f:93:f3:f3:44:3c:37:6f:0c:01:fc:84:84:0d:ba:
a5:2e:02:26:76:ab:b3:d2:14:03:d3:74:14:db:3b:1f:8d:b4:
73:a2:93:6a:cf:83:a1:4a:d3:87:8c:36:c6:47:1b:55:d5:00:
38:da:da:87:6c:a9:40:ac:5f:95:8b:1c:e3:fc:f7:a1:53:22:
92:74:8f:f3:5b:59:4c:aa:6d:bc:d4:7a:93:c6:42:8d:b5:e9:
44:78:42:b2:90:25:3a:8e:d6:03:f1:8d:f8:e9:92:2c:f2:af:
42:07:d4:cb:e8:79:1c:b2:f5:c2:a1:14:13:4e:39:1b:44:aa:
3f:5d:9c:3c:06:6e:21:fc:72:58:3e:68:27:de:5f:15:67:2e:
61:62:9c:4a:98:63:e6:6e:d8:63:e4:1c:0c:26:d3:e4:82:4c:
35:a5:a6:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:47:06 2025 by rpki-client