Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.mft
File: lxp5nGpmNDnXRFDfs4mTVx-Y4V0.mft (raw, json)
Hash identifier: 3Cukc9JNeZgA7cUSdQW7QCHJyYTXcOJUIGpn9c3vCvU=
Subject key identifier: 77:18:E3:4D:9A:98:98:8C:31:82:1C:1E:4C:75:3A:DD:40:1C:A9:2E
Authority key identifier: 97:1A:79:9C:6A:66:34:39:D7:44:50:DF:B3:89:93:57:1F:98:E1:5D
Certificate issuer: /CN=971a799c6a663439d74450dfb38993571f98e15d
Certificate serial: 019873E1F615B327B25764F45F0EF58E8DFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.mft
Manifest number: 1619
Signing time: Mon 04 Aug 2025 07:00:45 +0000
Manifest this update: Mon 04 Aug 2025 07:00:45 +0000
Manifest next update: Tue 05 Aug 2025 07:00:45 +0000
Files and hashes: 1: GPUtwAKGNzSr8rbND1H2VHmziE4.roa (hash: wN90966l4XV79/BKSCd9OwNn9HsZ4W1mhOHAW0ThFWA=)
2: lxp5nGpmNDnXRFDfs4mTVx-Y4V0.crl (hash: qB8eJTBvmzM4XqLuFmfOA+LLHnNFemr9YjDMBzQH9eQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e1:f6:15:b3:27:b2:57:64:f4:5f:0e:f5:8e:8d:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=971a799c6a663439d74450dfb38993571f98e15d
Validity
Not Before: Aug 4 07:00:45 2025 GMT
Not After : Aug 5 07:00:45 2025 GMT
Subject: CN=7718e34d9a98988c31821c1e4c753add401ca92e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:17:91:f9:ca:2a:d8:ce:2c:ee:47:94:73:4e:
98:95:75:34:4c:f4:75:00:d0:cf:38:a1:52:54:0c:
d5:24:3c:16:44:83:ef:55:de:44:ed:7a:07:ef:5d:
1f:12:d8:28:de:80:0e:47:d7:a8:4b:52:cb:5b:10:
e9:40:18:da:92:ed:7c:26:8c:ff:fd:2c:2c:3e:a9:
41:d4:d7:3d:fd:f7:3e:3a:15:02:cb:ce:94:81:dc:
37:d1:c9:ea:7a:e4:14:1b:af:d9:0c:98:6f:11:00:
a5:02:90:a3:50:4d:b1:ec:b5:38:e7:38:8a:14:02:
91:b2:42:0a:43:a2:75:c7:5f:c6:84:f6:48:0b:9b:
65:4e:71:5c:67:42:16:ae:64:48:a3:61:23:c3:e2:
d9:1d:2d:76:6d:88:ac:bb:79:bb:90:b9:c1:b0:9f:
32:4d:48:5e:4f:63:ce:58:12:29:5d:73:a3:81:d1:
c5:6e:5d:34:8c:ec:04:88:0b:76:2b:bb:e5:30:62:
42:cd:0e:e4:a0:f5:73:34:74:54:e6:98:24:3c:5e:
ea:21:12:22:f2:39:d2:13:8c:10:c9:0c:bf:69:b6:
7d:5a:75:52:84:5b:fb:66:de:d0:75:89:61:26:07:
81:4c:d6:8b:54:01:3d:0f:e6:57:12:07:fa:ac:c5:
9e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:18:E3:4D:9A:98:98:8C:31:82:1C:1E:4C:75:3A:DD:40:1C:A9:2E
X509v3 Authority Key Identifier:
keyid:97:1A:79:9C:6A:66:34:39:D7:44:50:DF:B3:89:93:57:1F:98:E1:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:56:6b:f1:7f:f5:e8:23:ce:e8:b8:fa:d9:d4:a1:93:76:e0:
d3:86:47:9d:17:d1:ea:09:b6:be:a1:6e:1f:cd:c1:8a:8a:69:
9d:4e:1a:e8:23:a8:09:0d:33:23:ae:8b:c2:2d:46:eb:57:3c:
c9:4f:12:af:3e:f3:23:89:6a:1e:70:33:25:bc:00:96:e3:e5:
ee:89:19:5a:14:97:bf:7f:dd:1a:94:f7:bf:8e:dd:e7:eb:01:
66:cc:74:fb:05:70:12:db:49:a9:97:38:af:16:64:18:78:3e:
7a:c3:d8:eb:d0:ec:b3:f0:cf:0d:ba:5f:a7:91:38:a7:5c:70:
47:3c:21:dc:c2:d6:0c:66:a0:43:da:6b:6e:ee:41:3c:cb:e9:
9f:52:17:c7:c4:b2:6f:24:84:b9:5e:00:38:3d:93:c6:b8:7c:
03:9b:a1:3c:03:c1:8e:a1:e6:2b:bf:b0:b9:b5:ff:70:d8:c4:
e7:26:59:c3:f7:f5:24:e9:b6:86:8b:b0:d8:f5:14:57:7d:31:
37:1f:a4:c5:97:1c:ef:05:84:70:ac:7d:e5:f1:0b:f3:de:ec:
ec:4b:6f:13:88:b6:ec:7f:d8:4a:fe:66:79:75:09:eb:ad:4e:
3e:0c:50:ce:80:9f:66:e6:1e:8a:ba:d4:b1:4a:20:12:ab:44:
cf:c4:e9:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:01:55 2025 by rpki-client