Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.mft
File: lxru6oeY927JpDTnVjfs2IEJLsI.mft (raw, json)
Hash identifier: 7TOZi3IkbL6epP5dHvQRM6T1ib743Lw86thBbw6xfsc=
Subject key identifier: 4C:75:D1:16:BF:AB:A6:26:B1:47:71:E9:28:C8:46:33:3A:5D:18:11
Authority key identifier: 97:1A:EE:EA:87:98:F7:6E:C9:A4:34:E7:56:37:EC:D8:81:09:2E:C2
Certificate issuer: /CN=971aeeea8798f76ec9a434e75637ecd881092ec2
Certificate serial: 01987E2F3B4C1880A620673A8B8780EDC160
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxru6oeY927JpDTnVjfs2IEJLsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.mft
Manifest number: 161F
Signing time: Wed 06 Aug 2025 07:01:21 +0000
Manifest this update: Wed 06 Aug 2025 07:01:21 +0000
Manifest next update: Thu 07 Aug 2025 07:01:21 +0000
Files and hashes: 1: Ai3_NgCb2mwvHHHWVo7OjI6Wj04.roa (hash: mxmvKEH6k3H+fHWxr8AaesSD9p5zVNhT7qFX1XU+vIQ=)
2: EZLjMnt3YY1uGOfZ3nimgNl-yLU.roa (hash: Ko07ZGo7IwS8NL/yJPyHpJ9m0iW9ngaJs3DqWmHrpi0=)
3: RIQPOEjptB8udCiUyrk1eA7kGsQ.roa (hash: iUSixJ9qOvizzSlye8GPbxagX4TAp65dTuqFovVtZ00=)
4: lxru6oeY927JpDTnVjfs2IEJLsI.crl (hash: LyCW+VXUBBV6VmUzMwAhLsLL/sTpyLxA6ox6afAgxZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lxru6oeY927JpDTnVjfs2IEJLsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:2f:3b:4c:18:80:a6:20:67:3a:8b:87:80:ed:c1:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=971aeeea8798f76ec9a434e75637ecd881092ec2
Validity
Not Before: Aug 6 07:01:21 2025 GMT
Not After : Aug 7 07:01:21 2025 GMT
Subject: CN=4c75d116bfaba626b14771e928c846333a5d1811
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:fc:de:1e:29:ff:50:b4:96:90:d7:8e:0b:b4:
a7:5a:0e:5f:54:78:bc:67:de:3a:22:fe:53:e4:cc:
51:c6:a4:a2:3b:c5:0c:40:82:48:5b:c9:bf:b5:56:
c1:67:44:44:7b:c4:f5:fe:60:a0:d4:e7:2c:b9:6c:
cb:72:1d:f8:ea:24:ce:c6:1d:eb:f9:cf:38:37:26:
d8:a1:67:72:35:b8:cb:bf:23:ff:8a:b2:11:fb:96:
7b:d2:df:ee:26:a1:f8:d1:04:dd:bd:3b:35:72:2a:
82:d6:68:85:63:79:1a:da:ed:8f:d5:03:84:78:94:
59:3f:29:8c:b5:05:08:a9:89:56:a1:5d:46:bd:2b:
ea:fb:4d:35:65:3b:2e:db:16:ea:26:ee:df:8c:2f:
a4:d3:ed:e5:cf:20:f9:29:04:ef:ed:85:e2:05:d6:
9f:e7:83:95:ea:a3:20:89:50:1c:10:c9:84:81:41:
95:e0:40:f1:0a:64:c5:26:2c:05:db:98:3e:8c:a3:
5f:69:ef:0b:29:e5:85:80:32:30:ec:ec:48:62:fd:
11:1d:09:bf:e1:d5:f7:48:03:6f:cf:55:00:60:8b:
ff:7c:3a:f4:36:c2:35:5c:7a:a1:b6:39:13:e2:cb:
33:13:01:e5:58:fa:9d:25:d6:34:34:49:c8:b1:51:
89:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:75:D1:16:BF:AB:A6:26:B1:47:71:E9:28:C8:46:33:3A:5D:18:11
X509v3 Authority Key Identifier:
keyid:97:1A:EE:EA:87:98:F7:6E:C9:A4:34:E7:56:37:EC:D8:81:09:2E:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxru6oeY927JpDTnVjfs2IEJLsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:6a:bb:13:91:70:af:43:f8:87:00:28:60:f0:cb:c6:e3:6c:
2b:a8:30:2f:12:2d:a0:63:07:79:78:28:b7:e9:85:1b:67:82:
84:bc:88:d3:4e:07:d1:98:38:f8:fd:50:57:b1:81:f5:bc:05:
7b:ea:02:a1:f8:d0:e7:d0:7e:85:29:2c:8f:71:3c:51:9b:26:
34:7a:c0:ed:ca:97:c6:cb:09:0a:5e:4c:bb:39:ad:fc:fd:1b:
e8:2a:4c:9c:4d:2d:da:80:92:6a:98:81:47:54:f6:5e:88:0b:
5b:67:70:1e:c0:49:99:da:c9:29:b2:47:25:50:14:d6:5f:6f:
e1:2f:08:d4:d4:14:df:fb:b6:b2:b6:56:86:1b:50:ec:3d:23:
e5:83:34:5a:10:b1:87:93:1d:87:cd:a4:f5:bf:78:65:1d:17:
2d:45:87:f6:f5:46:73:37:f3:ba:57:bd:22:37:e8:4c:73:dc:
56:3b:00:a8:b2:aa:53:ef:1f:36:f8:32:d3:cc:7c:30:f5:a6:
31:8d:65:b4:96:39:c5:5c:a5:f0:c4:cf:1b:55:39:7f:03:c6:
c4:de:60:a2:b4:8a:50:3e:ab:29:fb:3f:fe:77:de:42:8a:cf:
46:7f:3e:57:73:58:4d:28:64:f8:13:34:96:fd:fd:d1:a2:3b:
57:16:0e:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:22:41 2025 by rpki-client