Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/a33f9a-9bc3-430d-bb7c-5ec794b0e69c/1/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.mft
File: LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.mft (raw, json)
Hash identifier: ShMZyU3ZWw6O6IG6g0UfFgjpOtywG8RRORuj5QGhGkU=
Subject key identifier: 5B:FF:DC:80:B6:1E:FB:A2:C5:3B:99:36:EB:80:16:E5:E6:75:6A:1B
Authority key identifier: 2F:10:28:15:D2:7E:65:11:74:6D:4A:3E:9F:D1:35:9C:D9:82:A8:66
Certificate issuer: /CN=2f102815d27e6511746d4a3e9fd1359cd982a866
Certificate serial: 0199FEEBCC952C0D818166CB84E7954499DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/a33f9a-9bc3-430d-bb7c-5ec794b0e69c/1/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.mft
Manifest number: 0B61
Signing time: Mon 20 Oct 2025 00:01:30 +0000
Manifest this update: Mon 20 Oct 2025 00:01:30 +0000
Manifest next update: Tue 21 Oct 2025 00:01:30 +0000
Files and hashes: 1: LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.crl (hash: LZFK+zbXD2yUiPlSPqGVpIqBNzJX8yk2dYss0AOwIf0=)
2: lT88CqOH5vwMoi8VUrMFaxJU8J4.roa (hash: S4Errm7narViCee9k3oJgV4xcS7HzGtYGoc+vP+G/zk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/a33f9a-9bc3-430d-bb7c-5ec794b0e69c/1/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/a33f9a-9bc3-430d-bb7c-5ec794b0e69c/1/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:cc:95:2c:0d:81:81:66:cb:84:e7:95:44:99:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f102815d27e6511746d4a3e9fd1359cd982a866
Validity
Not Before: Oct 20 00:01:30 2025 GMT
Not After : Oct 21 00:01:30 2025 GMT
Subject: CN=5bffdc80b61efba2c53b9936eb8016e5e6756a1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:85:a1:77:36:1e:7e:84:56:d7:11:c2:4d:16:
cd:b1:7f:27:fc:51:03:6f:f5:99:4c:c1:d6:92:85:
00:34:f8:bf:7d:af:ad:19:d7:57:a9:44:c4:21:ee:
3f:14:32:5d:3e:eb:1e:ba:32:4d:56:51:01:2a:a8:
e9:d3:e6:b3:eb:26:2e:89:46:9c:bd:32:ba:70:15:
63:13:ca:f8:ed:8a:8d:d3:c5:62:e4:4a:72:62:6a:
c6:8b:48:70:af:dc:d7:fe:04:0a:6e:6c:a2:16:1a:
d8:d9:09:8b:08:65:70:0e:a0:8b:05:14:3d:00:fb:
d5:d2:29:c9:1f:09:aa:05:44:42:18:53:ab:11:ba:
23:cc:c0:c5:2c:07:c8:8a:e6:27:e4:af:34:60:1c:
2b:50:a0:05:ae:29:94:fc:89:53:e0:7f:a2:80:a6:
0a:82:f6:ac:91:a8:04:3d:95:b6:c2:98:9d:f8:34:
18:9d:c4:eb:e8:46:3f:80:5e:51:ec:7f:00:4b:b3:
1b:1d:19:ab:c9:bc:ec:ff:c7:3b:b9:29:9f:e7:2b:
b2:b6:0d:f5:44:17:61:96:55:bd:01:df:c8:4a:f1:
4c:87:50:86:59:81:01:4d:7f:b9:b9:48:de:ac:05:
70:14:84:ca:0d:f1:4f:87:d6:be:58:ee:eb:e3:ba:
e3:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:FF:DC:80:B6:1E:FB:A2:C5:3B:99:36:EB:80:16:E5:E6:75:6A:1B
X509v3 Authority Key Identifier:
keyid:2F:10:28:15:D2:7E:65:11:74:6D:4A:3E:9F:D1:35:9C:D9:82:A8:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a33f9a-9bc3-430d-bb7c-5ec794b0e69c/1/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a33f9a-9bc3-430d-bb7c-5ec794b0e69c/1/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:27:f2:25:58:24:75:b4:b5:db:ea:5e:6e:4d:50:1b:22:e0:
60:3b:e1:c0:b7:00:f0:cc:12:84:f0:82:e3:35:98:3a:08:c5:
37:55:ed:ae:78:6b:77:87:8d:31:51:ee:b7:c0:c8:c4:53:e8:
fc:20:76:c7:cd:41:e5:13:89:2b:42:b1:75:25:6d:22:4e:6d:
ec:85:f3:ac:ee:85:da:59:e9:67:39:13:84:0b:2f:e8:8e:50:
e9:fc:6e:94:20:60:58:95:76:f0:1b:f3:7d:7d:10:36:a9:d4:
60:07:4d:ab:49:f2:ae:5f:8b:00:95:06:09:b1:72:cc:95:5d:
9a:6b:4e:97:b9:db:e9:8d:bb:6f:3e:db:83:78:52:46:b4:b9:
8a:eb:4e:20:9d:d6:ed:13:2b:aa:73:bb:57:f3:d0:16:8e:d5:
ed:98:dc:a6:ec:8b:bb:0c:99:98:ea:7a:c7:b6:b2:07:99:9f:
a6:79:57:61:3e:99:17:fa:3e:36:37:fa:ad:06:99:ee:1a:27:
81:c1:9c:f7:ba:c2:64:02:d3:c2:28:da:74:c5:e2:7a:a9:7e:
5e:d8:72:c5:3d:d2:c2:9a:68:ee:c7:41:44:79:07:37:38:a9:
56:d4:e2:43:a0:20:15:3a:75:ee:ac:63:d3:09:e1:a0:be:2b:
e9:fe:a9:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:53:32 2025 by rpki-client