Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/46b155-8f43-4df2-8b81-5fa287d545e8/1/LxvXSQdPb5dyZaHQbDsdk7HTWM0.mft
File: LxvXSQdPb5dyZaHQbDsdk7HTWM0.mft (raw, json)
Hash identifier: hZivokvzctg5SSkKcFDZ8q+le0z0HAhDmrsm531pYeE=
Subject key identifier: 9B:89:1F:88:0E:BA:88:2A:2B:89:F1:34:F3:97:2D:BA:78:E5:33:9C
Authority key identifier: 2F:1B:D7:49:07:4F:6F:97:72:65:A1:D0:6C:3B:1D:93:B1:D3:58:CD
Certificate issuer: /CN=2f1bd749074f6f977265a1d06c3b1d93b1d358cd
Certificate serial: 0197718838D25A83478A56DA57B7363D1706
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LxvXSQdPb5dyZaHQbDsdk7HTWM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/46b155-8f43-4df2-8b81-5fa287d545e8/1/LxvXSQdPb5dyZaHQbDsdk7HTWM0.mft
Manifest number: 1591
Signing time: Sun 15 Jun 2025 03:00:42 +0000
Manifest this update: Sun 15 Jun 2025 03:00:42 +0000
Manifest next update: Mon 16 Jun 2025 03:00:42 +0000
Files and hashes: 1: J1sR_X7OX5sAAqL6nR2mRajFZCc.roa (hash: JEROqpt8+G0T5t0g0HCpE0svxugQA9UuID00O94SMT0=)
2: LxvXSQdPb5dyZaHQbDsdk7HTWM0.crl (hash: sIArrhRqkU/xFcLK76OzNsnfM9U7BaZt6xFvb8lFTRk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/46b155-8f43-4df2-8b81-5fa287d545e8/1/LxvXSQdPb5dyZaHQbDsdk7HTWM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/46b155-8f43-4df2-8b81-5fa287d545e8/1/LxvXSQdPb5dyZaHQbDsdk7HTWM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/LxvXSQdPb5dyZaHQbDsdk7HTWM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:88:38:d2:5a:83:47:8a:56:da:57:b7:36:3d:17:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f1bd749074f6f977265a1d06c3b1d93b1d358cd
Validity
Not Before: Jun 15 03:00:42 2025 GMT
Not After : Jun 16 03:00:42 2025 GMT
Subject: CN=9b891f880eba882a2b89f134f3972dba78e5339c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7b:ff:09:34:a5:f4:fa:46:32:e0:24:91:82:
72:60:72:04:ac:d5:5f:51:60:1f:3b:20:73:4b:6c:
cc:04:e5:76:99:10:f2:88:9f:7a:c8:cc:61:21:4e:
04:18:c2:66:6d:21:ff:4e:dd:b5:e3:cc:2d:8d:2b:
2d:43:32:92:ec:e7:66:a3:04:3b:40:95:ca:ee:93:
3c:97:9a:e6:ee:d7:5e:03:16:91:89:b4:e3:d5:59:
44:c9:ed:6e:0d:65:ad:b6:e5:cc:65:60:7d:21:c0:
f5:43:75:ad:f2:6b:6e:34:bc:51:6c:74:b2:3e:29:
08:03:43:1b:ec:9b:6f:80:d9:d8:e0:1f:c3:4a:51:
d8:21:4f:85:0e:13:b6:73:e3:29:9d:2a:7c:7d:10:
7d:21:9e:d3:4a:b8:c7:7f:29:2c:bf:90:68:31:94:
f4:44:0b:cd:0b:57:b0:ab:2b:ca:22:0e:de:8a:05:
61:fc:c2:87:61:79:92:4e:e5:ea:7a:dc:d8:9f:e6:
17:49:28:fb:b9:7a:ee:d4:44:54:f5:90:fe:cc:52:
e0:42:a0:a7:f2:8a:41:4c:9b:e5:13:b0:ba:83:24:
70:18:4b:9b:a8:87:59:09:14:7f:03:b3:af:ea:84:
6a:6f:e2:d2:01:c3:07:39:9b:08:d8:e2:37:30:96:
4d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:89:1F:88:0E:BA:88:2A:2B:89:F1:34:F3:97:2D:BA:78:E5:33:9C
X509v3 Authority Key Identifier:
keyid:2F:1B:D7:49:07:4F:6F:97:72:65:A1:D0:6C:3B:1D:93:B1:D3:58:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxvXSQdPb5dyZaHQbDsdk7HTWM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/46b155-8f43-4df2-8b81-5fa287d545e8/1/LxvXSQdPb5dyZaHQbDsdk7HTWM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/46b155-8f43-4df2-8b81-5fa287d545e8/1/LxvXSQdPb5dyZaHQbDsdk7HTWM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:98:d1:ee:c3:3e:23:6e:6f:6b:0e:7b:bb:a8:66:17:a9:dd:
36:73:92:dc:f4:34:8e:98:e5:0d:12:3b:99:9b:b7:54:dd:4b:
43:03:21:21:f9:07:32:2a:e9:3a:1b:c1:da:c1:72:d8:fb:8b:
c2:e2:44:3c:4b:4b:b8:f0:5b:95:71:6b:1e:07:ea:b7:34:18:
95:39:de:1d:e8:32:16:d3:0d:b7:fe:9c:10:9f:95:b9:73:99:
f5:d8:af:50:b7:01:74:0d:1b:e7:99:d0:28:13:b1:7b:42:69:
7d:25:0a:df:35:df:67:ba:f1:63:0a:85:30:05:b9:dc:04:7e:
72:01:a3:32:d7:ee:68:ab:2c:d7:2a:c0:0f:f2:57:e0:1e:8d:
7a:c8:6d:71:ef:ed:ca:e5:58:7e:35:ab:40:5d:0c:be:5a:89:
0e:66:b8:96:88:d1:22:ed:7a:e6:51:82:3f:65:86:74:6d:97:
01:26:f6:ad:18:71:14:58:ac:1e:0d:93:57:21:f7:1a:bb:e5:
7f:a5:9c:a6:d7:3c:68:08:7e:17:ed:5e:67:2f:b9:68:d1:57:
22:cb:c4:2f:a3:f1:4b:e7:72:a9:cd:a9:69:10:c7:71:81:9d:
ef:2f:3d:7b:27:e4:e5:8f:e9:15:e8:39:22:53:dc:36:a3:af:
b3:b2:99:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdxiDjSWoNHilbaV7c2PRcGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmMWJkNzQ5MDc0ZjZmOTc3MjY1YTFkMDZjM2IxZDkzYjFk
MzU4Y2QwHhcNMjUwNjE1MDMwMDQyWhcNMjUwNjE2MDMwMDQyWjAzMTEwLwYDVQQD
Eyg5Yjg5MWY4ODBlYmE4ODJhMmI4OWYxMzRmMzk3MmRiYTc4ZTUzMzljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3v/CTSl9PpGMuAkkYJyYHIErNVf
UWAfOyBzS2zMBOV2mRDyiJ96yMxhIU4EGMJmbSH/Tt2148wtjSstQzKS7OdmowQ7
QJXK7pM8l5rm7tdeAxaRibTj1VlEye1uDWWttuXMZWB9IcD1Q3Wt8mtuNLxRbHSy
PikIA0Mb7JtvgNnY4B/DSlHYIU+FDhO2c+MpnSp8fRB9IZ7TSrjHfyksv5BoMZT0
RAvNC1ewqyvKIg7eigVh/MKHYXmSTuXqetzYn+YXSSj7uXru1ERU9ZD+zFLgQqCn
8opBTJvlE7C6gyRwGEubqIdZCRR/A7Ov6oRqb+LSAcMHOZsI2OI3MJZNhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJuJH4gOuogqK4nxNPOXLbp45TOcMB8GA1UdIwQY
MBaAFC8b10kHT2+XcmWh0Gw7HZOx01jNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHh2WFNRZFBiNWR5WmFIUWJEc2RrN0hUV00wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy80NmIxNTUtOGY0My00ZGYyLThiODEt
NWZhMjg3ZDU0NWU4LzEvTHh2WFNRZFBiNWR5WmFIUWJEc2RrN0hUV00wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy80NmIxNTUtOGY0My00ZGYyLThiODEtNWZhMjg3ZDU0NWU4
LzEvTHh2WFNRZFBiNWR5WmFIUWJEc2RrN0hUV00wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsJjR7sM+
I25vaw57u6hmF6ndNnOS3PQ0jpjlDRI7mZu3VN1LQwMhIfkHMirpOhvB2sFy2PuL
wuJEPEtLuPBblXFrHgfqtzQYlTneHegyFtMNt/6cEJ+VuXOZ9divULcBdA0b55nQ
KBOxe0JpfSUK3zXfZ7rxYwqFMAW53AR+cgGjMtfuaKss1yrAD/JX4B6Neshtce/t
yuVYfjWrQF0MvlqJDma4lojRIu165lGCP2WGdG2XASb2rRhxFFisHg2TVyH3Grvl
f6Wcptc8aAh+F+1eZy+5aNFXIsvEL6PxS+dyqc2paRDHcYGd7y89eyfk5Y/pFeg5
IlPcNqOvs7KZmg==
-----END CERTIFICATE-----
Generated at Sun Jun 15 07:38:18 2025 by rpki-client