Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/8dda48-e84b-4ca7-aaf4-f53ef521dbe0/1/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.mft
File: lxAsaTrzoJD4-Uuh_QgtsJJOrxI.mft (raw, json)
Hash identifier: WjKJX6tHsSrpfyAaTRQoPdjmA7NNZvxaMLdbQICEO8w=
Subject key identifier: 3A:E7:77:D8:C5:5D:1A:62:79:9F:06:20:16:88:4F:17:88:AC:DE:F7
Authority key identifier: 97:10:2C:69:3A:F3:A0:90:F8:F9:4B:A1:FD:08:2D:B0:92:4E:AF:12
Certificate issuer: /CN=97102c693af3a090f8f94ba1fd082db0924eaf12
Certificate serial: 019A5119E52C11CA0C8DC7F6E8BDFE745E1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/8dda48-e84b-4ca7-aaf4-f53ef521dbe0/1/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 23:00:42 +0000
Manifest this update: Tue 04 Nov 2025 23:00:42 +0000
Manifest next update: Wed 05 Nov 2025 23:00:42 +0000
Files and hashes: 1: UADfQRfiU0qMqkC7bWaFEbHeHdA.roa (hash: WP9x47zoRlAi5Co+JqhZvWC2k3pFeOAzkBoA6TCx0aU=)
2: lxAsaTrzoJD4-Uuh_QgtsJJOrxI.crl (hash: i/3WdOMN5luxw5MDbxx4bdS7mhQGBxEJWlxYg8U09CM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/8dda48-e84b-4ca7-aaf4-f53ef521dbe0/1/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/8dda48-e84b-4ca7-aaf4-f53ef521dbe0/1/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:19:e5:2c:11:ca:0c:8d:c7:f6:e8:bd:fe:74:5e:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97102c693af3a090f8f94ba1fd082db0924eaf12
Validity
Not Before: Nov 4 23:00:42 2025 GMT
Not After : Nov 5 23:00:42 2025 GMT
Subject: CN=3ae777d8c55d1a62799f062016884f1788acdef7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d9:ad:2f:5a:d3:b4:99:39:fd:30:c8:3a:14:
4c:31:8b:eb:6a:2c:02:12:9b:06:2a:e7:32:6e:7a:
f2:98:7c:e8:81:53:93:90:64:26:63:52:ed:53:51:
bf:fe:96:eb:04:05:1d:93:4a:03:48:c5:d9:08:7d:
19:b4:07:97:8c:dd:57:38:bb:36:11:2b:66:36:60:
ca:24:dc:bd:4e:36:f6:5d:e7:ae:c5:06:7d:8c:36:
b9:f7:7d:1e:a7:c5:54:78:96:31:28:37:2b:8b:ce:
88:6b:91:0b:46:83:47:39:8d:ef:cb:23:2a:09:25:
40:7d:51:69:79:2b:d3:29:17:0f:97:86:11:06:35:
e2:0b:2c:e7:d6:c6:ba:09:80:48:cb:13:33:86:ce:
f7:7f:c5:01:f1:cb:f2:33:bd:5f:fd:e0:11:2f:f2:
ca:1e:70:11:5d:11:e5:cd:42:41:d1:1e:9b:ea:52:
db:71:9f:3a:0f:ec:e5:12:2e:fb:40:6b:9d:ba:43:
9b:9e:bf:3e:3a:67:8e:d3:3f:d8:46:7d:ce:61:69:
b9:d1:7b:ac:15:2f:50:f2:28:15:1f:62:4b:b1:3a:
7d:2a:99:65:82:59:f3:85:84:3f:f1:3d:66:04:63:
18:41:33:05:cc:a8:1b:40:2f:4b:5c:8e:bb:f0:63:
fa:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:E7:77:D8:C5:5D:1A:62:79:9F:06:20:16:88:4F:17:88:AC:DE:F7
X509v3 Authority Key Identifier:
keyid:97:10:2C:69:3A:F3:A0:90:F8:F9:4B:A1:FD:08:2D:B0:92:4E:AF:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/8dda48-e84b-4ca7-aaf4-f53ef521dbe0/1/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/8dda48-e84b-4ca7-aaf4-f53ef521dbe0/1/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:64:e0:a4:84:7f:c5:42:fb:3f:9c:95:7f:96:e4:19:bc:30:
0c:d3:96:4d:36:10:f2:78:d2:69:62:9a:3d:43:0f:e8:f4:77:
6e:e5:ce:d7:12:01:c1:fc:71:84:d6:50:73:f9:56:7c:02:ce:
46:60:b4:c1:aa:5c:07:fe:42:de:b2:17:48:ec:3e:a7:62:ed:
7c:ba:c7:3c:fb:86:db:b4:10:e3:57:8c:35:43:a5:e2:84:96:
0e:5a:b9:bb:80:8f:e4:2d:d2:2a:0c:0a:3d:5e:1c:c2:25:09:
ef:27:7f:e3:4b:13:db:70:3c:04:1b:5d:bc:9a:b2:32:fe:c6:
98:3b:d4:0d:a9:ec:76:17:0a:70:f1:39:6b:69:f7:30:cf:22:
6b:1e:72:ca:67:a7:b1:98:56:b1:97:ec:8c:1b:52:36:57:f6:
4e:a2:ba:3d:c2:97:c6:70:89:8b:13:4e:cc:c5:4e:b3:ce:07:
95:bf:23:83:68:a1:7f:e0:62:87:19:83:5c:f2:8e:f3:9e:cf:
f2:9b:bc:7a:c8:da:68:f1:9f:49:ca:1a:d1:4c:8f:a2:a4:74:
93:eb:73:9a:59:72:17:3e:b0:04:7b:21:42:7f:28:49:66:ea:
63:41:3c:65:1f:77:b7:be:36:49:b6:19:53:d5:e3:54:e2:b2:
95:76:2f:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpRGeUsEcoMjcf26L3+dF4eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3MTAyYzY5M2FmM2EwOTBmOGY5NGJhMWZkMDgyZGIwOTI0
ZWFmMTIwHhcNMjUxMTA0MjMwMDQyWhcNMjUxMTA1MjMwMDQyWjAzMTEwLwYDVQQD
EygzYWU3NzdkOGM1NWQxYTYyNzk5ZjA2MjAxNjg4NGYxNzg4YWNkZWY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNmtL1rTtJk5/TDIOhRMMYvraiwC
EpsGKucybnrymHzogVOTkGQmY1LtU1G//pbrBAUdk0oDSMXZCH0ZtAeXjN1XOLs2
EStmNmDKJNy9Tjb2XeeuxQZ9jDa5930ep8VUeJYxKDcri86Ia5ELRoNHOY3vyyMq
CSVAfVFpeSvTKRcPl4YRBjXiCyzn1sa6CYBIyxMzhs73f8UB8cvyM71f/eARL/LK
HnARXRHlzUJB0R6b6lLbcZ86D+zlEi77QGudukObnr8+OmeO0z/YRn3OYWm50Xus
FS9Q8igVH2JLsTp9KpllglnzhYQ/8T1mBGMYQTMFzKgbQC9LXI678GP6OwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDrnd9jFXRpieZ8GIBaITxeIrN73MB8GA1UdIwQY
MBaAFJcQLGk686CQ+PlLof0ILbCSTq8SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHhBc2FUcnpvSkQ0LVV1aF9RZ3RzSkpPcnhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS84ZGRhNDgtZTg0Yi00Y2E3LWFhZjQt
ZjUzZWY1MjFkYmUwLzEvbHhBc2FUcnpvSkQ0LVV1aF9RZ3RzSkpPcnhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS84ZGRhNDgtZTg0Yi00Y2E3LWFhZjQtZjUzZWY1MjFkYmUw
LzEvbHhBc2FUcnpvSkQ0LVV1aF9RZ3RzSkpPcnhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoWTgpIR/
xUL7P5yVf5bkGbwwDNOWTTYQ8njSaWKaPUMP6PR3buXO1xIBwfxxhNZQc/lWfALO
RmC0wapcB/5C3rIXSOw+p2LtfLrHPPuG27QQ41eMNUOl4oSWDlq5u4CP5C3SKgwK
PV4cwiUJ7yd/40sT23A8BBtdvJqyMv7GmDvUDansdhcKcPE5a2n3MM8iax5yymen
sZhWsZfsjBtSNlf2TqK6PcKXxnCJixNOzMVOs84Hlb8jg2ihf+BihxmDXPKO857P
8pu8esjaaPGfScoa0UyPoqR0k+tzmllyFz6wBHshQn8oSWbqY0E8ZR93t742SbYZ
U9XjVOKylXYvAg==
-----END CERTIFICATE-----
Generated at Wed Nov 5 06:51:26 2025 by rpki-client