Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/9dfe1e-cd74-471e-91bf-0fc3fdcf59ae/1/LXR59FZDorguENq_c-_vdwOx4tI.mft
File: LXR59FZDorguENq_c-_vdwOx4tI.mft (raw, json)
Hash identifier: mfGQlCwQamzlAvTYsMUQwRJsoeBz0fINc9dcWNNCKT4=
Subject key identifier: 5E:73:49:EE:F1:78:04:DC:36:F6:04:49:72:F0:6F:AD:77:0B:60:2F
Authority key identifier: 2D:74:79:F4:56:43:A2:B8:2E:10:DA:BF:73:EF:EF:77:03:B1:E2:D2
Certificate issuer: /CN=2d7479f45643a2b82e10dabf73efef7703b1e2d2
Certificate serial: 019A4D7420A0923AF49756C93832226A8AC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LXR59FZDorguENq_c-_vdwOx4tI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/9dfe1e-cd74-471e-91bf-0fc3fdcf59ae/1/LXR59FZDorguENq_c-_vdwOx4tI.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 06:00:47 +0000
Manifest this update: Tue 04 Nov 2025 06:00:47 +0000
Manifest next update: Wed 05 Nov 2025 06:00:47 +0000
Files and hashes: 1: LXR59FZDorguENq_c-_vdwOx4tI.crl (hash: /ZEzp4qPmiRtxT+24r08hqR8Q7SRXzq1C59W83DZC9o=)
2: unRbkKxOnR98ml1J5g6bUjmiKYg.roa (hash: dSoLjUhYv2hRLBN1CZDtznSmSO++ZyOw/lIWfxfiQjA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/9dfe1e-cd74-471e-91bf-0fc3fdcf59ae/1/LXR59FZDorguENq_c-_vdwOx4tI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/9dfe1e-cd74-471e-91bf-0fc3fdcf59ae/1/LXR59FZDorguENq_c-_vdwOx4tI.mft
rsync://rpki.ripe.net/repository/DEFAULT/LXR59FZDorguENq_c-_vdwOx4tI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:20:a0:92:3a:f4:97:56:c9:38:32:22:6a:8a:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d7479f45643a2b82e10dabf73efef7703b1e2d2
Validity
Not Before: Nov 4 06:00:47 2025 GMT
Not After : Nov 5 06:00:47 2025 GMT
Subject: CN=5e7349eef17804dc36f6044972f06fad770b602f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:37:50:88:60:57:d4:89:21:40:10:af:62:33:
d9:5c:35:28:4e:13:3b:1f:39:60:60:b1:e7:d9:b2:
00:01:51:fd:04:d8:34:85:64:fc:e5:b5:6b:f3:67:
ed:b1:6e:7f:02:48:22:ac:d1:32:46:e7:dd:70:a8:
ad:7e:9a:4b:19:2d:46:80:e3:0e:e8:e5:b9:49:87:
50:bd:18:93:1f:b6:16:b7:34:2c:98:b5:38:3b:3c:
c7:78:9d:75:0e:21:ee:d6:60:70:be:35:1f:d8:59:
f4:f2:2b:b0:0b:e7:ca:fd:12:79:32:07:2b:49:95:
2d:8a:47:01:4e:31:a4:4a:c1:e8:5a:39:49:96:82:
e8:ff:2e:dd:c3:64:69:a2:e6:e0:fe:fc:20:93:d4:
4a:76:7e:1c:03:40:ee:8f:dd:4b:ae:71:6f:1f:3f:
77:fd:b2:70:3a:b8:a9:09:fd:a4:a6:d2:8e:aa:2a:
8b:71:42:47:fd:90:45:de:68:fd:8d:7e:27:81:00:
fd:15:12:f4:e9:89:00:78:99:ca:21:0b:28:95:4c:
6a:75:da:71:4c:8b:8b:08:b2:f2:8d:9b:3d:e4:0b:
29:e2:69:05:35:5b:e2:9c:c9:a7:63:87:a3:3d:4c:
fd:b8:51:03:0c:92:8a:c7:05:d2:e4:c9:7b:28:2d:
83:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:73:49:EE:F1:78:04:DC:36:F6:04:49:72:F0:6F:AD:77:0B:60:2F
X509v3 Authority Key Identifier:
keyid:2D:74:79:F4:56:43:A2:B8:2E:10:DA:BF:73:EF:EF:77:03:B1:E2:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LXR59FZDorguENq_c-_vdwOx4tI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9dfe1e-cd74-471e-91bf-0fc3fdcf59ae/1/LXR59FZDorguENq_c-_vdwOx4tI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9dfe1e-cd74-471e-91bf-0fc3fdcf59ae/1/LXR59FZDorguENq_c-_vdwOx4tI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:f9:2c:1f:68:79:20:e0:59:c7:32:5a:a3:78:ca:3b:d2:92:
fd:6c:69:e9:8d:c9:07:43:37:d3:7d:83:75:82:31:98:9e:b6:
fc:39:fe:31:5a:44:13:d4:50:15:85:72:0a:f6:54:38:9d:69:
95:c1:11:01:28:d7:cb:6b:66:39:fd:d3:4f:17:cf:60:a5:7a:
55:26:37:1c:15:2c:5b:5b:ef:c7:f8:20:da:de:ca:5f:68:fc:
a7:f7:86:bf:95:67:3d:16:46:b1:a1:7b:da:4c:f4:bd:67:41:
7f:a3:35:d6:0d:28:96:f5:b0:84:c9:b9:99:93:dc:d2:d0:29:
09:18:4b:e7:54:71:cd:21:b0:8e:f5:e0:13:e9:08:2a:8b:61:
ff:fb:09:91:c3:c2:ec:1a:aa:f4:53:21:cc:63:50:38:24:14:
ed:9c:5d:43:bf:fd:67:f8:b4:d0:aa:ff:54:06:a0:85:63:3f:
22:7d:a2:8e:29:20:40:1f:af:d7:07:e0:d9:21:74:fb:26:6f:
58:42:34:6a:de:1b:31:60:9a:a0:0b:42:b4:3b:04:da:14:9b:
2c:ef:98:e7:b6:59:b8:9b:d2:74:b4:23:a3:a9:6e:73:a9:e0:
04:01:21:f2:f5:b5:7a:44:21:c1:f6:c2:f6:c2:ba:91:c2:51:
a7:0f:4e:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:51:20 2025 by rpki-client