Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/df3a15-2e49-4d8e-855a-1c2758651efa/1/lxx4swX7ScvUAF1EJ8H2LGpFWmg.mft
File: lxx4swX7ScvUAF1EJ8H2LGpFWmg.mft (raw, json)
Hash identifier: X0SkMPACqoEeJlcJfoF1l2+59LgFSVckFHWs8lTPDT0=
Subject key identifier: B9:6B:F6:39:28:3E:48:EF:52:3A:7C:83:E4:6C:26:BB:92:31:65:70
Authority key identifier: 97:1C:78:B3:05:FB:49:CB:D4:00:5D:44:27:C1:F6:2C:6A:45:5A:68
Certificate issuer: /CN=971c78b305fb49cbd4005d4427c1f62c6a455a68
Certificate serial: 019A503E381A2955EF816850E067A6CDBB06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxx4swX7ScvUAF1EJ8H2LGpFWmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/df3a15-2e49-4d8e-855a-1c2758651efa/1/lxx4swX7ScvUAF1EJ8H2LGpFWmg.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 19:00:46 +0000
Manifest this update: Tue 04 Nov 2025 19:00:46 +0000
Manifest next update: Wed 05 Nov 2025 19:00:46 +0000
Files and hashes: 1: Fs8XEPRvhs2sBrhxNlZzi8XKons.roa (hash: C0hFaordL7p5SUJfrTELAa9KIVrov4I7azhDmZ9FUrw=)
2: lxx4swX7ScvUAF1EJ8H2LGpFWmg.crl (hash: HKRfyc8MsP2GrORjldb9/qgJ8Hn0WhuWwM2DTzyxyyk=)
3: sId5K04MuNzDrV7JjoafXNRATrU.roa (hash: c9K2d3wbOg2QoEGGWWmmlRXcKof1alf7zD4SEHKIWBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/df3a15-2e49-4d8e-855a-1c2758651efa/1/lxx4swX7ScvUAF1EJ8H2LGpFWmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/df3a15-2e49-4d8e-855a-1c2758651efa/1/lxx4swX7ScvUAF1EJ8H2LGpFWmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lxx4swX7ScvUAF1EJ8H2LGpFWmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:38:1a:29:55:ef:81:68:50:e0:67:a6:cd:bb:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=971c78b305fb49cbd4005d4427c1f62c6a455a68
Validity
Not Before: Nov 4 19:00:46 2025 GMT
Not After : Nov 5 19:00:46 2025 GMT
Subject: CN=b96bf639283e48ef523a7c83e46c26bb92316570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:b5:20:bc:3c:14:78:5f:59:d6:38:e8:4f:de:
e0:96:e4:6c:d7:dc:57:9b:bd:ac:5f:be:0e:07:26:
eb:04:f3:53:d7:34:2a:13:c0:e1:5d:7d:f5:a8:84:
66:ec:93:fb:81:f4:a1:80:90:fc:f2:8e:c1:01:9a:
32:63:a2:21:b8:07:bf:4c:dc:00:6c:d1:72:e3:6e:
95:26:0c:2f:07:cc:f1:f8:ce:5c:a4:8f:52:30:81:
b9:60:cd:43:d7:4b:be:25:a8:ec:5e:3e:44:0f:e6:
81:66:1f:65:d5:ec:50:04:a2:66:6e:05:34:b8:07:
9b:ba:e2:ee:d6:35:a1:52:af:7c:11:4e:9c:35:6f:
3a:9a:22:ec:8e:02:35:8a:fa:69:f7:8a:5e:03:c7:
1c:6e:f8:c2:ba:b7:69:c1:73:f9:3a:54:63:c3:af:
73:bc:b9:93:e5:9f:7f:41:fc:6d:37:0d:13:b3:0b:
dc:72:a5:a5:bf:0a:f1:e0:4c:d9:7f:d0:9b:77:95:
69:ce:fc:85:4a:e8:bb:49:64:12:19:da:59:0a:95:
70:d3:86:ba:c2:f2:b6:f1:00:64:d2:c5:d4:94:75:
06:1b:e5:39:86:08:9d:2d:b7:24:cd:9a:73:b0:c5:
80:a3:6c:27:01:74:c2:7d:50:09:f3:2d:36:29:d1:
08:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:6B:F6:39:28:3E:48:EF:52:3A:7C:83:E4:6C:26:BB:92:31:65:70
X509v3 Authority Key Identifier:
keyid:97:1C:78:B3:05:FB:49:CB:D4:00:5D:44:27:C1:F6:2C:6A:45:5A:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxx4swX7ScvUAF1EJ8H2LGpFWmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/df3a15-2e49-4d8e-855a-1c2758651efa/1/lxx4swX7ScvUAF1EJ8H2LGpFWmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/df3a15-2e49-4d8e-855a-1c2758651efa/1/lxx4swX7ScvUAF1EJ8H2LGpFWmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:ca:31:76:7a:34:60:46:3f:c0:2d:52:c8:96:1f:f5:20:d2:
86:8a:be:4d:d5:d1:e8:f0:0d:88:6d:7a:a9:09:e1:18:14:6f:
ad:3b:6b:8b:c3:2c:25:2a:09:75:24:a4:4a:94:bb:63:bd:de:
b8:91:77:8e:a3:a6:5a:b4:ab:95:e7:c0:c7:8d:b3:8a:ec:f7:
aa:00:0e:c9:c1:69:76:04:21:be:77:04:ab:ce:3b:ee:8a:6b:
46:f2:3a:f1:37:07:24:b0:d3:a4:00:b5:0b:b9:0a:ac:9e:67:
2c:c8:39:95:15:4a:10:9e:0a:38:99:41:c6:e7:e6:ba:5f:ec:
53:9c:49:76:a0:ad:55:35:7f:40:d5:99:de:18:2e:f6:18:0f:
4b:31:75:c4:77:d8:a4:b6:f2:23:c8:2f:40:de:3f:c2:4c:cf:
b2:e7:e3:ac:b6:91:d1:c8:2a:23:a4:75:7e:25:5a:23:73:64:
07:45:41:f0:1d:31:80:18:87:27:3f:46:de:01:90:ce:3b:82:
d1:a9:50:48:9c:0b:a4:2a:d2:b6:e6:ac:ce:90:db:11:80:4f:
51:24:21:3d:26:87:88:4f:f3:2c:9d:0d:78:2b:00:41:df:23:
ca:14:e8:8c:d7:a9:ed:b1:e0:11:51:08:8f:7c:01:c4:04:72:
48:8d:5e:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:22:37 2025 by rpki-client