Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/lxe6-3AY3EO9rlOyOiPhZWfh8hw.mft
File: lxe6-3AY3EO9rlOyOiPhZWfh8hw.mft (raw, json)
Hash identifier: qWQD+XXdZYjZIMnxQY50Fpw7u9be8rrBQBFvsPvrXuU=
Subject key identifier: 0E:21:1C:9F:F8:6F:40:BE:93:2F:9E:14:F9:2B:AB:4C:65:AB:DB:84
Authority key identifier: 97:17:BA:FB:70:18:DC:43:BD:AE:53:B2:3A:23:E1:65:67:E1:F2:1C
Certificate issuer: /CN=9717bafb7018dc43bdae53b23a23e16567e1f21c
Certificate serial: 019A4E18A64456062F1726D6B9CEE5AC12DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxe6-3AY3EO9rlOyOiPhZWfh8hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/lxe6-3AY3EO9rlOyOiPhZWfh8hw.mft
Manifest number: 12D6
Signing time: Tue 04 Nov 2025 09:00:29 +0000
Manifest this update: Tue 04 Nov 2025 09:00:29 +0000
Manifest next update: Wed 05 Nov 2025 09:00:29 +0000
Files and hashes: 1: lxe6-3AY3EO9rlOyOiPhZWfh8hw.crl (hash: /oOSDtrswQ6Yfu+28HQ3/ET7D6OQL3tnoz3ZQlTPSGg=)
2: sE1iK8BGArTufNYA1Zt6v_dSI9Y.roa (hash: OOj0tzcrni9iINX1RsORuXXY2J4W4MPomfi+iy0BJbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/lxe6-3AY3EO9rlOyOiPhZWfh8hw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/lxe6-3AY3EO9rlOyOiPhZWfh8hw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lxe6-3AY3EO9rlOyOiPhZWfh8hw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:a6:44:56:06:2f:17:26:d6:b9:ce:e5:ac:12:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9717bafb7018dc43bdae53b23a23e16567e1f21c
Validity
Not Before: Nov 4 09:00:29 2025 GMT
Not After : Nov 5 09:00:29 2025 GMT
Subject: CN=0e211c9ff86f40be932f9e14f92bab4c65abdb84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:7a:19:c4:91:06:bf:7f:99:50:9e:6c:70:41:
c1:23:dd:ce:66:cf:c2:d0:db:2d:c5:ff:b9:2a:1c:
25:bd:4e:49:9e:39:75:7a:74:2e:18:11:17:76:16:
aa:df:39:d1:46:15:03:1d:bb:e9:9a:b9:8d:23:f4:
b1:bf:b3:af:20:e0:0d:ec:ab:d6:b3:b2:87:6d:ec:
e1:e5:be:1b:a3:76:df:6d:37:45:9b:4e:a4:c5:e4:
86:f6:2f:9e:e2:e2:95:6c:1b:2c:59:5b:55:35:ae:
41:de:76:5c:46:90:d1:15:c0:de:e1:c8:cf:e2:c8:
5b:01:a7:1b:e5:3e:67:08:e0:b6:3b:94:c4:67:c6:
05:1e:bf:8b:17:c1:59:e4:6b:40:b8:62:e7:57:fd:
49:2a:ee:84:82:a6:17:9c:69:00:8f:a5:a7:53:56:
f0:b8:4a:94:22:6e:02:34:43:74:15:98:ef:56:c3:
0f:87:a5:7c:38:28:16:e6:90:dc:ec:2f:1d:ae:68:
4f:74:1e:45:49:7d:72:e2:d1:0c:f0:78:50:c7:48:
61:3d:18:f4:34:9f:98:bd:f4:0b:e4:60:fa:7f:fa:
13:95:de:94:2f:2a:f6:bf:5e:3b:ab:10:62:ad:b7:
da:42:e1:fc:8f:d2:12:de:19:58:3e:33:27:a7:a6:
44:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:21:1C:9F:F8:6F:40:BE:93:2F:9E:14:F9:2B:AB:4C:65:AB:DB:84
X509v3 Authority Key Identifier:
keyid:97:17:BA:FB:70:18:DC:43:BD:AE:53:B2:3A:23:E1:65:67:E1:F2:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxe6-3AY3EO9rlOyOiPhZWfh8hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/lxe6-3AY3EO9rlOyOiPhZWfh8hw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/lxe6-3AY3EO9rlOyOiPhZWfh8hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:20:ea:6d:61:f0:0a:e1:af:a2:8b:5b:87:0b:f7:bb:06:1f:
b7:61:89:ab:62:33:76:13:c6:a3:10:bc:13:89:84:70:28:65:
a5:27:34:00:7a:d5:87:1c:14:de:d5:f7:ca:38:aa:f4:a9:b4:
7f:f0:3e:54:3a:89:e3:c2:e3:73:37:b9:00:b7:33:aa:c1:7a:
82:b5:69:b0:da:01:96:c5:40:a6:46:fe:59:cd:c7:e1:b1:f4:
c3:be:8f:ec:6e:a3:f8:c7:6c:c0:ba:95:38:48:3f:af:e5:a5:
62:9d:20:17:a8:68:fc:2d:32:4e:34:59:da:ac:d4:b3:29:55:
b7:7a:6d:24:72:7c:de:84:fb:56:c9:eb:a7:65:fc:dc:fd:f3:
00:4d:1b:42:ae:82:53:ca:b0:cd:ab:88:51:83:0c:fb:06:08:
47:62:f6:85:12:74:f2:8c:d9:46:cb:ba:6c:b5:0f:4f:aa:bd:
17:55:89:32:74:2a:b1:5e:0f:6d:e2:8c:22:18:f0:d2:d1:17:
5a:19:e4:af:27:9a:60:d9:63:40:c5:6a:98:d0:ae:1b:97:cf:
a3:ab:8b:24:62:bf:f2:80:82:fa:9f:d2:71:12:52:52:eb:65:
2e:b1:94:8d:11:a1:f1:1d:3c:ca:a0:d0:0b:04:f7:02:32:db:
bf:9a:68:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:20:09 2025 by rpki-client