Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/d6577d-f2d2-4530-b9d2-39eca472668b/1/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.mft
File: lxUzy3pnlqxcOCs43PRZ-RdpMfQ.mft (raw, json)
Hash identifier: 05gRcZkzhmZMp4wJraF4qxoY4N7e7Ng4jmjVfktypf0=
Subject key identifier: 7B:C0:A2:EA:1A:08:CF:DC:CF:5F:7C:58:2A:BB:01:88:38:07:D7:09
Authority key identifier: 97:15:33:CB:7A:67:96:AC:5C:38:2B:38:DC:F4:59:F9:17:69:31:F4
Certificate issuer: /CN=971533cb7a6796ac5c382b38dcf459f9176931f4
Certificate serial: 019874873691206568ADD1DEC5C766E30418
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/d6577d-f2d2-4530-b9d2-39eca472668b/1/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.mft
Manifest number: 06C3
Signing time: Mon 04 Aug 2025 10:01:15 +0000
Manifest this update: Mon 04 Aug 2025 10:01:15 +0000
Manifest next update: Tue 05 Aug 2025 10:01:15 +0000
Files and hashes: 1: lxUzy3pnlqxcOCs43PRZ-RdpMfQ.crl (hash: ddLbK6o/nRqJFmAjQFy0a8BhYR6bT0oZ6iu3i5TkLrc=)
2: tU-16s9tq9lFPI9LdHnUudxWQ80.roa (hash: C3zkVEZCC33fk0KY3UR1pX59nVM27axL5/PozEIPAG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/d6577d-f2d2-4530-b9d2-39eca472668b/1/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/d6577d-f2d2-4530-b9d2-39eca472668b/1/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 10:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:87:36:91:20:65:68:ad:d1:de:c5:c7:66:e3:04:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=971533cb7a6796ac5c382b38dcf459f9176931f4
Validity
Not Before: Aug 4 10:01:15 2025 GMT
Not After : Aug 5 10:01:15 2025 GMT
Subject: CN=7bc0a2ea1a08cfdccf5f7c582abb01883807d709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:99:f2:4c:38:87:50:31:3f:74:48:ab:d4:60:
e5:e5:8d:70:57:a3:b7:e8:ad:46:48:b5:a4:20:f3:
4e:a3:1f:07:37:e3:b3:16:56:ca:81:f7:8d:a8:44:
99:d7:79:90:d8:66:cc:83:01:5e:f6:8c:ca:88:97:
9c:c8:ab:7d:4a:04:91:18:2f:f8:b8:48:7d:3b:2c:
81:05:d9:48:c8:d2:f4:30:2e:0e:8b:d1:46:e5:b0:
44:1d:32:e6:6f:2f:e2:bc:bb:87:9f:fd:08:47:2e:
54:c7:28:79:81:5d:3e:ed:92:84:d1:b3:4d:d1:85:
aa:1e:b3:f8:5a:d6:61:9d:db:0b:6f:98:3a:f9:3c:
bc:64:a5:4c:b2:ac:0d:9c:f5:af:6d:19:44:ea:2f:
5b:2e:0c:83:e9:09:08:4a:05:54:1f:ec:04:f5:64:
21:35:8a:46:18:9a:a4:e1:b5:23:cc:db:ec:39:05:
a0:3a:27:01:30:f0:0e:41:6d:7d:22:95:b9:70:58:
f8:63:c6:ea:fb:5e:ee:9b:18:a3:ce:93:97:65:65:
de:f6:b0:c5:f8:03:70:7b:1d:44:79:cd:6d:37:16:
2b:3f:a6:76:b9:58:80:c0:be:f5:f0:ea:4a:28:23:
9d:a7:3e:f7:b5:81:40:5b:e7:38:f9:9f:1f:ff:43:
e1:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:C0:A2:EA:1A:08:CF:DC:CF:5F:7C:58:2A:BB:01:88:38:07:D7:09
X509v3 Authority Key Identifier:
keyid:97:15:33:CB:7A:67:96:AC:5C:38:2B:38:DC:F4:59:F9:17:69:31:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d6577d-f2d2-4530-b9d2-39eca472668b/1/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d6577d-f2d2-4530-b9d2-39eca472668b/1/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:ba:26:a8:e1:fb:79:18:eb:2b:92:b8:96:de:2e:0e:ff:bf:
30:67:8b:9b:d8:56:14:54:1f:65:90:04:d8:01:43:48:cd:f9:
25:7c:0b:d0:3f:74:b7:a6:70:b2:db:14:50:5d:c9:51:b3:72:
1e:04:63:3e:e4:d8:da:29:25:50:2a:18:12:ce:c5:d5:00:b1:
fc:46:ca:4a:1f:3f:43:59:43:e6:40:cc:be:8e:c8:23:9e:8f:
e6:85:0f:3d:52:ae:78:f4:80:3d:be:c6:6c:29:e0:00:26:44:
0e:c8:93:e2:cd:91:bd:a7:d7:a6:81:d5:3e:69:47:dd:f5:38:
d2:8b:89:6f:97:59:54:69:db:1c:81:f2:88:2e:95:cd:f0:d3:
be:98:0d:2d:62:b2:fe:9c:a9:4e:e4:6d:7d:85:21:33:0f:ff:
82:75:ec:b9:1f:8f:eb:97:7c:20:b6:c3:76:e8:7b:4e:87:cb:
35:17:48:50:11:d5:34:c1:c2:92:d1:24:99:bc:9a:14:06:30:
8b:b8:08:b4:65:98:84:2c:3c:06:6f:da:77:0c:7d:80:7d:14:
eb:d5:94:15:ae:0a:ff:8b:4a:3d:60:b1:39:94:11:4a:da:4c:
b6:d7:37:24:46:77:b8:a4:2e:f1:5f:bf:c4:0d:c2:3b:70:7e:
2e:76:e0:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:54:34 2025 by rpki-client