Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/8dda48-e84b-4ca7-aaf4-f53ef521dbe0/1/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.mft
File: lxAsaTrzoJD4-Uuh_QgtsJJOrxI.mft (raw, json)
Hash identifier: NBJOlJNX1cjBbBzHy0FM9mExycozPNhaTEcu/kmNLRg=
Subject key identifier: 0E:25:C8:DD:C3:4A:5F:6D:EB:F0:96:CB:36:24:EE:20:13:18:BD:DE
Authority key identifier: 97:10:2C:69:3A:F3:A0:90:F8:F9:4B:A1:FD:08:2D:B0:92:4E:AF:12
Certificate issuer: /CN=97102c693af3a090f8f94ba1fd082db0924eaf12
Certificate serial: 01976B864163ABEFD0753F3C2F5603669789
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/8dda48-e84b-4ca7-aaf4-f53ef521dbe0/1/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.mft
Manifest number: 158D
Signing time: Fri 13 Jun 2025 23:00:50 +0000
Manifest this update: Fri 13 Jun 2025 23:00:50 +0000
Manifest next update: Sat 14 Jun 2025 23:00:50 +0000
Files and hashes: 1: UADfQRfiU0qMqkC7bWaFEbHeHdA.roa (hash: WP9x47zoRlAi5Co+JqhZvWC2k3pFeOAzkBoA6TCx0aU=)
2: lxAsaTrzoJD4-Uuh_QgtsJJOrxI.crl (hash: 3LHzpDH3bJfmeEhOcaMZbxBLr/tLTvPvFLKmXYZSmPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/8dda48-e84b-4ca7-aaf4-f53ef521dbe0/1/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/8dda48-e84b-4ca7-aaf4-f53ef521dbe0/1/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 23:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:86:41:63:ab:ef:d0:75:3f:3c:2f:56:03:66:97:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97102c693af3a090f8f94ba1fd082db0924eaf12
Validity
Not Before: Jun 13 23:00:50 2025 GMT
Not After : Jun 14 23:00:50 2025 GMT
Subject: CN=0e25c8ddc34a5f6debf096cb3624ee201318bdde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:78:46:49:63:0e:4b:cf:a7:f8:ca:5f:3c:1f:
dd:d7:66:c0:de:28:5d:fb:b1:0c:8d:93:7c:b8:6e:
81:8d:37:73:82:4d:38:25:f8:00:2a:aa:91:db:b5:
32:d0:74:1d:49:8a:48:4e:6d:42:9b:c4:17:bb:f4:
e5:5e:43:8f:82:97:30:96:67:d9:7d:90:16:2b:e9:
ff:48:d9:6f:ea:64:ef:33:68:37:c5:29:6b:66:8e:
1b:3d:46:2a:4a:d4:00:e0:4d:d3:8c:ee:22:68:5b:
dd:c8:ef:5c:b9:51:87:56:8e:34:fa:44:dc:d0:bb:
85:1f:47:04:7c:7a:e1:7e:61:c9:7b:04:97:57:7d:
61:6a:d7:f8:fd:59:78:29:30:4c:48:29:cf:3c:37:
ed:c7:f4:a5:36:3b:7e:0c:af:84:fc:f0:af:be:e6:
20:bf:8f:8a:24:f8:bc:df:a8:ed:bd:ab:ab:20:36:
25:28:be:88:2a:00:38:f7:7f:89:45:e0:a5:ce:92:
16:4b:c7:0b:e1:e2:77:78:f4:d3:9f:b4:e9:d2:22:
5f:a2:f0:f5:e8:39:01:39:6a:ec:dd:86:a5:f3:f0:
ea:b1:b7:6f:2d:32:4e:0d:ba:de:78:e6:fa:a6:a7:
aa:95:3c:8b:04:83:ba:46:36:1a:cd:fe:14:49:83:
ef:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:25:C8:DD:C3:4A:5F:6D:EB:F0:96:CB:36:24:EE:20:13:18:BD:DE
X509v3 Authority Key Identifier:
keyid:97:10:2C:69:3A:F3:A0:90:F8:F9:4B:A1:FD:08:2D:B0:92:4E:AF:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/8dda48-e84b-4ca7-aaf4-f53ef521dbe0/1/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/8dda48-e84b-4ca7-aaf4-f53ef521dbe0/1/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:d8:4a:d5:ea:c2:2e:f5:89:cf:af:e8:32:c9:12:06:37:a1:
2f:cf:44:50:38:36:7c:08:a4:d5:75:bd:bc:73:3d:6f:55:bf:
d9:0c:39:8e:78:69:be:69:a9:4f:77:bb:96:cc:23:d1:9e:47:
8c:0f:4d:db:fe:c1:98:76:0a:ad:78:8a:e3:95:87:74:b8:2f:
19:32:5d:bb:3c:d9:e4:33:ce:31:23:53:a1:3b:d2:6f:b2:cd:
d9:af:23:82:3a:ac:ba:b1:aa:af:42:e5:89:f7:d5:ec:0d:1d:
71:74:00:de:40:a1:57:ed:89:0d:c9:ea:91:b6:9b:95:7c:6e:
21:86:40:ff:a7:82:c4:f9:98:dc:f0:b3:fe:3f:7b:41:20:bf:
b7:0d:10:58:0f:6e:26:b1:fe:93:0c:c0:9b:7f:ef:da:f0:0f:
bb:58:2d:e4:55:44:ef:9c:50:c0:33:fe:69:f1:ff:ae:2a:bc:
50:dd:b4:68:ce:89:a3:df:eb:e2:6c:41:25:23:41:eb:b8:5b:
12:47:7b:70:9b:0d:1a:6d:fb:cf:9f:d1:ef:76:e3:5e:20:be:
b6:d2:d6:88:2d:21:99:c1:6c:a9:1e:e6:0f:c0:8d:19:b5:7a:
8d:76:db:17:e7:ef:58:95:7e:95:be:bc:c8:f3:01:31:e9:db:
c4:8e:df:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdrhkFjq+/QdT88L1YDZpeJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3MTAyYzY5M2FmM2EwOTBmOGY5NGJhMWZkMDgyZGIwOTI0
ZWFmMTIwHhcNMjUwNjEzMjMwMDUwWhcNMjUwNjE0MjMwMDUwWjAzMTEwLwYDVQQD
EygwZTI1YzhkZGMzNGE1ZjZkZWJmMDk2Y2IzNjI0ZWUyMDEzMThiZGRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHhGSWMOS8+n+MpfPB/d12bA3ihd
+7EMjZN8uG6BjTdzgk04JfgAKqqR27Uy0HQdSYpITm1Cm8QXu/TlXkOPgpcwlmfZ
fZAWK+n/SNlv6mTvM2g3xSlrZo4bPUYqStQA4E3TjO4iaFvdyO9cuVGHVo40+kTc
0LuFH0cEfHrhfmHJewSXV31hatf4/Vl4KTBMSCnPPDftx/SlNjt+DK+E/PCvvuYg
v4+KJPi836jtvaurIDYlKL6IKgA493+JReClzpIWS8cL4eJ3ePTTn7Tp0iJfovD1
6DkBOWrs3Yal8/DqsbdvLTJODbreeOb6pqeqlTyLBIO6RjYazf4USYPvWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA4lyN3DSl9t6/CWyzYk7iATGL3eMB8GA1UdIwQY
MBaAFJcQLGk686CQ+PlLof0ILbCSTq8SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHhBc2FUcnpvSkQ0LVV1aF9RZ3RzSkpPcnhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS84ZGRhNDgtZTg0Yi00Y2E3LWFhZjQt
ZjUzZWY1MjFkYmUwLzEvbHhBc2FUcnpvSkQ0LVV1aF9RZ3RzSkpPcnhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS84ZGRhNDgtZTg0Yi00Y2E3LWFhZjQtZjUzZWY1MjFkYmUw
LzEvbHhBc2FUcnpvSkQ0LVV1aF9RZ3RzSkpPcnhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARNhK1erC
LvWJz6/oMskSBjehL89EUDg2fAik1XW9vHM9b1W/2Qw5jnhpvmmpT3e7lswj0Z5H
jA9N2/7BmHYKrXiK45WHdLgvGTJduzzZ5DPOMSNToTvSb7LN2a8jgjqsurGqr0Ll
iffV7A0dcXQA3kChV+2JDcnqkbablXxuIYZA/6eCxPmY3PCz/j97QSC/tw0QWA9u
JrH+kwzAm3/v2vAPu1gt5FVE75xQwDP+afH/riq8UN20aM6Jo9/r4mxBJSNB67hb
Ekd7cJsNGm37z5/R73bjXiC+ttLWiC0hmcFsqR7mD8CNGbV6jXbbF+fvWJV+lb68
yPMBMenbxI7f1A==
-----END CERTIFICATE-----
Generated at Sat Jun 14 09:06:45 2025 by rpki-client