Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/8dda48-e84b-4ca7-aaf4-f53ef521dbe0/1/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.mft
File: lxAsaTrzoJD4-Uuh_QgtsJJOrxI.mft (raw, json)
Hash identifier: Tkd6d6lWgKcKVowmpa/J61yYon0ng8Jz7ApXBURUvF8=
Subject key identifier: 85:61:0F:8F:8A:02:CE:72:29:02:E9:0F:A9:96:50:EF:01:07:F6:6D
Authority key identifier: 97:10:2C:69:3A:F3:A0:90:F8:F9:4B:A1:FD:08:2D:B0:92:4E:AF:12
Certificate issuer: /CN=97102c693af3a090f8f94ba1fd082db0924eaf12
Certificate serial: 0198741905F5DCF325E34CCD15655F8BDF50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/8dda48-e84b-4ca7-aaf4-f53ef521dbe0/1/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.mft
Manifest number: 1616
Signing time: Mon 04 Aug 2025 08:00:53 +0000
Manifest this update: Mon 04 Aug 2025 08:00:53 +0000
Manifest next update: Tue 05 Aug 2025 08:00:53 +0000
Files and hashes: 1: UADfQRfiU0qMqkC7bWaFEbHeHdA.roa (hash: WP9x47zoRlAi5Co+JqhZvWC2k3pFeOAzkBoA6TCx0aU=)
2: lxAsaTrzoJD4-Uuh_QgtsJJOrxI.crl (hash: qYcUg1HNZCbXCiWobqxV3dYTRSKlYBwWM0bklC8pTuo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/8dda48-e84b-4ca7-aaf4-f53ef521dbe0/1/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/8dda48-e84b-4ca7-aaf4-f53ef521dbe0/1/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:19:05:f5:dc:f3:25:e3:4c:cd:15:65:5f:8b:df:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97102c693af3a090f8f94ba1fd082db0924eaf12
Validity
Not Before: Aug 4 08:00:53 2025 GMT
Not After : Aug 5 08:00:53 2025 GMT
Subject: CN=85610f8f8a02ce722902e90fa99650ef0107f66d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:18:85:82:a7:ba:ba:63:b5:50:12:89:26:4c:
19:8d:49:86:44:1b:b8:d5:46:3a:d9:9c:24:8f:d9:
8f:7d:65:28:39:7f:bc:ef:9e:5c:c0:af:90:8e:69:
24:30:a7:a9:22:03:9a:03:ec:d1:c9:a2:7b:d2:8a:
25:99:60:40:21:0a:3c:46:66:f9:4f:73:3e:78:b4:
fa:d3:ba:f2:b2:6c:cb:14:91:7b:53:5f:5f:5c:d2:
14:ae:77:0a:57:77:1d:85:3a:60:5f:50:d6:80:bc:
c2:eb:91:5d:ea:39:a0:d0:70:37:4e:8e:c5:dd:9a:
10:ff:86:4e:96:d8:5a:46:6d:3a:23:b3:e5:b1:d3:
0d:a3:0d:65:f7:dd:11:6b:ac:87:9b:a7:d4:0d:99:
1c:e6:66:38:da:b4:25:ac:99:f5:6f:de:45:62:bf:
27:b0:5e:8d:d8:50:ec:ce:d5:81:b9:38:31:61:b0:
78:6b:02:0b:38:7a:9a:c2:0d:66:56:ef:6d:35:5b:
df:a3:09:bb:c6:f1:dd:0b:e2:48:ed:1c:67:94:7b:
b9:a3:99:c2:b0:1c:4f:0d:ad:43:cd:f9:16:e2:87:
91:2a:de:cf:e6:4b:a6:a1:6e:ec:53:20:18:45:e6:
ae:6d:f5:b9:d3:7e:5a:af:86:e2:8b:36:7f:7e:70:
4a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:61:0F:8F:8A:02:CE:72:29:02:E9:0F:A9:96:50:EF:01:07:F6:6D
X509v3 Authority Key Identifier:
keyid:97:10:2C:69:3A:F3:A0:90:F8:F9:4B:A1:FD:08:2D:B0:92:4E:AF:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/8dda48-e84b-4ca7-aaf4-f53ef521dbe0/1/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/8dda48-e84b-4ca7-aaf4-f53ef521dbe0/1/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:29:e7:64:5d:3d:9b:b8:8e:a2:a8:b0:85:bf:2e:5c:1b:69:
0f:62:8e:d3:5b:1c:d8:54:cd:2a:a8:52:e6:72:42:38:04:e5:
3a:c4:48:3c:ac:5f:2a:d9:7e:b8:02:49:1d:35:79:df:d0:e6:
c3:4c:75:8e:df:56:e4:4a:a6:84:d5:bf:57:59:c5:c3:0b:b0:
44:60:0e:13:4b:23:16:ed:12:b9:6c:ab:83:e3:6b:61:3a:56:
7d:e5:50:26:3d:09:d3:10:95:8a:db:6f:9b:34:8e:13:97:0d:
e9:f3:75:b5:30:7d:b6:9c:04:b5:62:f6:03:9c:10:f5:df:41:
90:d2:4c:ea:d9:15:58:60:0e:5e:74:be:58:0e:8e:5d:f8:01:
2f:31:b5:61:35:25:89:59:ed:db:2e:65:db:40:1f:a1:a3:5c:
dd:bf:3c:25:cc:0c:6d:59:c0:ee:a7:4d:f1:b0:68:0d:e4:15:
30:f2:d6:7d:9c:7f:6c:b6:4c:33:43:08:ee:4b:da:60:75:58:
b0:1a:10:58:e9:88:19:8f:80:00:6c:47:cf:83:08:d2:fc:3b:
9d:2f:93:44:7d:e9:51:8c:97:fb:3c:cb:bf:29:f1:85:8d:26:
f4:ac:61:cf:7b:47:95:6c:63:d8:76:1f:30:8f:84:59:b7:f7:
5a:6d:73:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0GQX13PMl40zNFWVfi99QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3MTAyYzY5M2FmM2EwOTBmOGY5NGJhMWZkMDgyZGIwOTI0
ZWFmMTIwHhcNMjUwODA0MDgwMDUzWhcNMjUwODA1MDgwMDUzWjAzMTEwLwYDVQQD
Eyg4NTYxMGY4ZjhhMDJjZTcyMjkwMmU5MGZhOTk2NTBlZjAxMDdmNjZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRiFgqe6umO1UBKJJkwZjUmGRBu4
1UY62Zwkj9mPfWUoOX+8755cwK+QjmkkMKepIgOaA+zRyaJ70oolmWBAIQo8Rmb5
T3M+eLT607rysmzLFJF7U19fXNIUrncKV3cdhTpgX1DWgLzC65Fd6jmg0HA3To7F
3ZoQ/4ZOlthaRm06I7PlsdMNow1l990Ra6yHm6fUDZkc5mY42rQlrJn1b95FYr8n
sF6N2FDsztWBuTgxYbB4awILOHqawg1mVu9tNVvfowm7xvHdC+JI7RxnlHu5o5nC
sBxPDa1DzfkW4oeRKt7P5kumoW7sUyAYReaubfW5035ar4biizZ/fnBKNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIVhD4+KAs5yKQLpD6mWUO8BB/ZtMB8GA1UdIwQY
MBaAFJcQLGk686CQ+PlLof0ILbCSTq8SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHhBc2FUcnpvSkQ0LVV1aF9RZ3RzSkpPcnhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS84ZGRhNDgtZTg0Yi00Y2E3LWFhZjQt
ZjUzZWY1MjFkYmUwLzEvbHhBc2FUcnpvSkQ0LVV1aF9RZ3RzSkpPcnhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS84ZGRhNDgtZTg0Yi00Y2E3LWFhZjQtZjUzZWY1MjFkYmUw
LzEvbHhBc2FUcnpvSkQ0LVV1aF9RZ3RzSkpPcnhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWinnZF09
m7iOoqiwhb8uXBtpD2KO01sc2FTNKqhS5nJCOATlOsRIPKxfKtl+uAJJHTV539Dm
w0x1jt9W5EqmhNW/V1nFwwuwRGAOE0sjFu0SuWyrg+NrYTpWfeVQJj0J0xCVittv
mzSOE5cN6fN1tTB9tpwEtWL2A5wQ9d9BkNJM6tkVWGAOXnS+WA6OXfgBLzG1YTUl
iVnt2y5l20AfoaNc3b88JcwMbVnA7qdN8bBoDeQVMPLWfZx/bLZMM0MI7kvaYHVY
sBoQWOmIGY+AAGxHz4MI0vw7nS+TRH3pUYyX+zzLvynxhY0m9Kxhz3tHlWxj2HYf
MI+EWbf3Wm1zxw==
-----END CERTIFICATE-----
Generated at Mon Aug 4 10:58:37 2025 by rpki-client