Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/d6577d-f2d2-4530-b9d2-39eca472668b/1/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.mft
File: lxUzy3pnlqxcOCs43PRZ-RdpMfQ.mft (raw, json)
Hash identifier: SgrEsRfttEUoZGskr7TVHnChq3m5m/5YKFPSmxCuazI=
Subject key identifier: 07:16:3C:DD:BE:90:4F:1F:92:25:D3:F9:A6:08:39:C2:F7:B4:67:84
Authority key identifier: 97:15:33:CB:7A:67:96:AC:5C:38:2B:38:DC:F4:59:F9:17:69:31:F4
Certificate issuer: /CN=971533cb7a6796ac5c382b38dcf459f9176931f4
Certificate serial: 0199FC8F5085C8C0CB3FB0F93C3E5C9E8535
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/d6577d-f2d2-4530-b9d2-39eca472668b/1/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.mft
Manifest number: 078E
Signing time: Sun 19 Oct 2025 13:01:14 +0000
Manifest this update: Sun 19 Oct 2025 13:01:14 +0000
Manifest next update: Mon 20 Oct 2025 13:01:14 +0000
Files and hashes: 1: lxUzy3pnlqxcOCs43PRZ-RdpMfQ.crl (hash: adMIFsa2qwba0XmwPNj9/sIO5kMKW58lD5AZrdUuyks=)
2: tU-16s9tq9lFPI9LdHnUudxWQ80.roa (hash: C3zkVEZCC33fk0KY3UR1pX59nVM27axL5/PozEIPAG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/d6577d-f2d2-4530-b9d2-39eca472668b/1/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/d6577d-f2d2-4530-b9d2-39eca472668b/1/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 13:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:50:85:c8:c0:cb:3f:b0:f9:3c:3e:5c:9e:85:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=971533cb7a6796ac5c382b38dcf459f9176931f4
Validity
Not Before: Oct 19 13:01:14 2025 GMT
Not After : Oct 20 13:01:14 2025 GMT
Subject: CN=07163cddbe904f1f9225d3f9a60839c2f7b46784
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:08:51:8c:77:c7:3f:01:44:c9:8c:31:d2:4f:
58:a0:0f:1a:a9:45:34:a6:0c:3d:6c:fa:62:fb:ca:
cb:4f:27:ec:7d:f5:08:9e:9c:48:67:e5:cb:77:15:
22:8b:c5:b7:5a:bc:8d:00:12:1a:1e:49:02:6b:6a:
ea:e1:64:04:8d:ad:45:8a:82:75:f4:ba:a4:00:76:
92:d5:b1:e2:01:77:3e:79:f5:a7:3c:16:45:df:e0:
93:ac:b8:f9:60:5a:96:0b:43:bc:04:ba:e9:ea:18:
8c:22:b3:58:9a:43:ac:ec:f0:59:18:0f:04:3e:fd:
61:6f:91:b6:7a:87:34:d6:d1:f1:da:d2:47:38:0f:
ae:f6:b1:09:8f:e6:e3:c8:c2:f3:37:a0:7e:fe:69:
40:54:01:a3:a1:87:73:34:92:90:27:51:f4:75:f7:
34:79:de:db:29:15:a0:bc:24:46:ea:0f:c9:24:01:
1d:a6:a8:2e:24:45:46:b5:d7:2a:7e:ef:a4:36:74:
36:93:78:dc:8f:b1:fe:49:14:d1:49:41:c7:ea:de:
67:96:0a:73:6a:e4:b0:23:89:d5:0f:74:25:9c:51:
bd:0e:1d:af:36:d2:94:3c:a7:ca:2a:81:c2:53:c6:
fc:a3:61:cf:53:c4:f7:57:08:68:db:16:df:b3:83:
73:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:16:3C:DD:BE:90:4F:1F:92:25:D3:F9:A6:08:39:C2:F7:B4:67:84
X509v3 Authority Key Identifier:
keyid:97:15:33:CB:7A:67:96:AC:5C:38:2B:38:DC:F4:59:F9:17:69:31:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d6577d-f2d2-4530-b9d2-39eca472668b/1/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d6577d-f2d2-4530-b9d2-39eca472668b/1/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:ef:be:5b:76:b0:fd:fb:7e:90:51:ce:e4:41:42:cc:00:e5:
f5:16:4e:f0:8f:63:79:bf:1e:15:61:bd:7c:d3:bb:5c:b8:ae:
9a:7b:4f:4a:cb:e7:91:53:77:21:f6:7c:ae:b5:b3:0d:c7:fb:
7f:82:23:eb:9f:3c:b0:56:f9:8f:5f:e2:34:52:23:19:e1:72:
1c:11:51:fa:2b:fc:7f:e5:ce:7a:9d:a7:e3:85:55:82:18:d9:
b2:83:c4:90:d5:74:55:11:65:a0:27:4a:5b:b3:3d:95:32:b1:
ca:6d:89:67:4b:5f:bd:05:76:1f:9b:ed:0a:d7:8c:11:19:83:
67:95:a4:cb:28:39:8a:b5:50:6c:31:1b:c5:83:40:46:7a:42:
4b:3e:37:d4:d7:88:54:3d:da:28:d7:62:11:19:ba:70:a7:2f:
c9:9a:c7:b2:12:4d:2e:0f:0e:3d:9d:6d:22:c3:9a:94:0b:9b:
23:82:14:0b:6b:e9:01:f7:4b:7b:7d:0a:c3:7c:2e:64:18:2c:
ac:58:53:7d:8c:07:12:e9:69:08:66:3c:fa:88:ad:9d:4d:9d:
cb:1a:c6:b5:39:18:4b:b7:9b:a8:4d:7e:45:16:e2:c4:e4:af:
bf:8f:40:37:1e:fe:c6:df:5f:f4:56:d7:d1:4b:85:d8:fd:73:
e8:f9:85:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:05:39 2025 by rpki-client