Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/46b155-8f43-4df2-8b81-5fa287d545e8/1/LxvXSQdPb5dyZaHQbDsdk7HTWM0.mft
File: LxvXSQdPb5dyZaHQbDsdk7HTWM0.mft (raw, json)
Hash identifier: AaQVcbgV3pfhz2KLNLmUyym3rcqufoJpDHD3PKktnvA=
Subject key identifier: CA:DA:0A:8E:C2:90:5F:11:B0:F1:E0:16:9D:D0:46:75:4F:C3:54:28
Authority key identifier: 2F:1B:D7:49:07:4F:6F:97:72:65:A1:D0:6C:3B:1D:93:B1:D3:58:CD
Certificate issuer: /CN=2f1bd749074f6f977265a1d06c3b1d93b1d358cd
Certificate serial: 019A4D73F72A687FF9643558AD91142F7B13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LxvXSQdPb5dyZaHQbDsdk7HTWM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/46b155-8f43-4df2-8b81-5fa287d545e8/1/LxvXSQdPb5dyZaHQbDsdk7HTWM0.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 06:00:36 +0000
Manifest this update: Tue 04 Nov 2025 06:00:36 +0000
Manifest next update: Wed 05 Nov 2025 06:00:36 +0000
Files and hashes: 1: J1sR_X7OX5sAAqL6nR2mRajFZCc.roa (hash: JEROqpt8+G0T5t0g0HCpE0svxugQA9UuID00O94SMT0=)
2: LxvXSQdPb5dyZaHQbDsdk7HTWM0.crl (hash: 6Jy3hQwd7/Yj3zMA48tvPgzQ6zG+U8tNmi3nBOwU1pc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/46b155-8f43-4df2-8b81-5fa287d545e8/1/LxvXSQdPb5dyZaHQbDsdk7HTWM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/46b155-8f43-4df2-8b81-5fa287d545e8/1/LxvXSQdPb5dyZaHQbDsdk7HTWM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/LxvXSQdPb5dyZaHQbDsdk7HTWM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:f7:2a:68:7f:f9:64:35:58:ad:91:14:2f:7b:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f1bd749074f6f977265a1d06c3b1d93b1d358cd
Validity
Not Before: Nov 4 06:00:36 2025 GMT
Not After : Nov 5 06:00:36 2025 GMT
Subject: CN=cada0a8ec2905f11b0f1e0169dd046754fc35428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0a:64:68:95:a4:60:be:88:f4:ff:c8:8e:37:
5f:8e:03:27:7c:42:16:ab:91:e0:ea:89:41:e6:ce:
80:a3:2c:b0:5b:81:58:2b:eb:35:78:f6:04:e0:f0:
bc:83:3a:26:5b:0b:eb:2f:42:20:55:d0:2e:e1:d5:
69:33:46:bb:7f:88:5f:75:2b:69:dd:b8:6f:76:08:
02:1d:03:f6:a9:ad:d4:e7:8f:1c:d9:d9:8d:73:69:
c5:92:a8:2e:68:48:b9:15:47:31:6f:cc:b8:23:23:
ec:5b:1e:a3:bd:34:40:d5:5e:78:d6:09:1c:69:e2:
93:f1:7a:c9:b0:78:56:8f:9c:21:06:e6:a6:4b:58:
39:89:12:31:13:e3:bb:af:6d:0c:59:5a:e2:85:c2:
af:16:36:3e:c4:9b:9b:05:bc:26:19:7e:91:00:8d:
09:7a:98:0e:0b:4d:b4:4d:9d:ba:44:56:74:a4:c5:
c1:38:e2:50:7f:6c:44:93:7e:ea:16:5c:2f:fc:79:
2d:7d:75:1a:b9:89:16:cf:17:d2:1d:3a:86:49:84:
b5:48:4b:0b:2a:f3:09:8b:77:40:66:f9:32:a0:57:
f9:8c:06:5d:a5:c7:fe:d7:44:62:5a:95:66:ab:a5:
20:24:75:e7:e6:76:58:cd:b8:71:37:e7:57:95:4d:
62:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:DA:0A:8E:C2:90:5F:11:B0:F1:E0:16:9D:D0:46:75:4F:C3:54:28
X509v3 Authority Key Identifier:
keyid:2F:1B:D7:49:07:4F:6F:97:72:65:A1:D0:6C:3B:1D:93:B1:D3:58:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxvXSQdPb5dyZaHQbDsdk7HTWM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/46b155-8f43-4df2-8b81-5fa287d545e8/1/LxvXSQdPb5dyZaHQbDsdk7HTWM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/46b155-8f43-4df2-8b81-5fa287d545e8/1/LxvXSQdPb5dyZaHQbDsdk7HTWM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:8a:9d:54:79:3b:30:8c:68:77:d4:42:83:63:ea:ff:a1:12:
cc:c2:2f:5b:86:fb:8f:b8:7a:f6:5c:31:23:ea:eb:a8:9e:e3:
40:0b:61:88:59:ac:40:38:d0:d1:73:1d:b8:e7:08:1d:aa:6f:
fd:81:ef:01:94:60:d0:66:dd:44:ed:b3:f0:3a:7b:89:04:71:
0a:e3:c4:43:aa:06:91:26:06:ba:e7:46:fb:41:f4:55:be:20:
b0:30:90:82:72:97:32:fd:d9:06:82:bc:4e:0c:ae:a6:3b:73:
73:91:cb:8a:44:ba:a7:91:af:a2:7b:6e:e8:98:ac:99:40:a3:
cb:93:cc:28:0b:67:6b:72:f8:f9:ae:6d:6c:fa:34:75:12:30:
65:15:4d:68:18:a1:75:bc:96:7e:b2:09:e6:31:94:06:79:fc:
d5:4c:48:88:ae:fb:48:8f:64:da:e1:9d:71:e4:35:b5:ab:a4:
51:e4:58:1e:bc:7d:24:2c:d4:55:a2:b1:da:14:42:61:43:19:
3f:96:b5:61:10:b1:0c:28:92:20:9b:a4:eb:41:f1:51:25:09:
bb:1a:4f:24:19:94:79:ca:a0:95:ed:e3:72:19:96:87:16:28:
08:2a:7a:cd:cb:bb:60:40:6b:8a:9b:ad:84:1e:10:c0:b0:14:
aa:3d:96:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNc/cqaH/5ZDVYrZEUL3sTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmMWJkNzQ5MDc0ZjZmOTc3MjY1YTFkMDZjM2IxZDkzYjFk
MzU4Y2QwHhcNMjUxMTA0MDYwMDM2WhcNMjUxMTA1MDYwMDM2WjAzMTEwLwYDVQQD
EyhjYWRhMGE4ZWMyOTA1ZjExYjBmMWUwMTY5ZGQwNDY3NTRmYzM1NDI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwpkaJWkYL6I9P/IjjdfjgMnfEIW
q5Hg6olB5s6AoyywW4FYK+s1ePYE4PC8gzomWwvrL0IgVdAu4dVpM0a7f4hfdStp
3bhvdggCHQP2qa3U548c2dmNc2nFkqguaEi5FUcxb8y4IyPsWx6jvTRA1V541gkc
aeKT8XrJsHhWj5whBuamS1g5iRIxE+O7r20MWVrihcKvFjY+xJubBbwmGX6RAI0J
epgOC020TZ26RFZ0pMXBOOJQf2xEk37qFlwv/HktfXUauYkWzxfSHTqGSYS1SEsL
KvMJi3dAZvkyoFf5jAZdpcf+10RiWpVmq6UgJHXn5nZYzbhxN+dXlU1iMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMraCo7CkF8RsPHgFp3QRnVPw1QoMB8GA1UdIwQY
MBaAFC8b10kHT2+XcmWh0Gw7HZOx01jNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHh2WFNRZFBiNWR5WmFIUWJEc2RrN0hUV00wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy80NmIxNTUtOGY0My00ZGYyLThiODEt
NWZhMjg3ZDU0NWU4LzEvTHh2WFNRZFBiNWR5WmFIUWJEc2RrN0hUV00wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy80NmIxNTUtOGY0My00ZGYyLThiODEtNWZhMjg3ZDU0NWU4
LzEvTHh2WFNRZFBiNWR5WmFIUWJEc2RrN0hUV00wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ4qdVHk7
MIxod9RCg2Pq/6ESzMIvW4b7j7h69lwxI+rrqJ7jQAthiFmsQDjQ0XMduOcIHapv
/YHvAZRg0GbdRO2z8Dp7iQRxCuPEQ6oGkSYGuudG+0H0Vb4gsDCQgnKXMv3ZBoK8
Tgyupjtzc5HLikS6p5Gvontu6JismUCjy5PMKAtna3L4+a5tbPo0dRIwZRVNaBih
dbyWfrIJ5jGUBnn81UxIiK77SI9k2uGdceQ1taukUeRYHrx9JCzUVaKx2hRCYUMZ
P5a1YRCxDCiSIJuk60HxUSUJuxpPJBmUecqgle3jchmWhxYoCCp6zcu7YEBriput
hB4QwLAUqj2WZQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:53:12 2025 by rpki-client