Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.mft
File: LxiqH1XWNcliBMp5qCmT-87BUSw.mft (raw, json)
Hash identifier: 1b5XksYiqwLg+Wpsu6Sa4iqUlruC5XIX+wXdkKfTguc=
Subject key identifier: 2F:8A:80:F2:E4:3C:CF:6F:4E:13:45:4C:DD:34:5B:91:B6:91:BB:DD
Authority key identifier: 2F:18:AA:1F:55:D6:35:C9:62:04:CA:79:A8:29:93:FB:CE:C1:51:2C
Certificate issuer: /CN=2f18aa1f55d635c96204ca79a82993fbcec1512c
Certificate serial: 01987B2DD3057E77FE30DA89BE982DD2A484
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LxiqH1XWNcliBMp5qCmT-87BUSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.mft
Manifest number: 161C
Signing time: Tue 05 Aug 2025 17:00:57 +0000
Manifest this update: Tue 05 Aug 2025 17:00:57 +0000
Manifest next update: Wed 06 Aug 2025 17:00:57 +0000
Files and hashes: 1: LgyeVhb60AJRIPJ13YatbxO4AsM.roa (hash: +B/MY539hDGa2yzYS0WxkYZEnocpiOn/GpdxMJUzr84=)
2: LxiqH1XWNcliBMp5qCmT-87BUSw.crl (hash: 1ax7rY/sMsZHlIk3YA5WbF4Wa092UGkZ7g5Prz/zZZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LxiqH1XWNcliBMp5qCmT-87BUSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:2d:d3:05:7e:77:fe:30:da:89:be:98:2d:d2:a4:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f18aa1f55d635c96204ca79a82993fbcec1512c
Validity
Not Before: Aug 5 17:00:57 2025 GMT
Not After : Aug 6 17:00:57 2025 GMT
Subject: CN=2f8a80f2e43ccf6f4e13454cdd345b91b691bbdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:de:21:bf:da:a1:b3:5f:b3:b0:89:e8:e7:2f:
0b:14:1f:4e:0e:3b:eb:6e:8d:28:4f:01:8e:c9:8f:
62:04:ed:02:2b:4b:24:61:3d:6e:77:33:9d:c4:57:
8b:ff:4b:07:02:a5:a3:7a:66:30:79:d8:6c:59:4f:
fb:ae:7b:b2:1d:68:9e:6c:d2:02:84:0c:14:ad:02:
66:ca:b6:97:c3:fa:fe:ff:53:04:9d:c1:db:78:c7:
2d:22:9b:2f:15:6f:ba:67:0a:35:86:68:ae:f1:52:
f2:31:af:b2:b1:7d:ed:be:04:02:25:b1:53:75:6a:
3e:e2:f1:01:57:e4:18:81:f8:18:39:0f:c1:6d:76:
90:2f:df:a4:85:9e:84:32:90:51:d7:31:ab:ec:fd:
50:60:f6:d0:31:ac:7f:49:51:31:eb:aa:91:fc:7f:
f8:2b:ac:30:fa:91:8b:1f:01:e8:83:c5:53:5e:5f:
e9:af:8d:93:4b:fb:c6:8d:5b:40:df:72:df:4d:b6:
bd:05:88:ed:ce:61:e7:56:7a:80:91:8f:ff:34:53:
9e:c2:1e:b7:54:5d:d4:9c:fe:b3:d7:95:d1:b1:e4:
22:c3:6a:97:97:50:ac:db:cf:48:0c:19:a2:69:00:
c4:a5:97:0b:db:8a:ae:8d:92:dc:8f:e0:00:eb:65:
72:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:8A:80:F2:E4:3C:CF:6F:4E:13:45:4C:DD:34:5B:91:B6:91:BB:DD
X509v3 Authority Key Identifier:
keyid:2F:18:AA:1F:55:D6:35:C9:62:04:CA:79:A8:29:93:FB:CE:C1:51:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxiqH1XWNcliBMp5qCmT-87BUSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:69:1a:e0:79:36:37:d5:b5:5c:29:35:bb:90:58:38:08:75:
ec:e9:bc:eb:f7:ee:89:b3:33:ef:0c:cf:a8:5f:07:49:64:f1:
07:c2:e9:57:39:7f:5b:c5:e6:9e:0c:64:47:a5:a6:80:a5:f2:
5c:47:aa:4a:05:13:fb:52:66:80:66:f1:6c:c1:be:c5:c9:e6:
d5:18:0c:62:77:b3:69:cf:d7:c0:0d:21:6d:d8:73:3c:96:4f:
c8:58:5a:df:6d:0b:89:00:34:b5:7e:4d:58:5e:7e:02:06:9c:
11:4a:5e:2f:f9:5a:16:65:ec:5a:af:b1:d3:87:11:e5:a3:23:
0f:d0:d5:ea:00:ec:29:47:c8:69:d1:0f:1d:52:7d:43:21:b1:
50:11:f9:d5:c7:cd:7d:6d:66:46:47:55:33:32:7b:dd:63:1e:
2c:f2:68:68:6d:91:75:92:6a:ee:a3:74:1c:4b:8b:9f:84:0f:
02:58:aa:a7:b4:be:82:38:49:b9:fe:cf:10:ba:83:8e:da:92:
5c:be:57:e9:4f:26:1a:8e:55:9d:a5:e3:0a:35:dd:5b:14:42:
8c:6e:a5:1c:e2:51:93:51:9a:c2:40:8c:f6:14:3c:6c:50:c4:
f4:40:fc:4a:11:11:41:95:59:74:d9:0c:d2:9c:af:bb:3e:10:
94:66:7e:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:35:56 2025 by rpki-client