
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.mft
File: lXPBpW7MJKV9K2hOVILat7jZ0ss.mft (raw, json)
Hash identifier: ki2brQUoFJeZsMrZ0Ayl3gG+MFbFilKhStCB5Qux8Pg=
Subject key identifier: 42:14:1E:B5:D7:41:E4:E5:1A:22:3A:67:B4:00:2E:6D:7B:4C:51:CE
Authority key identifier: 95:73:C1:A5:6E:CC:24:A5:7D:2B:68:4E:54:82:DA:B7:B8:D9:D2:CB
Certificate issuer: /CN=9573c1a56ecc24a57d2b684e5482dab7b8d9d2cb
Certificate serial: 0199FB0F225826A7433E72FC7655C4686491
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lXPBpW7MJKV9K2hOVILat7jZ0ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.mft
Manifest number: 152A
Signing time: Sun 19 Oct 2025 06:01:37 +0000
Manifest this update: Sun 19 Oct 2025 06:01:37 +0000
Manifest next update: Mon 20 Oct 2025 06:01:37 +0000
Files and hashes: 1: i6ZkgPOU4WKpq6-T7FEmeCgO4_U.roa (hash: 4/Gord29LMo6fRm1iefbRHE4SPhSa5o/5bLxx5zdzBU=)
2: lXPBpW7MJKV9K2hOVILat7jZ0ss.crl (hash: zWbokuqnJrORkyfIBCR/Bba5JcwMCwKK4ShAm7YrxUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.mft
rsync://rpki.ripe.net/repository/DEFAULT/lXPBpW7MJKV9K2hOVILat7jZ0ss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:22:58:26:a7:43:3e:72:fc:76:55:c4:68:64:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9573c1a56ecc24a57d2b684e5482dab7b8d9d2cb
Validity
Not Before: Oct 19 06:01:37 2025 GMT
Not After : Oct 20 06:01:37 2025 GMT
Subject: CN=42141eb5d741e4e51a223a67b4002e6d7b4c51ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:62:62:06:08:ab:4d:84:39:8a:f3:45:d9:9c:
c1:0e:7b:37:4b:83:0e:a1:ed:4e:20:6c:11:db:ff:
9a:67:6a:5e:8d:c4:80:70:6e:08:26:cd:aa:0c:b2:
6c:72:ea:b2:94:aa:56:99:73:60:55:7b:ef:b7:32:
17:55:87:93:5a:8e:d2:c1:b6:86:54:0c:95:5a:98:
e9:99:15:8d:05:b2:e0:56:9e:05:76:a5:f9:4e:58:
a4:3e:ff:18:6d:a8:c4:66:82:c6:56:7a:64:a3:b0:
ab:41:ce:e7:8a:70:d3:45:75:c1:2b:eb:32:bf:90:
0a:28:51:22:85:ce:14:a2:2b:b9:35:b0:e9:26:85:
ac:fc:3d:34:b0:47:8d:0f:00:b1:8b:ec:4c:cd:1c:
0e:a0:21:1a:b1:8e:4d:42:21:41:3d:9a:95:8f:7b:
ff:2e:45:c5:c8:97:34:01:0e:8d:02:b5:28:b9:20:
db:87:b2:26:f8:b7:a7:57:86:76:69:92:cf:b2:ae:
b8:e5:d4:9f:92:e3:86:61:cd:6e:1d:4f:39:a0:b6:
8a:8a:b5:42:92:f8:41:06:31:1b:a3:1a:51:dd:ba:
c8:79:67:c2:65:6c:8c:c5:66:e9:e5:66:91:5f:2b:
21:0c:67:e8:f4:a0:c9:5f:f5:28:bf:31:4b:fb:0f:
f1:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:14:1E:B5:D7:41:E4:E5:1A:22:3A:67:B4:00:2E:6D:7B:4C:51:CE
X509v3 Authority Key Identifier:
keyid:95:73:C1:A5:6E:CC:24:A5:7D:2B:68:4E:54:82:DA:B7:B8:D9:D2:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lXPBpW7MJKV9K2hOVILat7jZ0ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:26:01:fe:57:60:e4:0d:ff:e9:d5:d6:53:77:be:20:3a:96:
6f:15:83:0c:72:1e:4b:2b:20:32:28:d2:97:35:76:e0:f0:f3:
ae:6a:26:39:14:30:55:5f:5a:78:0d:b4:96:18:a1:12:90:b6:
ea:f6:f5:6f:6b:81:95:a6:68:3f:6e:97:13:93:47:af:11:35:
c2:25:83:ae:d2:34:41:f2:8f:45:1b:87:a8:3b:71:b1:65:06:
14:e1:4b:fc:61:1f:9f:8f:0c:8b:6a:dc:d7:5d:3c:0e:6f:43:
c3:c7:1a:6f:1b:37:b7:05:6e:54:51:f3:91:e4:d2:3d:00:2e:
b3:6b:46:e8:9e:81:2a:61:ff:4b:0d:2a:00:9e:a9:5d:30:09:
b1:60:14:53:8c:9b:78:97:b5:b0:f7:cb:52:c6:71:86:16:b6:
1f:f0:83:7b:c0:14:12:61:cb:8a:97:79:88:b2:a1:d6:59:99:
33:6a:80:b7:31:1f:f8:25:80:7d:a5:1e:98:4f:18:d1:c2:47:
5e:a6:48:41:86:f5:0e:3b:98:35:fc:66:42:8f:c3:c2:80:ab:
c8:41:cb:c4:79:46:78:34:97:29:c6:b5:13:c1:91:5e:0c:1f:
8c:1a:87:1e:f5:f7:73:41:01:da:61:37:1a:be:f9:ce:09:2f:
19:62:43:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:36 2025 by rpki-client