Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.mft
File: LxrJ8JTYMY8wiNymgwGGX0YF6do.mft (raw, json)
Hash identifier: TVd+mDm4Bj3ycSsWGH7jNp8o7fmlXmikoBwJaFC9Qm8=
Subject key identifier: 60:C7:4B:6E:EC:F5:49:85:9C:C3:14:C0:0D:EE:8B:4D:16:E9:B4:07
Authority key identifier: 2F:1A:C9:F0:94:D8:31:8F:30:88:DC:A6:83:01:86:5F:46:05:E9:DA
Certificate issuer: /CN=2f1ac9f094d8318f3088dca68301865f4605e9da
Certificate serial: 0199FB7CD9A236D6802A6D5EBCB98FC70FEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LxrJ8JTYMY8wiNymgwGGX0YF6do.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.mft
Manifest number: 10A9
Signing time: Sun 19 Oct 2025 08:01:27 +0000
Manifest this update: Sun 19 Oct 2025 08:01:27 +0000
Manifest next update: Mon 20 Oct 2025 08:01:27 +0000
Files and hashes: 1: 6_d9VSWBVNToOGPNlpWA61QmprM.roa (hash: 57355UO7axP5A8MR5ssS/djmBZAYmcZTAffNl5b7yUY=)
2: LxrJ8JTYMY8wiNymgwGGX0YF6do.crl (hash: vmkU7g1uXECS/Mo/GbND6w8ROUXz49JPTzbQj0aZrmo=)
3: h79SEaHwXYiVzt4p0CBMPa0GFjY.roa (hash: LtDXQ1PILY1+EGPsQbs1Ku9N9hF4cubp+4vVwoPrfN4=)
4: uc4NY9XdDoUNm-7G0TF_f0pLIfg.roa (hash: Kdxkp+N3BeWYNrfae94aDnYFKHtejikhtbXsxsmUtiE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.mft
rsync://rpki.ripe.net/repository/DEFAULT/LxrJ8JTYMY8wiNymgwGGX0YF6do.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:d9:a2:36:d6:80:2a:6d:5e:bc:b9:8f:c7:0f:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f1ac9f094d8318f3088dca68301865f4605e9da
Validity
Not Before: Oct 19 08:01:27 2025 GMT
Not After : Oct 20 08:01:27 2025 GMT
Subject: CN=60c74b6eecf549859cc314c00dee8b4d16e9b407
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:74:94:3d:87:d4:00:9c:5e:15:bb:5e:a9:43:
2c:88:f0:7d:92:b9:a7:f3:c7:a1:9b:17:b4:db:75:
d8:38:07:3c:02:b0:c6:48:5c:45:55:a4:f7:2f:af:
cb:90:ad:a2:9d:95:d6:fe:21:21:80:23:fc:0e:ea:
65:b5:68:9c:b8:9a:78:6e:d1:8c:f6:a9:71:8a:6f:
99:6d:4a:2c:4d:c8:79:a3:d9:c0:d5:40:5e:fa:a5:
2e:bb:41:e3:dd:02:ad:d8:fd:cd:60:2c:4d:30:17:
2d:d5:62:5f:ba:3c:c7:c5:77:5f:ef:b2:88:5e:36:
e5:19:5c:06:62:b9:1f:07:9f:cf:d5:e2:c8:43:c7:
63:c2:9b:24:83:c3:86:46:d7:02:ec:d3:c7:0e:74:
eb:c7:23:c4:91:4f:08:8f:ab:db:7f:11:a0:60:24:
10:28:be:f0:7b:61:56:81:d3:6f:10:1f:12:3c:54:
07:27:cc:cc:cf:4b:3b:7c:c1:3c:08:aa:44:51:1d:
53:c4:eb:84:d7:69:96:ce:56:a7:8c:55:4c:aa:84:
74:52:ff:f2:f9:21:43:2c:ec:e6:f0:1f:98:00:5a:
b6:6d:5c:8c:f7:47:38:f2:ab:4b:f4:4a:0d:f1:58:
93:f3:ac:83:7f:d5:9c:79:11:4c:6c:9a:1b:0c:3c:
4b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:C7:4B:6E:EC:F5:49:85:9C:C3:14:C0:0D:EE:8B:4D:16:E9:B4:07
X509v3 Authority Key Identifier:
keyid:2F:1A:C9:F0:94:D8:31:8F:30:88:DC:A6:83:01:86:5F:46:05:E9:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxrJ8JTYMY8wiNymgwGGX0YF6do.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:81:d7:11:c5:6c:8f:2f:03:06:75:ac:56:85:29:83:53:b8:
7c:15:63:af:0a:c7:13:21:50:86:bc:65:9e:14:ad:df:83:c9:
7a:a3:42:7d:8a:80:42:62:7a:85:a0:ba:d9:02:a4:c8:32:6d:
12:66:b0:0c:e5:bd:ec:57:e4:e2:52:9a:a6:37:38:b5:b1:3b:
a7:fb:88:b0:e9:05:0a:9e:65:1b:48:ab:cb:1f:ab:b5:b7:a1:
e0:de:11:95:b6:5d:22:db:a1:f9:ec:f5:ce:94:7b:48:14:1d:
90:91:1e:9f:1d:0b:5e:69:15:fe:ba:1e:df:e3:16:78:72:62:
76:e9:3a:ad:d5:9d:fe:77:e6:59:9f:f3:65:78:07:7a:9e:1c:
0c:48:cb:dc:ce:f9:4a:d0:22:37:03:5f:18:69:10:8e:c2:df:
c2:b3:30:f7:77:72:9e:a9:49:6f:e1:29:f5:ec:42:1e:9f:86:
88:1d:7d:a6:0a:90:c8:73:5c:07:63:68:80:11:df:76:26:61:
0d:7e:29:2a:86:54:72:b8:d1:75:ef:ec:6b:a5:3d:a1:41:d3:
69:4d:bf:56:ca:45:5c:f1:80:6f:b6:54:95:1c:a9:1e:ff:39:
f4:d7:9d:4c:87:7f:a7:94:e7:3c:32:9d:a7:46:be:e2:36:6e:
ff:43:9c:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7fNmiNtaAKm1evLmPxw/vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmMWFjOWYwOTRkODMxOGYzMDg4ZGNhNjgzMDE4NjVmNDYw
NWU5ZGEwHhcNMjUxMDE5MDgwMTI3WhcNMjUxMDIwMDgwMTI3WjAzMTEwLwYDVQQD
Eyg2MGM3NGI2ZWVjZjU0OTg1OWNjMzE0YzAwZGVlOGI0ZDE2ZTliNDA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXSUPYfUAJxeFbteqUMsiPB9krmn
88ehmxe023XYOAc8ArDGSFxFVaT3L6/LkK2inZXW/iEhgCP8DupltWicuJp4btGM
9qlxim+ZbUosTch5o9nA1UBe+qUuu0Hj3QKt2P3NYCxNMBct1WJfujzHxXdf77KI
XjblGVwGYrkfB5/P1eLIQ8djwpskg8OGRtcC7NPHDnTrxyPEkU8Ij6vbfxGgYCQQ
KL7we2FWgdNvEB8SPFQHJ8zMz0s7fME8CKpEUR1TxOuE12mWzlanjFVMqoR0Uv/y
+SFDLOzm8B+YAFq2bVyM90c48qtL9EoN8ViT86yDf9WceRFMbJobDDxLnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGDHS27s9UmFnMMUwA3ui00W6bQHMB8GA1UdIwQY
MBaAFC8ayfCU2DGPMIjcpoMBhl9GBenaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHhySjhKVFlNWTh3aU55bWd3R0dYMFlGNmRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8wNDE5NjgtMTVlYi00Mzg4LTk4NWEt
YzIzYzgyOWRiOTM3LzEvTHhySjhKVFlNWTh3aU55bWd3R0dYMFlGNmRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy8wNDE5NjgtMTVlYi00Mzg4LTk4NWEtYzIzYzgyOWRiOTM3
LzEvTHhySjhKVFlNWTh3aU55bWd3R0dYMFlGNmRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJIHXEcVs
jy8DBnWsVoUpg1O4fBVjrwrHEyFQhrxlnhSt34PJeqNCfYqAQmJ6haC62QKkyDJt
EmawDOW97Ffk4lKapjc4tbE7p/uIsOkFCp5lG0iryx+rtbeh4N4RlbZdItuh+ez1
zpR7SBQdkJEenx0LXmkV/roe3+MWeHJiduk6rdWd/nfmWZ/zZXgHep4cDEjL3M75
StAiNwNfGGkQjsLfwrMw93dynqlJb+Ep9exCHp+GiB19pgqQyHNcB2NogBHfdiZh
DX4pKoZUcrjRde/sa6U9oUHTaU2/VspFXPGAb7ZUlRypHv859NedTId/p5TnPDKd
p0a+4jZu/0OcfQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:52:31 2025 by rpki-client