Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/c75af4-9d26-4290-b027-a56c52be198c/1/LX893KDLOOx7CMaQKeIPUtxAjxc.mft
File: LX893KDLOOx7CMaQKeIPUtxAjxc.mft (raw, json)
Hash identifier: Bcze0XsROE285scNNbmvHf+fRO2d3sab3DASZycnIs0=
Subject key identifier: 42:41:A5:21:14:17:C8:56:47:9D:DA:CF:8D:68:45:9B:90:81:CB:6D
Authority key identifier: 2D:7F:3D:DC:A0:CB:38:EC:7B:08:C6:90:29:E2:0F:52:DC:40:8F:17
Certificate issuer: /CN=2d7f3ddca0cb38ec7b08c69029e20f52dc408f17
Certificate serial: 019A522C33003C895CDBBA41C87936135D0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LX893KDLOOx7CMaQKeIPUtxAjxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/c75af4-9d26-4290-b027-a56c52be198c/1/LX893KDLOOx7CMaQKeIPUtxAjxc.mft
Manifest number: 1711
Signing time: Wed 05 Nov 2025 04:00:19 +0000
Manifest this update: Wed 05 Nov 2025 04:00:19 +0000
Manifest next update: Thu 06 Nov 2025 04:00:19 +0000
Files and hashes: 1: LX893KDLOOx7CMaQKeIPUtxAjxc.crl (hash: OIFKcOIxgK/160vOHF3ILTTSQYJ20HIvckn+BbVT8sI=)
2: NJtD_wJPtwe6yI8QzJv-rd_AAv4.roa (hash: goN8mo/tdm+T4x5aP0V4Y6dre6dhF2ryG392gou/4Qo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/c75af4-9d26-4290-b027-a56c52be198c/1/LX893KDLOOx7CMaQKeIPUtxAjxc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/c75af4-9d26-4290-b027-a56c52be198c/1/LX893KDLOOx7CMaQKeIPUtxAjxc.mft
rsync://rpki.ripe.net/repository/DEFAULT/LX893KDLOOx7CMaQKeIPUtxAjxc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:33:00:3c:89:5c:db:ba:41:c8:79:36:13:5d:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d7f3ddca0cb38ec7b08c69029e20f52dc408f17
Validity
Not Before: Nov 5 04:00:19 2025 GMT
Not After : Nov 6 04:00:19 2025 GMT
Subject: CN=4241a5211417c856479ddacf8d68459b9081cb6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9b:40:ca:b7:40:b7:b4:4a:1a:7d:c1:27:20:
6a:69:68:07:80:aa:55:8d:e2:fe:71:63:09:bf:98:
44:11:18:91:d1:a1:a0:55:ec:2b:ce:49:f5:b3:c6:
1e:fb:e6:b0:ca:7a:57:08:f3:5f:f5:21:3f:32:1b:
ec:c7:b2:8e:24:72:65:31:a3:eb:40:6b:25:32:ec:
30:9f:6f:c3:bd:e9:82:eb:d5:82:93:16:76:5b:f2:
56:6b:bc:13:f4:f8:35:84:83:09:9f:e0:5a:57:c4:
d5:e8:ce:d1:62:f6:8a:4d:16:5b:44:a8:e6:f2:eb:
da:32:d3:bc:a1:e8:2a:4d:84:c4:ec:9c:18:70:5c:
b7:33:f6:49:bc:2c:03:41:fd:89:93:f7:1f:82:40:
af:b7:98:60:37:16:52:be:17:c2:a6:6d:ba:f4:93:
44:f6:84:bb:70:5b:8c:3e:7d:40:f3:3f:43:c1:c2:
20:58:86:d3:74:f2:70:0b:be:5d:b1:d9:99:09:c4:
4c:83:4f:73:b8:f1:1d:25:7c:35:39:3d:f2:f2:a3:
66:6a:ea:97:f1:8a:02:97:61:f1:4f:b7:f9:93:aa:
39:4d:2d:11:33:a1:b0:cc:d0:1b:24:f0:54:5f:1f:
9f:45:cb:a1:8b:52:d0:59:92:62:88:17:40:c8:eb:
81:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:41:A5:21:14:17:C8:56:47:9D:DA:CF:8D:68:45:9B:90:81:CB:6D
X509v3 Authority Key Identifier:
keyid:2D:7F:3D:DC:A0:CB:38:EC:7B:08:C6:90:29:E2:0F:52:DC:40:8F:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LX893KDLOOx7CMaQKeIPUtxAjxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c75af4-9d26-4290-b027-a56c52be198c/1/LX893KDLOOx7CMaQKeIPUtxAjxc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c75af4-9d26-4290-b027-a56c52be198c/1/LX893KDLOOx7CMaQKeIPUtxAjxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:df:4c:88:cd:fd:cd:0b:31:ec:88:52:03:c9:3c:bd:e2:38:
89:e4:e4:f1:e7:11:13:e3:c6:bf:b7:5d:0d:53:56:54:85:81:
47:2b:d4:49:3c:ea:50:7e:7e:3a:80:97:21:0e:b1:88:32:d4:
40:d6:47:ac:46:47:cc:df:b7:c1:96:26:85:ff:cb:d6:89:6b:
11:84:3b:bf:45:39:b5:73:22:34:a2:94:af:55:f5:8c:67:f9:
bb:fe:e0:cf:65:17:ce:05:45:2d:9f:a9:db:95:58:0e:e6:1f:
a5:aa:a0:6b:73:51:64:b3:0e:86:38:63:eb:17:9f:d5:ba:d7:
d6:7d:40:b5:7f:42:8c:d0:12:37:84:19:20:15:1f:71:eb:c0:
2c:3f:8d:f6:ba:7e:14:b2:e1:61:9f:81:1e:77:4c:d0:21:d2:
48:10:af:8a:e9:ba:cb:d0:f1:31:1b:12:74:a1:dd:a7:f7:9f:
66:33:02:87:16:6d:ec:42:c1:a8:c9:3a:10:03:fe:b1:6f:7f:
e7:3a:4e:64:4e:67:65:3f:a0:d5:b0:f2:ad:f0:2b:ad:83:c1:
02:59:f4:15:80:b5:fe:e4:9a:ed:42:f3:06:98:32:cd:de:b1:
4e:92:4f:24:35:92:c7:1b:3b:c8:70:3c:64:b7:6f:e5:40:e3:
de:48:c4:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:00:30 2025 by rpki-client