Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/a33f9a-9bc3-430d-bb7c-5ec794b0e69c/1/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.mft
File: LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.mft (raw, json)
Hash identifier: TWlUXp8o4FgfHzHY3g8EVsLYvxQ8OFyaSSHeqZoXwJA=
Subject key identifier: 65:54:7B:21:84:78:42:8F:08:0E:CA:BE:07:2D:89:1C:DE:54:FC:64
Authority key identifier: 2F:10:28:15:D2:7E:65:11:74:6D:4A:3E:9F:D1:35:9C:D9:82:A8:66
Certificate issuer: /CN=2f102815d27e6511746d4a3e9fd1359cd982a866
Certificate serial: 019895FFFEC4AC186FE9700785532F429EB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/a33f9a-9bc3-430d-bb7c-5ec794b0e69c/1/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.mft
Manifest number: 0AA6
Signing time: Sun 10 Aug 2025 22:00:38 +0000
Manifest this update: Sun 10 Aug 2025 22:00:38 +0000
Manifest next update: Mon 11 Aug 2025 22:00:38 +0000
Files and hashes: 1: LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.crl (hash: YEn0GqEQJa3piqmKvlF9noGS7cpKMzu21VHbE2dQtMk=)
2: lT88CqOH5vwMoi8VUrMFaxJU8J4.roa (hash: S4Errm7narViCee9k3oJgV4xcS7HzGtYGoc+vP+G/zk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/a33f9a-9bc3-430d-bb7c-5ec794b0e69c/1/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/a33f9a-9bc3-430d-bb7c-5ec794b0e69c/1/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 22:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:ff:fe:c4:ac:18:6f:e9:70:07:85:53:2f:42:9e:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f102815d27e6511746d4a3e9fd1359cd982a866
Validity
Not Before: Aug 10 22:00:38 2025 GMT
Not After : Aug 11 22:00:38 2025 GMT
Subject: CN=65547b218478428f080ecabe072d891cde54fc64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:73:f9:a7:b1:90:fc:f8:14:3b:1b:5c:cf:ee:
f6:27:30:f2:d3:ef:4d:14:57:d6:0e:11:1f:63:4c:
5e:a4:84:11:cf:eb:f1:88:b0:aa:c9:09:02:33:9b:
d1:da:5f:5b:30:c2:1c:25:0b:59:ac:20:8f:f3:10:
f0:e9:25:e2:1d:98:ae:86:9e:ee:7b:8b:c2:8c:1b:
ed:cb:f9:1c:b4:3b:d2:01:d2:13:f6:a0:04:98:b8:
f4:f1:3c:54:bd:f7:c9:1c:48:e4:b6:f8:d2:5f:3e:
ec:5d:47:ee:a7:83:2a:4b:23:0e:dc:41:71:4a:9c:
44:84:ab:7d:3b:17:f6:5d:f8:ee:fe:94:84:85:6c:
87:9f:a3:a9:f1:62:47:ea:5b:3f:48:e3:38:21:53:
c1:3e:f8:9a:76:8a:73:4a:b7:88:53:d2:d9:89:0c:
56:ce:c4:21:d2:9e:c8:2a:e2:63:73:e7:1d:65:77:
98:bf:2f:07:bb:ea:8d:75:d3:fb:74:42:a4:cb:a0:
73:64:86:e7:7e:4b:f0:7d:9d:da:28:d8:d4:ea:c8:
6d:05:98:6c:7f:87:56:43:b6:24:b1:f2:ed:b9:8c:
51:18:b2:c6:6a:26:aa:21:5d:b2:2e:92:39:93:77:
89:62:5c:43:29:3a:67:5b:af:84:36:7d:b7:01:08:
e0:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:54:7B:21:84:78:42:8F:08:0E:CA:BE:07:2D:89:1C:DE:54:FC:64
X509v3 Authority Key Identifier:
keyid:2F:10:28:15:D2:7E:65:11:74:6D:4A:3E:9F:D1:35:9C:D9:82:A8:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a33f9a-9bc3-430d-bb7c-5ec794b0e69c/1/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a33f9a-9bc3-430d-bb7c-5ec794b0e69c/1/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:cf:57:6b:7c:ec:a2:b7:2c:9e:ad:e7:5f:b6:e4:bf:47:d1:
ce:31:d1:e7:d8:a2:34:f8:11:c1:13:06:9a:14:b8:45:e4:1d:
37:0b:87:09:3e:59:85:f8:63:d3:06:4c:9e:24:93:e0:6a:56:
33:20:c6:d8:bb:4f:8a:84:47:62:da:28:39:b7:df:12:45:a2:
ed:45:79:a1:c7:a2:77:df:b7:95:98:b1:f6:44:a0:75:bb:79:
1d:4b:22:45:ee:de:4c:5c:e0:cd:05:07:1b:22:69:10:24:48:
c2:41:4b:b0:f0:79:ee:b8:fe:08:ca:2e:0c:06:7f:53:b1:0d:
f8:a1:70:38:f9:36:02:74:be:f5:49:08:39:22:c5:b5:ad:e0:
27:d8:e3:12:d0:73:dd:52:60:60:5b:2e:86:ec:62:9b:de:6d:
10:4f:7d:75:7a:22:d9:de:14:97:ef:ad:7b:d9:ae:4b:2a:12:
60:13:e4:11:f9:08:6a:c3:59:4b:d7:79:b9:3c:7d:48:33:bb:
01:ae:de:4a:76:1f:06:ec:91:09:ed:25:46:02:8d:54:6b:32:
69:f2:84:f2:d6:c3:c1:ef:73:4f:9f:b9:82:e7:31:e2:31:0f:
1e:24:2f:f6:ed:59:01:13:45:86:73:53:3f:67:a4:ee:0a:66:
bf:3d:36:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 06:04:17 2025 by rpki-client