Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/d6577d-f2d2-4530-b9d2-39eca472668b/1/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.mft
File: lxUzy3pnlqxcOCs43PRZ-RdpMfQ.mft (raw, json)
Hash identifier: ubU/T3HrkPxY17jgxrd+AWUImF1EToxQN+Ift10YDFk=
Subject key identifier: E2:D3:87:F5:D2:90:D9:71:5E:0F:62:4E:A4:99:D2:04:31:FF:7D:36
Authority key identifier: 97:15:33:CB:7A:67:96:AC:5C:38:2B:38:DC:F4:59:F9:17:69:31:F4
Certificate issuer: /CN=971533cb7a6796ac5c382b38dcf459f9176931f4
Certificate serial: 0198D5163337C5FDB4679964A75837F915D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/d6577d-f2d2-4530-b9d2-39eca472668b/1/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.mft
Manifest number: 06F5
Signing time: Sat 23 Aug 2025 04:00:58 +0000
Manifest this update: Sat 23 Aug 2025 04:00:58 +0000
Manifest next update: Sun 24 Aug 2025 04:00:58 +0000
Files and hashes: 1: lxUzy3pnlqxcOCs43PRZ-RdpMfQ.crl (hash: gYUcJUsQ1faEVhcYfKfnLytH/lH/VEluFdfGZZRcuJ4=)
2: tU-16s9tq9lFPI9LdHnUudxWQ80.roa (hash: C3zkVEZCC33fk0KY3UR1pX59nVM27axL5/PozEIPAG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/d6577d-f2d2-4530-b9d2-39eca472668b/1/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/d6577d-f2d2-4530-b9d2-39eca472668b/1/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:33:37:c5:fd:b4:67:99:64:a7:58:37:f9:15:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=971533cb7a6796ac5c382b38dcf459f9176931f4
Validity
Not Before: Aug 23 04:00:58 2025 GMT
Not After : Aug 24 04:00:58 2025 GMT
Subject: CN=e2d387f5d290d9715e0f624ea499d20431ff7d36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ad:c2:c9:f9:0d:22:b1:1e:e5:23:d8:c9:90:
b1:a5:3c:50:64:82:23:5e:78:e4:e7:59:3b:a8:62:
3e:a0:be:bf:72:72:7a:b8:51:d2:03:f2:d0:38:84:
fa:44:8a:6d:82:d8:7a:36:0f:7e:f8:63:8e:e5:d3:
ef:d8:3a:f8:4f:ce:70:ec:bf:52:34:4a:7b:04:c6:
7d:05:94:03:b5:c5:48:2a:66:75:dd:95:a3:85:57:
a0:67:92:16:61:6b:ba:6f:d9:81:5b:82:35:ee:47:
25:1d:26:90:a3:39:d5:13:c1:27:57:21:9f:78:90:
f8:23:e5:81:52:aa:5a:3a:38:31:ed:32:32:28:11:
50:7b:5c:02:9a:d8:9e:ea:fa:38:6e:94:c4:7b:7c:
b8:8f:4b:e8:bc:f0:0e:16:ff:13:ba:4b:6c:c2:a3:
e1:80:44:d6:cc:00:54:7a:a7:8e:00:13:0f:64:65:
09:07:90:43:4b:83:a7:ea:5c:d9:ba:58:97:5d:ed:
c6:99:47:f5:db:cf:be:73:b4:dc:b8:5e:69:95:86:
4a:9c:28:a9:2a:a9:64:ea:0b:51:e7:30:43:b5:78:
2b:d0:90:0c:eb:88:6a:36:55:32:82:1b:56:4a:01:
a5:1d:2d:08:0e:4d:d7:9e:66:17:37:19:97:05:19:
9d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:D3:87:F5:D2:90:D9:71:5E:0F:62:4E:A4:99:D2:04:31:FF:7D:36
X509v3 Authority Key Identifier:
keyid:97:15:33:CB:7A:67:96:AC:5C:38:2B:38:DC:F4:59:F9:17:69:31:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d6577d-f2d2-4530-b9d2-39eca472668b/1/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d6577d-f2d2-4530-b9d2-39eca472668b/1/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:f9:10:04:9b:31:c0:08:ed:08:6b:22:7d:46:d7:cf:a9:b8:
06:03:9e:fb:18:a7:67:34:f5:30:a7:94:19:84:76:3a:06:ed:
4c:bc:f1:a8:74:73:16:24:c6:5d:e8:86:0e:92:dc:69:60:4d:
00:49:6e:ef:8c:2f:7a:5c:27:0b:4d:fc:b1:19:74:9c:d2:30:
b8:c0:c8:f3:f1:b8:6c:8b:c5:50:24:91:ca:f2:df:dd:86:21:
88:d3:f5:b5:93:98:43:c5:07:7b:56:59:fb:07:06:51:3c:ce:
9c:76:d1:e2:28:e9:cf:ad:19:90:73:80:8e:9c:17:1e:a6:40:
d0:db:81:66:ca:c9:07:16:e0:3d:54:82:45:0c:fa:99:57:7a:
67:b3:55:e5:ff:d7:ee:a9:30:1a:f6:9f:61:dc:1d:f2:cb:ce:
5a:ac:93:91:10:0a:f8:df:55:f6:18:a8:5b:a8:be:fe:89:a5:
3c:3f:f5:3b:32:65:3f:1b:c5:62:46:c5:3f:0e:21:78:93:e3:
4c:82:0f:b8:0c:e9:80:0a:2b:9b:a4:d1:41:17:67:d7:7b:35:
28:b3:d5:89:d1:97:7c:46:98:ad:67:13:06:91:77:82:1c:e5:
07:7e:35:9d:25:39:a1:52:55:9c:f0:ea:a3:69:5d:40:35:55:
c6:fb:e0:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:52:03 2025 by rpki-client